CCTV Privacy Notice
----------------------------------------------------------------------------------
Kingfisher Holdings Limited (hereinafter “Company”)
is in the process of using CCTV for surveillance in areas inside and around
buildings/facilities/operating area, parking lot (“Areas”) of the
Company to protect life, health, and property. In this regard, we collect personal
data of officers, operators, customers, employees, contractors, visitors, or
any persons (hereinafter “You”) who enter the area through the use of
such CCTV.
This CCTV Privacy Notice serves as
information on the collection, use, or disclosure of information of which makes
you identifiable (“Personal data”) as well as your various rights as
follows:
1.
Legal base for
processing personal data
The Company collects your personal data under
the following legal bases.
❒ The need to prevent or suppress harm to the life, body,
or health of you or others.
❒ Necessary for our legitimate interests or others where
such interests are no less important than your fundamental rights to your
personal data.
❒ The need to comply with applicable laws governing the
safety and environment of our workplace and property.
2.
Purpose of
collecting your personal data
The Company
collects your personal data for the following purposes.
1. For the protection of your personal health and safety,
including your property.
2. To protect our buildings, facilities, and property from
damage, obstruction, destruction of property or other crimes.
3. To support agencies involved in law enforcement to deter,
prevent, retrieve, and prosecute legal proceedings.
4. To assist in the process to settle a dispute that occurs
during disciplinary or grievance proceedings.
5. To assist in the investigation or complaint submission
process.
6. To assist in the process of initiating or preventing
civil litigation, including but not limited to employment-related legal
proceedings.
3.
Personal data
we collect and use
According to
the purposes stated in Item 2, the Company installed CCTV in visible locations to collect your personal
data when entering the area. There will be signages to warn that CCTV is in use
at the entrance and exit, including areas we see appropriate to be monitored
for protection. The personal data collected are as follows:
|
List of Personal data Collected |
|
·
Still images ·
Video ·
Sound ·
Images of
your belongings, such as vehicles, bags, hats, clothing. |
However, the Company will not install CCTV in
areas that may unduly infringe on your basic rights, such as rooms, bathrooms,
shower rooms, or locations operators use for relaxation.
4.
Disclosure of
your information
The Company
will keep your information on CCTV confidential and will not disclose it unless
it is necessary for the Company to achieve the surveillance objectives stated
in this notice. We may disclose information on CCTV to the following categories
of individuals or entities:
1. An agency having jurisdiction as required by law to
assist and support law enforcement or to conduct investigations or
prosecutions.
2. Third party service providers for the necessity of
ensuring the prevention or suppression of harm to life, body, health, and
property of you or others.
5.
Your rights
under the Personal Data Protection Act 2019 (B.E. 2562)
The Personal
Data Protection Act 2019 (B.E. 2562) aims to enable you to have more control of
your personal data. You may exercise the rights under the Personal Data
Protection Act 2019 (B.E. 2562) when the provisions in respect of the rights of
data subjects come into force; the details are as follows:
1. The right to access, obtain a copy, and request
disclosure of the source of your personal data that we collect except in cases
where we have the right to refuse your request by law or court order or where
your request would have a potentially damaging effect on the rights and
freedoms of another person.
2. The right to request amendment on your personal data that
is incorrect or incomplete in order for the information to be correct, current,
complete, and not misleading.
3. The right to request the suspension of the use of your
personal data in any of the following cases:
3.1. During the period we review your request to correct,
complete, and update your personal data.
3.2. Your personal data is illegally collected, used, or
disclosed.
3.3. When your personal data is no longer necessary to be
stored according to the objectives stated in this notice of collection. However, this does not apply if it is your wish that we continue storing
your personal data for the purpose of exercising your legal rights.
3.4. During the period we are proving to you the legitimate
grounds for collecting, using, or disclosing your personal data or verifying
the need for collecting, using, or disclosing that personal data for the public
interest in connection with which you have exercised your right to object to
the collection, use, or disclosure of your personal data.
4. The right to object to the collection, use, or disclosure
of your personal data unless the Company has legitimate grounds for refusing
your request (for example, the Company can demonstrate that the collection,
use, or disclose your personal data for a more legitimate reason or for the
establishment of a legal claim, the performance or exercise of a legal claim,
or for the public interest in accordance with the Company’s mission).
6.
Personal Data
Storage Period
In order to achieve the purpose of surveillance by the use of CCTV
equipment as stated in this notice, the Company will retain your personal data
on CCTV for a period of 30 days months, which will be stored in proper place from
the date you visited the Company for any coordination. After the expiration of
the said period, we will delete and destroy your personal data.
7.
Protecting the
security of personal data
The Company has measures to maintain the security of your personal data
that are appropriate both technically and administratively to prevent data loss
or access, deletion, destruction, use, alteration, correction, or disclosure of
personal data without permission. This is in line with our Information Security
Policy and practices.
In addition, the Company has established a personal data protection
policy by announcing for all to acknowledge throughout the organization along
with guidelines to ensure security in the collection, use, or disclosure of personal
data. The personal data protection policy consists of requirements to maintain
the confidentiality, integrity, and availability of personal data. We ensure
that such policy including this notice will be reviewed regularly at the appropriate
time period.
8.
Responsibilities
of Data Controllers
The Company has determined that only officers with the authority and
duty related to the collection, use, or disclosure of personal data for this
type of data processing activity may have access to your personal data. The
Company will ensure that the officers strictly comply with this notice.
9.
Amendments to
the Privacy Notice
To update or amend this announcement, the Company may consider
amendments as it sees appropriate and will notify you through the Company’s
notice boards at the security guard’s box and on the Company’s website. The
date of the latest version of the notice will be marked at the end of the
document. In this regard, the Company recommends that you check regularly for
the updated version of the notice, especially before you enter the Company’s
area.
Your entry into this area constitutes your acknowledgment of agreement
in this notice. In this regard, please refrain from entering the area if you do
not agree with the terms of this announcement. If you continue to access the
area after this notice has been revised and published on the abovementioned
channels, it will be considered that you have acknowledge such amendments.
10.
Contacts and
enquiries
You may inquire about this announcement at:
1. Data Controller
Contact location Kingfisher
Holdings Ltd.
Contact number 034 419 888
2.
Data
Protection Officer: DPO
Contact location Kingfisher
Holdings Ltd.
Contact number 034 419 888 ext.
202
E-mail DPO@kingfisher.co.th
