Privacy Notice Protection
For Visitors
Kingfisher Holdings Limited. (“Company”) realizes the importance of your personal data that you have given to us with trust. The Company is obliged to adhere to the Personal Data Protection Act 2019 (B.E. 2562) to ensure that a person’s right is protected in regard to the collection, use, and disclosure (“processing”) of personal data. The purpose of this document is to inform you of the methods of the collection, use, and disclosure of your personal data. The Company asks that you read this document to acknowledge and understand the purposes of the Company’s collection, use, and disclosure of your personal data.
1. Data Processing Base and Objectives
1.1 Data processing objectives
The Company collects your personal data according to the information on the front of the personal ID card or other cards exchanged for a visitor’s card when entering the Company’s premises including the factory, buildings, or offices. The Company may collect your other personal data for security measures.
Data Processing Base: The Company processes your personal data under the following bases:
· Necessary bases for legitimate interests: The Company uses your personal data to process in order to maintain the security of the buildings’ users as well as the property of the buildings and premises. In this regard, if you have not provided such personal information, you will not be able to access the building or the premises.
· Legal obligation base: The Company may process your personal data in order to comply with the law according to the requirement of competent government agencies, to be used as evidence in the event of a crime or an accident which occurred within the Company’s factory area.
2. Personal data processed and storage period.
|
Personal data item/type |
Storage period |
|
Personal information displayed on the front of an ID Card or driver’s license (name, surname, date, month and year of birth, address, personal ID number, driver’s license number), CCTV footage, photo, phone number, vehicle registration number, time in, time out, company or affiliated agency’s name (if any), name card (if any). |
6 months from the date of entering the Company’s factory. |
In this regard, at the end of the month that the above period is due, the Company will delete or disable the identification of the personal data.
3. Disclosure of personal data to third parties
The Company may disclose your personal data to companies that have been employed to perform security measures where such companies will act as personal data processors. Personal data may be disclosed to government agencies that have the authority to request personal data such as investigators, public prosecutors, etc.
4. Rights of data subjects
You have the following rights:
4.1 The right to withdraw your consent for the Company to process your personal data.
4.2 The right to access and receive a copy of the personal data that the Company collected, used, and disclosed.
4.3 The right to request a transfer of your personal data.
4.4 The right to delete, destroy, or make your personal data become anonymous.
4.5 The right to object to the processing of your personal data.
4.6 Right to suspend the use of your personal data.
4.7 The right to correct your personal data to be accurate, current, complete, and not misleading.
4.8 The right to lodge a complaint in the event that you believe that the Company or its officers or the Company’s representative violates the rights under the Personal Data Protection Act 2019 (B.E. 2562).
Any request for the exercise of your rights mentioned above must be made in writing and the Company will use its best efforts to take an action within a reasonable timeframe and not exceeding the time limit required by law. The Company will comply with the legal requirements regarding your rights as a personal data subject.
However, there may be some restrictions on the exercise of your rights and the Company will inform you if the request cannot be fulfilled. Such restrictions are in accordance with the Personal Data Protection Act 2019 (B.E. 2562).
In exercising the above right, the Company reserves the right to charge any related fees and necessary for the processing of the request.
5. Changes to the document notifying the results of the processing of personal data
In order to comply with the Personal Data Protection Act 2019 (B.E. 2562), this Privacy Notice may be updated from time to time and the Company will display the most current version at the ID card exchange point before entering the Company’s premises.
6. Details of Personal Data Protection Officer
If there is a reason to lodge a complaint regarding personal data, you can contact the Personal Data Protection Officer through the following channels:
Details of the personal data controller
Contact location Kingfisher Holdings Co., Ltd.
Contact number 034 419 888
Details of the personal data controller
Contact location Kingfisher Holdings Co., Ltd.
Contact number 034 419 888 ext. 202
E-mail DPO@kingfisher.co.th
