GC-PDPA Web Portal

Personal Data Privacy Policy

GC Marketing Solutions Company Limited (GCM) and GCM Subsidiaries (“Company”) realize the importance of the personal data protection and have compliance and management of Personal Data which is consistent with Personal Data Protection law and the related laws. The Company would like to notify you of the Company’s compliance with the Personal Data Protection Act, B.E. 2562 (2019) as follows:

1. Personal Data

1.1 The Characteristics of Personal Data

In this document:

“Personal Data” means any information relating to a Person, which enables the identification of such Person, whether directly or indirectly, but not including the information of the deceased Persons in particular.

“Sensitive Personal Data” means Personal Data pertaining to racial, ethnic origins, political opinions, cult, religious or philosophical beliefs, sexual orientation, criminal records, health data, disability, trade union information, genetic data, biometric data (such as fingerprints or facial recognition data) or of any data which may affect the data subjects in the same manner, as prescribed by the Personal Data Protection Committee.

“GCM Subsidiaries” means companies in which GCM holds more than 50% of all its shares with voting rights.

1.2 The Collection of Personal Data

The Company may collect your Personal Data as follows:

General Personal Data:

(a) Personal Data including, among others, name and surname, the date and place of birth, marital status, information contained in an individual’s citizen identity card, passport and their copies.

(b) Contact information including, among others, address, telephone number, social media identification such as Line ID, and workplace contact details.

(d) Information related to electronic systems access and usage such as E-Mail, IP Address, Browsers, Cookies and Chat history in various applications

(e) Other information provided to the Company during company events in which you participated

2. The respect of Personal privacy

The Company respects Data Subjects’ right of their Personal Data and is also aware of the Data Subjects’ intention for the due protection of their Personal Data. Any Personal Data submitted to the Company will be used only for the stated purposes. The Company has strict security measures and a prevention not to let the unauthorized parties from accessing and using your personal data.

3. The Collection of Personal Data

In the direct collection, use, and disclosure of your Personal Data, the company shall solicit your consent should it be legally required and shall use the Personal Data only as necessary and only in accordance with the Company’s specified purposes.

However, the Company may collect your Personal Data from any other sources, such as from various social media, but only in necessity and carried out in accordance with legal requirements.

4. Purposes for the collection, use and disclosure of Personal Data

The Company collects, uses, and discloses your Personal Data for the following purposes:

- For the procurement or sales of products and providing or employing services in various forms

- For the performance of financial transactions and taxation in compliance with the company’s contractual obligations.

- For Research or Development

- For the creation of a database for analyzing and proposing services or products of the Company and its affiliates, or sales representatives/dealers representing the Company.

- For the improvement of quality in operations, provision of services, and other company related activities

- For analyzing and monitoring of the Company’s website services and for investigating difficulty of use issues

- For participating various activities of the Company

- For access control, preventing life-threatening situations and incidents that may harm the health or cause bodily injury to yourself or others, as well as prevent and control contagious diseases, and security control of the Company’s buildings and premises.

- For compliance with existing or future laws and regulations applicable to the Company

The Personal Data collected by the company in relation to the above-mentioned purposes are required in compliance with contractual obligations or in accordance with applicable laws. In case of refusal to provide the required Personal Data, it may be considered as an infringement of relevant laws or may cause the Company not to be able to manage or execute contractual obligations or facilitate services for you.

However, should any modifications to the stated purposes for the collection of Personal Data subsequently occur, the Company will duly inform you as well as fulfill other legal obligations, including the recording as evidence of the amendment of the purposes stated in this Policy.

5. The Personal Data retention period

The Company will retain your Personal Data only for the necessary duration, and will collect, use and disclose your Personal Data, as defined in this Policy, in accordance with the duration criteria, namely the period during which you are still related to the Company as a client, and may still retain your Personal Data as long as needed for legal compliance or as per legal prescription, for the establishment of legal claims, legal compliance or exercise of legal claims, or defense of legal claims, or for other purposes in accordance with policies and the internal regulations of the Company.

If it is not possible to specify the Personal Data retention period, the Company will retain the Personal Data as may be expected per data retention standards (such as the longest legal prescription of 10 years).

6. Security Measures

The Company has in place adequate and strict security measures, in accordance with Policy and Guidelines on Information Technology of the Company, to prevent Personal Data, loss, access, destruction, use, alteration, correction, and to prohibit unauthorized or unlawful use of Personal Data.

7. Your Rights as a Data Subject

As a Data Subject, you have the rights as prescribed in the Personal Data Protection Act, B.E. 2562 (2019) and other rights as follows:

7.1 Right to withdraw consent

You have the right to withdraw consent for the processing of your Personal Data as submitted to the Company, but not if the consent withdrawal is restricted by law or by contract of benefit to you as a Data Subject.

