Privacy Notice for Supplier
To comply with the Personal Data Protection Act B.E. 2562 and other applicable laws, including any future amendments to such laws (collectively referred to as the "Personal Data Protection Laws"), Jorakay Corporation Co., Ltd. (the "Company") has prepared this Privacy Notice (the "Notice") to explain in detail how your personal data is collected, used, and disclosed. This notice applies to you as a customer of the Company, as well as individuals associated with the Company's business partners, including directors, shareholders, employees, agents, or any other persons acting on behalf of or in the name of the Company's business partners.
Definition
| “Personal Data” | Refers to information about an individual that can identify that person either directly or indirectly, excluding information about deceased individuals. |
| “Sensitive Personal Data” | Refers to personal data related to race, ethnicity, political opinions, religious or philosophical beliefs, sexual behavior, criminal history, health information, disability, union membership, genetic data, biometric data, or any other information that could lead to unfair discrimination against the data subject or similarly affect the data subject as defined by personal data protection laws. |
| “Legal Basis” | Refers to the legal grounds under which the collection of personal data is permitted according to personal data protection laws. |
| “Business Partner” | Refers to any individual or legal entity that sells or may offer to sell goods and/or services to the Company, has registered as a business partner with the Company, or has any other similar relationship with the Company. |
| “Individuals Associated with Customers” | Refers to natural persons related to or representing the customer, such as executives, directors, shareholders, employees, agents, or any other natural person acting on behalf of the customer of the Company |
Types of Personal Data Collected by the Company
The Company will collect all or part of your personal data as specified in this notice, as necessary, to carry out the various purposes of the Company as outlined in this notice.
| Identification Data | This includes title, first name, last name, photograph, national ID number, passport number, bank account number, signature, etc. |
| Contact Information | This includes home address, personal phone number, personal email, Line ID, Facebook, and emergency contact details, etc. |
| Employment Data | This includes job position, department, workplace, work email address bearing your name, etc. |
| Attached Document Data | This includes business cards, copies of ID cards, copies of passports, copies of tax identification cards, purchase orders, quotations, certificates, VAT registration documents, and other relevant documents, etc. |
| Other Data | This includes photographs of company events, still and moving images captured by CCTV, dates and times of visits to the company. |
| Sensitive Personal Data | This includes religion, as shown on a copy of the ID card, etc. |
Sources of Personal Data
The company collects your personal data from the following direct and indirect sources.
| Directly from You |
Through one of the following channels:
|
| From Other Sources or Third Parties |
|
Purpose of Collecting Personal Data
The company will collect your personal data for the purposes and legal bases specified in this notice only. If the company needs to collect additional personal data or use it for purposes beyond those stated in this notice, the company will inform you of the new data collection and/or notify you of the new purposes for such collection. Furthermore, the company will seek your consent for the new collection, use, and disclosure of personal data if required by law, in accordance with personal data protection regulations.
Applicant's Personal Data
| Purpose of Collection | Legal Basis |
|---|---|
| 1. Communications and actions taken prior to entering into a contract with you, or with individuals or entities you represent or act on behalf of, such as scheduling meetings, placing orders prior to contract formation, negotiating contract terms, agreeing on the scope of the contract, reviewing and registering business partners in the Company's database, as well as evaluating the qualifications of business partners in accordance with the Company's policies. |
General Personal Data
|
| 2. Contract formation and compliance, such as work-related communication, tracking ordered goods or requested services, coordinating the delivery and receipt of goods or services (by the Company or the Company's customers), handling requests for exchanges and returns, and processing payments for goods or services. The purposes for collection and disclosure will depend on the type of goods and services the Company receives from each business partner. Contract formation and compliance in this context also include contacting and coordinating with you on other contract-related matters, such as requesting changes to the terms and conditions, and other contract details, as well as renewing contracts. |
General Personal Data
|
| 3. Taking any actions to pursue debt collection in the event that you, as a business partner, or an individual or legal entity that you represent, act on behalf of, or are employed by, fail to deliver goods or services as agreed. |
General Personal Data
|
| 4. Managing organizational and business operations, such as auditing and service improvement, sourcing new business partners for the Company or its affiliates, managing systems and databases, obtaining business licenses from government agencies, conducting audits, performing internal reviews, seeking advice from business consultants, handling mergers and acquisitions, and restructuring the organization. |
General Personal Data
|
| 5. Compliance with applicable laws governing the Company, such as storing and disclosing accounting information to auditors and government agencies as required by law and authoritative orders. |
General Personal Data
|
| 6. Storing your contact information in the company's database for future business communication, including disclosing your information to affiliated companies for contact and relationship-building to create future business opportunities. |
General Personal Data
|
| 7. Ensuring security within the company's premises, such as monitoring and overseeing areas within the company using closed-circuit television (CCTV) cameras. |
General Personal Data
|
| 8. Promoting the Company's policies and activities, such as posting photos or videos of participants from training sessions, seminars, lectures, and workshops on the Company's Facebook page or website. |
General Personal Data
|
| 9. Protecting the company's legal rights or contesting claims affecting the company, including legal proceedings, initiating or defending lawsuits, resolving disputes outside of court, and other actions to safeguard the company’s legal rights or challenge claims against it as permitted by law. |
General Personal Data
|
Impact of Not Providing Personal Data
The company collects your personal data to facilitate communication and perform activities in accordance with contracts with you or on behalf of individuals or legal entities you represent or are employed by, as well as to comply with legal requirements. If you do not provide the required personal data, you or the individuals or legal entities you represent or are employed by may face difficulties in communication necessary for contract formation or execution. In some cases, this may prevent the company from entering into or fulfilling contracts with you or the entities you represent or are employed by. Additionally, it may result in non-compliance with applicable laws by you or the entities you represent or are employed by in certain situations.
