Attachment 1
The right of the personal data owner
The personal data owner is protected under the Personal Data Protection Act B.E. 2562 as follows:
1. The right to revoke the consent
In the case where the Company has requested and received consent to collect, use or disclose for benefit thereof in accordance with the purpose mutually agreed by the data owner, the data owner has the right to revoke his/her consent on the use of such personal data at any time.
2. The right to access and receive a copy of personal data stored by the Company
The data owner has the right to access and receive a copy of his/her data stored by the Company under the criteria set forth by the Personal Data Protection Officer.
3. The right of request for disclosing the procurement of personal data from an alternative source.
In the case where the Company has received personal data from any source other than directly from the owner of the data, the Company will inform the owner within 30 days after the date receiving such personal information (unless it is required by law). In such a case, the data owner may inquire and request the Company for disclosure of the source of such personal data.
4. The right to receive and request the Company to transfer or forward the data to other personal data controller when the Company adjusts the format of the data storage for automated reading and transfer
The transfer or forward of personal data hereunder shall include the case when personal data is stored in electronic format. The transfer proceeds via an electronic device that can read electronic data only, not include the courier's data transfer, or deliver personal data in other formats
5. The owner's right to object to the collection and use of personal data
The owner has the right to object to the collection and use of his/her data under the following circumstances:
(1) The collection of personal data can proceed without consent as permitted by the bylaws or other juristic person other than personal data controller (unless such benefit is below basic right of the data owner or;
(2) The collection, use, or disclosure of personal data is for direct marketing;
6. The right to request to destroy or turn personal data given to the Company into unanimous data.
The data owner may make a request to the Company for the elimination of his/her own personal data and/or turn his/her given data into unanimous data under the following circumstances:
(1) The personal data is no longer necessary for the storage of personal data according to the objectives.
(2) When the data owner revokes his/her consent in collecting, using, or disclosing personal data, the Company shall have no legal authority to collect, use, or disclose such data.
(3) When the data owner exercise his/her right to oppose the collection, use, or disclosure of personal data, the Company shall not reject such request or;
(4) When personal data is collected, used, or disclosed illegally,
7. The right of request to the Company for suspension of personal data
The data owner may inform the Company to suspend the use of his/her data immediately under the following circumstances:
(1) When the personal data controller is under the examination of accuracy, completeness, or update such data as per the data owner's request.
(2) When such personal data could be deleted or destroyed, the data owner may request to suspend such data instead of deletion or destruction.
(3) When such personal data is no longer necessary for storage under the purpose of data collection but the data owner requests to continue the storage for initiation of right permitted by law, compliance or exercise of a legal right or to raise as a right of a claim as permitted by law.
(4) When the Company is considering the exercise of data owner's right against the collection, use, or disclosure of personal data
8. The right to request the Company to correct, validate and update personal data
In case of any changes regarding personal data given to the Company or that the Company has collected, the data owner may request the Company for any correction or update at any time.
9. The right of claim in case it is found offensive against Personal Data Protection Act B.E. 2562
In case the data owner finds that the Company and/or employee of the Company conduct any action that violates or contravene the Personal Data Protection Act B.E. 2562, the data owner may report such violation to the Company and/or relevant authority as detailed in Article 4 of this document.
Please note that when the Company receives notice of the wish to exercise any rights from the data owner, the Company will consider such request to proceed with proper action within 30 days from the date of receipt. The Company reserves the right to reject such request from the data owner where it is contravene to the law or necessary and legal right to refuse.