Privacy Notice for Processes Relating to Partners and Agents

 

Section 1: General Provisions

Chaithanin Company Limited and its affiliates place great importance on protecting the Personal data of partners, agents, and individuals associated with you or others whose information you have provided to us. To assure you that we protect and handle your Personal data in accordance with the Personal Data Protection Act, and in compliance with the Personal Data Protection Act B.E. 2562, Chaithanin Company Limited has established this Privacy Notice for processes related to you, those associated with you, or others whose information you have provided (“Notice”). This Notice clarifies the details of how we manage and process the Personal data we receive from you. It also explains the purposes for collecting, using, disclosing, and transferring your Personal data, as well as the retention period for such data. This includes actions such as recording, organizing, storing, modifying, adapting, retrieving, transmitting, transferring, disclosing, making accessible or available by any means, aligning, combining, restricting or prohibiting access, deleting, or destroying (“Processing”), and your rights as the owner of the Personal data. Chaithanin Company Limited recommends that you read and understand the terms and conditions under this Notice, the details of which are as follows:

Section 2: Definitions

“Company”

 means Chaithanin Company Limited and its affiliates, including Marina Golden Bay Victoria Company Limited, Marina Golden Bay Elya Company Limited, Marina Golden Bay Geneva Company Limited, The Sunlight Residence 9 Company Limited, Global Top Group Company Limited, and other companies under the control of Chaithanin Company Limited.

“You”

 means partners or agents.

“Personal data”

 means any information relating to an identified or identifiable natural person, directly or indirectly, but excluding data of deceased persons.

“Sensitive Personal data”

 means Personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, sexual behavior, criminal records, health information, disability, trade union information, genetic data, biometric data, or any other information affecting data subjects in a similar manner as prescribed by the Personal data Protection Committee.

“Data Controller”

 means a person or legal entity who has the power and duty to make decisions regarding the collection, use, or disclosure of Personal data.

“Data Processor”

 means a person or legal entity who processes Personal data under the instructions or on behalf of the Data Controller.

“Personal Data Protection Act”

 means the Personal Data Protection Act B.E. 2562 and its subordinate regulations, and shall include any future amendments to such laws.

Section 3: Groups or Categories of Individuals from Whom the company Collects Personal data

Under this Notice, the groups or categories of individuals from whom the company collects and processes Personal data include:

  • Prospective Partners: This refers to individuals who may become partners with the company, both in cases where such individuals have expressed their intention to enter into a contract and/or register as a partner of the company, and in cases where the company collects Personal data by its own decision, such as service providers, consultants, experts, academics, lecturers, contracting parties, or any other similar individuals.
  • Partners: This refers to individuals who submit bids to sell goods and/or provide services to the company, or who have registered as partners with the company, or who have any other similar relationship with the company, such as service providers, consultants, experts, academics, lecturers, contracting parties, or any other similar individuals.
  • Individuals Related to Prospective Partners: This refers to natural persons related to or representing prospective partners, such as directors, employees, agents, or personnel of prospective partners or partners who are legal entities. It also includes individuals whose Personal data appears in various documents related to relevant processes, such as managers, purchasers, goods recipients, and check signatories.
  • Agents: This refers to individuals authorized by law to act on behalf of the company or its affiliates. They may be hired as agents of the company in negotiations and other communications with customers or third parties and may be authorized to make decisions.

Section 4: How the Company Collects and Receives Your Personal data

4.1 The company collects and receives your personal data through various channels as follows:

(A) Personal data you provide directly to the company
You may provide personal data to the company directly, such as when you submit proposals, contracts, and supporting documents to the company, whether by email or through external websites or applications. This also includes cases where you provide information to the company and submit various documents containing your personal data.
(B) Personal data automatically collected by the company
The company may receive your Personal data automatically, such as through CCTV recordings, collection of technical information, website traffic and browsing patterns, and your browsing history using cookies and similar technologies. You can find more details in the company’s “Cookies Notice.”
(C) Personal data the company receives from third parties
The company may receive your Personal data from third parties, such as company websites where you have provided information, your references, and/or documents from individuals related to you as your contracting party, emergency contacts, references, beneficiaries, or guarantors in your contract.

4.2 In collecting your personal data, you will be informed of the details as outlined in this Notice, including but not limited to the purposes and legal basis for the collection, use, disclosure, and/or processing of personal data. If the Personal Data Protection Act requires your consent for any personal data processing, the company will obtain your express consent.

4.3 If the company collected your personal data before the effective date of the Personal Data Protection Act concerning the collection, use, or disclosure of personal data, the company will continue to collect and use your personal data for the original purposes notified to you during the data collection. You have the right to withdraw your consent by contacting the company using the contact details provided in Section 11 of this Notice. The company reserves the right to consider your request for withdrawal of consent and to proceed in accordance with the Personal Data Protection Act.

