Sansiri Public Company Limited, subsidiaries and/or joint venture (hereinafter referred to as “Sansiri” or “we”) has placed the great importance on personal data protection of the job applicant, as well as family members of the job applicant or other persons whose personal data is provided, by the job applicant, to us, and, to ensure that we will provide a protection to and handle your personal data in consistency with the personal data protection laws, we therefore establish this Privacy Notice to notify you the details of personal data handling, whether collection, use, and disclosure (collectively referred to as “processing”) which may be done, as well as to notify you your rights on personal data and our contact channels.
In case you are our job applicant, we will collect, use, and disclose your personal data under various lawful basis for the following objectives.
| No. | Objectives | Lawful Basis |
|---|---|---|
| 1. |
For proceeding with the necessary operations for considering and selecting the job applicants which shall include the application process through the online job application channels through Sansiri’s website, the job applications directly made to Sansiri, or through the recruitment service provider, interview process, selective assessment procedure, process of offering an employment agreement to you, and other human resource management procedure in connection with the consideration and selection for working with Sansiri, or subsidiaries of Sansiri. |
For the performance of a contract |
| 2. |
For checking the qualification prior to the employment as required by law, including checking the necessary information and checking your information from the references specified by you or checking your work history for deciding on acceptance to work with Sansiri and for making employment agreement. |
For complying with the law |
| 3. |
For internal inspection of the Internal Audit Office. |
For legitimate interests of the Data Controller |
| 4. |
For security around the building or the place of Sansiri’s project, and for the risk assessment on security, including contacting and issuing a card for accessing to perform the duties in Sansiri’s place, card exchange for entering and exiting the building, recording the information of entering and exiting Sansiri’s place, and recording the video within the building or the office of Sansiri or Sansiri’s project by CCTV. |
For legitimate interests of the Data Controller |
In some cases, we may collect, use, and disclose personal data of family members or other persons which the job applicant provided us. In this regard, Sansiri collects, uses, and discloses personal data of such persons under various lawful basis for the following objectives.
| No. | Objectives | Lawful Basis |
|---|---|---|
| 5. |
For communication in necessary or emergency cases, such as checking information of the job applicant from the references specified by the job applicant or checking work history of the job applicant, notifying the danger occurred to the job applicant, and so on. |
For legitimate interests of the Data Controller |
| 6. |
For security around the building or the place of Sansiri’s project, and for the risk assessment on security, including contacting and issuing a card for accessing to perform the duties in Sansiri’s place, card exchange for entering and exiting the building, recording the information of entering and exiting Sansiri’s place, and recording the video within the building or the office of Sansiri or Sansiri’s project by CCTV. |
For legitimate interests of the Data Controller |
Sansiri hereby notifies you that, for the processing of personal data of the job applicant, family member of the job applicant, including other persons whose personal data is provided to us by the job applicant, we base various lawful basis as specified herein without relying on a consent. However, there might be personal data processing, in some cases, which we may not be able to base on such lawful basis. For example, the case where it is specified by law that the consent shall be obtained from the data subject, the processing of sensitive personal data (Sensitive data), and so on. In such case, Sansiri will request explicit consent from you (please read our consent form in addition to this document), and in case you are a job applicant and provide information of family members or other person to us, we shall be responsible for notifying such persons of this Privacy Notice and/or proceeding with obtaining a consent (if necessary).
In case the personal data collected by Sansiri, as specified above, is necessary for Sansiri to comply with the contract or various applicable laws and you do not provide such necessary information, Sansiri may be unable to conclude the employment agreement with you or unable to manage the contract in accordance with the purpose of employment or it may affect to the provision of welfare or facilitation to you.
Generally, Sansiri will collect your personal data by requesting such information directly from you, such as to request you to fill the information in a form specified by Sansiri or asking from you or requesting you to send the documents contained with your personal data to Sansiri. However, in some cases, Sansiri may collect your personal data from other sources for accomplishing the above-specified objectives, such as;
In this regard, Sansiri collects your personal data, as follows.
