Clause
Purposes
Lawful Basis
Personal Data Privacy Notice
For the Visitors, Applicants for Access to Buildings, Work Sites of GC
Global Connections Public Company Limited (hereinafter referred to as “GC”) gives highest priority to the protection of personal data of the visitors, applicants for access to buildings, work sites of GC and in order for you to ensure that we will protect and manage your personal data in accordance with the laws concerning personal data protection, we then established this Personal Data Privacy Notice for your acknowledgement of details of the processing of personal data, whether it be the collection, use and disclosure (collectively referred to as “the processing”) that may be occurred and including to inform you of the rights on your personal data and our contact channels as follows:
1. Purposes for the collection, use and disclosure of personal data
In case that you contact or request for access to buildings or request for access to perform work in the work sites of GC, it is necessary for us to collect, use, and disclose your personal data pursuant to the following purposes:
1.1
For the control of access to buildings, work sites of GC including for the observation, prevention, obstruction and inspection of an unauthorized access to such area, for maintaining security in building area, work sites, including the exchange of registration card, the recording of profile and necessary information of the contractor that performed works for GC or the visitors of GC, the recording of profile of the person having access to buildings and the premise area of GC.
Legitimate interest basis
1.2
For the proceedings in accordance with relevant internal procedures of GC prior to performing works in the buildings, work sites of GC.
Legitimate interest basis
1.3
For maintaining security for employees and assets of GC including the use of closed-circuit television (CCTV) for recording picture of the person within building area, work sites of GC.
Legitimate interest basis
1.4
For controlling an access to information technology sources and database of GC as well as for the observation, prevention, obstruction and inspection of such unauthorized access.
Legitimate interest basis
1.5
For the risk management, audit supervision including for the internal audit of the internal audit office and internal management and administration in the organization.
Legitimate interest basis
1.6
For the establishment, compliance, exercise or defense of legal claim, or for commencing relevant legal proceedings including for using as supporting evidence of the legal proceeding (if any) against the related person as well as the proceedings for legal execution.
Legitimate interest basis
1.7
For the compliance with relevant laws, orders of the authorities, independent organizations or the officers having duties and authorities according to the laws such as the compliance with a summon, writ of attachment, order of the court, the police officer, the public prosecutor and the government authorities.
Legal obligation basis
1.8
For the compliance with laws concerning public interest in respect of public health such as health protection against dangerous communicable disease or epidemic which may be contagious or spread into the kingdom.
Legal obligation basis
1.9
For the management and administration concerning your health and safety.
Vital interest basis
GC hereby inform you that for the processing of personal data of the visitors and the applicants for access to buildings, work sites of GC, we rely on relevant lawful basis as specified herein without relying on the consent; however, there might be the processing of personal data in certain cases that we could not rely on these lawful basis such as the cases required by laws to obtain consent from the owner of personal data for the processing of sensitive personal data, etc. For such cases, GC shall request for your express consent (please read our letter requesting for consent in addition to this document).
2. Personal Data which shall be collected
In general, GC shall collect your personal data by directly requesting the data from you, for instance by having you fill in the forms determined by GC, or inquiring data from you, or requesting you to submit documents containing your personal data to GC; nonetheless, there may be some circumstances that PTTGC collects your personal data from other sources in order to fulfil the aforesaid purposes such as:
– The juristic person that you are the representative, attorney-in-fact, subcontractor or employee;
– Employees of GC in case that there is a reporting of event and incident occurred in the buildings, work sites of GC.
In this regard, the personal data collected by GC are as follows:
2.1 General personal data
(1) Identity data such as first name, last name, identification card number, passport number, gender, date of birth, age, nationality, signature, photo, weight, height;
(2) Contact data such as address, phone number, facsimile number, email, LINE ID;
(3) Communication data with GC such as photo, video record data;
(4) Car registration plate number;
(5) Screening data pursuant to communicable disease preventive measures.
