Personal Data Protection Notice for External Parties

Group 6
Applicants for job and internship positions



Data Processing

1. Personal Data collected, used, disclosed, and/or cross-border transferred

The Company will collect, use, disclose, and/or cross-border transfer the following Personal Data of job applicants and interns.

     1.1 Applicants for job positions

     General Personal Data, such as the first name, last name, nationality, address, date of birth, telephone number, email address, photographs, motion photos from video recording or closed-circuit television (CCTV), audio recordings from meetings, marital status, military status, educational qualifications, educational history and work history, workplace, information on the national identification card or passport, visa information, work permit, foreign national card, marriage certificate, divorce certificate, household registration documents, first or last name change certificate, social media account information (such as the LINE ID), car information (such as the car plate number, brand, model, and color), and other Personal Data you provide to the Company;

     Sensitive Personal Data, including religion, blood type, criminal records, health data (such as health check-up results, chronic diseases, disability information, body temperature, and symptoms), for the purpose of disease (including the COVID-19) screening, which the Company has obtained consent from you or as necessary and permitted by laws;

     Technical data, such as the username and password used to access the system, IP address, media access control data, log files, cookies data, historical system usage data, website usage data, operating systems and platforms, and other technologies on devices used to access the platform, as well as other Personal Data regarding the use of the Company's system; and

     Personal data of a third party, including the first name, last name, information on the national identification cards, ages, and nationality of relatives, such as the spouse, child, father, mother and, the contact person, and guarantor, and other Personal Data of a third party you provide to the Company.

     The Company needs to collect, use, disclose, or cross-border transfer your Personal Data as a part of the consideration process. If you refuse to provide necessary Personal Data, the Company may not be able to continue with the recruitment process with you.

     If you provide the Personal Data of a third party as mentioned above to the Company, you must ensure that you are authorized to do so, and are authorized to allow the Company to process such Personal Data under this Notice. You are also responsible to inform the third party of this Notice, and/or obtain consent from such person, if required by law, or rely on other legal basis. 

     1.2 Applicants for internship positions

     General Personal Data, such as the first name, last name, national identification number, nationality, address, date of birth, telephone number, email address, photographs, motion images from video recording or closed-circuit television (CCTV), audio recordings from video conferences, educational qualification, educational information, including the year, university, faculty, grade point average, and other Personal Data you provide for the Company;

     Sensitive Personal Data, including religion, blood type, health data (such as chronic diseases, disability information, body temperature, and symptoms), for the purpose of disease (including the COVID-19) screening, which the Company has obtained consent from you or as necessary and permitted by laws;

     Technical data, such as the username and password used to access the system, IP address, Media Access Control data, log files, cookies data, historical system usage data, website usage data, operating systems and platforms, and other technologies on devices used to access the platform, as well as other Personal Data regarding your use of the Company's system; and

     Personal Data of a third party, including the first name, last name, and telephone numbers, of your parent, contact person, and guarantor, and other Personal Data of a third party you provide to the Company.

     The Company needs to collect, use, and disclose your Personal Data, as an applicant for an internship, as a part of the consideration process. If you refuses to provide necessary Personal Data, the Company may not be able to continue with the recruitment process with you.

     If you provide the Personal Data of a third party as mentioned above to the Company, you must ensure that you are authorized to do so, and are authorized to allow the Company to process such Personal Data under this Notice. You are also responsible to inform the third party of this Notice, and/or obtain consent from such person, if required by law, or rely on other legal basis.

2. Sources of Personal Data

     2.1 Applicants for job and internship positions

     The Company may collect your Personal Data from the following sources:

1) The Company collects the Personal Data provided directly by you through website via https://careers.pttep.com, the PTTEP e-Recruitment (Success Factors) system, Microsoft Forms, or the LINE application, or direct application of resume via email, telephone, or letter, application in person at the Company, and the data you provide in the Success Factor system or via email.
2) The Company collects your Personal Data from other sources, such as recruitment websites (such as JobsDB, LinkedIn, and JobThai), or obtains your resume from recruitment agencies, government agencies, state entities, other employees, or other persons.

3. Purposes of the collection, use, disclosure, and/or cross-border transfer of Personal Data

     3.1 Applicants for job positions

     The Company collects, uses, discloses, and/or transfers your Personal Data for the following purposes:

1) To use in the recruitment and employment processes, and to use as database for the interview process;
2) To communicate with you, or the contact person whose information is provided by you in the recruitment and employment processes;
3) To use to apply for individual tests;
4) To assess the suitability of applicants, offer remuneration, and make a decision to employ you;
5) To use as the Company's employment database;
6) To verify and authenticate the identity, and check your information and background;
7) To use as database for health check-ups before employment; and
8) To apply for in visa and work permit, and to issue letters of certification to support visa applications for foreign applicants to enter Thailand.

