Privacy Notice for Permanent Contractors
The Siam Industrial Wire Company Limited (hereinafter collectively referred to as we) Permanent Contractors (hereinafter referred to as you). We have created this privacy notice to inform the details regarding the collection, use, disclosure, deletion, and destruction (collectively, the processing ) of your personal data, both online and other channels, to ensure that your personal data is protected in accordance with the personal data protection law.

1.Why We Process Your Personal Data
1.1   We process your personal data upon the request of contractors before entering into a contract or to perform the contract which the contractors are our party e.g. Employment contract, code of conduct, Relocation of contractors, training, performance appraisal, position consideration and compensation, health and safety of contractors' employees.

 1.2   We process your personal data because it is necessary for comply with the law and pursued by us or by a third party. Examples labor law, labor relations law, Social Security, Safety, Health and Work Environment, Occupational Control, environmental disease and Disease Control.

1.3   We process your personal data for our legitimate interest or of another person. Example Manpower allocation, contractor’s development, insurance and other benefits for you such as Annual health check, sport club, activities. Also analyses database about work history, send news and public relations. improvement of working environment, provision of facilities, information Security, create an account Identification for access the system, preventing accidents and crimes Investigating and handling complaints and corruption various cases or disputes, taking care of your employees after their employment as a contractor was ended.

1.4   We process your personal data because it is necessary in order to protect vital interests of you or of another person. We process your personal data to, for instance, make contact in case of emergency and control and prevent disease.

1.5   We process your personal data because it is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.

1.6   With your consent, we process your personal data to conduct other activities which we might have to collect additional personal data about you in which case we will inform and request your new consent from time to time.

2.Personal Data We Collect
When you participate in any of our activities, whether they are organized by us or a person we hire or they are co-organized by us and another entity, or when you enter our premises; we collect the following personal data:

2.1   Personal Information and other support documents for registration and making your identification card.

2.2   Contact information of your employees such as name, surname, age, address, contact number, email, social media account, instant messaging account

2.3   Personal information of your employee such as Date of birth, age, gender, marital status, interests, opinions

2.4   Information about family members or dependents of your employees who are entitled to receive welfare as requested, information about spouses, child, parent’s beneficiary. Your employees should notify this privacy policy to such person as well.

2.5   Photo and Video

2.6   Information on education, competence and other qualifications of your employees

2.7   Information which about work experience that you have participated in in the past or that you have registered such as Position, employment details, salary and welfare.

2.8   Information about where operations can be performed

2.9   information about employee’s military.

2.10Information about characteristics of your employees such as habits, behaviors, attitudes, the ability to work with other employees, emotional intelligence, which may be derived from observe during the performance or participation with us.

2.11Information required for reporting to a board, such as the Ministry of Labor, Stock Exchange of Thailand Office of the Securities and Exchange Commission (SEC), Thai Institute of Directors Association (IOD)

2.12Financial information such as salaries, income, taxes, provident funds, bank accounts, loans. Tax exemptions or deductions holding of company securities.

2.13Social Security information, labor law, welfare and benefit which you received per agreement.

2.14Time attendance, overtime and absent record.

2.15Work history, job position, meeting attendance comment. If you are a director of the company, there will be additional information require such as Director's information Director registration.

2.16Information on access to information systems, computers, work systems, websites, applications, network systems, e-mail to comply with our information technology policies.

2.17Information from our participated record.

2.18Information which employee allowed to disclose through our systems, applications, tools, questionnaires, assessments and documents.

2.19Copy of the documents that be able to identify your employee, such as an identification card. Passport, other documents issued by government agencies.

2.20Information of person in charge in case there are Emergency case occurred.

2.21Information of your vehicle, license, if your employees drive our vehicle which we collect and process. Then we need to collect the driving behavior.

2.22Other conflict of interest information such as information on shareholdings and relationships with business partners.

2.23Information of employee’s accident for both work time and out of work.

2.24Other necessary information for the performance of the employment contract. welfare benefits for your employees after contract is ended. Compliance with various laws

2.25Information of employee’s complains, whistleblowing, Investigations, Disciplinary Actions. However, if employee deny to provide us with personal information required for compliance with laws, it may impact to the contracts and benefits which we provide.

 

2.26We may need to collect and process special categories of personal data, as defined by personal data protection law, to fulfill the objectives we set out in this privacy notice such as 

(1)      When we have to use certain information for our security purposes e.g. facial recognition, finger print to verify your identity;

(2)      In some cases, we may collect your special categories of personal data. For instance, we do not intend to collect information about your religious belief but we obtain such information when we collect an image of your identification card, which we process to verify your identity and this information is required by law; and

(3)      We might have to collect your health information, e.g. food allergies, when we organize a customer relationship activity for you.

2.27Where necessary, we will process your special categories personal data only when you give us explicit consent or for other purposes as required by law. We will ensure that we will try our best to provide adequate security measures to protect your special categories personal data.

