Announcement No. 017 / 2022 Privacy Notice For Customers

Announcement

No. 017 / 2022

Privacy Notice For Customers


            Aeroklas Company Limited, a subsidiary of EPG; Eastern Polymer Group Public Company Limited,

respects the customers’ privacy rights and also realizes the importance of personal data and the protection of personal data, which must be sufficient to prevent infringement of the privacy rights of the responsible data subject. The Company has prescribed and announced the privacy of the processing of personal data to the data subject in order to know the details related to collecting, using, or disclosing personal data as follows:

1.      Purpose for collecting, using, or disclosing personal data

              The Company will collect, use or disclose personal data only as much as necessary for the purpose of doing business under the Company's objectives and for the benefit of the customers in participating in the Company's activities as follows:

1.1. To be used to perform the request of the customers in the purchase of goods and/or services including participating in activities with the company.

1.2. For the benefit of the purchaser registration, trading contract, and/or payment for goods, etc.

1.3. For the benefit of the Company's management, development, facilitating the purchase of goods, delivery, and any operations to be able to run a business. For example, managing the trade and/or development of goods and services.

1.4. Verification of identity and validation of information received, analyzing and creating a database about the profile, contact, sending news, public relations, provision of facilities, information security, creating a purchaser account, identification for accessing the system and access to information systems, security, investigation, and management of complaints, including fraud prevention.

1.5. For the benefit of protection and security of both personal and property nature.

1.6. For public relations of the Company's activities, such as meetings, seminars, recreational activities, social assistance activities, booths, and social media activities, etc.

1.7. For the benefit of preventing epidemics and health hazards, both individually and the public.

1.8. To be able to comply with the provisions of the law, rules, and orders of the legal authority.


2.      Personal Data Processing Basis

The Company will process personal data on a lawful data processing basis as follows:

2.1. Processed on a contractual basis.

2.2. Processed on a legal basis

2.3. Processed on the basis of the Company's legitimate interests

2.4. Processed on the basis of the consent of the personal data subject.

2.5. Processed on other legal and lawful bases

3. Personal data that is collected, used, or disclosed is as follows:
Personal data collected, used, or disclosed includes:

3.1. Information and documents related to communication with the Company, such as contact information on business cards, name, post, workplace, address, telephone number, e-mail address, or social media information.

3.2. Information about the Company's purchase of any goods and/or services, such as the type of merchandise purchased, purchase history, information of receiving - delivery, etc.

3.3. Registration of visitors in order to allow entry and exit at the company's premises, in case of visiting, purchasing, and/or receiving goods directly within the Company.

3.4. Identification information such as name, surname, number, and ID card or driving license or passport copy.

3.5. Financial information, payment for goods and/or credit, etc.

3.6. Information on health register, screening during epidemic outbreaks, and information on food allergies in case of participation in activities the company has arranged for customers, etc.

3.7. In the event of attending events, meetings, seminars, and visiting any place for the company both within the company area and outside the company area. Personal data collected, such as information on the registration to participate in activities, such as name, surname, age, address, telephone number, e-mail address, social media data, workplace, position, still photographs, and animations while participating in activities, reward information, etc.

3.8. Information on your visit and/or online purchase, and access to information systems, computers, work systems, applications, networks, electronic devices, e-mail and websites, including the use of a cookies system to store information for the improvement and development of the website, and to comply with the Company's information technology policy and related laws.

3.9. Information collected from participation in the activities of the Company, such as participation in activities for survey responses, assessment responses, etc.

3.10. Selected information will be shared and disclosed through the Company's systems, applications, tools, questionnaires, assessments and documents.

3.11. Other information necessary for the performance of various legal compliance contracts.

3.12. Disclosure of information that is made available to the public with the express consent of the data subject, made available to other persons for lawful purposes.

4. Personal data collection period

4.1. The Company will keep personal data for the period necessary to achieve the specified objectives, taking into account the necessity of each type of data practice. After the expiration of such period, the Company will destroy or delete personal data by appropriate means, as determined by the Company.

4.2. The Company will keep the customers’ personal data during the transaction time for no more than five years to achieve the purpose of privacy of the customer.

4.3. The Company will provide an audit system to carry out the deletion or destruction of data after the retention period has expired or is not relevant or unnecessary for the purpose to collect that information.

5. Disclosure of Personal Data to Third Persons

5.1. The Company may disclose the personal data of the customer to the subsidiary and third parties. For example, contracts to purchase according to the objectives, collection and estimation of personal data of others to achieve the objectives of this announcement about the privacy policy.

5.2. The Company will require the recipient of information to take appropriate measures to protect the customers’ information and process the personal data as necessary and take steps to prevent wrongful disclose of the information.

6. Customer Rights

The customer has the following rights regarding personal data collected by the Company:

6.1. The right to be informed of details before personal data is collected.

6.2. The right to request a copy or transfer of your personal data to the data controller.

6.3. The right to object collection of data without consent.

6.4. The right to request data suspension.

6.5. The right to request deletion or destruction of information that is no longer necessary for storage.

6.6. The right to request the updating of personal data.

6.7. The right to withdraw consent for information collected on the basis of consent.

6.8. The right to make complaints in the event that the Company uses the personal data of employees unlawfully.

However, refusal to provide information or withdraw consent of required information for the aforementioned necessity and purpose to perform a customer's request may cause problems. Also, it may prevent the human resource management service from operating completely and properly. Any withdrawal of consent will not affect the collection, use, or disclosure of data collected with consent.
7. Measures to maintain the security of personal data
To maintain security and prevent the loss, access, use, alteration, correction, or disclosure of personal data without authority or wrongdoing. The Company has provided a system for collecting personal data. There is an access control mechanism and security measures in place. Also, the Company will arrange for regular reviews of measures to ensure effectiveness in maintaining physical, administrative and technical security.
8. Contact the Company and the Personal Data Protection Officer
If you have any questions about this Personal Data Protection Act. Policy or want to exercise any specified rights, you can contact us at:
Aeroklas Company Limited
Personal Data Protection Officer (DPO)
Email: dpooffice@aeroklas.com
No. 111/10 Moo 2, Subdistrict Makhamku, District Nikomphattana, Rayong 21180
Telephone: 038 – 893599     website:  www.aeroklas.com
This policy shall be effective from now onwards
         

Announced on May 10, 2022

Mr. Ekawat Vitoorapakorn
Managing Director