Announcement No. 019 / 2022 Privacy Notice For Suppliers & Service Providers

Announcement

No. 019 / 2022

Privacy Notice For Suppliers & Service Providers

 
Aeroklas Company Limited, a subsidiary of EPG: Eastern Polymer Group Public Company Limited, respects supplier and service providers' privacy rights and also realizes the importance of personal data and to protect personal data, which must be sufficient to prevent the infringement of privacy rights of the responsible data subject. Therefore, the Company has prescribed and announced the privacy of the processing of personal data to inform all parties about the details related to collecting, using, or disclosing of personal data as follows:


1. Purpose for collecting, using, or disclosing personal data

The Company will collect, use or disclose personal information as necessary for the Company's business operations under the objectives of the Company and for the benefit of suppliers and service providers as follows:

1.1. To be used in the processing of requests from suppliers and service providers for registration, procurement, and/or services;

1.2. To benefit in the implementation of contracts in procurement, procurement, service, product inspection, job inspection and/or payment of goods, etc.

1.3. For the benefit of the company's internal management, development, and procurement facilitation, procurement, service and delivery, and other objectives to be able to carry out business, such as for procurement management and/or product and service development.

1.4. Verification of identity and validation of information received, analyzing and creating a database about the history, contact, sending news, and public relation, provision of facilities Information Security for Creating a Supplier and Service Provider Account Security Investigation and management of complaints and investigations, including fraud prevention.

1.5. For the benefit of prevention and security of both people and property.

1.6. For the benefit of prevention of the spread of communicable diseases, health hazards, both for the individual and the public.

1.7. To be able to comply with the provisions of the law, rules, and orders of the legal authority.


2. Personal Data Processing Basis

               The Company will process personal data on a lawful data processing basis as follows:

2.1. Processing on a contractual basis.

2.2. Processing on a legal basis.

2.3. Processing on the basis of the Company's legitimate interests.

2.4. Processing on the basis of the consent of the personal data subject.

2.5. Processing on other lawful and legal basis.

 
3. Type of personal data that is collected, used, or disclosed

Collecting, using, or disclosing of the following personal data:

3.1. Information and documents related to communication to buy goods or provide any services to the Company, such as contact information on business cards, name, surname, position, workplace, address, telephone number, e-mail address, or social media information, passport, driver's license, house registration, and other documents issued by government agencies.

3.3. Purchasing information, procurement and/or any services of the Company, such as type of products, history of sales or services, delivery or service information, etc.

3.4. Records of visitors granted permission to enter the Company's premises to offer products or services, delivery of goods or services within the Company.

3.5. When contacting the Company, the Company may collect personal data, such as personal information, name, surname, date of birth, photographs, numbers, and information on the ID card or driving license, passport number and contact information.

3.6. Information about health history and health screening during communicable disease outbreaks.

3.7. Information collected from participation in Company activities, such as participation in survey responses and assessment responses, etc.

3.8. Selected information will be shared and disclosed through the Company's systems, applications, tools, questionnaires, assessments and documents.

3.9. Other information necessary for the performance of various legal compliance contracts, provided to other persons for lawful purposes. This information is made available to the public only with express consent by the data subject.

3.10. Other personal information stipulated by law shall be public information only with public consent.

3.11. Security systems of CCTV for photos and videos.


4. Personal data collection period

4.1. The Company will keep personal data for the period necessary to achieve the specified objectives. Considering the necessity of each type of data practice, and after the expiration of such period, the Company will destroy or delete personal data by appropriate means as determined by the Company.

4.2. The Company will keep suppliers' personal data for the duration of the purchase, procurement, or rendering of the service for a period of maximum ten years from when the purchase or service has been rendered in order to achieve the task of the Privacy Notice for suppliers and service providers.

4.3. The Company will provide an audit system to perform the deletion or destruction of data after the retention period has lapsed, or the necessity to further store the collected data is not given.
 

5. Disclosure of Personal Data to Third person

5.1. The Company may disclose the personal data of the customer to any subsidiary and third parties. For example, purchase contract information, according to the objectives for collection of personal data of others to achieve the objectives of this privacy policy announcement.

5.2. The Company will require the recipient of personal information to take appropriate measures to protect the customers’ information and process the personal data only when necessary and take steps to prevent or disclose the information wrongfully.
 

6. Supplier and Service Provider rights

The suppler and service provider have the following rights regarding data collected by the Company:

6.1. The right to be informed of details before personal data is collected.

6.2. The right to request a copy or transfer of personal data to the data controller.

6.3. The right to object collection of data without consent.

6.4. The right to request data suspension.

6.5. The right to request deletion or destruction of information that is no longer necessary for storage.

6.6. The right to request the updating of personal data.

6.7. The right to withdraw consent for information collected on the basis of consent.

6.8. The right to make complaints in the event that The Company uses the personal data of employees unlawfully.

However, the refusal to provide information or withdraw consent required for the aforementioned necessity and purposes may cause some operations to not be completed. Also, any withdrawal of consent will not affect the collection, use, or disclosure of data collected with consent.


7. Measures to maintain the security of personal data

To maintain security and prevent the loss, access, use, alteration, correction, or disclosure of personal data without authority or wrongdoing. The Company has provided a system for collecting personal data. There is an access control mechanism and security measures in place. Also, the Company will arrange for regular reviews of measures to ensure effectiveness in maintaining physical, administrative and technical security.


8. Contact the Company and the Personal Data Protection Officer

If you have any questions about this Personal Data Protection Act Policy or want to exercise any specified rights, you can contact us at:
Aeroklas Company Limited
Personal Data Protection Officer (DPO)
Email: dpooffice@aeroklas.com
No. 111/10 Moo 2, Subdistrict Makhamku, District Nikomphattana, Rayong 21180
Telephone: 038 – 893599     website:  www.aeroklas.com
This policy shall be effective from now onwards

Announced on May 10, 2022
 

Mr. Ekawat Vitoorapakorn
Managing Director