Privacy notice

Privacy notice for Participants

PTT Public Company Limited (hereinafter referred to as “PTT” or “we” or “our”) gives highest priority to the protection of your personal data and in order for you to ensure that we will protect and manage your personal data in accordance with the laws concerning personal data protection, we then established this Personal Data Privacy Notice for your acknowledgement of details, as a third party who is the participant of the training, seminar, technical visit, community relations activity or other activities with PTT, in relation to the processing of personal data, whether it be the collection, use and disclosure (collectively referred to as “the processing”) that may be occurred and including to inform you of the rights on your personal data and our contact channels as follows:

1. Purposes for the collection, use and disclosure of personal data

As you are the participant of the training, seminar, technical visit, community relations activity or other activities convened by PTT, we may conduct the processing of your personal data for relevant purposes by relying on relevant lawful basis, as follows:

Clause	Purposes	Lawful Basis
1	For the proceedings necessary for the consideration and selection of the participants of the training, seminar, technical visit, community relations activity or other activities of PTT which shall mean to include the interview process, the evaluation and selection process, and the process of operation management in in relation to the consideration and selection of the selection of the participants of the training, seminar, technical visit, community relations activity or other activities of PTT.	Contractual basis, Legitimate interest basis
2	For the proper preparation of the training, seminar, technical visit, community relations activity or other activities and for your convenience such as the analysis and the arrangement of activity types, the finding of venue, the catering of food and beverage, the procuring of accommodation, the preparation of souvenirs including the preparation of relevant facilities, etc.	Legitimate interest basis
3	For the inspection of number of participants of the training, seminar, technical visit, community relations activity or other activities, the event registration, the preparation of registry and records on the participation of activities of the participants, the holding of activity including the provision of souvenirs and prizes (if any).	Legitimate interest basis
4	For notifying details for the participation of the training, seminar, technical visit, community relations activity or other activities such as name list of the participants, date, time and venue, etc.	Legitimate interest basis
5	For the proceedings on the provision of insurance in relation to the convening of activities such as the provision of group travel insurance, etc. (if any).	Legitimate interest basis
6	For the evaluation, analysis and improvement of the convening of the training, seminar, technical visit, community relations activity or other activities of PTT including for supporting the applying for management system standards certification, and the event atmosphere pictures may be used for supporting the response to the evaluation form of the regulatory authorities or the applying for relevant prizes or awards in relation to the organization management.	Legitimate interest basis
7	For the risk management, supervision and inspection of operation including for the internal audit of the internal audit office, the closing of expenses and the management in the organization.	Legitimate interest basiss
8	For maintaining security in building area or activity venue of PTT by closed-circuit television (CCTV).	Legitimate interest basis
9	For using as database of the stakeholders of PTT and/or the using of data for relations management or relevant cooperation in relation to PTT including opinion survey for analysis and improvement of PTT’s operation.	Legitimate interest basis
10	PTT may record the picture or video or live broadcast for the public relations on the convening of the training, seminar, technical visit, community relations activity or other activities convened by PTT (including the convening of online events). PTT may publicize such picture or video or live broadcast through relevant public relations channels both inside and outside PTT such as public relations through online media or PTT’s website or through newspaper or television, etc.	Legitimate interest basis
11	For the production of media so that the participants of such training, seminar or activity can study or view the records of which later, or for producing as PTT’s knowhow.	Legitimate interest basis
12	For the compliance with relevant laws and for establishment, compliance, exercise or defense of legal claim, or for commencing legal proceeding including the reporting or the disclosure of information to government authorities, state authorities, independent authorities, regulatory authorities, any person or authority prescribed by laws.	Legitimate interest basis, Legal obligation basis
13	For the compliance with laws concerning public interest in respect of public health such as health protection against dangerous communicable disease or epidemic which may be contagious or spread into the kingdom.	Legal obligation basis
14	For the management and administration concerning your heath, hygiene and safety.	Preventing or suppressing danger to a person's life, body or health (Vital Interests)

