Whom it May Concern
We, Guardforce Cash Solutions Security (Thailand) Company Limited and its Subsidiaries (collectively referred to as “Company” or “we” or “our”) gives highest priority to the protection of the personal data of the work candidate as well as the person in the family of the work candidate or the data of the other person that the work candidate provided for us, and in order for you to ensure that we will protect and manage your personal data in accordance with the laws concerning personal data protection, we then established this Personal Data Privacy Notice for your acknowledgement of details of the processing of personal data, whether it be the collection, use and disclosure (collectively referred to as “the processing”) that may be occurred and including to inform you of the rights on your personal data and our contact channels as follows:
| Clause | Purposes | Lawful Basis |
|---|---|---|
| 1. | For the proceedings necessary for the consideration and selection of work candidates which shall mean to include the process for work application, the interview process, the selection and evaluation process, the process for offering you an employment agreement, and the other human resources management process in relation to the consideration and selection for employment with Company and its Subsidiaries. | Contractual Basis |
| 2. | For qualification check prior to employment as prescribed by laws including the necessary information check and the checking of information with the person of reference specified by you or the checking of prior history of work to supplement the consideration and the selection for employment with Company and its Subsidiaries. | Legitimate interest and legal obligation basis |
| 3. | For the internal audit of the Company | Legitimate interest basis |
| 4. | For maintaining security in building area or premises of Company and the evaluation of security risks including the communication for the issuance of access card(s) to work in the premises of Company, the exchange of cards for building entry and exit, the recording of information on the entry and exit of Company’s premises, and the recording of videos in the buildings or offices of Company or Company’s branches by closed-circuit television (CCTV). | Legitimate interest basis |
In some cases, we may collect, use and disclose personal data of the person in the family or other person that our work candidate provided for us. In this respect, Company shall collect, use and disclose personal data of those people under relevant lawful basis for the following purposes:
| Clause | Purposes | Lawful Basis |
|---|---|---|
| 1. | For communication in necessary or emergency cases such as the checking of information of the work candidate with the specified person of reference or the inspection of prior history of work of the work candidate or for notifying dangerous incident occurred to the work candidate, etc. | Legitimate interest basis |
| 2. | For maintaining security in building area or premises of Company and the evaluation of security risks including the communication for the issuance of access card(s) to work in the premises of Company, the exchange of cards for building entry and exit, the recording of information on the entry and exit of Company’s premises, and the recording of videos in the buildings or offices of Company or Company’s branches by closed-circuit television (CCTV). | Legitimate interest basis |
The Company would like to inform you that for the processing of personal data of the work candidate, the person in the family of the work candidate including the data of the other person that the work candidate provided for us, we rely on relevant lawful basis as specified herein without relying on the consent; however, there might be the processing of personal data in certain cases that we could not rely on these lawful basis such as the cases required by laws to obtain consent from the owner of personal data for the processing of sensitive personal data, etc.. For such cases, the Company shall request for your express consent and in case that you are a work candidate and have provided personal data of the person in the family or other person for us, you shall be responsible to inform those people of this Personal Data Privacy Notice and/or the letter requesting for consent (if necessary).
In case that the aforementioned personal data collected by Company is the information necessary for Company’s performance of agreements or the compliance with relevant governing laws, if you refuse to provide such necessary personal data, Company may not be able to enter into employment agreement with you, or may not be able to administer and manage the agreements in accordance with the employment purposes, or this may affect the receiving of welfare and benefits or the provision of facilitations to you.
In general, for the collection of your personal data, Company shall collect your personal data by directly requesting the data from you, for instance by having you fill in the forms determined by Company, or inquiring data from you, or requesting you to submit documents containing your personal data to Company; nonetheless, there may be some circumstances that Company collects your personal data from other sources such as your person of reference specified in the work application, your university or academy, recruitment agencies, government authorities such as the Royal Thai Police or the organization or sector that you previously worked for, etc..
In this regard, Company shall proceed to collect your personal data as follows:
2.1 General personal data
2.2 Sensitive personal data
In general, Company has no intention to collect and use religious and blood type data specified in your identification card for any specific purpose. In the event that you provided Company the copy of your identification card, it is requested that you conceal such data. If you did not conceal such data, it shall be deemed that you authorized Company to conceal those data and it shall be deemed that such document with concealed data be valid and legally enforceable in all respects. In case that Company is unable to conceal those data due to some technical limitation, Company shall collect and use such data as a part of your identification documents only.
