Sermsang Power Corporation Public Company Limited and its subsidiaries (hereinafter referred to as the “Company”) respect the rights of privacy. They also recognize the importance of personal data protection of business partners, as well as directors, employees, and staff (collectively, “You”) to ensure that your personal data are protected. Therefore, the Company has issued this data processing notice to inform you of the details related to the collection, use, disclosure of personal information, including management, deletion, and destruction of your personal data in all channels according to the laws of personal data protection as follows:
“You” means the owner of personal data which the Company processes. This includes, but is not limited to, investors, website users, customers, employees, personnel, agents, and any persons involved in the activities and operations of the Company. “Company” means Sermsang Power Corporation Public Company Limited and its subsidiaries. “Group” means companies established by Sermsang Power Corporation Public Company Limited. The Company holds shares, directly or indirectly, not less than 50% of the registered capital as follows:
“Personal Data Protection Laws” means the Personal Data Protection Act B.E. 2562 (2019) and related laws, as well as any amended laws in the future.
“Personal information” means information about a natural person which enables an individual to be identified either directly or indirectly, but does not include information of the deceased in accordance with the laws on protection of personal data.
“Processing” means any processing of personal data, whether by automated means or not, such as collection, records, systematization, storage, adjustment or modification, retrieval, consultation, usage, disclosure (by transmitting, transferring, publishing or making accessible or available by any means), arrangement, integration, blockage or restriction, deletion or destruction.
“Personal Data Controller” means a natural person or a juristic person who has the authority to make decisions about the collection, use or disclosure of personal information.
“Personal data processor” means a natural person or a juristic person who performs the collection, use or disclosure of personal information under the order or on behalf of the personal data controller. However, such natural person or juristic person is not a personal data controller.
This Privacy Notice is made to clarify details and methods of handling and processing personal data which the Company obtained from you for using, disclosing, and processing, as well as the period of retaining such personal data and your rights as the personal data subject. Since the Company operates its business in Thailand, the processing of your personal data must therefore be in compliance with the data protection laws of Thailand.
The Company collects and receives your personal data through the channels as follows:
When collecting your personal information, you shall be informed of the details in this Privacy Notice, including legal bases for collecting, using and/or disclosing personal data according to the laws. In case that the personal data protection law requires your consent, the Company shall request your consent to allow the Company to process your personal information.
Personal information collected by the Company under this Privacy Notice can be from different types of data subjects as follows:
Your personal data collected under this Privacy Notice, which you directly provide to the Company or the Company automatically collects from you, or personal information that the Company receives from outsiders as follows:
If the Company collects your personal information before June 1, 2021, it shall process such information in compliance with the laws on personal data protection.
The Company processes your personal data for the following purposes (collectively, the “Designated Purposes”) and legal bases as follows:
Since your personal information for processing with the above specified purposes in 5.1 is relevant to the laws or a contract and necessary for the achievement of such purposes, if you do not provide such personal information to the Company, there shall be legal implications or the Company may not be able to perform its duties under a contract with you or may be unable to have a contract with you. Thus, the Company may be obliged to decline a contract with you or cancel services related to you in whole or in part.
If the Company wishes to use your personal information for the purposes not specified above, it shall provide an additional privacy notice to explain the use of data for those purposes. You should read the additional privacy notice together with this privacy notice.
The Company may disclose your personal information under the specified purposes and relevant to the laws to the agencies and persons as follows:
Disclosure of your personal information to others shall be performed under specified purposes or other purposes only as required by laws. If your consent is required, the Company shall request your clear consent first.
If the Company sends or transfers your personal information abroad, it shall ensure that the sending or transfer reaches the destination countries, international organizations or overseas recipients with sufficient personal data protection standards. In some cases, the Company may request your consent for the transfer of your personal data abroad, depending on the applicable personal data protection laws.
The Company shall keep your personal data for a necessary period to achieve the specified purposes in processing of such personal data. The duration shall vary depending on the purposes of collecting and processing personal data.
Personal data shall be kept for a period of time as required by laws and according to business practices for each type of personal data. After such period, the Company may destroy the personal data from its storage or systems without prior notice to you.
As the data subject, you have the rights in relation to your personal data under the rules, procedures, and conditions as prescribed by the laws. If wishing to request for your rights, you may contact the Company at the contact details in 11 (How to Contact the Company).
You have the rights to access your personal data and request the Company for copies of such personal data, including disclosure on the acquisition of your personal information which the Company collects, uses, and discloses without your consent in accordance with the personal data protection laws.
You have the right to obtain your personal data generally in a readable or usable form through an automated tool or device, including the right to request the sending or transfer of your personal data in such form to another personal data controller or yourself, unless it cannot be done due to some technical conditions in accordance with the personal data protection laws.
You have the right to reject processing your personal data as follows:
If you reject the processing, please indicate whether you wish your personal data to be deleted or suspend the Company from processing such personal data.
You may request the Company to delete or make your personal information non-personally identifiable as follows:
The above cases shall not apply to the necessary processing of personal data for freedom of expression, documentary history, or statistics in performing duties to the public interest according to the laws towards preventive or occupational medicine objectives, or public interest in public health, while establishing, exercising or fighting legal claims, and complying with laws.
You have the right to suspend the processing of your personal data as follows:
You have the rights to request for correction of your personal data if it is inaccurate, outdate, incomplete, or misled.
You have the right to withdraw your consent to the processing of your personal data any time during the personal information is in the possession of the Company.
If you have any concerns or questions about the processing of your personal data, please contact the Company by the contact details in 11. In case of the violation of personal data protection laws, you have the rights to file a complaint with the Office of the Personal Data Protection Commission.
The Company shall apply relevant systems to facilitate and process your request without delay, unless the request creates an unreasonable burden on the Company or risks of infringing on the protection of personal information of others, or against the laws, or impossible to act upon the request.
The Company establishes and/or uses a system to store your personal information with appropriate mechanisms and techniques, as well as security measures according to the laws on personal data protection and related laws, including limiting access to your personal data from employees, staff, and representatives of the Company to prevent your personal information from being used, disclosed, destroyed or accessed without permission.
If you have any questions about this privacy notice or wish to exercise your rights in this Privacy Notice, you can contact the Company by the contact details as follows:
Sermsang Power Corporation Public Company Limited
325/14 Lan Luang Road, Si Yaek Mahanak Subdistrict, Dusit District, Bangkok 10300
Tel. +66 2 628 0991-2
E-mail: [email protected]
This Privacy Notice is enforced and construed in accordance with Thai laws. The courts of Thailand are authorized to administer any disputes that may arise or in connection with this Privacy Notice.
The Company may from time to time amend this Privacy Notice to comply with any changes related to the processing of your personal data and any amendments in the personal data protection laws or other relevant laws. The Company shall notify you of any changes through appropriate channels.