Section 5: Personal Data Collected

Your personal data collected and processed under this Notice, whether provided directly to the company, collected automatically by the company, or received by the company from third parties, includes:

5.1 Personal information: such as name, surname, date of birth, age, gender, national identification number, photograph, signature, nationality, race, religion, marital status, etc.

5.2 Contact information: such as residential address, telephone number, email address, emergency contact information, and reference information.

5.3 Technical information: such as computer traffic logs, IP addresses, and data collected through cookies or similar technologies.

5.4 Other information: such as voice recordings of conversations, and still and moving images captured through CCTV.

Section 6: Purposes and Legal Basis for Processing Personal Data

6.1 The company processes your personal data for various purposes under the following legal bases (collectively referred to as “personal data processing purposes”):

In the case of partners:

No. Purpose Legal Basis
1 To establish legal claims, compliance with or exercise of legal claims, or defense against legal claims, including legal proceedings and enforcement actions. Legitimate Interests
2 To monitor and maintain peace and security of individuals and the company’s assets. Legitimate Interests
3 To carry out various processes before entering into a contract, such as:

  • Partner registration
  • Partner qualification assessment
  • Preparation of information before entering the procurement process, such as researching and preparing median prices, identifying names and details of partners in the company’s internal system, etc.
  • Purchasing or receiving bids, attending briefings, presenting work related to procurement (as the case may be),  price negotiation,  announcing the winner
  • Inviting bids, submitting bids, verifying authority, granting and accepting authority to submit bidding documents by bidders, reviewing the qualifications of bidders with the company according to the company’s procurement process, including cases where the bidder is a service provider, legal consultant, accounting consultant, business consultant, tax consultant, auditor, financial advisor, financial institution, accounting and financial system development consultant.
 Contractual Basis and Legitimate Interests
4 To necessitate transactions between partners and the company, such as:

  • Identity verification, business status verification, or other background checks, and carrying out various internal processes of the company, verifying authority, granting and accepting authority, and using it as evidence for relevant transactions.
  • Compliance with rules, regulations, and various internal processes of the company.
  • Consideration, preparation, and signing of commercial contracts.
  • Compliance with employment contracts, service contracts, other commercial contracts, and relevant agreements or collaborations between the company and the contracting parties, including the process of requesting and reviewing relevant documents that may contain Personal data of company directors who are external individuals or representatives from government agencies.
  • Inspection of work according to contracts between the company and partners., management of commercial goods and parcels, issuing certificates of completion.
 Contractual Basis and

Legitimate Interests
5 To comply with laws related to transactions between partners and the company, such as laws on government procurement, tax laws, laws on verifying land rights, laws on auditing, laws on securities and exchange, and laws on government information. Legal Obligation
6 To proceed with business communication, such as contacting, making appointments, meeting, attending meetings, engaging in business discussions about products or services, and various projects of the company or projects related to the company, including recording details of such communications. Legitimate Interests
7 To consider requests to participate in the company’s projects or projects that the company collaborates on with external parties or government agencies, and to carry out various actions related to such projects. Legitimate Interest
8 To comply with the law or comply with court warrants, letters, or orders from agencies, independent organizations, or officials with duties and authority under the law, such as complying with summons, warrants, court orders, police officers, public prosecutors, government agencies, including reporting or disclosing information to shareholders, government agencies, or independent organizations such as the Energy Regulatory Commission, Ministry of Energy, Revenue Department, Land Department, Office of the Auditor General, National Anti-Corruption Commission, etc., to comply with relevant laws. Legal Obligation
9 To carry out any actions that are necessary and beneficial to you or directly related to the purposes specified above. Legitimate Interests

In the case of agents:

No. Purpose Legal Basis
1 To carry out various processes before entering into a contract, such as agent registration, agent qualification assessment, and/or compiling a list of prospective agents or other similar individuals. Legitimate Interest
2 To establish of legal claims, granting and accepting authority, compliance with or exercise of legal claims, or defense against legal claims, including legal proceedings and enforcement actions. Legitimate Interests
3 To be used as evidence for the administration and operation of the organization, such as orders, regulations, announcements, rules, various contracts, or documents with recorded instructions, assignment of duties, receipts, financial evidence, and including bids and privileges as approved by the company only. Legitimate Interests
4 To prepare Confidentiality Agreement. Legitimate Interests
5 To proceed with business communication, such as contacting, making appointments, meeting, attending meetings, engaging in business discussions about products or services, and various projects of the company or projects related to the company, including recording details of such communications. Legitimate Interests
6 To carry out any actions that are necessary and beneficial to you or directly related to the purposes specified above. Legitimate Interests

6.2 As the personal data processed for the purposes outlined in 6.1 above is necessary for legal compliance, contractual obligations, or the formation of a contract with you, failure to provide this data may have legal implications or prevent the company from fulfilling its contractual duties or entering into a contract with you (in some cases). In such instances, the company may be required to decline entering into a contract with you or providing you with associated benefits or entitlements, either in whole or in part.