Disclosure and Transfer of Personal Data Domestically and Internationally
To achieve the purposes for collecting personal data as specified in this notice, the company may, in certain cases, need to disclose your personal data to individuals or organizations, including but not limited to the following:
- Individuals or departments within the company, includes executives, supervisors, employees, contractors, and/or internal personnel of the company as necessary for processing your personal data.
- Service providers and agents hired by the company, such as auditors, legal advisors, business consultants, or other external specialists, including transportation service providers and subcontractors.
- Other companies in the corporate group, business partners, and external service providers and agents, includes entities within the corporate group, business partners, and external service providers and agents hired by the company.
- Government agencies, such as the Revenue Department, the Board of Investment, etc.
- Commercial banks and the bank of Thailand.
- Law enforcement authorities, courts, arbitrators, lawyers, and other entities involved in legal proceedings and dispute resolution involved in legal processes and dispute resolution.
- Entities related to business transactions, such as those involved in mergers, acquisitions, or corporate restructuring.
In certain cases, the company may need to transfer your personal data to an international affiliate for the purposes mentioned above. The company will ensure that the destination country has adequate data protection measures in place in accordance with the applicable laws. If the company must transfer personal data to a country with insufficient data protection standards or where no legal standards are established, the company will comply with legal requirements to ensure the transfer is lawful. This may include obtaining your consent where required by law or implementing appropriate measures to uphold your rights and ensure effective legal remedies as stipulated by the law.
Retention Period for Personal Data
The company will retain your personal data for no more than 5 years from the date the legal relationship between you or the entity you represent and the company terminates. In cases where the company collects your personal data but does not establish a legal relationship with you or the entity you represent, the company will retain your personal data for no more than 2 years.
Personal data may be retained beyond the specified period if necessary for compliance with applicable laws and for protecting the company’s legal rights or addressing any claims against the company. In such cases, personal data will be retained for the duration necessary to achieve these objectives and/or within the timeframe prescribed by law.
Your Rights Regarding Personal Data
You have the legal rights to take actions concerning your personal data collected by the company as follows:
- Right to withdraw consent: You have the right to withdraw your consent for the collection, use, or disclosure of your personal data, in whole or in part, at any time during the period the company retains your personal data. Withdrawal of consent does not affect the legality of the data collection, use, or disclosure that occurred before the consent was withdrawn.
- Right to access and copy personal data: You have the right to access your personal data and request a copy of it from the company. You may also request information about the sources of personal data that you did not provide directly to the company.
- Right to request data portability: You have the right to request the company to transfer or send your personal data to another person or to yourself, in accordance with legal conditions.
- Right to object to collection, use, or disclosure: You have the right to object to the company's collection, use, or disclosure of your personal data under the conditions prescribed by law.
- Right to request deletion of personal data: You have the right to request the company to delete, destroy, or anonymize your personal data, subject to legal conditions.
- Right to request suspension of personal data use: You have the right to request the company to suspend the use of your personal data, in accordance with legal conditions.
- Right to request correction of personal data: You have the right to request the company to correct any inaccurate information or to add any incomplete information.
- Right to lodge a complaint: You have the right to file a complaint with the Office of the Personal Data Protection Committee if you believe that the company or its employees or contractors have violated or failed to comply with data protection laws.
You can exercise these rights by submitting a written request to the company using the contact information provided below. If the company is unable to fulfill your request, it will explain the reasons for the denial along with its response.
Request Form: Click here. You may send your request along with any additional documents to: Jorakay Corporation Co., Ltd. 10 Krungthepkreetha Road, Thapchang, Saphansung, Bangkok 10250
Email : info@jorakay.com
Privacy Policy Changes
The company reserves the right to amend or update this privacy notice as necessary. This notice was last updated on March 30th, 2023.
Company Contact Information
Jorakay Corporation Co.,Ltd.
10 Krungthepkreetha Road, Thapchang, Saphansung, Bangkok 10250
Phone: 02-7201000 Email: info@jorakay.com
(Office Hours: Monday-Friday, 08:00 – 17:00)