This Privacy Policy (“Policy”) has been prepared by Asian Palm Oil Limited (hereinafter referred to as the “Company”) to establish policies and procedures related to the collection, use, and disclosure of personally identifiable information (“Personal Data”) of job applicants or individuals expected to be employees of the Company (“Job Applicants” or “you”). This Policy outlines how the Company processes your Personal Data and ensures its protection and security to prevent any breach of your privacy rights under the Company’s responsibility. The Company will process your Personal Data in compliance with the provisions and practices related to the Personal Data Protection Act of 2019 (“Personal Data Protection Act”), including any relevant rules, regulations, or guidelines pertaining to the protection of personal data. This Policy does not apply to activities where the Company is not the data controller or where the Company has not engaged in such activities on your behalf.
Personal Data
Personal Data refers to any information that can directly or indirectly identify an individual, whether it is provided explicitly or indirectly. Personal Data does not include information related to deceased individuals.
Types of personal data collected
The types of personal data that the company may collect from you include, but are not limited to:
Identity Information: Name, surname, age, gender, date of birth, nationality, identification number, passport number, military status, marital status, photographs, signatures, driver’s license number, etc.
Physical Information: Weight, height, etc.
Contact Information: Mailing address, residential address, telephone numbers, email addresses, etc.
Online Social Media Contact Information: LINE ID, Facebook username, LinkedIn account, etc.
Identity Verification Documents: Copies of identification cards, residence registrations, passports, visas, work permits, etc.
Education Information: Educational history, academic transcripts, copies of educational certificates, etc.
Employment and Skills Information: Job position, salary, employment history, seminar and training information, language test results, work certificates, professional licenses related to the applied position, etc.
Spouse and Family Members’ Information: Names, surnames, occupations, and workplace of spouse and family members.
Vehicle Information: Vehicle registration number, vehicle type, etc.
Other Relevant Information: Information presented in personal history documents (CV/Resume), introductory letters submitted with job applications, information provided during interviews, personal references, family member information, or any other information received from references or family members.
In the process of considering your employment with the company, there may be a necessity to process sensitive personal data that pertains to you. The company will process sensitive personal data only with your explicit and informed consent, except in cases where such processing is necessary and permitted by law without the need for explicit consent.
Without the need for explicit consent, sensitive personal data that the company may collect from you could include health and medical data, criminal history, religion, ethnicity, information about disabilities, as well as any other data that could have a similar impact on you, as stipulated by the Personal Data Protection Committee’s regulations.
Please note that if you do not provide necessary personal data for the evaluation of your job application, the company may not have sufficient information to assess your qualifications for the position you applied for, and as a result, the company may be unable to proceed with your job application.
If you have provided personal data of family members, relatives, references, and/or individuals in any other capacity in the documents related to your job application with the company or as specified in this policy, you are responsible for informing those individuals about the purposes of data usage and their rights concerning their personal data that is relevant to the content of this policy. Furthermore, you are responsible for obtaining necessary consent from these individuals and ensuring that you have the right to provide their personal data to the company (if required).
The method of collecting personal data is as follows
The company will collect personal data directly from you through the following channels and methods:
Additionally, the company may collect your personal data from other sources that are accessible to the company, such as:
The data that the company collects automatically includes
When you visit the company’s website to submit a job application or related documents, the company may automatically collect certain types of data, including but not limited to:
Purpose of processing personal data
The company will collect, use or disclose your personal data for the following purposes:
The processing of your personal data for the above purposes will depend on your activities and how you interact with the Company by reasons or legal references that the Company may rely on the processing of your personal data are as follows:
Disclosure of personal data
The Company may disclose your personal information to other individuals or organizations with your consent or as required by law. The Company may also disclose your personal information without your consent in certain circumstances, as specified in this policy. The instances where your personal information may be disclosed are as follows:
Subsidiaries, Group Companies, or Affiliated Companies: The Company may disclose your personal information to its subsidiaries, group companies, or affiliated entities for the purpose of considering your job application or for other purposes as described in this policy.
Service Providers: The Company may disclose some of your personal data to its service providers, as necessary for various operational aspects, including those specified in this policy, such as information technology system service providers involved in the Company’s work processes.
Please note that each service provider has its own privacy policy, and the processing of your personal data by a service provider will be under that provider’s responsibility.
Law Enforcement: In some cases, the Company may need to disclose your personal data if it is necessary to comply with the law or respond to government requests from government agencies. For example, if a government agency requests information from the Company, it may be necessary to disclose relevant information.
Business Transfer: The Company may disclose information, including your personal information, in the context of organizational restructuring, mergers, business sales, or other transfers of assets. In such cases, the receiving party will be required to treat your information in a manner consistent with this policy and in compliance with laws related to the protection of personal data.
Please be aware that each service provider is responsible for the processing of your personal data in accordance with their own privacy policy. Additionally, any disclosure of your personal information in compliance with applicable laws will be done with due consideration for the protection of your personal data.
If you have any concerns or questions regarding the disclosure of your personal information, you are encouraged to reach out to the Company to address your inquiries.
Storage, Retention, and Transfer of Personal Data to Foreign Countries:
The Company will store and retain your personal data in both physical and electronic formats within the Company’s personal data storage locations, which are located in Thailand.