The personal data collected by PTT is the information necessary for PTT’s performance of agreements or the compliance with relevant governing laws, if you refuse to provide such necessary personal data, PTT may not be able to select you as the participant of the training, seminar, technical visit, community relations activity or other activities convened by PTT, or may not be able to proceed on the management or administration of agreements or the provision of facilitations to you

2. Personal Data which shall be collected

In general, PTT shall collect your personal data by directly requesting the data from you; nonetheless, there may be some circumstances that PTT collects your personal data from other sources such as government authorities, the department that you are positioned in, the external department which is the host of the training program or other public sources such as searchable data on the internet, etc.

In this regard, the personal data collected by PTT are as follows:

2.1 General personal data

Identity data such as first name, last name, identification card number, passport number, date of birth, gender, age, nationality, signature, photo, employee ID (in case of the employees of the companies in PTT Group), etc.;
Contact data such as address, phone number, email, Facebook, LINE ID, phone number of your secretary (if any), etc.;
Data concerning lifestyle and social circumstance such as hobby or interested activities, your interest;
Data on the participation of relevant activities of PTT such as the registration, captured image, video records or other types of motion picture, etc.;
Data on education and training such as education profile, the program trained;
Data of work such as occupation, position, the department positioned in, work profile, level, length of work experience, length of work experience in the level.
Data concerning opinion, expectation, satisfactory on the participation in the training, seminar, technical visit, community relations activity or other activities, acknowledgement on the operation of PTT;
Data regarding car (in case that it is intended for PTT to provide parking lot) such as car brand, plate registration number, name of the car owner, the installation of NGV/LPG, etc.;
Other personal data for the provision of facilitations as necessary such as credit card information (i.e. card number, card type and expiry date) flight details, shirt size, the preferred food or beverage, etc.;
Data of the score and test result;
Screening data pursuant to communicable disease preventive measures.

2.2 Sensitive personal data

For the convening of the training, seminar, technical visit, community relations activity or other activities, PTT may request you to provide certain sensitive data such as health data, data regarding disability, religious data, food allergy data, etc. In this respect, unless otherwise prescribed by laws, PTT shall proceed to request for your prior consent before the collection of such sensitive personal data.

In case of the copy of identification card which contains sensitive personal data such as religious and blood type, in general, PTT has no intention to collect and use religious and blood type data specified in your identification card for any specific purpose. In the event that you provided PTT the copy of your identification card, it is requested that you conceal such data. If you did not conceal such data, it shall be deemed that you authorized PTT to conceal those data and such document with concealed data shall be deemed valid and legally enforceable in all respects. In case that PTT is unable to conceal those data due to some technical limitation, PTT shall collect and use such data as a part of your identification documents only.

3. Period for retention of personal data

PTT shall retain your personal data for the period necessary for the purposes of the collection, use or disclosure of personal data set out in this Privacy Notice. The criteria used for determination of the retention period is the period that PTT still has relation with you in any capacity such as vendor, customer, person having business relation, the person who is working in the government authority or the regulatory authority, the person who is working in PTT Group, or other stakeholders of PTT, etc. and/or the period necessary for the compliance with laws or the statutory prescription period, or for the establishment, compliance, exercise or defense of legal claim, or for other reasons pursuant to the internal policies and rules in the organization of PTT.

4. Disclosure of personal data

In order to carry out the proceedings for the purposes set out in this Privacy Notice, PTT may disclose your personal data to the third party as follows:

Companies in PTT Group;
The government authorities, state authorities, independent organizations, regulatory authorities or other authorities as prescribed by laws including the officers which exercise powers according to the laws such as court, public prosecutor, police, etc.;
Insurance agents or brokers and/or insurance companies;
Agents, contractors/sub-contractors and/or service providers for any operation provided for PTT such as transportation service providers, the service firms for the conducting of marketing activities, media producers, advertising agencies, activity organizers, event organizers, travel and accommodation agencies, guest speakers, training institutes, etc.;
Management system standards certification institutes;
Ordinary people (only for the public relations of photos of the event or the announcement of the name of the winners of the awards or rewards for playing games) through online and offline media of PTT and of the third party such as what’s new, internal e-mail PR, Facebook, Line, Twitter, YouTube, website, mass media such as newspaper and television, etc.

