Privacy notice

Privacy notice for Website Users

PTT Public Company Limited (hereinafter referred to as “PTT” or “we” or “our”) gives highest priority to the protection of personal data and in order for you to ensure that we will protect and manage your personal data in accordance with the laws concerning personal data protection, we then established this Personal Data Privacy Notice for your acknowledgement of details of the processing of personal data, whether it be the collection, use and disclosure (collectively referred to as “the processing”) that may be occurred while you are visiting our website and including to inform you of the rights on your personal data and our contact channels.

Nevertheless, if you visit our website for specific purposes such as for dealing business with us, for job application, for internship applicant, for applying to participate in the activity or the technical visit, etc. Please further read the relevant Personal Data Privacy Notices.

1. Purposes for the collection, use and disclosure of personal data

When you visit PTT’s website, we may collect, use or disclose your personal data pursuant to the following purposes:

Clause	Purposes	Lawful Basis
1	For the access to website or relevant systems of PTT and the companies in PTT Group, or connecting to other websites either those of PTT, the companies in PTT Group or the third party.	Legitimate interest and contractual basis
2	For the performance measurement and the analysis on market survey and market strategies including for business planning, reporting and estimation.	Legitimate interest basis
3	For the analysis, research, development of relevant products, services and activities of PTT to be better or more suitable with your requirements including the collection of data on the use of PTT’s website for the analysis on the use of website by the users for improvement of website and communication strategies of PTT.	Legitimate interest basis
4	For the risk management, audit supervision including for the internal audit of the internal audit office and internal management and administration in the organization.	Legitimate interest basis
5	If you would like to attend a site visit of PTT’s business, we may process your personal data for the relevant communication, the consideration, selection and confirmation for the site visit including the preparation of facilitations appropriate for the group of people which shall visit our business.	Legitimate interest basis
6	In case that you provide information through our contact channels or submit relevant requests such as the request for data and information from the data and information center, etc. we may process your personal data for further communication and inquiries regarding the request or the complaint or the data that you provided for us including the consideration and proceeding pursuant to the request, the sending of information, the issuance of receipt (if there are fees or expenses for copying data or sending documents), the investigation of facts, the record keeping for performance monitoring and using as data for risk management, audit supervision including the internal audit of the internal audit office and internal management and administration in the organization.	Legitimate interest basis
7	When you download certain documents from our website such as annual report, sustainability report, annual report pursuant to Form 56-1 One Report, etc. we may request for additional personal data of yours for communication and sending survey form for inquiring feedback which shall be analyzed for the improvement of the reports of PTT in response to the interest of the reader groups.	Legitimate interest basis
8	When you visit our website, it is necessary for us to collect, use or disclose certain personal data of the website users for the compliance with laws, investigation, inquiry, legal proceedings and any other rule and regulation, and for the reporting or disclosure of information to the government authorities, state authorities, independent organizations or any other authority by the virtue of the laws or the court’s order including for theestablishment, compliance, exercise or defense of legal claim.	Legal obligation and legitimate interest basis

The personal data collected by PTT is the information necessary for the performance of agreements or the compliance with relevant laws, if you refuse to provide such necessary personal data, PTT may not be able to provide services or facilitations to you.

2. The collection of personal data and the personal data which may be collected

When you access to PTT’s website, there may be a collection of personal data, some of which may be the automated collection of data from the use of website such as the collection of IP Address, types of browser, etc. and some of which may be the personal data that we obtained from requiring you to fill the data pursuant to the forms prescribed by us, or the data that you provided for us in support of the proceeding of each type of relevant activities such as the communication for inquiry, for requesting additional information, for applying to attend a site visit, etc. Furthermore, PTT may collect your personal data from our personal data processors or there may be a collection of your data from other sources such as sources of personal data which can be publicly accessed, data which can be requested for copy from government authorities, etc.

In this regard, PTT may collect your personal data as follows:

2.1 General personal data

Identity data such as first name, last name, identification card number, age, date of birth, etc.;
Work data such as occupation, name of company/organization that you worked in, position/department, etc.;
Contact data such as address, phone number, email, etc.;
User account data and password only in the case of an access to relevant systems of PTT and companies in PTT Group;
Data that we obtain through the use of website’s services such as data of electronic device, IP Address, data of the records, types of browser and setting, location data, online data identifier for enabling “cookies” and other similar types of technology;
Other data that you provided for us such as country of the user, data pursuant to the application form, forms, relevant survey forms, data of opinion, satisfactory or data of details regarding the communication or relevant requests that you provided for us, etc.

2.2 Sensitive personal data

When you access to PTT’s website, generally, PTT has no intention to collect and use sensitive personal data such religious and nationality, etc. of yours or the other person for any specific purpose, you are not required to specify or mention such information; however, if there is a case that is necessary for PTT to use such data for any purpose, PTT shall inform you and request for your consent on case-by-case basis.

