EASTERN POLYMER GROUP PUBLIC COMPANY LIMITED
PRIVACY NOTICE
( FOR VISITOR )
Eastern Polymer Group Public Company Limited, hereinafter referred to as the “Company”, respects the privacy rights of the visitor within the Company. We are aware of the importance of personal data and the protection of personal data that must be adequately provided. To prevent infringement of the privacy rights of the personal data subject, which is our responsibility, therefore; the Company hereby prescribes and notifies the privacy for processing personal data to the personal data owner for their acknowledgement regarding the details related to the collection, use or disclosure of personal data as follows:
1. The purpose for collecting, using or disclosing personal information
The Company will collect, use or disclose personal information as necessary for the Company’s business operations for the Company and for the benefit of visitors as follows:
1.1 To process requests from visitors who perform business contact within the Company.
1.2 For the benefits of the Company’s internal management, management, development, and facilitating business dealings with the Company.
1.3 Verification of identity and validation of received information, analysis and building a database about history, contacts and public relations, provision of facilities.
1.4 For the benefit of protection and security of both people and property.
1.5 To prevent the spread of communicable diseases or health, both self and collective.
2. Personal Data Processing Basis
The Company will process personal data based on lawful data processing basis as follows:
2.1 Processing based on a contract basis
2.2 Processing based on a legal basis
2.3 Processing based on the Company’s legitimate benefits basis
2.4 Processing based on the consent of the owner of personal data basis
2.5 Processing on other lawful basis
3. Personal information that is collected, used or disclosed includes:
3.1 Documents that can be used for identification include an identity card, passport, driver’s license, or other document issued by a government agency.
3.2 Records of visitors for permission to enter and exit the Company’s premises.
3.3 The Company will collect personal information such as name, surname, number, and information on the ID card or driving license, passport number and contact information.
3.4 Information about health history screening during infectious disease outbreaks.
3.5 Information collected in connection with the Company activities such as participation in activities, survey response, and assessment response.
3.6 Other information which is necessary for the performance of various legal compliance contracts.
3.7 Other personal data for lawful purposes which is made available to the public with express consent.
3.8 Photos and/or motion pictures via CCTV according to the security system.
4. Storage Period of Information
4.1 The Company will keep personal data for the period necessary to achieve the specified objectives by considering the necessity of each type of data practice and after the expiration of such period. The Company will further destroy or delete personal data by appropriate means as determined by the Company.
4.2 The Company will retain the visitors’ personal information for a period of two years to achieve the visitor’s privacy objectives.
4.3 The Company will provide an audit system for deletion or destruction of data after the expiration of the retention period, or which is unrelated to or beyond the necessity to collect that data.
5. Disclosure of Personal Information to Third Parties
5.1 The Company may disclose the personal information of visitors who contacted to its affiliates and third parties to collect and process personal data to achieve the objectives of this Privacy Notice.
5.2 The Company will assign the recipient to take appropriate measures to protect the visitor’s information, process the personal data as necessary, and take measures to prevent the disclosure of information or unlawfully disclosing information.
6. Rights of the Visitors
Visitors will still be entitled to personal information held by the Company collected, including:
6.1 Right to be informed of personal information before collecting personal data of visitors.
6.2 Right to request a copy or transfer a visitor’s personal data to a third data party controller.
6.3 Right to object to data collection without consent.
6.4 Right to request for suspension of the use of information.
6.5 Right to request for the removal and destruction of the information that no longer required to be stored.
6.6 Right to request that the visitors’ personal data are up to date.
6.7 Right to withdraw consent for information collected based on consent.
6.8 Right to complain if the Company uses the personal information of the suppliers and service providers unlawfully.
However, the refusal to provide information or withdraw consent is required for the aforementioned necessity and purposes. This may prevent the operation from operating entirely, and the withdrawal of consent will not affect the collection, use or disclosure of information for which consent has been given.
7. Measurement to maintain the Security of Personal Data
To maintain security and prevent the loss, access, use, alteration, correction, or disclosure of personal data without authority or wrongdoing. The Company has provided a system for collecting personal information. There is an access control mechanism, security measures are in place, and the Company will arrange for regular reviews of measures to be effective in maintaining physical, administrative, and technical security.
8. Ways to contact the Company and the Personal Data Protection Officer
If you have any questions about this Privacy Notice for Visitors or want to exercise the specified rights, please use the contact form on the Company website: https://epg.co.th/ or contact via Personal Data Controller or Personal Data Protection Officer, Eastern Polymer Group Public Company Limited, as follows:
8.1 Personal Data Controller: Eastern Polymer Group Public Company Limited: Human Resources and Administration Department
- No. 770 Thepharak Road, Thepharak Subdistrict, Mueang District, Samut Prakan Province 10270
- Tel. 02 383 6599
8.2 Personal Data Protection Officer:
- No. 770 Thepharak Road, Thepharak Subdistrict, Mueang District, Samut Prakan Province 10270
- Email: dpooffice@EPG.co.th
- Tel. 02 383 6599
This announcement is to be effective from November 1st, 2021, onwards.
It was announced on October 18th, 2021.
