PTT Public Company Limited (hereinafter referred to as “PTT” or “we” or “our”) gives highest priority to the protection of the personal data of directors, top executives and the persons who may become directors or top executives of PTT, and in order for you to ensure that we will protect and manage your personal data in accordance with the laws concerning personal data protection, we then established this Personal Data Privacy Notice for your acknowledgement of details of the processing of personal data, whether it be the collection, use and disclosure (collectively referred to as the “Processing”) that may be occurred, including to inform you of the rights on your personal data and our contact channels as follows:
1. Purposes for the collection, use and disclosure of personal data
In case that you are a director, top executive and the person who may become director or top executive of PTT, it is necessary for us to collect, use and disclose your personal for the following
purposes:
| Clause |
Purposes |
Lawful Basis |
|
1
|
For the proceedings necessary for the consideration and selection of directors of the Company or top executives which shall mean to include the process for evaluation, selection and appointment as well as other internal work management procedures in relation to the consideration and selection as director or top executive. |
Contractual, legitimate interests and legal obligation basis |
|
2
|
For the relevant proceedings between you and PTT including the relevant proceedings in case that you are a representative or the person who acts on behalf of PTT, such as:
- The payment of remuneration to directors of the Company or top executives including any necessary proceeding in relation to the payment of remuneration;
- The preparation and collection of personal data including the profile of the directors of the Company or top executives as PTT’s database;
- For providing documents and agenda of the meeting;
- For proposing the name as a director of companies in PTT Group;
- For proposing for appointment as a director of related external organizations and/or to be positioned in other relevant organizations such as the Federation of Thai Industries, etc.;
- For the disclosure of information through PTT’s website and/or sending to external organizations in support of the application for enrolling in relevant learning sessions, receiving awards or any other activity participated by you as a director of the Company or top executive of PTT;
- The disclosure of information such as profile, name-surname, securities holding information, age, education, work profile and directorship, etc. through relevant media such as publications, advertisements, electronic media and websites, etc. for acknowledgement by the third parties;
- The collection, use and/or disclosure of personal data of directors of the Company and top executives of PTT for carrying out business and management of PTT’s business including for using as supporting evidence for conducting transactions of PTT;
- The disclosure of information and verification of personal data (Know Your Customer – KYC) in relation to the conducting of transactions with onshore and offshore banks;
- The disclosure and reporting of information of directors and top executives to the relevant regulatory authorities for acknowledgement;
- The inspection of information on the interest of directors, top executives and the related persons of the directors and top executives and conflict of interest transactions of PTT for collecting as an information and reporting relevant information such as the securities holding, the reporting of strategic shareholder, to the regulatory authorities for acknowledgement;
- The disclosure of information necessary for the compliance with relevant evaluation criteria participated by PTT.
|
Contractual, legitimate interests and legal obligation basis |
|
3
|
For using as information on the application for using electronic system or enabling the right to access or use internet or relevant electronic systems. |
Legitimate interests |
|
4 |
For the compliance with laws concerning public company limited, laws concerning securities and exchange including the process for appointment, registration of change or any proceeding under relevant laws. |
Legal obligation basis |
|
5
|
For the compliance with laws or compliance with court’s summon, letter or order of authorities, independent organizations or officers having duties and powers under the laws such as the compliance with a summon, writ of attachment, order of the court, police officers, public prosecutors and government authorities including the reporting or disclosure of information to the shareholders, government authorities or independent organizations such as Energy Regulatory Commission, Ministry of Energy, Revenue Department, Land Department, State Audit Office of Thailand, the Office of National Anti-Corruption Commission, etc. for compliance with relevant laws. |
Legal obligation basis |
|
6 |
For the establishment of legal claim, the granting or obtaining of authority, the compliance, exercise or defense of legal claim and relevant proceedings as well as the proceedings for legal execution. |
Legitimate interests and legal obligation basis |
|
7 |
For the collection and use of your personal data such as name-surname, position, work unit, picture-video in case that you participated in the meetings, activities or relevant proceedings relating to PTT for dissemination or public relations through relevant channels such as internal email of PTT and group companies, PTT’s website, Facebook, LINE, YouTube or other online media of PTT or other media such as television and publication, etc. |
Legitimate interests basis |
|
8 |
For the business planning, reporting and estimation, opinion survey, improvement of PTT’s operation, risk management, audit supervision including the internal audit of the internal audit office and internal management in the organization, including for the utilization for internal operations within PTT in relation to the disbursement of payment of the accounting and finance unit of PTT. |
