Guidelines on Personal Data Protection Policy of IRPC Public Company Limited
(Revised version 2021) Dated 1 April 2021


Chapter 8
Data Retention, Retention Period and Safety Measures

The Company shall maintain your personal data as long as the Company deems necessary to achieve the objectives stated in this policy. The Company shall consider suitable duration in retaining your personal data from the contract period, statute of limitations, including the necessity to further data retention according to the period required for legal compliance, constitution or exercising of legal claim.

The Company shall maintain and keep your personal data securely and in a suitable manner, whether they be in a form of document, computer system and electronic system, including other devices the Company has employed to ensure safety of your personal data.

The Company would like to ensure you of our safety and security measures on personal data protection which shall be appropriate and in line with international standards in order to prevent any losses, accesses, uses, changes, rectifications or disclosures of personal data improperly or act without legitimate authority.

Nonetheless, the Company has restricted the access and use of technology on the safety of your personal data to prevent any unauthorized accesses to computer or electronic system. In a case that your personal data might be disclosed to the external party who processes data or to the data processor, the Company shall supervise such person to proceed appropriately to ensure its compliance with related laws.