However, the withdrawal of consent shall not affect the processing of Personal Data to which you have already legally consented.

7.2 Right to access to the Personal Data

You are entitled to request access to and obtain a copy of your Personal Data, under the Company’s care and responsibility, as well as to request the disclosure of the acquisition of your Personal Data without your consent.

7.3 Right to request for sending or transferring the Personal Data (Right to data portability)

You have the legal right to request the Company to transfer your Personal Data.

7.4 Right to object to the collection, use, or disclosure of Personal Data

You have the right to object to the processing of your Personal Data, namely the collection, use, or disclosure of your Personal Data as prescribed by law.

7.5 Right to request the erasure of Personal Data (Right to be forgotten)

You have the legal right to request the Company to erase, destroy, or to anonymize your Personal Data.

7.6 Right to restrict the use of Personal Data.

You have the legal right to request the Company to suspend the use of your Personal Data

7.7 Right to request for the correction of the Personal Data

Should you discover that your Personal Data kept by the Company is not correct or has been modified, you have the legal right to request the Company to correct them so that your Personal Data is accurate, up-to-date, complete, and will not incur any misunderstandings.

7.8 Right to be informed in case of the modification of the Privacy Notice

The Company may consider and modify as appropriate this Privacy Notice to ensure that your Personal Data is well protected.

7.9 Right to Complain

You have the right to complain to authorized officials as prescribed by the Personal Data Protection Act, B.E. 2562 (2019) in case of the Company’s infringement or non-compliance with the Act.

In the event that the Data Subject lodges their request to exercise their rights as prescribed by the Personal Data Protection Act, B.E. 2562 (2019), upon reception of such request, the company will further proceed within the duration of time as prescribed by the Act. However, the Company reserves the right to deny or not to proceed with the request as prescribed by law in case that the Data Subject has chosen to provide to the Company only certain Personal Data which may cause the Company not to be able to provide full services. Moreover, the Company may not be able to collaborate with or to provide services to the Data Subject if they do not consent to the provision of information as required by the Company.

8. The Disclosure of Personal Data to a Third Party

The Company may have the need to disclose Personal Data to its subsidiary or to other persons or business units that are strategic allies in Thailand or in a foreign country cooperating with the Company in the procurement of various products or services, or out of necessity as prescribed by terms and conditions of the Company, or in case of reorganization, merging or sales of the Company and may require the disclosure of the Personal Data to Thai authorities or Public Organizations concerned as prescribed by law or by court order or by the order of authorized officials for which the Personal Data will be kept confidential, either in paper form or electronic form, including during its transfer.

However, in case of an international transfer of Personal Data, the Company will strictly comply with the Personal Data Protection Act, B.E. 2562 (2019).

9. Data Protection Officer

The Company has complied with the Personal Data Protection Act, B.E. 2562 (2019) by appointing a Data Protection Officer (DPO) to review the Company’s collection, usage and disclosure of Personal Data for conformance with the Personal Data Protection Act, B.E. 2562 (2019) including other related laws.

10. Contact channels

Enquires or questions on the Personal Data Protection can be addressed the following channels:

GC Marketing Solutions Company Limited (GCM) and GCM Subsidiaries

Address :
555/1 Energy Complex, 9th Floor, Building A,
Vibhavadi Rangsit Road, Chatuchak, Chatuchak, Bangkok 10900
Tel : 02-140-4488

Data Protection Officer (DPO)

Address :
555/1 Energy Complex, 18th Floor, Building A,

Vibhavadi Rangsit Road, Chatuchak, Chatuchak, Bangkok 10900
Email : DPOoffice@pttgcgroup.com

11. Amendment of the Policy and Guideline on Personal Data Protection

The Company may, from time to time, review this Policy for compliance with the changing guidelines and relevant laws. In case of changes thereto, the Company will provide a public notification through appropriate channels

Given this day, 31 March 2021

(Mr. Thitipol Artsanchorn)

Managing Director

6/25/2021, 5:12:40 PM | V15.0

Employees

Sales and Purchasing (Upstream)

Marketing and Sales (Downstream)

Procurement Process

Job Applicants and Internship Applicants

Copy URL

Privacy Notice for CCTV

In compliance with the Personal Data Protection Act, B.E. 2562 (2019) (hereinafter "PDPA"), PTT Global Chemical Public Company Limited and its subsidiaries (“Company”) hereby inform you of necessary information in relation to our uses the closed-circuit television (“CCTV”) system for the surveillance, monitoring and recording of motions in and around the Company building and premises as follows

1. Collection of Personal Data

For the purposes set out in Article 4, the Company collect records from our CCTV system i.e. still and motion (video) without any sound recording.

