Announcement

GP mobility public company limited., hereinafter referred to as “the Company” is currently employing Closed-Circuit Television (CCTV) cameras for surveillance and observation within and around the Company’s premises, such as the areas within and around the Company’s buildings, to protect lives, health, bodies, and property.

The company has collected and gathered personal information of its employees, staff, customers, contractors, contacts, or any individuals (hereinafter referred to as “you”) who enter the premises by means of using the aforementioned closed-circuit camera equipment. This privacy notice (“Notice”) provides information about the data collection, use, and disclosure, including personally identifiable information (“Personal Data”), as well as your various rights as follows.

        1.Legal Basis for Processing Personal Data

        The company processes your personal data under the following legal bases

Necessity to protect against a threat to your life, body, or health or the life, body, or health of another person.

Necessity for the performance of a contract, for the benefit of the company or another person, as specified.

Vital interests, not less than the fundamental rights regarding your personal data.

Necessity to comply with laws applicable for the control of safety, environment, and assets in the workplace.

       2.Purposes of Collecting Your Personal Data

The company collects your personal data for the following purposes
       1.To protect your personal health and safety, including your property.

2.To safeguard the company’s buildings, amenities, and assets from damage, interference, or other criminal activities.

3.To support government agencies or other relevant organizations in enforcing the law for prevention, protection, investigation, and legal proceedings.

4.To assist in dispute resolution processes that occur during disciplinary or complaint proceedings.

5.To aid in investigations or processes related to complaint submissions.       

6.To provide assistance in initiating or defending civil or criminal lawsuits, not limited to employment-related legal actions.

7.Other purposes, if applicable.ส่วนบนของฟอร์ม

        3. Personal Data Collected and Used

        As per the objectives mentioned in section 2, the company installs closed-circuit cameras at positions with visibility. These cameras are accompanied by warning signs indicating their use at the entrances, exits, and areas deemed necessary by the company for surveillance and the collection of your personal data when you enter the following areas. List of Personal Data Collected.

        Personal data collection list.

–         Still images

–         Moving images

–         Sound

–         Your personal belongings such as vehicles, bags, hats, clothing, etc.

–         Others (if applicable)

         However, the company will not install closed-circuit cameras in areas that may infringe upon your fundamental rights unduly, such as bedrooms, bathrooms, shower rooms, or recreational areas for employees.

         4. Disclosure of Your Personal Information

         The company will keep the information recorded by closed-circuit cameras related to you confidential and will not disclose it unless it is necessary for the company to achieve the surveillance objectives as specified in this policy. The company may disclose information captured by closed-circuit cameras to the following types of individuals or entities.

1. Authorities empowered by law to assist in law enforcement or conduct investigations, or for legal proceedings of various kinds.

2. External service providers, as necessary to create confidence in the protection and prevention of harm to life, physical health, and property, either yours or of other individuals.

3. Others (if applicable).

          5. Your Rights Under the Personal Data Protection Act of 2019

          The Personal Data Protection Act of 2019 aims to give you more control over your personal data. You can exercise your rights under the Personal Data Protection Act of 2019 when the provisions related to the rights of data owners are applicable and enforceable. The details are as follows.

              1.Rights to access, obtain copies, and request disclosure of the origin of your personal data collected by the company, except when the company has the right to refuse your request under the law or a court order, or when your request may have an adverse impact on the rights and freedoms of others.

              2.Rights to request the correction of your inaccurate or incomplete personal data to ensure that it is accurate, up-to-date, complete, and not misleading.

              3.Rights to request the suspension of the use of your personal data in one of the following cases.

When the company is in the process of verifying your request to correct your personal data to be accurate, complete, and up-to-date.

                      1.When your personal data is collected, used, or disclosed unlawfully.

                      2.When your personal data is no longer necessary for the purposes for which the company   

                         has notified you of the data collection, but you wish the company to continue to retain that                  

                         data for the exercise of your legal rights.

                      3.When the company is in the process of proving to you a lawful ground for the collection,

                         use, or disclosure of your personal data, or verifying the necessity of    

                         collecting, using, or disclosing your personal data for public interest derived from your

                         objection to the collection, use, or disclosure of your personal data.

              4.Right to object to the collection, use, or disclosure of your personal data, unless the company has lawful grounds to reject your request (e.g., the company can demonstrate that the collection, use, or disclosure of your personal data is legally justified or for the establishment, exercise, or defense of legal claims, or for public interest as part of the company’s mission).

        6. Data Retention Period

        To achieve the objectives of surveillance and observation using closed-circuit camera equipment as specified in this policy, the company will retain your personal data captured by the relevant closed-circuit cameras for a period of 30 days. After this period, the company will proceed to delete and destroy your personal data in accordance with the CCTV system, which records continuously on the hard disk and cloud storage.

        7. Personal Data Security Measures

        The company has appropriate measures in place to ensure the security of your personal data, both in terms of technology and management. These measures are designed to prevent data loss, unauthorized access, deletion, destruction, alteration, modification, or disclosure of personal data without permission, in line with the company’s Information Security Policy.

         Furthermore, the company has established a personal data protection policy, which is publicly communicated across the organization, along with guidelines for ensuring the confidentiality, integrity, and availability of personal data. The company regularly reviews and updates this policy as deemed appropriate.

         8. Responsibility of the Data Controller

         The company designates only authorized personnel with specific roles related to the collection, use, or disclosure of personal data for this data processing activity. These designated personnel are the only individuals who can access your personal data, and the company ensures that they adhere to this policy diligently.

        9. Amendment or Modification of Privacy Policy

        In the event of any revisions or changes to this policy, the company may consider necessary adjustments and will notify you before entering the company’s premises. Guidance will be provided by security personnel or public relations officers if you visit the office. Notice signs will be posted in front of the building and office entrance, and you can read or scan the QR code.

        The company will update this information or notice, with the date indicated at the end. The company recommends that you regularly check for updated versions of the policy, especially before visiting the company’s premises. Entering the company’s premises constitutes your acknowledgment of the terms in this policy.

       Please refrain from entering the premises if you do not agree with the terms in this amended and posted policy. If you continue to enter the premises after the policy has been updated and posted using the methods mentioned above, it will be considered that you have acknowledged the aforementioned changes.

         10. Contact for Inquiries

         You can inquire about this policy by contacting

         Company: GP mobility public company limited.,

         Ltd Address: 2 Soi Wipawadee Rangsit 50, Wipawadee Rangsit Road,   

         Lad Yao, Chatuchak, Bangkok 10900

         Contact Information: Email: DPO@gpmobility.co.th or Phone: 02-108-1222