Personal Data Privacy Notice

For Candidates

 

Introduction

This Personal Data Privacy Notice has been announced on 30th March 2024

CP AXTRA PUBLIC COMPANY LIMITED (“Company”) would like you to acknowledge and understand this Personal Data Privacy Notice. This is because this Personal Data Privacy Notice explains how the Company treats your personal data such as the collection, storage, use, or disclosure of Candidates’ Personal Data, including the rights of the data subject, etc.   

 

1.    Principles and Rationale

The Company is aware of the importance of protecting your privacy and personal information, which is the key fundamental right of the privacy right protected under the Constitution of the Kingdom of Thailand and Universal Declaration of Human Rights. Moreover, the Personal Data Protection Act B.E.2562 (2019) (“PDPA”) has been published in the Royal Gazette on 27 May 2019, the Company, therefore, announces this Personal Data Privacy Notice for Candidates.

Nevertheless, the word “Personal Data” means any information relating to a person, which enables the identification of such person, whether directly or indirectly, but not including the information of the deceased persons in particular, and the word ‘”person” means a natural person only.

 

2.    Purposes

The Company collects, uses, processes and/or discloses your Personal Data for the following purposes:

  • Identify potential candidates, process and evaluate applications and make decisions for hiring as well as to conduct any necessary background check process

  • Comply with employment contract and related laws and regulations

  • Prepare and maintain employee database

  • Recruit and select internal candidates within the Company and its affiliates

  • Prepare data for social security, group health insurance and group life insurance

  • Prepare and manage bonus payment and other benefits reimbursement such as telephone expenses, travelling expenses, expenses for traveling to work offsite or aboard, etc.

  • Confirm employment when required by any new employer, financial institution or credit card issuer, in case that employee requests the Company to do so

  • To use information for following up and investigating of misconduct or fraud and for security measure, to manage risks and undertake internal audit and administration of the Company, for example, internal and external audit procedures, IT maintenance process, etc.

  • To undertake detection and investigation under legal procedures and other regulations, to comply with laws, and to report or disclose information to government authorities as required by laws or upon receiving an order or a writ of attachment from police officers, government authorities, courts, or other competent authorities, including to establish, comply or exercise the rights to legal claims or defend against the rights to legal claims

  • To assign rights, duties, and benefits under the employment agreement between you and the Company e.g. merger, employment transfer which have been legally performed.

 

3.    Scope of Personal Data Privacy Notice

This Personal Data Privacy Notice covers Candidates, all types of employees as designated by the Company and relevant third persons (your family members, emergency contact persons, reference persons). In this regard, in the case where you will disclose Personal Data of any third persons to the Company, you will be required to obtain consent from such third parties before or at the time of disclosure (for the case that consent is required by law). The Company deems that you have received necessary consent from such third persons before the disclosure. 

 

4.    Legal Basis

The Company collects, uses, and/or discloses your Personal Data based on the following legal basis:

  1. Legal obligation basis

  2. Contract basis (i.e. performance of a contract or taking steps at your request before entering into a contract)

  3. Legitimate interest basis

  4. Consent basis

  5. Exceptions under section 26 of the PDPA (in the case of Sensitive Personal Data)

 

5.    Methods of Personal Data Collection

The Company collects your Personal Data from the following sources;

  1. Directly from you: application form and other relevant documents you directly send to the Company through the recruitment, hiring processes and throughout employment period. This includes relevant third persons (your family members, emergency contact persons, reference persons), which the Company uses this information to process and manage human resources related tasks, provides welfare which is beneficial to Candidates and/or contacts in emergency case

  2. From other sources:

    1. Recruitment agency or any recruitment entities (If you apply through those agencies, please also visit their personal data privacy notice)

    2. Reference check from your former colleagues or employers

    3. Other background checks in accordance with laws and regulations

The Company maintains your Personal Data collection as follows:

  1. Maintain documents as records

    1. Store documents in cupboard with locks, which only authorized person can access

    2. Send documents in sealed boxes to the Document Company which has the secured documents storage and destruction system

  2. Store in Human Resource Information System – HRIS which has server in Thailand including e-Learning Management System, Application Tracking System, Performance Management System and other Human Resource Service systems which have standard measures of data security system

 

6.     Retention Period

The Company will keep your Personal Data including any related documents for the following time period:

  1. For candidates, the Company will keep the Personal Data for not exceeding 1 year.

  2. In case of hiring, the Company will keep and collect the Personal Data throughout hiring period. The Company will maintain Personal Data for 10 years after termination to support any potential future legal claims, according to section 193/30 of Thailand Civil and Commercial Code.

 

7.     Contact us

The Company respects the rights and Personal Data protection of Candidates and the Company is aware that Candidates desire to have their Personal Data secured, when collected, used and/or disclosed according to the Company’s stated purposes.

Moreover, the Company provides security measure as well as prevention of wrongful collection or use of your Personal Data by an unauthorized person. The Company as Data Controller has appointed Data Protection Officer in order to oversee and control the collection, use, or disclosure of Personal Data. Therefore, where you have any comments, suggestions, or inquiries regarding your Personal Data, please contact us at

Data Controller

CP AXTRA PUBLIC COMPANY LIMITED

1468 Phatthanakan Road, Phatthanakan, Suan Luang, Bangkok 10250

Tel:      +66 (0) 2067-8999 ext. 9207

Fax:     +66 (0) 2067-9888

Website https://www.makro.co.th

Email:   PDPA-HR@cpaxtra.co.th

 

Data Protection Officer

Name – Surname:        As Company Announcement  

Email:  DPO@cpaxtra.co.th

           

8.     Rights of the Data Subjects

As the data subject, you can exercise the following rights in accordance with the PDPA;

  1. Rights to withdraw consents

  2. Right to request access and obtain copy of the Personal Data

  3. Right to Personal Data portability

  4. Right to request for rectifying Personal Data to be accurate, up-to-date, complete, and not misleading

  5. Right to request the Data Controller to erase or destroy the Personal Data or anonymize such Personal Data

  6. Right to restrict the use of Personal Data

  7. Right to object the use of the Personal Data

  8. Right to file a complaint

You can process your request to exercise the above right by:

Tel:      +66 (0) 2067-8999 ext. 9207 or

Email:    PDPA-HR@cpaxtra.co.th

If the Company or our Candidate violates or does not comply with the PDPA, you can file a complaint to Personal Data Protection Committee in accordance with the Laws.

This Personal Data Privacy Notice is applicable to your current and future Personal Data that the Company collects, uses, or discloses. You agree that the Company can continue collecting, and using Candidate’s Personal Data as per the previous purposes (if any), including Personal Data of the Candidates and employees that the Company may collect in the future.

Remark: The Company will review this “Personal Data Privacy Notice” periodically and will inform you if there are any significant changes via PDPA-HR@cpaxtra.co.th