In general, Sansiri does not desire to collect and use the information pertaining to religious beliefs and blood type specified on your copy of national ID card for any objective in particular. In case you provide a copy of national ID card to Sansiri, please hide such information. In case you do not hide aforementioned information, it shall be considered that you give a consent to Sansiri to hide such information and it shall be considered that the document having such hidden information is valid and enforceable in accordance with the law in all respects. In this regard, if Sansiri is unable to hide the information due to some technical restriction, Sansiri will collect and use such information as only for a part of your identity verification.
However, it is necessary for Sansiri to collect and use the criminal records data of the job applicant for checking the qualifications prior to the employment as required by law which Sansiri can process such information based on the lawful basis notified in Clause 1. without relying on your consent. In this regard, Sansiri will provide appropriate measures to protect your basis rights and benefits and will strictly proceed with any action to the extent permitted by law.
Furthermore, if it is necessary for Sansiri to collect other sensitive personal data for specific objectives, Sansiri will request explicit consent from you prior to the collection. In this regard, Sansiri may process the following sensitive personal data.
Sansiri will retain your personal data for the period as necessary for performing the objectives of collection, use or disclosure of the personal data specified herein. However, in case Sansiri does not accept you to work in the position you applied with Sansiri, Sansiri will retain your personal data for the period of 2 years from the date of application or the date of latest update of the job application so that you may be contacted in case there is a position may be suitable for you in the future.
For performing the objectives specified in this notice, Sansiri may disclose your personal data to the following third parties.
As you are a data subject, you have the rights as prescribed by the Personal Data Protection Act, B.E.2562 (2019). In this regard, you can exercise your various rights through the channels which Sansiri specifies in Clause 7. or through Sansiri’s website. You are entitled to exercise the rights when the personal data protection law is enforced. Your rights are as follows.
In case Sansiri requests for your consent, you are entitled to withdraw the consent for processing of personal data given to Sansiri, unless such withdrawal of consent is restricted by law or contract which is beneficial for you. In this regard, the withdrawal of consent shall not affect any processing of personal data which the consent was already legally given by you.
You are entitled to request for accessing and obtaining a copy of your personal data, which is under responsibility of Sansiri, including request Sansiri to disclose the acquisition of such information which you do not consent to Sansiri.
You are entitled to request Sansiri to transfer your personal data provided to Sansiri in accordance with the laws.
You are entitled to object to the processing of information relating to you for the collection, use or disclosure of personal data that is prescribed by law.
You are entitled to request Sansiri to erase your personal data as prescribed by law. However, Sansiri may collect your personal data by electronic system which some of the system may be unable to be erased. In such case, Sansiri will destroy or anonymize such personal data to become anonymous data that cannot identify you.
You are entitled to request Sansiri to restrict the use of your personal data as prescribed by law.
In case you opine that the information possessed by Sansiri is incorrect or you have changed your personal data, you are entitled to request Sansiri to correct your personal data so that your such personal data will be accurate, up-to-date, complete, and not misleading.
You are entitled to lodge a complaint to the competent authority in accordance with the Personal Data Protection Act, B.E.2562 (2019) in the event that Sansiri violates or does not comply with such Act.
You can proceed with the exercise of above specified rights by notifying through the Call Centre, telephone no.1685 which you will be required to file the request for exercising the right of data subject (download), including verify your identity for exercising such rights in accordance with the methods and procedures specified by the Company. In this regard, the Company will consider and inform you of the result of consideration of your request within 30 days from the date which the Company received such request.
We may occasionally amend this Privacy Notice and, if there is such amendment, we will announce it on Sansiri’s website and/or invitation letter of the annual general meeting of the shareholders and/or news channels of the Stock Exchange of Thailand and/or notify you through email. In this regard, in case it is necessary to request your consent, we will proceed with requesting the consent from you additionally.
If you have any questions or would like to ask for more information regarding the protection of your personal data, the collection, use or disclosure of your personal data, the exercise of your rights, or any complaints, you can contact Sansiri at the following channels.
Sansiri Public Company Limited
Data Protection Officer
Contact place: 59 Soi Rim Khlong Phra Khanong, Phra Khanong Nuea Sub-district, Vadhana District, Bangkok 10110
Telephone no.: 1685
Email: cs@sansiri.com