Privacy notice
นโยบายการคุ้มครองข้อมูลส่วนบุคคล
นโยบายการคุ้มครองข้อมูลส่วนบุคคล
Privacy Notice for Applicants
Ascend Group Company Limited (“Company”) and its subsidiaries (“Company”), as the Data Controller according to the Personal Data Protection Act 2019, recognizes the importance of your personal data. Therefore, we have created this privacy notice to inform you, as the Data Subject for the Company's objectives and practices in protecting personal data by considering international principles and domestic principles for collection, use or disclosure including the security measures for personal data. Also, your rights in accordance with the Personal Data Protection Act 2019 and other related laws.
1. Scope
This privacy notice applies to personal data of permanent employees, employees with a contract specified period of contract, temporary employee, and Interns of the company under the Ascend Group including the following affiliated companies and the future companies under the Ascend Group;
Ascend Money Company Limited
True Money Company Limited
Ascend Nano Company Limited
Ascend Wealth Securities Brokerage Company Limited
Ascend Assurance Broker Company Limited
Ascend Innovation Company Limited
Ascend Digital Commerce Group Company Limited
Egg Digital Company Limited
Aden Fulfillment Company Limited
Ascend Travel Company Limited
Ascend Commerce Company Limited
Pantavanij Company Limited
True Internet Data Center Company Limited
Ascend Capital Company Limited
Ascend Bit Company Limited
Ascend AI Company Limited
2. Purposes
The company collects, uses or discloses your personal data for the following purposes.
2.1. For applicants relationships management using Contract and Legitimate Interest basis as follows:
2.1.1. To consider qualifications and evaluate your employment qualifications. To ensure that the company has personnel with sufficient qualifications and abilities to perform according to the standards set by the company, including checking references in various areas.
2.1.2. To conduct a job interview. Check educational history and related work experience
2.1.3. To comply with the labor contract Including other related objectives
2.1.4. To consider and evaluate employment qualifications.
2.1.5. To manage and calculate compensation rates, salaries, benefits, welfare from employment, and personal income tax
2.1.6. To carry out other general operations and purposes related to financial management and human resources
2.1.7. To assess the appropriate qualifications for a specific job or duty.
2.1.8. To consider your qualifications for proposing you to consider transferring to appropriate affiliated companies and/or the appropriate outside of affiliated company
2.1.9. To consider new job openings in the future for the applicants who have not been selected as employees
2.1.10. To comply with labor laws or other laws related.
2.1.11. To prepare for the names directory, addresses, and other information about the employee
2.2. To support the operations of the company using Contract and Legitimate Interest basis as follows:
2.2.1. To communicate with applicants.
2.2.2. To inform information, news, and various offerings.
2.2.3. To organize various activities, surveys, satisfaction, and applicant participation.
2.3. For the safety and protection of applicants and companies using Vital interest and Legitimate interest basis as follows:
2.3.1. For safety or to stop danger to a person's life, body, or health.
2.3.2. To verify identity for entering buildings and locations.
2.3.3. For the benefit of preventing and controlling the spread of disease.
2.3.4. To protect and maintain the safety of applicants, assets, information, and the Company's service network. Including monitoring the system and user activities to track down any activities that are harmful such as facial image data, Iris simulation, fingerprint simulation, etc. For entering the company's various locations which have modern technology and need to install a high security system.
2.3.5. To detect, prevent and respond to misconduct, illegal activities, potential prohibited activities and fraud, including to enforce the company's terms and conditions, policies, and/or related laws.
2.4. For preventive purposes In order to meet the company standards or standards defined by affiliated companies in the Charoen Pokphand Group or the standards of various organization which the company attended as a member using Consent and Legitimate interest basis
2.4.1. To request personal data for criminal background checks.
2.4.2. To request credit account information and payment history for all types of loans (National Credit Bureau) in considering your qualifications.
2.4.3. To check the money laundering background.
2.5. To comply with the law and/or other necessary reasons for the legitimate interests of the company.
2.5.1. To check the history and consider the qualifications of applicants, including recruitment and selection for employment as employees.
2.5.2. To comply with relevant laws but not limits to Labour Laws, Personal Data Protection Laws, Cyber Security Laws, Computer Related Crime Laws, Empowerment Of Persons With Disabilities laws, etc.
2.5.3. For other purposes as authorized by law to collect, use, or disclose personal data without having to obtain consent from the data subject including compliance with the law for the legitimate interests of the company.
3. What is Personal Data?
Personal Data means information about an individual which enables him or her to be identified, whether directly or indirectly but it does not include information about the deceased.