Legitimate interests basis |
|
9 |
For maintaining security in building area or premises of PTT and the evaluation of security risks including the communication for the issuance of access card(s) to work in the premises of PTT, the exchange of cards for building entry and exit, the requesting for car sticker, the recording of information on the entry and exit of PTT’s premises, and the recording of videos in the buildings or offices of PTT or PTT’s branches by closed-circuit television (CCTV). |
Legitimate interests basis |
|
10 |
For the management and administration concerning your heath, hygiene and safety. |
Preventing or suppressing danger to a person's life, body or health (Vital Interests) |
|
11 |
For the compliance with laws concerning public interest in respect of public health such as health protection against dangerous communicable disease or epidemic which may be contagious or spread into the kingdom. |
Legal obligation basis |
In some circumstances, we may collect, use and disclose personal data of the person in the family or other person that the directors, top executives and the persons who may become directors or top executives of PTT have provided for us. In this respect, PTT shall collect, use and disclose personal data of those people under relevant lawful basis for the following purposes:
| Clause |
Purposes |
Lawful Basis |
|
12
|
For contacting and communication in case of necessity or emergency. |
Legitimate interests basis |
|
13
|
For the inspection of information on the interest of directors, top executives and the related persons of the directors and top executives, and conflict of interest transactions of PTT for collecting as an information and reporting relevant information such as the securities holding, the reporting of strategic shareholder to the regulatory authorities for acknowledgement. |
Legitimate interests and legal obligation basis
|
PTT would like to inform you that for the Processing of personal data of the directors, top executives and the persons who may become directors or top executives of PTT, we rely on relevant lawful basis as specified herein without relying on the consent; however, there might be the processing of personal data in certain cases that we could not rely on these lawful basis such as the cases required by laws to obtain consent from the owner of personal data for the Processing of sensitive personal data, etc. For such cases, PTT shall request for your express consent (please read our letter requesting for consent in addition to this document) and in case that you, as the director, top executive and the person who may become director or top executive of PTT, have provided other personal data of the person in the family or the other person for us, you shall be responsible to inform those people of this Personal Data Privacy Notice and/or proceed to obtain consent (if necessary).
The aforementioned personal data collected by PTT is the information necessary for PTT’s performance of agreements or compliance with your request prior to entering into agreement, if you refuse to provide such necessary personal data, PTT may not be able to carry out relevant proceedings in relation to the consideration or selection for you.
2. Personal Data which shall be collected
In general, for the collection of your personal data, PTT shall collect your personal data by directly requesting the data from you; nonetheless, there may be some circumstances that PTT collects your personal data from other sources such as the organization that you are positioned in, your secretary or coordinator, government authorities or state authorities or other sources of publicly disclosed information such as website and searchable data on the internet, etc.
In this regard, PTT shall proceed to collect your personal data as follows:
2.1 General personal data
- Identity data such as first name, last name, identification card number, passport number, date of birth, gender, age, nationality, marriage status, signature and photo;
- Contact data such as address, phone number and email;
- Financial data such as bank account number and salary;
- Other personal data such as work profile and educational profile as well as relevant evidence, military conscription status, information of the person of reference and the family member;
- Opinions or recommendations.
- Data of the recording of video and voice during the operation such as the recording of video by closed-circuit television;
- Data on the participation of relevant activities of the Company such as the recording of photo or video;
- Data of the securities held by the directors, top executives and the related persons of the directors and top executives, both on the part of PTT and/or PTT group companies;
- Data concerning the utilization of relevant information systems of PTT including information regarding the utilization of application, website browsing information such as website browsing history, IP address information, etc.
2.2 Sensitive personal data
PTT has no intention to collect and use religious and blood type data specified in your identification card for any specific purpose. In the event that you provided PTT the copy of your identification card, it is requested that you conceal such data. If you did not conceal such data, it shall be deemed that you authorized PTT to conceal those data and it shall be deemed that such document with concealed data be valid and legally enforceable in all respects. In case that PTT is unable to conceal those data due to some technical limitation, PTT shall collect and use such data as a part of your identification documents only.
However, if it is necessary for PTT to collect sensitive personal data for any specific purpose that PTT could not rely on lawful basis for the Processing, PTT shall request for your prior express consent. In this regard, PTT may process the following sensitive personal data:
- Religious data;
- Criminal record data;
- Health data such as food allergy data, drug allergy data and blood type.