6.3 Should the company process your personal data in a manner and/or for purposes not aligned with those stated above, additional privacy policies or notices will be provided, and/or you will be notified in writing explaining such processing. You should review these additional policies or notices in conjunction with this notice and/or such written communications (as applicable).

Section 7: Disclosure of Personal Data

7.1 The company may disclose your personal data under the specified purposes and in accordance with the principles prescribed by law to the following individuals and entities:

        (a) Internal departments within the company, including but not limited to executives, directors, employees, and/or personnel of the company, as relevant and necessary for the processing of your personal data.

        (b) Government agencies with regulatory authority, or those requesting disclosure of personal data under legal authority, or involved in legal proceedings, or as permitted by relevant laws, such as the Personal data Protection Committee, the Revenue Department, etc.

         (c) Any other person or entity to whom you consent to the disclosure of your personal data.

7.2 The disclosure of your personal data to others will be carried out solely for the specified purposes or other purposes permitted by law. In cases where the law requires your consent, the company will obtain your consent prior to such disclosure.

7.3 When disclosing your personal data to others, the company will implement appropriate measures to protect the disclosed personal data and comply with the standards and obligations for personal data protection as stipulated by the Personal Data Protection Act. In the event that the company sends or transfers your personal data abroad, the company will take steps to ensure that the destination country, international organization, or recipient in the foreign country has adequate personal data protection standards, or ensure that the sending or transfer of your personal data abroad complies with the principles set forth in the Personal Data Protection Act. In some cases, the company may seek your consent for sending or transferring your personal data to such foreign countries.

Section 8: Personal Data Retention Period

The company will retain your personal data for the period necessary to fulfill the specified purposes of processing such personal data. The retention period will vary depending on the purposes for which the personal data is processed. However:

When you are a partner or agent, the company will retain your Personal data for a period not exceeding 10 years from the date the legal relationship between you and the company ends. However, the company may retain some of your Personal data for a period longer than that if permitted by law or if such retention is necessary for the operation of the company group.

After the expiration of the aforementioned period, the company will delete or destroy such personal data from its storage or systems and those of other parties providing services to the company (if any), or render your personal data unidentifiable, except in cases where the company is permitted to retain such personal data further as stipulated by the Personal Data Protection Act or other relevant laws.

For further details regarding the retention period of your personal data, you may contact the company using the contact information provided in Section 11 of this Notice.

Section 9: Your Rights as a Data Subject

As a data subject, you have the rights stipulated by the Personal Data Protection Act B.E. 2562. You can exercise your rights through the channels specified by the company in Section 11. You can start exercising these rights once the Personal Data Protection Act becomes applicable to the company. These rights are detailed as follows:

(A) Right to Withdraw Consent:
In cases where the company requests your consent, you have the right to withdraw your consent to the processing of Personal data that you have consented to with the company, unless the withdrawal of consent is restricted by law or contract for your benefit. (However, the withdrawal of consent will not affect the processing of Personal data that you have already lawfully consented to.)

(B) Right to Access
You have the right to access and request a copy of your data under the responsibility of the company, including requesting the company to disclose how it obtained such data that you did not consent to.

(C) Data Portability Right
You have the right to request the company to transfer your Personal data that you have provided to the company as prescribed by law.

(D) Right to Object
You have the right to object to the processing of data relating to you for the collection, use, or disclosure of Personal data relating to you as prescribed by law.

(F) Erasure Right
You have the right to request the company to erase your Personal data as prescribed by law. However, the company may store your Personal data electronically, and there may be some systems that cannot delete the data. In such cases, the company will arrange for the destruction or anonymization of such data.

(G) Right to Restrict Processing
You have the right to request the company to restrict the use of your data as prescribed by law.

(H) Right to Rectification
If you believe that the data held by the company is inaccurate or you have changed your Personal data, you have the right to request the company to correct your Personal data so that such Personal data is accurate, up-to-date, complete, and not misleading.

(I) Right to Lodge a Complaint
You have the right to lodge a complaint with the competent official under the Personal Data Protection Act B.E. 2562 if the company violates or fails to comply with the said Act.

The company reserves the right to consider your request to exercise your rights and proceed in accordance with the Personal Data Protection Act.

Section 10: Amendments to this Notice

The company may amend this Privacy Notice from time to time. When such amendments are made, the company will notify you through the company’s website and/or via email. If it is necessary to obtain your consent, the company will also obtain your further consent.

Section 11: Contact Information

If you have any questions or require further information about the protection of your personal data, the collection, use, or disclosure of your data, the exercise of your rights, or any complaints, you can contact the company through the following channels:

Company Name: Chaithanin Company Limited, Compliance Department

Address: 193/439 Moo 10, Nong Prue Subdistrict, Bang Lamung District, Chonburi Province 20150

Telephone: 0922508448

Business Days and Hours: Monday – Saturday, 09:00 – 18:00

Email: compliance@chaithanin.com

Announced on 1 December 2022