     For Sensitive Personal Data, the Company collects, uses, discloses, and/or cross-border transfers your Sensitive Personal Data for the following purposes:

1) Religion appeared on the national identification card, to verify and authenticate your identity;
2) Criminal records, to check your background before employment;
3) Health data (such as chronic diseases, and history of medicine and food allergies, disability information) to support the health check-up process before employment; and
4) Health data (such as body temperature, and symptoms), for the purpose of disease (including the COVID-19) screening, to screen diseases and assess risks of communicable diseases, and  to produce reports in compliance with the reporting procedures established by the Company, or as regulators or agencies order as specified by laws.

     3.2 Applicants for internship positions

     The Company collects, uses, and/or discloses your Personal Data following purposes:

1) To use as preliminary information in the internship application process, online testing, interviews, and announcement of selection results; and
2) To apply for the building access card due to security reason in entering into, and exiting from the buildings.

     For Sensitive Personal Data, the Company collects, uses, discloses, and/or cross-border transfers your Sensitive Personal Data for the following purposes:

1) Religion, to verify and authenticate your identity; and
2) Health data (such as disability information, body temperature, and symptoms), for the purpose of disease, including the COVID-19, screening, to screen diseases and assess risks of communicable diseases, and to produce reports in compliance with the reporting procedures established by the Company, or as regulators or agencies order as specified by laws.

4. Legal bases for the collection, use, and disclosure of Personal Data

     The Company generally collects, uses, and discloses your Personal Data on the following legal bases:

1) Where it is for the performance of a contract, or fulfilling your requests before you enter into an agreement with the Company;
2) Where it is for legitimate interests of the Company or a third party to the extent that these interests do not override the fundamental rights in your Personal Data;
3) Where it is necessary for compliance with a law;
4) Where it is for vital interests to prevent or suppress any harm to the life, body, or health of a person;
5) Upon your consent obtained by the Company upon written request for your consent to the collection, use, and disclosure of your Personal Data; and/or
6) Other cases permissible by laws.

     Only in the case of the collection, use, and disclosure of your Sensitive Personal Data, the Company relies on the following legal bases:

1) Upon explicit consent obtained by the Company from the consent form requesting for your consent to the collection, use, and disclosure of your Personal Data;
2) Where it is necessary for the establishment of a legal claim, compliance with, or exercise of a legal claim, or to defend a legal claim;
3) Where it is for vital interests to prevent or suppress any harm to the life, body, or health of a person;
4) Where it is for compliance with a law to achieve the purposes with respect to preventive medicine, occupational medicine, medical diagnosis, the provision of health or social care, medical treatments, the management of health care, public interest in public health, and the road accident victims protection, whereby the collection of Personal Data is necessary for the Company to perform its duties, or your duties;
5) It is information that is disclosed to the public with the explicit consent of the data subject; and/or
6) Other cases permissible by laws.
5. Types of persons or organizations to whom or to which the Company discloses your Personal Data

     The Company may disclose your Personal Data (only as necessary) to the following external parties or organizations for the purposes indicated in this Notice, who or which may be located in or outside Thailand.

1) Affiliated companies, partners, and PTT group companies
The Company may share your Personal Data with its affiliated companies, PTT group companies, and partner companies, including but not limited to, PTT Public Company Limited, PTT Global LNG Company Limited, Energy Complex Company Limited, and PTT Digital Solutions Company Limited, for the purpose of risk management, information exchanges, and internal audit among group companies.

2) Outsourced service providers regarding the Company's human resource activities and operations
The Company may disclose your Personal Data to these persons, who may act as the data controller or data processor, such as payroll service providers, banks, insurance companies, health insurance providers, information technology solution providers, cloud service providers, data or document storage providers, application service providers, facial recognition solution providers, training organizers, human resource service providers, hospitals, visa and work permit application agencies, examination centers, the manpower agency of the employee, space and car parking service providers, organizers, hotels and accommodation providers, and airlines.

3) Relevant government agencies
The Company may disclose your Personal Data to government officials and government agencies which have the legal authority, or for the purpose of protecting the rights of the Company or third parties, or for your own interests, such as the Stock Exchange of Thailand, the Securities and Exchange Commission, the Office of the National Anti-Corruption Commission, the Ministry of Commerce's Department of Business Development, the State Audit Office, the Comptroller General's Department, the Court of Justice, a Labor Court, the Department of Disease Control, the Criminal Records Division, the Legal Execution Department, the Immigration Bureau, and the Department Of Employment.

4) Other external parties or organizations
The Company may disclose your Personal Data to external parties or organizations, or allow them to access your Personal Data, such as professional advisors (including legal advisors and external auditors), assignees and transferees of rights, transferees involved in inter-organizational transactions, medical personnel, and external organizations to which the Company would like to carry out public relations for the purposes indicated above.