Privacy Notice For Employees

Privacy Notice

For Employees of Contrologic Co., Ltd.

 

          Contrologic Co., Ltd. (the “Company”) respects the privacy rights of its employees. Hence, the Company has established this Privacy Notice to ensure that employees receive full protection of their personal data. This Privacy Notice serves to inform you of the details regarding the collection, use, and disclosure (collectively referred to as “Processing”), as well as the deletion and destruction of employees’ personal data through both online and offline channels in accordance with the Personal Data Protection Act, as follows:

  1. Purposes of Personal Data Processing
    • To take steps at the request of the employee prior to entering into a contract, or to perform obligations under an employment contract to which the employee is a party. This includes drafting employment contracts and agreements, complying with employment contracts, complying with work rules and personnel management regulations, upholding the Code of Conduct, work assignments, employee transfers and training, performance evaluations, consideration of job positions and remuneration, and management and oversight of employee health and safety.
    • To ensure compliance with laws, regulations, and orders from legally authorized entities, including but not limited to; Labor Protection Act, Labor Relations Act, Social Security Act. Occupational Safety, Health, and Environment Act. Occupational Diseases and Environmental Diseases Control Act, and Communicable Diseases Act.
    • For the legitimate interests of the Company or other third parties, such as Human Resources Management, strategic planning, manpower analysis and allocation, and employee development, providing medical benefits, insurance schemes, and other employee facilities such as infirmaries, cafeterias, sports centers, and gyms, organizing employee engagement activities and internal events, financial and budget management, internal communications, and liaising with third parties, managing registration matters, powers of attorney, issuing certificates/letters of recommendation, and preparing public relations materials, preparing internal reports and submitting required data to government or regulatory agencies, verifying the identity and accuracy of information provided by employees, information security management, creating user accounts, and managing system access credentials, maintaining workplace security, preventing accidents, and deterring criminal activity, investigating and managing complaints, fraud prevention, and handling legal cases or disputes, and managing data and providing necessary support for employees after their employment has terminated.
    • To prevent or suppress a danger to a person’s life, body, or health, such as emergency contact in the event of an accident or illness, and control and prevention of communicable diseases.
    • To perform tasks carried out in the public interest or to exercise official authority vested in the Company.
    • To achieve specific purposes for which the employee has provided explicit consent on a case-by-case basis.
  2. Personal Data Collected by the Company
    • Recruitment Data and Documents such as Resumes, Curriculum Vitae (CV), cover letters, job applications, and recruitment interview evaluations/comments.
    • Contact Information such as first and last name, address, telephone number, email, and social media information.
    • Personal Profile such as date of birth, age, gender, marital status, interests, and opinions.
    • Family and Dependent Details Information regarding family members or dependents eligible for benefits under the Company’s work rules and personnel management regulations, such as data on spouses, children, parents, and beneficiaries. (Before providing this information to the Company, employees must inform aforesaid individuals of this Privacy Notice)
    • Still photographs and moving images (video).
    • Information regarding education, capabilities, potential development, and other qualifications, such as educational level, degrees, institutions/universities, academic transcripts, training history, test results, legal right to work, professional qualifications, language proficiency, and other skills. This also includes information from references provided by the employee.
    • Work Experience and Past Employment, including details such as previous job titles, employer details, salary, compensation, and benefits received.
    • Information regarding locations where the employee is able to perform work.
    • Information regarding military service obligations.
    • Behavioral and Personality Traits, including characteristics such as habits, behavior, attitude, aptitudes, skills, leadership qualities, teamwork abilities, emotional intelligence, and organizational engagement. This data may be derived from observations and analysis by the Company or its staff during work or participation in Company activities.
    • Information necessary for reporting to regulatory authorities, such as the Ministry of Labour.
    • Financial Information including wages, salary, income, taxes, provident fund details, bank account numbers, loans, and tax exemptions or deductions.
    • Information related to social security, labor protection, rights, and benefits that the employee receives or is entitled to receive according to the Company’s work rules and human resource management regulations.
    • Records of clock-in/clock-out times, working hours, overtime, absences, and leaves.
    • Work history, job positions, meeting attendance, and opinions expressed. In cases where the employee serves as a Company Director, additional information such as director profiles and director registration details will be collected.
    • Usage and access logs for information systems, computers, software, websites, applications, network systems, electronic devices, and email systems, in compliance with the Company’s IT policy and relevant laws.
    • Information collected from participation with the Company, such as joining activities, responding to surveys, or completing evaluation forms.
    • Information that the employee chooses to share or disclose through the Company’s systems, applications, tools, questionnaires, assessments, and various documents.
    • Copies of documents used to verify identity, such as national ID cards, passports, other government-issued documents, or household registrations.
    • Details of persons the Company can contact in the event of an emergency.
    • Information regarding vehicles, driver’s licenses, and driving ability. In cases where the employee drives a vehicle provided by the Company, the Company will also collect data regarding driving behavior.
    • Information regarding accidents, both those occurring during working hours and due to work performance, and other general accidents.
    • Other information necessary for the performance of the employment contract, management of benefits and welfare, corporate analysis and administration, post-employment care, and legal compliance.
    • Information related to complaints, grievances, investigations, and disciplinary actions.

