Privacy Notice For Employees
Privacy Notice For Employees
Srichand United Dispensary Co., Ltd. and its affiliates including persons involved in the processing of personal data on behalf of or on behalf of Srichand United Dispensary Co., Ltd. hereinafter collectively referred to as the “company” , is committed to protecting the privacy of our job applicant, employee, intern, or contractor of the company, which hereinafter referred to as “Employee or Data Subject”. In order to comply with the Personal Data Protection Act B.E 2562, the company issues this notice to inform users of data about rights and duties as well as various conditions for collecting, using and disclosing personal data.
Personal data
“Personal Data” means data about an individual by which an individual can be identified whether directly or indirectly but does not include data of the deceased in particular.
“Sensitive Information” means personal data about race, ethnicity, political opinions, cult religion, philosophy, sexual behavior, criminal records, health information, disability, union information, genetic data, biological data, such as facial replication data, iris simulation data or fingerprint data.
1. Personal data collected by the company
In order to collect and keep personal data of the company, lawful means will be used and limited to the extent necessary for the company's operating objectives which contains personal data such as name - surname, date of birth, gender, age, educational background, marital status, nationality, identification number, passport number, work history, job position, signature, photograph, social media account, driver's license number
Contact information such as address, telephone number, e-mail address, social media account name
Official document information such as a copy of your ID card, a copy of house registration, a copy of your passport, a copy of your birth certificate
Financial information such as bank account number, copy of bank book, credit card information, income, tax, provident fund.
Information about related third parties such as spouse, children, father/mother
Information obtained from the company's system or as an employee, such as employee ID, work permit number, attendance records, work duration, overtime work, absence and leave from work, CCTV images and/or video.
The company will collect personal data with the consent of the personal data subject except in the following cases
To comply with the contract in the case of collecting, using or disclosing personal data for the purpose of providing services or complying with the contract between the data subject and the company
To prevent or suppress danger to life, body or health
To comply with the law
For the legitimate interests of the company in case of necessity for the legitimate interests of the company's operations, the company will consider the rights of the data subject as priority such as for the fraud prevention, network security protection of freedom and the benefit of the owner of the data, etc.
For research studies or statistics in the case of historical documents or archives for the public benefit or those related to research or statistics which provide appropriate safeguards to protect the rights and freedom of data subjects
To perform state missions in the event that it is necessary to carry out the mission for the public interest or the performance of duties under the powers of the state that the company has been assigned
Sensitive Personal Data
Companies may need to collect sensitive information such as religion, ethnicity, biometrics, disability information, medical information, and criminal record. The company will seek consent from employees at all times in collecting, using and/or disclosing, except
For the purpose of preventing or suppressing dangers to the life, body or health of the person whose data subject is unable to give consent.
It is the legitimate activity with appropriate protections of a foundation, association or non-profit organization with political, religious, philosophical, or trade union objectives to members who were previously members or who has regular contact with foundations, associations or non-profit organizations for such purposes without disclosing personal data outside the foundation, association or non-profit organization.
It is information that is made public with the consent of the personal data subject.
It is necessary for the establishment of legal claims, compliance or exercise of legal claims or the rise of the defense of legal claims.
It is imperative to comply with the law in order to achieve the objectives of
Preventive Medicine or Occupational Medicine
Employee competency assessment
Medical diagnosis
Health or Social services
Medical treatment and health management
Social work service system
Public health benefits such as health protection from dangerous communicable diseases or epidemics
Labor protection, social security, National Health Insurance, welfare related to medical treatment of persons entitled to the law protection of car accident victims or social protection
Scientific research study, history or statistics or other public interest
Important public interest
2. Purpose of processing personal data
Data processing provided under this notice is an action that the company is obliged to perform as an employer with the following objectives
To comply with an employment contract as an employer
To comply with the law on labor protection and social security
To comply with the law the company has statutory obligations, such as paying taxes and other statutory duties
For assessing job skills and competence
For coordinating work
To pay compensation, welfare benefits, employment benefits
For use in approvals, authorizations, or work processes
To determine eligibility and suitability for a position.