3. Period for retention of personal data
PTT shall retain your personal data for the period necessary for the purposes of the collection, use or disclosure of personal data set out in this Privacy Notice and the personal data shall be further retained for the period necessary for the compliance with laws or the statutory prescription period, or for the establishment, compliance, exercise or defense of legal claim, or for other reasons pursuant to the internal policies and rules in the organization of PTT.
4. Disclosure of personal data
In order to carry out the proceedings for the purposes set out in this Privacy Notice, PTT may disclose your personal data to the third parties as follows:
- Companies in PTT Group for the propose to support the carrying out of proceeding in order to achieve the purposes so specified;
- The government authorities, regulatory authorities or other authorities as prescribed by laws including the officers which exercise powers under the laws such as the Department of Business Development, the Office of Securities and Exchange Commission (SEC), Securities Exchange of Thailand (SET), State Enterprise Policy Office (SEPO), the Office of National Anti-Corruption Commission (NACC Office), the National Anti-Corruption Commission, the Institute of Directors of Thailand (IOD), courts and police officers;
- Agents, contractors/sub-contractors and/or service providers for any operation provided for PTT such as auditors, lawyers and legal advisors;
- Banks that PTT conducted financial transactions, investment, both onshore and offshore banks;
- Other third parties such as the disclosure of information through website, the public relations of activity photos or news and information on the conducting of activities or projects of PTT to the mass media or third parties, etc.
5. Your rights as the owner of personal data
As the owner of personal data, you have the rights as prescribed in the Personal Data Protection Act B.E 2562 (2019). In this respect, you can request to exercise your relevant rights through the channels specified by PTT in Clause 7 or through PTT website, whereby you will be entitled to exercise the rights when the laws concerning personal data protection are applied to PTT. In this respect, your relevant rights shall have details as follows:
5.1 Right to withdraw consent
In case that PTT requests for your consent, you shall have the right to withdraw the consent for the Processing of your personal data that has already given to PTT unless such withdrawal of consent is restricted by laws or by the agreement that provides you the benefits.
Such withdrawal of consent shall not affect the Processing of personal data legally conducted according to your prior consent.
5.2 Right to access to personal data (Right to Access)
You have the right to request for an access to and the request for the copy of your personal data under control of PTT, including to request PTT to disclose the acquisition of such data that you have not given consent to PTT.
5.3 Right to request for the submission or the transfer of personal data (Data Portability Right)
You have the right to request PTT to transfer your personal data that you have given to PTT as prescribed by laws.
5.4 Right to object the collection, use or disclosure of personal data (Right to Object)
You have the right to object the Processing of data relating to you in respect of the collection, use or disclosure of your personal data as prescribed by laws.
5.5 Right to request for the erasure of personal data (Erasure Right)
You have the right to request PTT to delete your personal data as prescribed by laws. Nevertheless, PTT may store your personal data using electronic system pursuant to which the systems may be unable to delete the data, and for such case, PTT shall destroy or cause such data to be unable to identify your identity.
5.6 Right to request the restriction of the use of personal data (Right to Restrict Processing)
You have the right to request PTT to restrict the use of your personal data as prescribed by laws.
5.7 Right to request for the rectification of personal data (Rectification Right)
If you found that the data controlled by PTT is incorrect or you have changed your personal data, you have the right to request PTT to correct your personal data so that such personal data be accurate, current, complete and not causing misunderstanding.
5.8 Right to lodge a complaint
You have the right to lodge a complaint with the competent officers under the Personal Data Protection Act B.E 2562 (2019) in case that PTT breaches or does not comply with such Act.
6. Amendment of this Privacy Notice
We may amend and update this Privacy Notice from time to time, and if there is such amendment, we will keep you posted through PTT website and/or inform you via email. If it is necessary to request for your consent, we will proceed to request additional consent from you.
7. Contact channels
If you have question or require further details concerning the protection of your personal data, the collection, use and disclosure of your personal data, the exercising of your rights or if you have any complaint, you can contact PTT as per the following channels:
PTT (Public) Company Limited
Office Address : 555, Vibhavadi Rangsit Road, Chatuchak district,
Chatuchak subdistrict, Bangkok 10900
Telephone : 02-537 2300
Personal Data Protection Officer
Office Address : 555, Vibhavadi Rangsit Road, Chatuchak district,
Chatuchak subdistrict, Bangkok 10900
Telephone : 02-537 2300
Email : pttdpo@pttplc.com