Sensitive Personal Data refers to certain types of personal data that are sensitive and at risk of being used for unfair discrimination, such as biological data, genetic information, Information about religion, ethnicity, and criminal history Disability information, and any other information as required by law
Personal Data of Sensitive People means information about an individual which enables the identification of that individual whether directly or indirectly among the group of vulnerable people who have limitations in a way that is disadvantageous to them. They may not be able to consent or refuse data processing for the exercise of their rights. Vulnerable people include minors, employees, or specific groups of people who need special protection, such as the elderly, the mentally ill, refugees, the disabled, incompetent person or quasi-incompetent person.
4. personal data that the company will collect
The Company will collect personal data currently and that may increase in the future as follows.
4.1. Personally identifiable information such as first name, last name, title, nickname, date of birth, photograph, image and national identification card number, passport number, driver's license number or any other number that can be used to verify identity, location information.
4.2. Sensitive personal data such as health information, religion, criminal history, biological information such as facial image information, Iris simulation data, fingerprint simulation data, etc.
4.3. Contact information such as address and contact location, phone number, email, emergency contact information, beneficiary information in case of death.
4.4. Information about education or work, such as educational qualifications, educational history, work history.
4.5. Financial information such as account information, bank account numbers, wages information, compensation, including other benefits, credit history
4.6. Information to provide services to specific groups such as people with visual and hearing impairments.
4.7. Information about messages, emails, documents, tasks, products, and communications information that are created, stored, and/or sent using the company network, company computer equipment and/or company communication equipment.
4.8. Data for analyzing service which is used for retrospective inspection in case of usage problems including the information recorded in security systems, such as closed-circuit television information (CCTV), data recording via electronic media and/or other media, etc.
4.9. Information necessary for employment relations management, agreements or contracts, providing welfare or any other benefits including any other information necessary for the company in compliance with the law, or requests from law enforcement by regulators and/or court orders.
4.10 Criminal history information and Money laundering history information
4.11 Vulnerable groups of people personal data
5. Source of personal Data
The Company may receive your personal data from the following channels:
5.1. Receive personal data directly from you. The company will collect your personal data from the procedures for providing various services, including
5.1.1. During job applications and interviews, such as job application forms (Application Form) and/or any other forms that you filled out including collecting additional information via email and telephone.
5.1.2. Procedures for applying or submitting requests to exercise various rights, such as employee registration, registration to apply the benefits.
5.1.3. From the survey forms or email correspondence, or other communication channels between the company and you.
5.1.4. From company network, or company computer equipment, and/or company communication equipment.
5.1.5. From the employee website access information through Browser's cookies.
5.2. Receive your personal data from collection by the company itself. Through activities related to hiring various workers throughout the time you work for the company.
5.3. Collect data automatically For tracking and verifying information about device location usage, the Company's computer equipment, networks, applications, software, assets and similar resources. This collection may result in the collection of your personal data including monitoring and verification may include the use of CCTV installed within company environments
5.4. Receive your personal data from a third party. which has the right to disclose your personal data in accordance with the law including the affiliated companies for True Group, Ascend Group, Thana Telecom Group, Charoen Pokphand Group, business partners, agents who provided the service for recruiting applicants to become employees and executing labor contracts for you including the position transfers information, salary adjustment, training, various evaluations or receiving information from various service procedures in the same manner as the company collected as stated above.
6. Personal Data Retention and period of retention
The company has the security measures and the period to retain your personal data as follows:
6.1. Storage characteristics: Stored as documentation (Hard copy) and stored as electronically (Soft copy) with effective security measures in order to prevent loss, access, use, change, modification, or disclosure of personal data without authority or wrongdoing.
6.2. The Company has procedures in place to manage suspected personal data breaches. In the event of customer complaints regarding privacy violations and data leaks. The company security department will conduct an investigation immediately to resolve this complaint.
6.3. Storage period: The Company will collect your personal data within the period necessary according to the purpose of collecting or within the period of a contract or legal relationship between you and the company or within the period for exercising the legal rights of the contracting party.
6.4. When the storage period has elapsed or the company has no legal basis for personal data processing, the company will delete or destroy the personal data or make it non-identifiable within the period maximum 1 years.
7. Personal data processing and categories of persons or entities that collected personal data may be disclosed.
Upon receiving personal data from the source of personal data, the company will collect, use, or disclose your personal data according to the purposes that have been stated. and will process your personal data only to the extent permitted by law based on a legal basis for processing personal data. The company may disclose personal data and any information
regarding your job application or any other information that the company collected as described in section 4 above to the True Group, Thana Telecom Group, Charoen Pokphand Group, or business partners of the company, government agencies according to law, Information technology service provider, banks and payment and transaction service providers Including any juristic person or other person that the company and/or you are a contracting party or have a legal relationship.
In addition, the company may be required to submit your personal data to regulatory agencies for investigation and may use the results of checking such information to prevent fraud and the company may disclose your personal data to persons or legal entities outside of the company which the company may sell or transfer some of the company's business or assets, or otherwise conversely, the company may have plans to acquire or merge with outside individuals or legal entities. However, if there are the changes of the company's business in the part that has been sold, acquired or merged with other companies (as the case may be), your personal data may be used in the same manner as described in this privacy notice.
