Altitude Development Co., Ltd. (“the Company”) recognizes the importance of the rights and privacy of individuals hired by the Company who are natural persons. Director of the group of persons hired by the company that is a juristic person Including operators and employees of the group of persons employed by the Company. (“Personal Data Subject”) very seriously. Therefore, this personal data protection policy has been prepared. In order for the owner of personal information to be informed of the details of the collection, use and disclosure (“processing”) in the management of the Company’s personal information.
- Purpose of processing personal data
- To be used to process the request of the data subject before entering into a contract or to fulfill the contract that the data subject is a party to the Company
- To confirm or identify the owner of personal information for various operations or contact with the Company
- For the benefit of the execution of the contract between the owner of the personal data and the Company. in the case of procurement, employment, inspection, payment for goods and services relationship management Inspect and evaluate the work according to the terms specified in the purchase order or contract or other documents related to the procurement process, etc.
1.4 For legitimate interests such as for the Company’s internal management, management, development and any other actions to enable business operations.
1.5 For safety benefits and to prevent and suppress dangers to life, body or health such as emergency contact Control and prevention of communicable diseases
1.6 For communication, notification and/or receiving various information from the Company or various changes that occur of the Company
- Personal data that will be used to process personal data
- Sources of Personal Data
- Collected directly from the owner of personal information, such as collecting personal information from filling out personal information through the Company’s various forms or accessing the Company’s website system. through cookies
- Collected from other sources that are not directly from the owner of the personal information, such as inquiries from third parties or searching for personal information through the website system, in which the Company will notify the owner of the personal information and obtain consent from the owner. Personal information without delay within 30 days from the date the Company collects personal information from such sources.
- Types of personal data processed.
- Personal information such as name, surname, gender, age, date of birth, place of birth, marital status, nationality, identification number. passport number driver’s license number educational record work history Learning history Licenses
- Contact information such as house registration address. current address Phone number, email address, and social media information
- Information about employment, such as job title, wages, other compensation, welfare use. work time record record of leave, appointment, transfer, change of position Trial evaluation performance appraisal Skills
- Device or tool information such as IP address MAC address Cookie ID IMEI
- Other information such as website usage, comments, audio, still images, animations. and any other information that is legally considered personal information.
- Sensitive Data is personal data about race, religion, criminal history, health data, disability, genetic data, biological data, or any other data that similarly affects the data subject. Sensitive personal information The company will request the explicit consent from the owner of the personal information first. or while collecting sensitive personal data.
- Sources of Personal Data
- Use and Disclosure of Personal Data
The Company may disclose personal information in some necessary cases. For the fulfillment of the objectives that have been notified to the owner of personal data to third parties and/or organizations or external agencies as follows:- Partners, business alliances of the Company, subsidiaries and/or external service providers. including financial institutions In disclosing personal information to third parties and/or such external organizations or agencies, the Company will proceed for those persons to keep their personal information confidential. And not use for other purposes beyond the scope of the company. has been defined
- government agencies that have legal powers and duties To comply with the law, order, request, to coordinate with other agencies on matters related to legal compliance.
- Time to collect
- The company will keep the personal data of the data subject for the period necessary to achieve the objectives of each type of personal data. Unless the law allows a longer retention period. If the retention period of personal information cannot be clearly stated, the Company will retain the information for a period that may be expected in accordance with the collection standards. and upon the expiration of such period, the Company Will proceed to delete or destroy that personal information.
- In the event that the Company Use the personal data of the data subject by requesting consent from the data subject. The company will process such personal data until the data subject requests to cancel the consent and the company has completed the cancellation request. The company will also retains the personal data of the data subject to the extent necessary to record the history of whether the data subject has withdrawn that consent.
- Sending or transferring personal data abroad
- The company may send or transfer the personal data of the data subject to our affiliates or other persons overseas. In the event that it is necessary for the fulfillment of the purposes that have been notified to the personal data subject
- In the event that a data subject’s personal data is sent overseas, the Company will comply with personal data protection laws and take appropriate measures to ensure the protection of the data subject’s personal data. Including the company will require the recipient of the data to take appropriate measures to protect the data of the data subject and process such personal data only as necessary.
- Legal rights of personal data subjects
The subject of personal data has the following rights:- Right to withdraw consent.
The data subject has the right to revoke his consent to the processing of the personal data that he has provided to the Company. However, such revocation of consent will not affect the processing of personal data for which the subject of personal data has lawfully given consent. - The right to access and obtain a copy of personal data.
The owner of the personal data can notify the company. Make a copy of personal information and have the right to notify the Company Disclose the acquisition of personal data without the consent of the personal data subject - The right to obtain or request the sending or transfer of personal data.
The owner of the personal data can request the company Send personal information to another person. and obtain personal information that the company can be sent or transferred to other people - The right to object to the collection, use or disclosure of personal data.
Personal data subjects can object to the collection, use or disclosure of personal data. Because personal data is no longer required to be retained for the purpose of collection, use or disclosure, or is the collection, use or disclosure of personal data for direct marketing purposes - Right to request erasure or destruction of personal data
The owner of the personal data can request the company Able to delete or destroy personal information If it is found that further data collection is not necessary or where the processing of personal data is unlawful. - Right to request suspension of use of personal information
The owner of the personal data can notify the company. You can suspend the use of personal information while pending verification of the correctness of the personal information as requested to correct such information. or ask to suspend instead of ask to delete data - Right to request correction/addition of personal data
The owner of the personal data can request the company Fix incorrect personal information not current Information that may cause misunderstanding and/or add incomplete information - Right to complain
The owner of the personal data has the right to file a complaint in the event that the company violating or failing to comply with the Personal Data Protection Act Or announcements issued under the Personal Data Protection Act, the owner of the personal data can exercise their legal rights got through the channel [email protected] The company will proceed and consider the rights requested by the information owner within 30 days from the date of receiving the request. The company reserves the right to refuse to comply with the rights of the owner. Personal data under conditions stipulated by law or according to the contract made with the company
- Right to withdraw consent.
- Security measures
The Company has implemented appropriate technical and administrative security standards to protect personal information from unauthorized access. Unauthorized use or disclosure Misuse, loss, and destruction using standard security technologies such as encryption and access restrictions. To ensure that only authorized persons have access to the personal information of the personal information subject, the Company has put in place appropriate security measures. To prevent loss, access, use, change, correction, disclosure of personal data from those who do not have rights or obligations related to that personal data. - Information about the controller of personal data. (Company)
Altitude Development Company Limited
Address No. 26 Sathorn Prime Building, 16th Floor, Room 1605-1608, Narathiwat Ratchanakarin Road, Yannawa, Sathorn, Bangkok 10120
Contact 02-027-8989 - Information about the personal data controller
Name: Narong Niangwaan
Department : Information Technology
Position : Information Technology Department Manager
Phone : 066-113-1273
Email : [email protected] - The company reserves the right to amend, amend, change or improve personal data protection measures to be appropriate under the regulations of the personal protection law. If there are any changes, the Company will continue to notify the data subject.