CCTV Privacy Notice
CCTV Privacy Notice
Contrologic Co., Ltd. (hereinafter referred to as the “Company”) is operating Closed-Circuit Television (CCTV) for surveillance within and around its office buildings and surrounding areas (the “Area”) to protect life, health, and property. Accordingly, the Company collects the personal data of employees, workers, customers, staff, contractors, visitors, or any individuals (hereinafter collectively referred to as “You”) who enter the Area through the use of such CCTV equipment.
This CCTV Privacy Notice (“Notice”) provides information regarding the collection, use, or disclosure of information that can identify you (“Personal Data”), as well as your various rights as follows:
- Legal Basis for Processing Personal Data
The Company collects your personal data under the following legal bases:
❒ Necessity to prevent or suppress a danger to your life, body, or health, or that of another person.
❒ Necessity for the legitimate interests of the Company or other persons, provided that such interests are not overridden by your fundamental rights regarding your personal data.
❒ Necessity for compliance with relevant laws governing safety and environment in the workplace, as well as the protection of the Company’s property.
- Purposes for Collecting Your Personal Data
The Company collects your personal data for the following purposes:
-
- To protect your personal health, safety, and your property.
- To protect the Company’s buildings, facilities, and assets from damage, disruption, destruction of property, or other crimes.
- To support relevant agencies in law enforcement for the deterrence, prevention, investigation, and prosecution of legal cases.
- To assist in dispute resolution processes arising during disciplinary or grievance procedures.
- To assist in internal investigation processes or procedures related to the filing of complaints.
- To assist in the initiation of or defense against civil litigation, including but not limited to legal actions related to employment.
- Other necessary purposes (if any).
- Personal Data Collected and Used by the Company
In accordance with the purposes stated in the previous section, the Company installs CCTV cameras in visible locations. Warning signs indicating the use of CCTV will be placed at entrances and exits, as well as in areas the Company deems appropriate for surveillance. The following personal data will be collected when you enter the Area:
| List of Personal Data Collected |
| · Still images
· Moving images (Video) · Audio · Images of your property (e.g., vehicles, bags, hats, clothing, etc.) · Others (if any) |
The Company will not install CCTV cameras in areas that could unreasonably infringe upon your fundamental rights, such as rest areas, restrooms, or designated staff relaxation areas.
- Disclosure of Your Personal Data
The Company will keep your CCTV data confidential and will not disclose it, except when necessary to achieve the surveillance objectives stated in this Notice. The Company may disclose CCTV data to the following categories of persons or legal entities:
-
- Agencies authorized by law to assist or support law enforcement, or for investigations, inquiries, or legal proceedings.
- External providers when necessary to ensure the prevention or suppression of danger to the life, body, health, or property of you or other individuals.
- Other necessary parties (if any).
- Your Rights Under the Personal Data Protection Act B.E. 2562 (2019)
The Personal Data Protection Act B.E. 2562 (PDPA) aims to give you greater control over your personal data. You may exercise your rights under the PDPA once the provisions regarding the rights of the data subject become effective as detailed below:
-
- The right to access, receive a copy, and request the disclosure of the source of your personal data collected by the Company, unless the Company has a legal right to refuse your request based on law or court order, or if your request may adversely affect the rights and freedoms of others.
- The right to request that your personal data be corrected or completed so that it is accurate, up-to-date, complete, and not misleading.
- The right to request the suspension of the use of your personal data in any of the following cases:
- During the period when the Company is verifying your request to rectify your personal data to be accurated, up-to-dated, and completed.
- When the personal data has been collected, used, or disclosed unlawfully.
- When the personal data is no longer necessary for the purposes stated by the Company, but you request the Company to keep the data for the establishment, exercise, or defense of legal claims.
- During the period when the Company is proving legitimate grounds for the collection, use, or disclosure of your personal data, or verifying the necessity for public interest following your exercise of the right to object.
- The right to object to the collection, use, or disclosure of your personal data, except in cases where the Company has lawful grounds to refuse your request (e.g., the Company can demonstrate that the collection, use, or disclosure is based on compelling legitimate grounds that override your interests, or for the establishment, compliance, exercise, or defense of legal claims, or for the performance of a task in the public interest).
- Retention Period for Personal Data
To achieve the surveillance objectives set forth in this Notice, the Company will retain CCTV personal data related to you for a period of 30 days after the person in charge of the area has completed a retrospective review. Once this period has elapsed, the Company will proceed to delete or destroy your personal data.
- Personal Data Security Measures
The Company maintains appropriate security measures for your personal data, encompassing both technical and administrative safeguards. These measures are designed to prevent the loss, unauthorized access, deletion, destruction, use, alteration, amendment, or disclosure of personal data, in alignment with the Company’s Information Security Policy.
Furthermore, the Company has established a Privacy Policy communicated throughout the organization, alongside practical guidelines to ensure security in the collection, use, or disclosure of personal data. The Company strives to maintain the Confidentiality, Integrity, and Availability of personal data. The Company shall review these policies, including this Notice, at appropriate intervals.
- Responsibility of the Data Controller
The Company has restricted access to your personal data solely to authorized personnel whose duties involve the collection, use, or disclosure of data for this processing activity. The Company shall ensure that all relevant employees strictly comply with the terms of this Privacy Notice.
- Amendments to the Privacy Notice
In updating or changing this Notice, the Company may consider making amendments as it deems appropriate. You will be notified of such changes via QR Codes located at CCTV monitoring points within the Company, with the latest version date indicated at the end. However, the Company recommends that you regularly check for the latest Notice, especially before entering the Company’s premises.
By entering the Area, you acknowledge the terms of this Notice. Please refrain from entering the Area if you do not agree with the terms of this Notice. If you continue to enter the Area after this Notice has been amended and posted through the aforementioned channels, it shall be deemed that you have acknowledged such changes.
- Contact Information
You may contact us regarding this Notice at:
- The Data Controller
-
- Contrologic Co., Ltd.
- Contact address: 101 Motorway Frontage Road, Khlongsongtonnun, Latkrabang, Bangkok 10250 Thailand
- Tel: 02-0212879 / Email: hrs@contrologic.co.th
- The Data Protection Officer (DPO)
- Contact address: 101 Motorway Frontage Road, Khlongsongtonnun, Latkrabang, Bangkok 10250 Thailand
- Tel: 02-0212879 / Email: hrs@contrologic.co.th
