Privacy Center
|
Personal Data Protection Policy (Revised version 2021) |
| Guidelines on Personal Data Protection Policy (Revised version 2021) |
| Cookies Policy |
| Data Subject Right Requests |
Guidelines on Personal Data Protection Policy (Revised version 2021) Dated 1 April 2021>
Chapter 7 Personal Data of Other Persons Relating to the Company
Chapter 7 Personal Data of Other Persons Relating to the Company
Guidelines on Personal Data Protection Policy of IRPC Public Company Limited
(Revised version 2021) Dated 1 April 2021
Chapter 7
Personal Data of Other Persons Relating to the Company
Apart from personal data of the customers, business partners and counterparties as mentioned in this policy, the Company may collect and process your personal data as you are a visitor or a person entering into the premises under the Company’s responsibility. Moreover, you might be a person whom the Company has collected personal data since you have participated in some social activities or any other activities; for example, you might be the customer of other types not mentioned in this policy.
7.1 Your Personal Data Collected by the Company
In a case where you are a visitor or a person entering into the premises under the Company’ s responsibility, the Company shall collect, use or disclose your personal data which include but not limited to the following:
1)
Personal data such as name-last name, name title, gender, ID card number, age, education background, photo
2)
Contact data such as address, telephone number, mobile phone number, e-mail
3)
Other personal data such as driver’ s license number, license number from the Department of Energy Business, license plate number, details of the vehicle’ s size, details of the car owner, details of the contractor and data from CCTV recording
However, the Company has no intention to collect and process your sensitive personal data. In a case that the copy of your ID card or any cards issued by the government for identity authentication is required, the Company must delete all sensitive personal data appeared on such card unless otherwise permitted or informed or in a case where the Company can refer to any legal bases and use such legal basis which allows for the exception of the informed consent.
In a case that you are a person participating in any social activities or projects or other activities organized by the Company or activities in which the Company has been involved, including the foundation, association or non- profit organization or a person living in the community supported and assisted by the Company or any other customers not mentioned in the policy, the Company may collect, use or disclose your personal data that include but not limited to the following:
1)
Personal data such as name- last name, name title, gender, date of birth, ID number, age, profession, position, education background, work experience, name of agency or office and academic institution
2)
Sensitive personal data such as face recognition ( if any), fingerprint, religion, nationality, health data, details of disease and treatment record, medical treatment and disability details in which the Company has been granted with your consent as stipulated by law or as deemed necessary and permitted by law.
3)
Contact data such as address, telephone number, mobile phone number, e-mail
4)
Financial data such as savings account number, income, subsidy, details of the scholarship and employment remuneration
5)
Other personal data such as your portfolio, details of the disabled’ s guardian, data on the use of IT system and other websites of the Company, CCTV recording, still photo and VDO recording of the activities being organized, voice recordings from various meetings
Nonetheless, in a case that you are a minor under 10 years of age or a quasi-incompetent or an incompetent, the Company shall ask your legal guardian or curator to carry out any tasks on your behalf as well as to give consent to the Company for further action as deemed appropriate.
In a case where the Company has found out that your personal data has been collected without the consent of your legal guardian or curator, the Company is entitled to reject any proceedings as per your request and shall delete your personal data except in a case that the processing of your personal data can depend on other legal bases which allow for the exception of the informed consent.
7.2 Sources of Personal Data
The Company may collect your personal data as you directly provide your personal data to the Company such as registration, application, training attendance, contact to enter the Company’ s premises, exchange of access card, participation in the Company’ s activities, contact for service or support from the Company. Besides, the Company may receive your personal data via the foundation, association or non-profit organization, academic institution or government agency in need of support or other reference persons etc.
7.3 Objectives of the Collection, Use or Disclosure of Your Personal Data Under Legal Basis
The Company shall collect, use or disclose your personal data to achieve various objectives under legal basis as follows:
1)
Contract basis: For the necessity to comply with the contract or to proceed with your request before entering into contract to perform the following activities:
a)
To contact for sales of products or services, to receive or provide services
b)
To organize training regarding the access card during entrance of the Company’s premises, parking permit as well as to supervise and monitor working schedule of the contractor
c)
To consider the qualification in providing support and assistance upon request, including request for academic funding
2)
Legal obligation basis: For the necessity to comply with relevant law or to achieve the objectives as stipulated by law to perform the following activities:
a)
For the necessity to constitute legal claim to achieve the objectives of an audit and identity authentication in order to prevent corrupt behavior in exercising the right or complying with relevant law and to use as an evidence in the defense of legal claim
b)
For the objectives relating to preventive medicine or occupational medicine, efficiency assessment or to achieve the objective concerning the diagnosis, health or social services, medical treatment, health management and social work
c)
For medical welfare of a legitimate person or social protection
d)
For disclosure and report of your personal data to the agency specified by law
3)
Legitimate interest basis: By taking into consideration the proportionality and your expectation whereby the benefits derived must be well balanced with your basic rights concerning personal data protection in order to achieve the following objectives:
a)
For the safety of building areas or facilities from CCTV recording and exchange of access card before entering the Company’ s premises as well as to prevent any dangers or emergency incidents within the premises
b)
For an audit by major shareholders or related agencies, investigation, examination, request for advice on the constitution of legal claim or legal proof or to use as an evidence in the legal proceeding
c)
For the objectives of audit and identity authentication or confirmation of qualification
d)
For the demonstration of photos from activities and atmospheres of such activities organized or supported by the Company
e)
For the analysis of the perception of people in the community through behavioral observation in order to improve and develop relationship
4)
Consent basis: For the collection, use or disclosure of sensitive personal data such as health data, religious data, disability, including other sensitive personal data appeared on the ID card for identity authentication and to facilitate operation or to arrange for proper working environment
7.4 Disclosure of Your Personal Data
The Company shall not disclose your personal data to any external parties unless otherwise informed or upon being granted with your consent or when it deems necessary to disclose or to report your personal data as to the regulatory bodies, government agencies or any other agencies as prescribed by law regarding the Company’s business operation.
In addition, the Company may be required to disclose your personal data to relevant external parties according to the objectives mentioned above and to organize activities or projects, to provide community services, audit, request for legal advice and inspection, assessment, litigation and other proceedings as deemed necessary.