For use in granting access to the area and use of the company's assets.
3. Transmission and disclosure of personal data.
The company will not disclose and forward your personal data to external agencies except with your consent or in accordance with the following cases.
To achieve the purposes stated in this Privacy Notice, the company may be required to disclose or share only as necessary data with partners, service providers or external entities. The company will enter into a personal data processing agreement as required by law.
The company may disclose or share personal data with its affiliates. It will only process the data for the purposes stated in this Privacy Notice.
The law or legal process requires disclosure or disclosure to the official government officials or a competent authority to comply with a lawful order or request.
To be provided to government agencies in accordance with the duties of the employer such as the Social Security Office, the Revenue Department, the Legal Execution Department.
4. The transmission and transfer of data to foreign countries
The company may transmit or transfer personal data abroad. This will ensure that the destination country or the destination authority has adequate standards of protection for personal data.
5. Protection of personal data
The company will take technical measures and appropriate management to protect and secure your personal data as it provides encryption for transmitting data over the Internet and controls access to your personal data only for those involved both in the part of the data stored in the form of documents and electronic.
6. Storage duration
The company will collect personal data of employees throughout the duration of the employment contract or obligation that employee has for the company. The company reserves the right to keep the information for a period of 10 years after the employee's retirement for the purpose of protecting and defending the company's various claims. Unless the relevant law requires the company to keep personal data for other periods, the company may be required to retain information for a longer period than specified.
7. Changes to the Privacy Notice
The Company may amend this Privacy Notice by posting it in its internal communication channels, including https://srichand.sharepoint.com/sites/all77 , Bamboo HR applications, including announcements on the website www.srichand.co.th with the date of the latest amendment. The company recommends that employee check this notice regularly.
8. Rights of personal data subject
The employee can apply for various rights as required by law and as stated in this announcement as follows:
The right to request access and obtain a copy of personal data or request to disclose the source of personal data of employees (right of access)
The right to edit current data to become current and correct data (right to rectification)
The right to obtain personal data or request that the personal data be transmitted or transferred to another personal data controller (right to data portability) in the event that the company has made the personal data in a form readable or generally usable by means of automatic device or tool and can use or disclose personal data in an automated way.
The right to request erasure or destruction or make personal data non-personally identifiable (right to erasure) when the data becomes unnecessary or when the data subject withdraws their consent.
The right to restrict processing (right to restriction of processing) in the event that personal data needs to be deleted or when such data is no longer necessary.
The right to withdraw consent (right to withdraw consent) to process data you have previously provided.
The right to object. The owner of the personal data has the right to object to the collection, use or disclosure of the data at any time.
Right to lodge a complaint. If you have any concerns or questions about the company's practices in relation to your personal data, please contact the company using the contact details set out in clause 9 of the notice.
In the event that there is a reason to believe that the company has violated or failed to comply with the law on personal data protection, you have the right to lodge a complaint with the Personal Data Protection Committee in accordance with the rules and procedures prescribed by the law on personal data protection.
9. Contact us
Details of the Data Controller
Name : Srichand United Dispensary Co., Ltd.
Contact address : 50 Rama 9 Soi 53 Rama 9 Road, Phatthanakan Subdistrict, Suan Luang District, Bangkok 10250
Contact method : Telephone : (+662) 718 3183-7, www.srichand.co.th
Upon any questions or wishes to correct, delete data, exercise rights or contact other matters relating to your data, please contact via the contact channels below.
Details of the Data Protection Officer (DPO)
Name : Data Protection Officer
Contact address : Srichand United Dispensary Co., Ltd. 50 Rama 9 Soi 53, Rama 9 Road, Phatthanakan Subdistrict, Suan Luang District, Bangkok 10250
Contact method : Telephone : (+662)718 3183-7 (Office hours 09.00 a.m.- 06.00 p.m.)
Email : dpo@srichand.co.th, hr@srichand.co.th
Announced on 16 June 2021