Directors and Executives' Privacy Notice
JSSR Group Public Company Limited (the “Company”) would like to assure the directors (the “Director”) and executives that the personal data of the Director and the Executive is important to the Company and the Company guarantee to protect and process those personal data under the best information security measures. The Company, therefore, intend to inform the Director and the Executive of this Director and Executive' Privacy Notice (the “Notice”) that defines the necessity that the Company may have in collecting, compiling, processing and/or disclosing the personal data of the Director and Executive for the performance of Company’s obligations as a company to You in accordance with the Public Company Act of Thailand and Civil and Commercial Code.
The Company may review and update this Notice from time to time to ensure that this Notice comply with the practice and relevant laws or regulations and the scope of delegation and authorization granted to the Director and/or the Executive; provided that the Company will notify the change of this Notice by announcing the updated Notice to the Director and the Executive via any communication channels of the Company.
Personal Data that the Company is processing
“Personal Data” includes information of Director and Executive that is personally identifiable. The Company may obtain or collect the Director and Executive’s Personal Data directly form the Director or Executive in the qualification examination form or registration of new Directors and Executives; or from the Company’s cross-examination of the Director and Executive Personal Data from the database of government authorities, or other reliable sources that relates directly to the verification of the Director and Executive qualifications under the relevant laws.
The Company need to collect and process the following Personal Data of the Director and/or Executive:
In addition to the direct Personal Data of the Director or Executive, in case that Director or Executive is a person who provide Personal Data of their related person such as spouse and minor children, upon the submission, the Company shall deem that the Director or Executive represent of their legitimate right to disclose such person’s Personal Data; have informed the related persons of the Company’s necessity to process such data; and have obtained the consent from such person, therefore, the Company shall have the right to fully process the Personal Data of such person.
Objectives of the Personal Data processing
The Company would need to process the Personal Data of the Director or Executive for the following purposes:
Retention Period of the Personal Data
The Company shall be required to process and store the Personal Data of the Director or Executive for all the purposes defined above as long as necessary (i) for all the period of time that the Director or Executive remain in the office and as long as the Company may have the obligations under relevant laws to perform to such Director or Executive; or (ii) as long as the Company may have the obligations under other relevant laws to retain the Personal Data of the relevant Director and Executive, for instance for the accounting period.
In addition, in order for the Company to protect their legitimate rights that the Company has with the Director or Executive, the Company reserve the right to retain the Personal Data for the period of time that is necessary to protect such rights, in particular, for the appropriate prescription period after the cessation of your shareholder status for the maximum of 10 years for general prescription period.
Disclosure of Personal Data
In general, the Personal Data shall not be disclosed to any person except in these necessary circumstances that the Company may need to disclose your Personal Data to the following person:
Representation to implement appropriate information security measures
The Company undertake that the Company shall implement the appropriate security measures to prevent the unauthorized or unlawful access, amendment, change, or disclosure of your Personal Data. In addition, the Company shall establish internal policy to limit the access control or the use of your Personal Data in order to maintain data confidentiality and security and the Company commits to review those measures on the regular basis to comply with the industry standard and relevant laws.
Your Rights as the Data Subject
The Company acknowledge and respect your rights as the data subject in relation to your Personal Data that is in the Company's control. You can exercise your rights in accordance with the conditions under the applicable laws as follows:
The Director or Executive can contact the Company in order to make the request to exercise any defined rights through the defined communication channel. The Company will consider and notify the relevant Director or Executive of the Company’s determination within a reasonable period of time to the extent under the applicable laws. The Director or Executive can contact the Company at [email protected].