          If an employee refuses to provide personal data required for legal compliance, contract performance, or for entering into a contract with the Company, it may result in the Company being unable to fulfill its contractual obligations or provide full access to welfare and services.

  1. Sensitive Data Collection
    • The Company may need to collect and process Sensitive Personal Data from employees to fulfill the purposes outlined in this Privacy Notice.
    • The Company may process sensitive personal data in the following cases:
      • Health Data including weight, height, underlying medical conditions, color blindness, physical examination results, food and drug allergies, blood type, medical certificates, medical history, prescription records, and medical receipts. This is used for labor protection, providing healthcare benefits, assessing work fitness, and complying with laws involving the analysis of health data for appropriate management.
      • Biometric Data such as fingerprint recognition data or facial recognition data, used for identity verification, crime prevention, and protecting the legitimate interests of the Company or third parties.
      • Criminal Records to consider suitability for job roles and to protect the legitimate interests of the Company or third parties.
      • Religious beliefs, philosophy, race, nationality, disability status, labour union information, and genetic data. This is used to provide appropriate facilities, activities, and benefits, and to ensure fair and equal treatment according to human rights principles.
      • Any other personal data processed for lawful purposes to prevent or suppress danger to a person’s life, body, or health when the employee is incapable of giving consent, information that has been clearly made public with the employee’s explicit consent, to establish, exercise, or defense of legal claims, to achieve objectives regarding labour protection, social security, and employee welfare.
    • Where required, the Company will only process sensitive personal data with your explicit consent or as otherwise permitted by law. The Company will exercise its best efforts to provide sufficient security measures to protect such sensitive information.
    • Criminal record data will be collected from evidence provided by the employee or via an authorized background check conducted with the employee’s consent through relevant legal authorities. The Company will implement protective measures for such data as prescribed by law.
  2. Use of Cookies

          The Company uses cookies to collect personal data as specified in our Cookie Policy.

