Privacy Policy of S. Siri Saeng Co., Ltd.

        S. Siri Saeng Co., Ltd. (hereinafter referred to as “the Company”) respects the right to privacy and places importance on the protection of personal data related to or transacting with the Company. Therefore, this Personal Data Protection Policy has been developed to provide clear and appropriate criteria, mechanisms, measures for supervision and management of personal data as follows

1.    Scope of application

This Privacy Policy applies to the work of all employees, which means permanent employees, fixed-term contract employees, temporary employees and contractors, including those who process personal data on behalf of the Company.

2.    Definition

    2.1.    “Personal Data” means information about an individual which enables that individual to be identified, either directly or indirectly, but does not include information specifically about a deceased person.

    2.2.    “Sensitive Personal Data” means data that is truly personal to an individual but is sensitive and may be at risk of unfair discrimination, such as race, ethnicity, political opinions, religious or philosophical beliefs, sexual behavior, criminal history, health information, disability, trade union information, genetic information, biometric data or any other information that affects the owner of personal data in a similar manner as announced by the Personal Data Protection Committee.

    2.3.    “Processing” means any operation involving the collection, use, disclosure, erasure or destruction of personal data.

    2.4.    “Personal data owner” means a natural person who is the owner of personal data in which the personal data can identify that person, either directly or indirectly.

    2.5.    “Personal data controller” means a person or legal entity that has the authority to make decisions regarding the collection, use or disclosure of personal data.

    2.6.    “Personal Data Processor” means a person or legal entity that collects, uses or discloses personal data on behalf of or at the direction of the Company, and such person or legal entity is not a personal data controller.

3.    Collection of personal data

    3.1.    The Company will collect personal data with purposes, scope and by lawful and fair means. The collection will be done only to the extent necessary for the Company's operations under its objectives.

    3.2.    The Company will take action to make the data owner aware of and give consent electronically or in accordance with the Company's methods. In the case of storing sensitive personal data of the data owner, the Company will request the data owner's consent expressly before collecting, except for the collection of personal data and sensitive personal data which falls under the exceptions as specified in the Personal Data Protection Act B.E. 2562 or other laws.

4.    Purpose of collecting or using personal data

    4.1.    The Company will collect or use the personal data of the data owner for the benefit of the Company's operations or to improve the quality of operations to be more efficient and/or to comply with laws or regulations related to the Company's operations. The Company will store and use such data only for the period necessary according to the purposes notified to the data owner or as specified by law.

    4.2.    The Company will not take any action that is different from what is stated in the purpose of the collection, except

                (1) The new purpose has been informed to the data owner and the data owner's consent has been obtained.

                (2) It is in compliance with the Personal Data Protection Act or other relevant laws.

5.    Disclosure of Personal Information

    5.1.    The Company will not disclose the personal information of the data owner to any person without consent and will disclose it for the purposes stated.

    5.2.    The Company may have a need to disclose personal data of the data owner to affiliated companies or other persons both domestically and internationally for the benefit of the Company's operations and the provision of services to the data owner. In disclosing personal data to such persons, the Company will ensure that such persons keep the personal data confidential and not use it for purposes other than those specified by the Company.

    5.3.    The Company may disclose personal data of the data owner under the criteria prescribed by law, such as disclosing personal data to government agencies, government agencies, regulatory agencies, including in cases where disclosure is requested by virtue of legal authority.

6.    Security of Personal Data

    6.1.    The Company shall provide appropriate personal data security measures in accordance with the law, policies, regulations, requirements and practices on personal data protection for the Company's employees and other relevant persons.

    6.2.    The Company supports and encourages employees to have knowledge and awareness of their duties and responsibilities in collecting, storing, using and disclosing personal data of data owners so that the Company can comply with the personal data protection policy and laws correctly and effectively.

7.    Rights of personal data owners

    7.1.    The right to request access to and obtain a copy of personal data about oneself or to request disclosure of the acquisition of such personal data to which one has not given consent.

    7.2.    The right to object to the collection, use or disclosure of personal data about oneself.

    7.3.    The right to request that personal data be erased, destroyed, or anonymized to identify the owner of the personal data.

    7.4.    Right to request suspension of use of personal data.

    7.5.    The right to withdraw consent to the processing of personal data to which consent has been given. However, the withdrawal of consent will not affect the collection, use or disclosure of personal data to which consent has already been given.

    7.6.    The right to have personal data corrected.

    7.7.    Right to personal data portability.

8.    Review and Change of Personal Data Protection Policy

The Company may update or amend this Policy from time to time to comply with legal requirements, changes in the Company's operations, and suggestions and comments from various agencies, and the Company will post a notice of such changes clearly. 

9.    Company contact channels

Send a letter by post

Contact: Ms. Natsinee Siwaliphan

Address: S. Siri Saeng Co., Ltd. 140 Vibhavadi Rangsit Road, Din Daeng Subdistrict, Din Daeng District, Bangkok 10400

E-mail

E-mail: natsinee@siriseang.com

On the website

Website: http://www.siriseang.com