Privacy Notice for CCTV
Osotspa Public Company Limited and affiliates

We, Osotspa Public Company Limited, and our affiliates (collectively the “Company”, “we”, “us” or “our”) understand the importance of the privacy and protection of the Personal Data. Additionally, we also put our mind to the full compliance to the Personal Data Protection Act 2019 regarding the collection, use, and disclosure of your personal data to underline the lawful right of the data subject in accordance to the applicable personal data protection laws. The purpose of this Privacy Notice is to inform the details regarding the Processing of your Personal Data. The Company may, from time to time, amend this Privacy Notice in whole or in part to comply with applicable laws, rules, or guidance for personal data protection.

Personal Data Processing

1. Personal Data that we may collect, use or disclose (“Process”).

We may process Personal Data of the person who enter Into the Company’s premises or the surrounding areas which may include moving or still images, voice of person and person’s properties e.g. vehicles monitored through the CCTV devices installed at the Company’s premises or the surrounding areas.

2. Personal Data Derivation.

We collect the Personal Data from our CCTV at the Company’s premises or the surrounding areas which will be installed at easily visible place and will not be installed in staff rooms, changing rooms, toilets, shower rooms. Our CCTV operate 24 hours of every day unless there is a system failure or maintenance. The Company has also installed appropriate signs in the area under surveillance to notify you of the use of CCTV and the recording of your personal information.

3. Personal Data Processing Purpose.

We normally process your Personal Data for the legitimate interests of the Company to protect your health and safety including your property, our buildings, premises and assets of the Company and perform any other acts in order to meet the objectives of installing CCTVs. However, in some cases, your personal data may be processed to maintain your vital interest or to prevent or suppress of a danger to a person's life, body, or health or to comply to the duty prescribed by the applicable laws.

4. Personal Data Disclosure.

We may share or disclose your Personal Data to pursue our Propose of Processing your Personal Data under the relevant legal basis. Therefore, we may share or disclose your Personal Data within our Company or our affiliates either inside or outside of the territory. We may disclose or transfer CCTV Data and other Personal Data concerning you to comply with legal obligations, or to support or assist law enforcement organizations with regard to the investigation and prosecution of civil or criminal proceedings.

5. Personal Data Security Measures.

The security of your Personal Data privacy is the first priority for the Company. We assure you that we implement and use the appropriate security measures on both technical and administration standards to protect your Personal Data and to prevent any possible damages to your Personal Data (e.g., loss, unpermitted access, disclosure, abuse, misuse, modifying, or destruction.) by using an appropriate technology and security measures. We shall ensure that only the permitted person shall have the right to access your Personal Data and that such person has enough knowledge and experience in the Personal Data protection protocol. Such security measures, from time to time, shall be reconsidered, if it deems necessary or the technology transformation occurs, to ensure that decent and appropriate security measures are applied.

6. Retention Period

We will retain your Personal Data for a necessary period for the purpose we informed you or as described in this privacy notice. In the event that
       (i) you desire to end your legal relationship or contract with us,
       (ii) you have no services or transactions with us, or
       (iii) your Personal Data is no longer necessary for the purpose of Data Processing. Your Personal Data will be retained for the period allowed by the applicable law, prescription, and legal claims. After the retention period ends, we will delete, destroy, or unidentified your Personal Data.

7. Your Rights as a Data Subject

Under the Personal Data Protection Act, your rights as a data subject are the followings:
       (i) Right to withdraw your consent given to us, unless such withdrawal is limited by the applicable law or the contract;
       (ii) Right to access and obtain a copy of your Personal Data under the responsibility of the Company including the right to request the disclosure of the Personal Data acquisition;
       (iii) Right to send or transfer your Personal Data to other Data Controllers;
       (iv) Right to object to the collection, use, or disclosure of your Personal Data;
       (v) Right to delete, destroy, or unidentified your Personal Data;
       (vi) Right to request to restrict the use of your Personal Data;
       (vii) Right to request to edit or modify your Personal Data to be accurate, up-to-date, complete, and not misleading, in the event that your Personal Data retained by us or your Personal Data has been changed; and
       (viii) Right to report or appeal to the authorities if the Company violates or breaches the Personal Data Protection Act.

8. Contact us

For your further questions, queries, or requests, please contact our Data Protection Officer below;

Data Protection Officer

Osotspa Public Company Limited.
348 Ramkhamhaeng Rd., Huamak, Bangkapi, Bangkok 10240 Thailand.
Email: [email protected]