In some cases, the Company may disclose or transfer your personal data to individuals or organizations located outside of Thailand. If the Company transfers your personal data to a foreign destination, it will take appropriate measures to ensure the adequate protection of your personal data during the transfer. This includes ensuring that the recipient country has sufficient data protection standards or compliance with other conditions as required by data protection laws, regulations, or relevant provisions.
Retention Period of Personal Data:
The Company will retain your personal data for as long as necessary for the purposes specified in this policy unless the law requires or permits a longer retention period. After such necessary period has passed or when your personal data is no longer necessary for the purposes stated in this policy, the Company will delete, destroy, or anonymize your personal data, ensuring that your personal information can no longer be identified or associated with you.
If you are selected as an employee of the Company, you will be provided with an internal employee privacy policy that explains how your personal data will be managed as an employee. Additionally, this candidate privacy policy will no longer apply to you once you become an employee.
Security of personal information
The company will maintain the security of your personal information in accordance with the principles. confidentiality (confidentiality), completeness (integrity) and availability. (availability) in order to prevent loss, access, use, change, modification or disclosure. Security measures will be provided. personal information security which covers administrative protection measures (Administrative safeguard), technical safeguards and physical safeguards in relation to access or control of the use of personal data (access control), and the company will examine the security measures of personal data in accordance with the measures Where personal data protection laws are stipulated in relation to the security of personal data.
However, there is no guarantee for data transmission by the Internet or wireless networks. You acknowledge that (1) there are limitations on security and privacy. on the internet Which is beyond the control of the company. (2) Security, accuracy, completeness and privacy in any information and information exchanged between you and the company. cannot be guaranteed, and (3) any personal data And the information may be seen or modified during transmission by third parties, despite the Company’s best efforts.
Minor
If you are under 20 years of age or have legal capacity limitations. In processing your personal data, the Company may need to obtain consent from parents or persons who are legally responsible for you before proceeding. Consider your qualifications for employing you. Unless the law allows the company can do without asking Consent from parents or persons with supervision and responsibility for you. Responsible according to the law, the company will delete such information from the company’s server without delay.
Personal Tracking Technology (Cookies)
When visiting the website www.asianpalmoil.com or website that the company Is responsible for and responsible Please note that the Company’s website uses “cookies” to complete your user experience and more efficient.
Cookies are text files that the Company. Stored on your hard drive by a web page server. Cookies cannot be used to open program or to deliver a virus to your computer. Cookies are selected to be unique to you and readable. By the web server of the domain that has brought the cookie to you.
The Company may use cookies to collect, store and track information for statistical purposes in order to operate the website. where you have the ability to choose whether to accept or reject cookies. Most web browsers automatically accept cookies. However, if you wish, you can modify your browser setting to refuse the use of cookies. If you choose to reject cookies, you will not be able to use and experience the special features of our website. If you would like to know more details about the cookies we use, you can learn more at www.asianpalmoil.com
The Company may use the information obtained from collecting your information that has been deleted by the Company. will not be used in a way that can be identified your identity When the storage period expires Your personal data will be deleted, therefore, the right to access, the right to delete, the right to correct. Right to request data transfer that you have under the Personal Data Protection Laws will not be enforceable Valid after the expiration of the storage period.
Rights Regarding Personal Information
When you have sent your personal information to the company As a data subject, you have several rights. which you can exercise your rights free of charge under legal exceptions.
Your rights under the personal data protection laws, you have the right to proceed as follows:
You can exercise your rights as the owner of the above personal data. by contacting the company or protection officer personal information of the company. According to the details at the end of this policy, the company will notify the results of the operation within 30 days from the date the company receives your request for exercise according to the form or method specified by the Company. However, the Company may take longer than 30 days to consider your request for exercise if the relevant laws allow the Company to do.
So if the company rejects the request, the company will notify you of the reason for refusal via various means such as text message (SMS), email, telephone, letter, etc.
Notification of personal data breach
In the event that a breach of your personal data occurs, the company will notify the Office of the Data Protection Commission. personal information without delay within 72 hours from the date of knowledge of the personal data breach as much as possible In the event that the violation has a high risk of affecting your rights and freedoms, the Company will notify you of the violation. Along with ways to remedy without delay through various channels such as websites, text messages (SMS), e-mails, telephone calls, letters, etc.
Amendments and Changes to the Privacy Policy
The Company may change this policy from time to time if there is a change in its data protection practices. personal of the company due to various reasons such as technological changes However, if such amendments have a significant impact on you as the data subject, the Company will notify you in advance as appropriate before such changes become effective. This policy was approved by the Board of Directors Meeting No. 1/2023 held on May 15, 2023. Contact details If you would like to inquire about this policy or about how the Company process personal data of you under this policy Including applying for various rights, you can contact the company. Details can be obtained as follows:
Asian Palm Oil Public Company Limited
Address : No. 99 Moo 2, Ao Luek Tai Subdistrict, Ao Luek District, Krabi Province 81110
Email : [email protected]
Website : www.asianpalmoil.com Phone number: 075-681354, 075-681355
Personal Data Protection Officer (DPO)
Email : [email protected]
Phone number: 075-681354 ext. 1400, 075-681355 ext. 1400
Asian Palm Oil Public Company Limited
99 Moo 2 Ao Luek Tai, Ao Luek, Krabi 81110