However, it is necessary for Company to collect and use criminal record data of the work candidate in order to proceed on the qualification check prior to the employment as required by laws, and Company shall be able to perform the processing of such data by relying on lawful basis as mentioned in Clause 1 without relying on your consent. In this regard, Company shall procure that there shall be appropriate measures for the protection of your basic rights and benefits, and relevant proceedings shall be strictly carried out within the extent permitted by laws.
In case that it is necessary for Company to collect your sensitive personal data, unless otherwise prescribed by laws, Company shall request for your express consent on case-by-case basis. In this regard, there might be the Processing of the following sensitive personal data by Company:
Company shall retain your personal data for the period necessary for the purposes of the collection, use or disclosure of personal data set out in this Privacy Notice. Company shall retain such personal data of you for the period of 2 years as from the date of application or the latest date that work application has been updated so that such personal data may be used to contact you if there is a position that may be suitable for you in the future.
In order to carry out the proceedings for the purposes set out in this Privacy Notice, Company may disclose your personal data to the third parties such as the government authorities, including the officers which exercise powers or perform duties under the laws such as the Royal Thai Police, court, polices, Revenue Department, the Office of Securities and Exchange Commission, Anti - Money Laundering Office, Department of Labour Skill Development, Welfare and Labour Protection Department, Department of Legal Execution, Office of the Attorney General, etc.
As the owner of personal data, you have the rights as prescribed in the Personal Data Protection Act B.E 2562 (2019). In this respect, you can request to exercise your relevant rights through the channels specified by Company in Clause 7. In this respect, your relevant rights shall have details as follows:
5.1 Right to withdraw consent
In case that Company requests for your consent, you shall have the right to withdraw the consent for the Processing of your personal data that has already given to Company unless such withdrawal of consent is restricted by laws or by the agreement that provides you the benefits. Nevertheless, such withdrawal of consent shall not affect the Processing of personal data legally conducted according to your prior consent.
5.2 Right to access to personal data
You have the right to request for an access to and the request for the copy of your personal data under control of Company, including to request Company to disclose the acquisition of such data that you have not given consent to Company.
5.3 Right to request for the submission or the transfer of personal data
You have the right to request Company to transfer your personal data that you have given to Company as prescribed by laws.
5.4 Right to object the collection, use or disclosure of personal data
You have the right to object the Processing of data relating to you in respect of the collection, use or disclosure of your personal data as prescribed by laws.
5.5 Right to request for the erasure of personal data
You have the right to request Company to delete your personal data as prescribed by laws. Nevertheless, Company may store your personal data using electronic system pursuant to which some systems may be unable to delete the data, and for such case, Company shall destroy or cause such data to be unable to identify your identity.
5.6 Right to request the restriction of the use of personal data
You have the right to request Company to restrict the use of your personal data as prescribed by laws.
5.7 Right to request for the rectification of personal data
If you found that the data controlled by Company is incorrect or you have changed your personal data, you have the right to request Company to correct your personal data so that such personal data be accurate, current, complete and not causing misunderstanding.
5.8 Right to lodge a complaint
You have the right to lodge a complaint with the competent officers under the Personal Data Protection Act B.E 2562 (2019) in case that Company breaches or does not comply with such Act.
We may amend and update this Privacy Notice from time to time, and if there is such amendment, we will keep you posted through Company’s website and/or inform you via email. If it is necessary to request for your consent, we will proceed to request additional consent from you.
If you have question or require further details concerning the protection of your personal data, the collection, use and disclosure of your personal data, the exercising of your rights or if you have any complaint, you can contact Company as per the following channels:
Attention :Data Protection Officer (DPO)
Email :PDPAcenter@guardforcecash.co.th
Address :PDPA Center Guardforce Cash Solutions Security (Thailand) Company Limited No.96 Vibhavadi Rangsit Road, Talad Bangkhen Sub - District, Laksi District, Bangkok 10210
Telephone :02 973 6000 Ext 333 or 339
For your acknowledgement
Sincerely
Mr. Chu Kwok Wing
Managing Director