In the case of the company hiring the others to act as data processors, the company will inspect personal data protection measures and arrange for the signing an agreement to control and protect personal data appropriately and in accordance with the law.
The company may be required cross-border transfer of personal data that have adequate standards for personal data protection. If some countries do not have adequate personal data protection standards (Appropriate safeguards) as determined by the Personal Data Protection Commission. In such cases, the company will ensure transferring of personal data is lawful. For example, your personal data may be disclosed to other Ascend Group companies in accordance with the personal data protection policies within the organization.
8. Data Subject Rights
When the legislation of the data subject rights under the Personal Data Protection Act B.E. 2019 enforcement. You, as the data subject, have rights regarding to;
8.1 Right to withdraw consent
When the consent given to the company for a specific purpose, you have the right to withdraw your consent at any time throughout the period that your personal data is with the company except in cases where the rights are restricted by law or related to a contract that benefits you. If your withdrawal the consent causes the company unable to deliver certain products or provide certain services to you, the company will inform you of the consequences of withdrawal.
In the event that you withdraw your consent, you may no longer receive benefits or special offers offered by the Company, as well as news and communications relating to the marketing of products, services, promotional activities, campaigns, or other offers from the Company and its affiliated companies.
8.2. Right to access
You have the right to request access to your personal data and request the company make a copy of such personal data.
8.3. Right to data portability
You have the right to request the company transfer your personal data that you have provided to the company to another data controller or yourself for certain reasons. However, this right to request transfer applies only in the case of personal data that you have delivered to the company and the collection, use and/or disclosure of such personal data is done with your
consent or in cases where such personal data needs to be collected, used and/or disclosed only to be able to perform obligations under the contract.
8.4. Right to object to processing personal data.
You have the right to object to the processing of your personal data on certain grounds.
8.5. Right to request deletion personal data
You have the right to request the company delete personal data for certain reasons.
8.6. Right to request suspension the use of personal data
You have the right to request the company suspend the use of your personal data for certain reasons.
8.7. Right to Rectification.
You have the right to request that the company correct your personal data such as incorrect, not up to date, or incomplete. The company will check and correct it. In the event that you request to correct some personal data from the company If it is determined that it is necessary to further verify your identity, the company will request additional documents and/or information.
You can contact the company's officer to submit a request in oder to exercise the above rights through the channels specified by the company. You do not have to pay a fee for exercising your rights. However, a fee may be charged on a case-by-case basis if your request is found to be baseless, repetitive, or excessive in quantity.
In addition, the company has the right to refuse requests that are an exercise of rights in bad faith, unreasonable, or the requests not provided for by law and/or requests that are not practical. In addition, the company has the right to reject your request according to the criteria set by law. You have the right to file a complaint with the Personal Data Protection Commission according to the criteria set by law.
9. Collection and the use of personal data according to the original purpose
The company will process personal data in accordance with currently applicable laws. The company has the right to collect and use personal data at the company. The collecting personal data before the effective date of the Personal Data Protection Act regarding the collection, use, and disclosure of personal data, can continue to be effective for the original purpose. If you do not wish to let the company continue collect and use such personal data after the Personal Data Protection Act enforcement, you can withdraw the consent through the channels provided by the company.
10. Privacy Notice on other websites
This privacy notice applies only for the company and the use of company website only. If you have connected to another website even through channels on the company's website, you must study and comply with the privacy notice appeared on that website which is separated from the company's privacy notice.
11. Language
Translation of this privacy notice, no matter what the language it is translated into. It is provided for your convenience only. There is no intention to be considered a change to this privacy notice. In the event of a conflict between the Thai language version and any other non-Thai language version, Please adhere to the Thai language version.
12. Changes to Privacy Notice
The company will regularly review this privacy notice to ensure it is in compliance with guidelines and laws, relevant regulations. The company reserves the right to change such policies on the website without notifying you in advance.
13. In the event of you do not consent the use of personal data
The company is required to collect personal data according to law or to enter into a contract between you and the company. If you consider not to provide personal data, the company may not be able to enter into an employment contract with you and/or may not be able to provide services to you.
Apart from the case where the company uses personal data for contract performance and legal compliance. In the event of you do not consent the use of personal data, you can still use the company's services, but you may receive fewer benefits or conveniences from using the services because the company not receiving consent to use personal data for the purpose of providing the service with full efficiency.
14. How to contact the Data Controller
In the event of you have any questions about the Privacy Notice, please contact
Contact location:
True Digital Park, Phoenix Building
7th Floor 101 Sukhumvit road, Phra Khanong, Bangkok Thailand 10260
Contact channels for HR and DPO: [email protected]
Upon receipt of your question or concern, the company will contact you within a reasonable time to answer your question or concern. In some cases, the company may request additional information to confirm your identity.