3.Cookies and Other Similar Technologies
We use cookies and similar technology to collect personal data as specified in our Cookies Notice

4.Consent, Withdrawal, and Consequences
4.1   You are entitled to withdraw your consent at any time but such withdrawal will not affect the validity of the processing made prior to the withdrawal of consent.

4.2   Your withdrawal of consent or refusal to provide certain information may result in us being unable to fulfill some or all of the objectives stated in this privacy notice.  

5. Retention Period
 5.1 We will retain your personal data for the period necessary to meet the objectives unless the law requires longer retention periods. In the event that such period is unclear, we will retain the data for a customary expected period in accordance with retention standards (e.g. the prescriptive period of 10 years for general legal claims).

 5.2 In case we collect your information by closed-circuit television (CCTV).

We will continue to collect your personal data and Personal data may be retained 30 days.
In emergency case such as where evidence is needed in an investigation, or prosecution or in the event that you request. Personal data may be retained for more than 30 days and we will securely delete data upon completion of that purpose.
 5.3 We have established an auditing system to delete or destroy your personal data when the retention period expires or when it becomes irrelevant or unnecessary for the purposes of collecting that personal data.   

 5.4 If your personal data is processed based on consent, we will stop the processing when you have withdrawn the consent. However, we may keep your personal data to record your withdrawn so we can respond to your request in the future.

6.Disclosure of Your Personal Data
6.1   We disclose and share your personal data with:   

(1)      Companies in our group (“affiliates”) 

(2)      Individuals and entities which are not our affiliates (third parties) for the purpose of collecting and processing personal information as described in this privacy notice such as our dealers, transport and logistics service providers, postal service providers, data processing service providers, marketing service providers (who might send messages to you to promote our products and services), contractors (who might perform tasks on our behalf), financial service providers (such as banks, payment companies, electronic payment service providers, credit providers), IT service providers (such as providers of cloud services, blockchain systems, data analytics, SMS, or emails), IT developers, programmers, auditors, consultants, advisors, government agencies (e.g. the Revenue Department, the Anti-Money Laundering Office), insurers, and other persons to the extent necessary to enable us to conduct business, provide products and services, and meet the purposes for the collection and processing of personal data as described in this privacy notice. 

6.2   We will require persons receiving your personal data to take appropriate measures to protect your personal data, process the data properly and only as necessary, and prevent unauthorized use or disclosure of your personal data.   

7.Transferring Personal Data Overseas
7.1   We may send or transfer your personal data to our affiliates or other persons in a foreign country if it is necessary in order for us to perform our obligations in the contract to which you are the counterparty or contract between us and third party for your benefit, to respond to your pre-contractual request; to protect your and third party’s life, body and health, to comply with laws or to the extent necessary for the public interest activities.

7.2   We may store your information on a computer, server, or cloud provided by a third party. And may use third-party programs, applications and platforms in processing your personal data. However, we will not allow unrelated parties to access to your personal data and will require such parties to have appropriate security protection measures.

7.3   In the event that your personal data is transferred to a foreign country, we will comply with applicable personal data protection laws and take appropriate measures to ensure that your personal data is protected and you can exercise your rights in accordance with the laws. Moreover, we will require those who receive the data to have appropriate protection measures for your personal data, to process such personal data only as necessary, and to take steps to prevent unauthorized use or disclosure of your personal data.

8.Security Measures
8.1   We have implemented appropriate technical and administrative standards to protect your personal data from loss, misuse, and unauthorized access use, disclose, or destruction. We use technology and security procedures such as encryption and access restriction to ensure that only authorized people shall have access to your personal data, and that they are trained about the importance of protecting personal data.

8.2   We provide appropriate security measures to prevent the loss, access, use, change, disclosure of personal data from those who do not have rights or duties related to that personal data. We will review the above-mentioned measures when necessary or when the technology changes to ensure effective security.

9.Your Rights as a Data Subject
9.1   You have the rights under the personal data protection law summarized as follows:

(1)      Withdraw the consent you have given to us;

(2)      Request to view and copy your personal data or disclose the source where we obtain your personal data;

(3)      Send or transfer personal data that is in an electronic form as required by personal data protection laws to other data controllers;

(4)      Oppose the collection, use, or disclosure of personal information about you

(5)      Delete or destroy or make your personal data non-personally identifiable (anonymous) information;

(6)      Suspend the use of your personal data;

(7)      Correct your personal information to be current, complete, and not cause misunderstanding.

(8)      Complain to the Personal Data Protection Committee in the event that we, our data processors, our employees, or our contractors violate or do not comply with personal data protection laws.

 In this regard, we will consider your request, notify the result of the consideration, and execute it (if appropriate) within 30 days from the date we receive the request. Your rights mentioned above will be in accordance with the personal data protection law.

9.2 You can exercise your legal rights by clicking Here

10.Information about Data Controller and Data Protection Officer
 10.1 In the event that you have a question regarding personal data protection, please send your message to dpo@siw.co.th  

In the event that this privacy notice is amended, we will announce a new privacy notice via this website or our applications, which you should periodically review the privacy notice. The new privacy notice will be effective immediately on the date of announcement.