2. Respect of Privacy

The Company respect the right to Personal Data and aware of the Data Subjects desire for the due protection of their Personal Data. As such, the Company will use your Personal Data only for the stated purposes. In this regard, the Company have established Personal Data management system comprising of strict information security measures and prevention of unauthorized access or use.

3. Collection of Personal Data

Should it is required by law in the collection of Personal Data, the Company will obtain your consent before or upon the collection and the Company will only proceed with such Personal Data as is necessary and only in accordance with specified purposes.

4. Purposes of Collection, Use and Disclosure of Personal Data

The Company collect, use, and disclose data via CCTV system for the following purposes:

A. to control access to the buildings and premises as well as to observe, protect, and to inspect access thereto for security purposes.

B. to ensure safety environment of life and property of our employees, customers, contractors, vendors, visitors and of properties under possession of the Company as well as to inspect, investigate and handle related complaints such tortious claims.

C. to control access and maintain security of the Company data and IT systems.

D. to monitor, maintain and ensure safety workplace, such as in-plant maintenance activities and production processes of the Company.

The Processing of Personal Data by the Company for the above-mentioned purposes is necessarily required for the legitimate interest of the Company as well as for our performance of contractual obligations in the case that you are our employee or counterparty.

Should there be any modifications to the stated purposes for the collection of Personal Data, the Company will inform you and take necessary action as required by laws as well as to keep records in case of any change or modification to the purposes for the collection, use and disclosure of CCTV data.

5. Retention Period

The Company will retain the CCTV data for 90 days. The records will be automatically erased after such retention period.

6. Security Measures

The Company have implemented strict security measures, in accordance with our Policy and Guidelines on Information Technology, to prevent loss, access, destruction, use, alteration, modification, and to prevent unauthorized or unlawful use of Personal Data.

Moreover, the Company have limited access to CCTV data only to authorized CCTV controller and related persons. In addition, password is necessarily required to access any such data and only the chief of Crisis & Security Management Division has authority to determine access thereto.

7. Your Rights as Data Subject

As a Data Subject, you have the rights as prescribed in the PDPA and other rights as follow:

7.1 right to withdraw your consent as prescribed by law;

7.2 right to access to the Personal Data;

7.3 right to request for sending or transferring of the Personal Data(right to data portability);

7.4 right to object the collection, use, or disclosure of Personal Data;

7.5 right to request the erasure of Personal Data (right to be forgotten);

7.6 right to restrict the use of Personal Data;

7.7 right to request for the correction of the Personal Data;

7.8 right to be informed in case of modification of this Privacy Notice; and

7.9 right to complain to authorized officials as prescribed by PDPA.

In the event that the Data Subject lodges their request to exercise their rights as prescribed by PDPA, upon reception of such request, the Company will further proceed within the duration of time as prescribed by the PDPA. However, the Company may deny or not proceed with such request if and to the extent allowed by laws.

8. Disclosure of Personal Data to Third Party

The Company will not disclose CCTV data to any third party unless it is required by law.

9. Data Protection Officer

The Company have complied with the PDPA by appointing a Data Protection Officer (DPO) to review the collection, use and disclosure of Personal Data of the Company in conformation with PDPA and other related laws.

10. Contact

Enquiries or questions regarding Personal Data Protection can be addressed to the following channels:

PTT Global Chemical Public Company Limited

Contact:

Crisis & Security Management Division
PTT Global Chemical Public Company Limited, Branch 2
14, I-1 Road, Map Ta Phut Industrial Estate
Map Ta Phut, Mueang Rayong
Rayong 21150
Telephone: 038-975455

Data Protection Officer

Contact:
Data Protection Officer (DPO)
PTT Global Chemical Public Company Limited
555/1 Floor 18 Energy Complex Building A
Vibhavadi Rangsit Road, Chatuchak, Bangkok 10900

Email: DPOoffice@pttgcgroup.com

11. Amendment of the Policy and Guideline on Personal Data Protection

The Company may, from time to time, review this Policy in compliance with the guidelines and applicable laws. In case of changes, the Company will provide a public notification through appropriate channels.

Given this day, 31 May 2022

-Wiboon Chuchepchunkamon-

(Mr. Wiboon Chuchepchunkamon)

Chief Operating Officer - Center of Excellence

8/30/2022, 10:29:41 AMV2.0

Authentication Required

Please login to access consent forms