(6) Qualifications Certifications
2.2 Sensitive personal data
GC has no intention to collect and use religious and blood type data specified in your identification card for any specific purpose. In the event that you provided GC the copy of your identification card, it is requested that you conceal such data. If you did not conceal such data, it shall be deemed that you authorized GC to conceal those data and such document with concealed data shall be deemed valid and legally enforceable in all respects. In case that GC is unable to conceal those data due to some technical limitation, GC shall collect and use such data as a part of your identification documents only.
However, for the processing of personal data of the visitors and the applicants for access to buildings, work sites or specific area of GC, there might be some activities that GC shall request for additional sensitive personal data such as health data or biometric data (fingerprint recognition data and facial image recognition data) for the purposes that we specifically informed in the form for requesting consent and GC shall request for your prior express consent prior to the collection of such personal sensitive data.
3. Period for retention of personal data
GC shall retain your personal data for the period necessary for the purposes of the collection, use or disclosure of personal data set out in this Privacy Notice. The criteria used for determination of the retention period is the period that GC still has relation with you and may further retain the data for the period necessary for the compliance with laws or the statutory prescription period, or for the establishment, compliance, exercise or defense of legal claim, or for other reasons pursuant to the internal policies and rules in the organization of GC.
4. Disclosure of personal data
In order to carry out the proceedings for the purposes set out in this Privacy Notice, GC may disclose your personal data to the third party as follows:
4.1 The government authorities, regulatory authorities or other authorities as prescribed by laws including the officers which exercise powers according to the laws such as court and police;
4.2 Agents, contractors/sub-contractors and/or service providers for any operation provided for GC such as auditor, lawyers and legal advisors.
5. Your rights as the owner of personal data
As the owner of personal data, you have the rights as prescribed in the Personal Data Protection Act B.E 2562 (2019). In this respect, you can exercise your relevant rights through the channels specified by GC in Clause 7 or through GC website, whereby you will be entitled to exercise the rights when the laws concerning personal data protection are applied to GC. The relevant rights having details as follows:
5.1 Right to withdraw consent
In case that GC requests for your consent, you shall have the right to withdraw the consent for the processing of your personal data that has already given to GC unless such withdrawal of consent is restricted by laws or by the agreement that provides you the benefits.
Such withdrawal of consent shall not affect the processing of personal data legally conducted according to your prior consent.
5.2 Right to access to personal data
You have the right to request for an access to and the request for the copy of your personal data under control of GC, including to request GC to disclose the acquisition of such data that you have not given consent to GC.
5.3 Right to request for the submission or the transfer of personal data
You have the right to request GC to transfer your personal data that you have given to GC as prescribed by laws.
5.4 Right to object the collection, use or disclosure of personal data
You have the right to object the processing of data relating to you in respect of the collection, use or disclosure of your personal data as prescribed by laws.
5.5 Right to request for the erasure of personal data
You have the right to request GC to delete your personal data as prescribed by laws.
5.6 Right to request the restriction of the use of personal data
You have the right to request GC to restrict the use of your personal data as prescribed by laws. Nevertheless, GC may store your personal data using electronic system pursuant to which some systems may be unable to delete the data, and for such case, GC shall destroy or cause such data to be unable to identify your identity.
5.7 Right to request for the rectification of personal data
If you found that the data controlled by GC is incorrect or you have changed your personal data, you have the right to request GC to correct your personal data so that such personal data be accurate, current, complete and not causing misunderstanding.
5.8 Right to lodge a complaint
You have the right to lodge a complaint with the competent officers under the Personal Data Protection Act B.E 2562 (2019) in case that GC breaches or does not comply with such Act.
6. Amendment of this Privacy Notice
We may amend and update this Privacy Notice from time to time, and if there is such amendment, we will keep you posted through GC website and/or inform you via email. If it is necessary to request for your consent, we will proceed to request additional consent from you.
7. Contact channels
If you have question or require further details concerning the protection of your personal data, the collection, use and disclose of your personal data, the exercising of your rights or if you have any complaint, you can contact GC as per the following channels:
Global Connections Public Company Limited
Office Address: 13/1 Moo2 Kingkaew Rd, Rachateva, Bangplee, Samuthprakarn 10540
Telephone : 0 2763 7999
E-mail : compliance@gc.co.th
Announced 1 July 2022