Visitor Privacy Notice
JSSR Group Public Company Limited (“the Group Company”) which consist of 1) JSSR Auction Company Limited 2) JSSR Logistics Company Limited 3) Rapbizz Direct Company Limited, would like to inform you as a person who entering the Group Company’s premise (the “Visitor”) that (1) the Group Company have installed CCTV system within the Group Company’s premise and with CCTV system, the Visitor’s facial image may be recorded and (2) the Group Company may need to record the detail of any Visitor in the logbook and may need to retain the Visitor’s identity card in exchange with the visitor card and collecting car registration number.
To be clear about the condition of collection, storage, usage and process personal data of the Visitor, the Group Company intend to inform this Visitor Privacy Notice (the “Notice”); provided that the Group Company may improve and amend this Notice from time to time to be consistent with the necessity to process all personal data and related law and the Group Company shall announce the amended Notice via communication channels that the Group Company may have.
Personal data to be process
The Group Company may collect and store the Visitor’s personal data as follows: (1) the Visitor’s facial image recorded by CCTV system (2) the Visitor’s full name, contact information, details of visit purpose that the Visitor fill in the Group Company’s visitor form or that the Visitor’s supervisory body may inform the Group Company in advance prior to the visit; provided that in case the Visitor’s supervisory body providing the Visitor’s personal data to the Group Company, the Group Company shall deem that such supervisory body has legitimate right to transfer and disclose the Visitor’s personal data to the Group Company to the process; (3) the Visitor’s identification card or other identification document which the Group Company shall retain in exchange with the Group Company’s visitor card and/or (4) the Visitor’s car registration number
Objectives for Personal Data being Processed
The Group Company have to process all the defined personal data of the Visitor to protect the security of premise, the Visitor, and other people. In addition, if any illegal action may happen in the company's premises and operations in accordance with related laws which the Group Company's enforcement or distribution of information to personnel or any parties having law enforcement power in usage of this information.
Retention Period
For the Visitor’s identification card and other identification document, the Group Company shall immediately return the same to the Visitor upon the return of the visitor card to the Group Company. For the information recorded in CCTV system, it shall be stored for 90 days while the visitor form shall be stored for audit purpose for 1 calendar year, except in case that the Group Company may need to use such information for protecting the Group Company’s legitimate rights against the violating Visitor where the Group Company reserve the right to store such information for the necessary legal prescription period.
Disclosure of Personal data
Generally, the Group Company would not disclose the Visitor’s Personal data to any person, except in necessary case as follows: (i) to disclose in the exercise the right to take action against the violating Visitor or exercise the Group Company’s right as a premise owner to file a lawsuit and make a defense; or (ii) to disclose to the government authorities that the Group Company may be obliged to disclose under the relevant laws or government order; provided that the Group Company undertake to only disclose the Visitor’s Personal data on the necessary basis without excessively affecting the Visitor’s rights.
Representation to implement appropriate information security measures
The Group Company represent to implement the appropriate information security measures pursuant to the standard defined under the applicable laws and the Group Company respect the Visitor’s right as the data subject. If you have any queries about this Notice or would like to exercise any of the rights as follows: right to withdraw consent; right to access and request a copy of personal data; right to rectify; right to request for data portability in case the Group Company storing such personal data in the format which is readable or commonly used by ways of automatic tools or equipment including right to transfer this personal data to other data controllers; right to object to any processing of the personal data, right to request for the deletion or de-identification the Visitor personal data upon there is no necessity to process; right to request the Group Company to suspend the use of the personal data; right to complain to any authorities in the event of a violation your personal data, please feel free to contact us at [email protected].