5. The submission or transfer of personal data to foreign countries

In some circumstance, for the interest or for the necessity in order to fulfil the purposes regarding the processing of personal data as mentioned above, PTT may be required to disclose your personal data to foreign countries, which may have standards of personal data protection higher or lower than those of Thailand. Furthermore, PTT may store your data on computer server or in the cloud of offshore service providers and there might be a processing of data by using programs or applications of the offshore service providers.

In this regard, for the submission or transfer of your data to foreign countries in whatsoever case, PTT shall comply with the Personal Data Protection Act B.E 2562 (2019).

6. Your rights as the owner of personal data

As the owner of personal data, you have the rights as prescribed in the Personal Data Protection Act B.E 2562 (2019). In this respect, you can exercise your relevant rights through the channels specified by PTT in Clause 8 or through PTT website, whereby you will be entitled to exercise the rights when the laws concerning personal data protection are applied to PTT. The relevant rights having details as follows:

6.1 Right to withdraw consent

In case that PTT requests for your consent, you shall have the right to withdraw the consent for the processing of your personal data that has already given to PTT unless such withdrawal of consent is restricted by laws or by the agreement that provides you the benefits. Such withdrawal of consent shall not affect the processing of personal data legally conducted according to your prior consent.

6.2 Right to access to personal data

You have the right to request for an access to and the request for the copy of your personal data under control of PTT, including to request PTT to disclose the acquisition of such data that you have not given consent to PTT.

6.3 Right to request for the submission or the transfer of personal data

You have the right to request PTT to transfer your personal data that you have given to PTT as prescribed by laws.

6.4 Right to object the collection, use or disclosure of personal data

You have the right to object the processing of data relating to you in respect of the collection, use or disclosure of your personal data as prescribed by laws.

6.5 Right to request for the erasure of personal data

You have the right to request PTT to delete your personal data as prescribed by laws. Nevertheless, PTT may store your personal data using electronic system pursuant to which some systems may be unable to delete the data, and for such case, PTT shall destroy or cause such data to be unable to identify your identity.

6.6 Right to request the restriction of the use of personal data

You have the right to request PTT to restrict the use of your personal data as prescribed by laws.

6.7 Right to request for the rectification of personal data

If you found that the data controlled by PTT is incorrect or you have changed your personal data, you have the right to request PTT to correct your personal data so that such personal data be accurate, current, complete and not causing misunderstanding.

6.8 Right to lodge a complaint

You have the right to lodge a complaint with the competent officers under the Personal Data Protection Act B.E 2562 (2019) in case that PTT breaches or does not comply with such Act.

7. Amendment of this Privacy Notice

We may amend and update this Privacy Notice from time to time, and if there is such amendment, we will keep you posted through PTT website and/or inform you via email. If it is necessary to request for your consent, we will proceed to request additional consent from you.

8. Contact channels

If you have question or require further details concerning the protection of your personal data, the collection, use and disclose of your personal data, the exercising of your rights or if you have any complaint, you can contact PTT as per the following channels:

‍

PTT (Public) Company Limited

Office Address : 555, Vibhavadi Rangsit Road, Chatuchak district,
Chatuchak subdistrict, Bangkok 10900
Telephone : 02-537 2300

Personal Data Protection Officer

Office Address : 555, Vibhavadi Rangsit Road, Chatuchak district,
Chatuchak subdistrict, Bangkok 10900
Telephone : 02-537 2300
Email : pttdpo@pttplc.com