  1. Consent and Potential Consequences of Withdrawal
    • In cases where the Company collects and processes personal data based on your consent, you have the right to withdraw that consent at any time. However, the withdrawal of consent shall not affect the lawfulness of any collection, use, disclosure, or processing of personal data that occurred prior to the withdrawal.
    • If you withdraw your consent or refuse to provide certain information, it may result in the Company being unable to fulfill some or all of the purposes outlined in this Privacy Notice.
  2. Retention Period of Personal Data
    • The Company will retain your personal data for the period necessary to achieve the purposes defined for each type of data, unless a longer retention period is permitted by law. In cases where a specific retention period cannot be clearly defined, the Company will retain the data for a period expected under collection standards (e.g., the maximum general legal prescription period of 10 years).
    • The Company will maintain your personal data throughout the duration of your employment to fulfill contractual obligations, and for a necessary period following the termination of your employment.
    • Personal data of family members or dependents will be retained for the period necessary to achieve the objectives of this Privacy Notice, particularly to fulfill the employee’s rights to benefits as stipulated by the Company’s work rules and human resources management regulations.
    • Where the Company processes personal data based on your consent, we will continue to process such data until you notify us of your withdrawal of consent and the Company has successfully completed your request. However, the Company will still retain the necessary personal data to record that you have withdrawn your consent, ensuring we can respond to your future requests accurately.
    • The Company provides an audit system to delete or destroy personal data once the retention period has expired, or when the data becomes irrelevant to or exceeds the necessity of the purposes for which it was originally collected.
  3. Disclosure of Personal Data to Third Parties
    • The Company will disclose and share employee personal data with individuals and legal entities that are not part of the Company’s affiliates (“Third Parties”) to achieve the collection and processing purposes stated in this Privacy Notice. These may include service providers related to recruitment and selection, employment, and security, background check and qualification/competency testing, information technology (IT) and system development partners, financial institutions and business partners, government agencies and other necessary parties that enable the Company to conduct its business, provide services to employees, and fulfill the objectives outlined in this notice.
    • The Company will require all recipients of such data to implement appropriate data protection measures, process the personal data only to the extent necessary, and take steps to prevent the unauthorized or unlawful use or disclosure of your personal data.
  4. International Transmission or Transfer of Personal Data
    • The Company may send or transfer employee personal data to affiliates or other third parties abroad in cases where it is necessary for the performance of a contract to which the employee is a party, the performance of a contract between the Company and other persons or legal entities for the benefit of the employee, taking steps at the request of the employee prior to entering into a contract, preventing or suppressing a danger to the life, body, or health of the employee or other persons, or for complying with the law or for reasons of substantial public interest.
    • The Company may store employee data on computer servers or cloud systems provided by third parties, and may utilize third-party software applications in the form of Software as a Service (SaaS) and Platform as a Service (PaaS) to process employee personal data. In such cases, the Company will strictly prohibit unauthorized access and will require these third parties to maintain appropriate security measures.
    • In the event of an international transfer of personal data, the Company will comply with Personal Data Protection laws and employ appropriate measures to ensure that your personal data is protected and that you can exercise your legal rights. Furthermore, the Company will mandate that data recipients implement suitable protection standards, process data only as necessary, and prevent the unauthorised or wrongful use or disclosure of your personal data.
  5. Security Measures for Personal Data
    • The security of employees’ personal data is a top priority for the Company. We have implemented appropriate technical and administrative security standards to protect personal data from loss, unauthorized access, use or disclosure, misuse, modification, and destruction. These measures include security technologies and procedures such as encryption and access control to ensure that only authorized personnel can access your personal data, and that such personnel are properly trained on the importance of data protection.
    • The Company maintains appropriate security measures to prevent the loss, access, use, alteration, or disclosure of personal data by individuals without authorized rights or duties related to that data. We will review these measures as necessary, or as technology evolves, to ensure ongoing and appropriate security effectiveness.
  6. Employee Rights Regarding Personal Data
    • Employees have the following rights as prescribed by Personal Data Protection laws:
      • Right to withdraw any consent previously granted to the Company for the processing of your personal data.
      • Right to request access to and obtain a copy of your personal data, or to request disclosure regarding the acquisition of personal data obtained without your direct consent.
      • Right to request the transfer of your personal data in an electronic format to another Data Controller, as permitted by the Personal Data Protection Act.
      • Right to object to the collection, use, or disclosure of your personal data under certain circumstances.
      • Right to request the deletion, destruction, or anonymization of your personal data so that it can no longer identify you.
      • Right to request the suspension of the use of your personal data.
      • Right to ensure your personal data is accurate, up-to-date, complete, and not misleading.
      • Right to file a complaint with the Personal Data Protection Committee in the event that the Company, its data processors, employees, or contractors violate or fail to comply with Personal Data Protection laws. The Company will review and notify you of the outcome of any rights request as soon as possible, and within 30 days of receiving such a request. The exercise of these rights is subject to the conditions and limitations set forth by applicable Personal Data Protection Act.
  1. Information about the Data Controller or Data Protection Officer
    • The Data Controller
      • Contrologic Co., Ltd.
      • Contact address: 101 Motorway Frontage Road, Khlongsongtonnun, Latkrabang, Bangkok 10250 Thailand
      • Tel: 02-0212879 / Email: hrs@contrologic.co.th
    • The Data Protection Officer (DPO)
      • Contact address: 101 Motorway Frontage Road, Khlongsongtonnun, Latkrabang, Bangkok 10250 Thailand
      • Tel: 02-0212879 / Email: hrs@contrologic.co.th

          In the event that this Privacy Notice is amended or changed, the Company will post the updated version on this website. You are encouraged to periodically review this notice for any changes. The revised Privacy Notice will become effective immediately upon the date of publication.

Your cart

No products in the cart.