EASTERN POLYMER GROUP PUBLIC COMPANY LIMITED
PRIVACY NOTICE
( FOR SUPPLIER & SERVICE PROVIDER )
Eastern Polymer Group Public Company Limited, hereinafter referred to as the “Company”, respects the privacy rights of suppliers and service providers. We are aware of the importance of personal data and the protection of personal data that must be adequately provided. To prevent infringement of the privacy rights of the personal data subject, which is our responsibility, therefore; the Company hereby prescribes and notifies the privacy for processing personal data to the personal data owner for their acknowledgement regarding the details related to the collection, use or disclosure of personal data as follows:
1. The purpose for collecting, using or disclosing personal information
The Company will collect, use or disclose personal information as necessary for the Company’s business operations for the Company and for the benefit of supplier and service provider as follows:
1.1 To process requests from suppliers and service providers for registration, procurement and/or services.
1.2 For the benefits of executing contracts in procurement, procurement, service, product inspection, work acceptance and/or payment of goods, etc.
1.3 For the benefits of the Company’s internal management, management, development, facilitation of procurement, procurement, service and delivery and any operations in order to be able to carry out business such as procurement management and/or product and service development.
1.4 Verification of identity and validation of information received, analysis, and creating a database about history, contact, news release and public relations, provision of facilities, information security, creating a Supplier and Service Provider Account security, investigating and handling complaints and investigations, including fraud prevention.
1.5 For the benefit of protection and security of both people and property.
1.6 For the benefit of preventing the spread of communicable diseases or health, both self and public
1.7 To comply with the provisions of the law, rules, and orders of the legal authority.
2. Personal Data Processing Basis
The Company will process personal data based on lawful data processing basis as follows:
2.1 Processing based on a contract basis
2.2 Processing based on a legal basis
2,3 Processing based on the Company’s legitimate benefits basis
2.4 Processing based on the consent of the personal data subject basis
2.5 Processing based on other lawful basis
3. Personal information that is collected, used, or disclosed includes:
3.1 Information and documents related to purchasing products or providing any services with the Company, such as contact information on business cards, name, surname, job title, workplace, address, telephone number, email, or social media information.
3.2 Copy of documents that can be used for identification such as ID card, passport, driver’s license, house registration, and other documents issued by government agencies.
3.3 Information about purchasing, procurement and/or any company services such as product type, history of sale or service, delivery, or service information, etc.
3.4 Records of visitors for permission to enter and exit the Company’s premises to offer products or services, delivery of goods or services within the Company.
3.5 In the case of contacting the Company, the Company may collect personal data such as personal information, name, surname, date of birth, photograph, number and identification card or driver’s license information, passport number and contact information.
3.6 Information on health history screening during infectious disease outbreaks.
3.7 Information collected in connection with the Company activities such as participation in activities, survey response, and assessment response.
3.8 Selected information will be shared and disclosed through the Company’s systems, applications, tools, questionnaires, assessments, and documents.
3.9 Other information which is necessary for contracts compliance according to the laws.
3.10 Other personal data for lawful purposes which information made available to the public with express consent.
3.11 Photograph and/or motion image via CCTV according to the security system.
4. Storage Period of Information
4.1 The Company will keep personal data for the necessary period to achieve the specified objectives by considering the necessity of each type of data practice and after the expiration of such period. The Company will further destroy or delete personal data by appropriate means as determined by the Company.
4.2 The Company shall retain the supplier’s personal data for the duration of the purchasing, procurement, or provision of services and when no more than ten years of procurement or service is provided in order to achieve the objectives of the privacy notice for supplier and service provider.
4.3 The Company will provide an audit system for deletion or destruction of data after the expiration of the retention period, or which is unrelated to or beyond the necessity to collect that data.
5. Disclosure of Personal Information to Third Parties
5.1 The Company may disclose personal information of suppliers and service providers to its affiliates and third parties such as dealing with purchasing, procurement, or services to collect and process other personal data to achieve the objectives of this Privacy Notice.
5.2 The Company will assign the recipient of the information to take appropriate measures to protect the information of the supplier and the service provider, process the personal information as necessary, and take steps to prevent or disclose the information unlawfully.
6. Rights of the Supplier and Service Provider
The supplier and service provider will continue to have the right to personal information held by the Company collected, including:
6.1 Right to be informed before collecting personal data of the supplier and the service provider.
6.2 Right to request a copy or transfer your personal data to a third-party data controller.
6.3 Right to object to data collection without consent.
6.4 Right to request for suspension of the use of information.
6.5 Right to request for the removal and destruction of the information that no longer required to be stored.
6.6 Right to request that the personal data of the supplier and the service provider are up to date.
6.7 Right to withdraw consent for information collected based on consent.
6.8 Right to complain if the Company uses the personal information of the suppliers and service providers unlawfully.
However, the refusal to provide information or withdraw consent is required for the aforementioned necessity and purposes. This may prevent the operation from operating entirely, and the withdrawal of consent will not affect the collection, use or disclosure of information for which consent has been given.
7. Measurement to maintain the Security of Personal Data
To maintain security and prevent the loss, access, use, alteration, correction, or disclosure of personal data without authority or wrongdoing. The Company has provided a system for collecting personal information. There is an access control mechanism, security measures are in place, and the Company will arrange for regular reviews of measures to be effective in maintaining physical, administrative and technical security.
8. Ways to contact the Company and the Personal Data Protection Officer
If you have any questions about this Privacy Notice for suppliers and service providers or want to exercise the specified rights, please use the contact form on the Company website. https://epg.co.th/ or contact via Personal Data Controller or Personal Data Protection Officer, Eastern Polymer Group Public Company Limited, as follows:
8.1 Personal Data Controller: Eastern Polymer Group Public Company Limited: Procurement and Supply Chain Management Department
- No. 770 Thepharak Road, Thepharak Subdistrict, Mueang District, Samut Prakan Province 10270
- Tel. 02 383 6599
8.2 Personal Data Protection Officer:
- No. 770 Thepharak Road, Thepharak Subdistrict, Mueang District, Samut Prakan Province 10270
- Email dpooffice@EPG.co.th
- Tel. 02 383 6599
This announcement is to be effective from November 1st, 2021, onwards.
It was announced on October 29th, 2021.