In the event that you provided PTT the copy of your identification card which contains sensitive personal data such as religious and blood type, in general, PTT has no intention to collect and use religious and blood type data specified in your identification card for any specific purpose. In the event that you provided PTT the copy of your identification card, it is requested that you conceal such data. If you did not conceal such data, it shall be deemed that you authorized PTT to conceal those data and such document with concealed data shall be deemed valid and legally enforceable in all respects. In case that PTT is unable to conceal those data due to some technical limitation, PTT shall collect and use such data as a part of your identification documents only

3. Period for retention of personal data

PTT shall retain your personal data for the period necessary for the purposes of the collection, use or disclosure of personal data set out in this Privacy Notice and may further retain the data for the period necessary for the compliance with laws or the statutory prescription period, or for the establishment, compliance, exercise or defense of legal claim, or for other reasons pursuant to the internal policies and rules in the organization of PTT.

4. Disclosure of personal data

In order to carry out the proceedings for the purposes set out in this Privacy Notice, PTT may disclose your personal data to the third party as follows:

Companies in PTT Group for the purposes to carry out proceedings in order to fulfill the purposes so specified;
Government authorities, state authorities, independent authorities, regulatory authorities or other authorities as prescribed by laws including the officers which exercise powers according to the laws such as court, public prosecutor and police, etc.;
Agents, contractors/sub-contractors and/or service providers for any operation provided for PTT such as auditors, lawyers, legal advisors, website developers, agencies for administering the public relations through relevant channels, etc.

5. The submission or disclosure of personal data to foreign countries

PTT may store data on computer server or in the cloud of offshore service providers and there might be a processing of data by using programs or applications of the offshore service providers.

In this regard, for the submission or transfer of your data to foreign countries in whatsoever case, PTT shall comply with the Personal Data Protection Act B.E 2562 (2019).

6. The visit of other websites through the Company’s website

As this Personal Data Privacy Notice is only applicable for the provision of services and the use of PTT’s website, of you visit other website even through the channels of PTT’s website, the relevant personal data protections shall be in accordance with personal data privacy notice of such website which is not related to PTT.

7. Cookies and other similar types of technology

PTT uses cookies which are extremely important for the function of PTT’s website for the collection and storage of data when you visit the website, and PTT intends to use preference cookies so that we can improve PTT’s website. In this regard, PTT shall not use preference cookies unless you authorize us to enable the function of such cookies. Furthermore, our website may use Google Analytics for the analysis of data on the use of website and such data shall be brought to improve our website. You can study the details on the use of cookies from Cookies Policy of PTT.

8. Your rights as the owner of personal data

As the owner of personal data, you have the rights as prescribed in the Personal Data Protection Act B.E 2562 (2019). In this respect, you can exercise your relevant rights through the channels specified by PTT in Clause 10 or through PTT website, whereby you will be entitled to exercise the rights when the laws concerning personal data protection are applied to PTT. The relevant rights having details as follows:

8.1 Right to withdraw consent

In case that PTT requests for your consent, you shall have the right to withdraw the consent for the processing of your personal data that has already given to PTT unless such withdrawal of consent is restricted by laws or by the agreement that provides you the benefits.

Such withdrawal of consent shall not affect the processing of personal data legally conducted according to your prior consent.

8.2 Right to access to personal data

You have the right to request for an access to and the request for the copy of your personal data under control of PTT, including to request PTT to disclose the acquisition of such data that you have not given consent to PTT.

8.3 Right to request for the submission or the transfer of personal data

You have the right to request PTT to transfer your personal data that you have given to PTT as prescribed by laws.

8.4 Right to object the collection, use or disclosure of personal data

You have the right to object the processing of data relating to you in respect of the collection, use or disclosure of your personal data as prescribed by laws.

8.5 Right to request for the erasure of personal data

You have the right to request PTT to delete your personal data as prescribed by laws. Nevertheless, PTT may store your personal data using electronic system pursuant to which some systems may be unable to delete the data, and for such case, PTT shall destroy or cause such data to be unable to identify your identity.

8.6 Right to request the restriction of the use of personal data

You have the right to request PTT to restrict the use of your personal data as prescribed by laws.

8.7 Right to request for the rectification of personal data

If you found that the data controlled by PTT is incorrect or you have changed your personal data, you have the right to request PTT to correct your personal data so that such personal data be accurate, current, complete and not causing misunderstanding.

8.8 Right to lodge a complaint

You have the right to lodge a complaint with the competent officers under the Personal Data Protection Act B.E 2562 (2019) in case that PTT breaches or does not comply with such Act.

9. Amendment of this Privacy Notice

We may amend and update this Privacy Notice from time to time, and if there is such amendment, we will announce in our website for your acknowledgement. If it is necessary to request for your consent, we will proceed to request additional consent from you.

10. Contact channels

If you have question or require further details concerning the protection of your personal data, the collection, use and disclose of your personal data, the exercising of your rights or if you have any complaint, you can contact PTT as per the following channels:

‍

PTT (Public) Company Limited

Office Address : 555, Vibhavadi Rangsit Road, Chatuchak district,
Chatuchak subdistrict, Bangkok 10900
Telephone : 02-537 2300

Personal Data Protection Officer

Office Address : 555, Vibhavadi Rangsit Road, Chatuchak district,
Chatuchak subdistrict, Bangkok 10900
Telephone : 02-537 2300
Email : pttdpo@pttplc.com