Privacy Notice for Visitor

To comply with the Personal Data Protection Act B.E. 2562 and other applicable laws, including any future amendments to such laws (collectively referred to as the "Personal Data Protection Laws"), Jorakay Corporation Co., Ltd. (the "Company") has prepared this Privacy Notice (the "Notice") to explain in detail how your personal data is collected, used, and disclosed. This notice applies to you as an individual who contact the Company for any business purposes or to individuals associated with the Company.

Definition

“Personal Data”	Refers to information about an individual that can identify that person either directly or indirectly, excluding information about deceased individuals.
“Sensitive Personal Data”	Refers to personal data related to race, ethnicity, political opinions, religious or philosophical beliefs, sexual behavior, criminal history, health information, disability, union membership, genetic data, biometric data, or any other information that could lead to unfair discrimination against the data subject or similarly affect the data subject as defined by personal data protection laws.
“Legal Basis”	Refers to the legal grounds under which the collection of personal data is permitted according to personal data protection laws.
“Visitor to the company”	Refers to individuals who come into contact with the Company or persons associated with the Company at the Company's premises for any purpose, such as document couriers, service providers or contractors of the Company, and those participating in events organized by the Company.

Types of Personal Data Collected by the Company

The Company will collect all or part of your personal data as specified in this notice, as necessary, to carry out the various purposes of the Company as outlined in this notice.

Identification and General Information	This includes title, first name, last name, age, gender, date of birth, national ID number, passport number, driving license information, signature, contact number, and similar details.
Access Details	This includes the date and time of entry and exit, vehicle registration and characteristics, number of visitors, and purpose of the visit.
Other Information	This includes images or recordings of activities or visits to the Company, still and motion pictures captured by closed-circuit television (CCTV), and the date and time of contact with the Company.
Sensitive Personal Data	This includes health-related information, such as body temperature, etc.

Sources of Personal Data

The company collects your personal data from the following direct and indirect sources.

Directly from You	Through one of the following channels: Oral Communication includes face-to-face conversations, etc. Documentation includes identity cards, driving licenses, passports, or other documents that you present for reference purposes. Other Contact Channels include recordings by the Company's closed-circuit television (CCTV) and body temperature measurements conducted by the Company's personnel, etc.
From Other Sources or Third Parties	This includes individuals you are contacting, etc.

Purpose of Collecting Personal Data

The company will collect your personal data for the purposes and legal bases specified in this notice only. If the company needs to collect additional personal data or use it for purposes beyond those stated in this notice, the company will inform you of the new data collection and/or notify you of the new purposes for such collection. Furthermore, the company will seek your consent for the new collection, use, and disclosure of personal data if required by law, in accordance with personal data protection regulations.

Purpose of Collection	Legal Basis
1. Verify facts in accordance with security procedures, crime prevention, or other emergency situations, including retaining evidence and disclosing it to law enforcement for investigation if unlawful events occur on Company premises. This may also involve disclosing information to other affected parties (if applicable). Additionally, protect the Company's legal rights or contest allegations against the Company, such as legal proceedings, initiating or defending legal actions, settling disputes out of court, and taking other actions as permitted by law to protect the Company’s legal rights or contest allegations against the Company.	General Personal Data For the legitimate interests of the company and other individuals.
2. Verify facts and record your health data, such as collecting body temperature readings, to prevent the spread of infectious diseases or illnesses that may lead to widespread transmission. This includes addressing emergency situations affecting the life, body, or health of individuals within the Company. Additionally, this may involve disclosing information to external organizations for these purposes, such as sharing data with the Department of Disease Control, medical institutions, and other relevant government agencies.	General Personal Data For the legitimate interests of the Company. To comply with laws applicable to the Company. To prevent or address harm to the life, body, or health of individuals. Sensitive Personal Data To prevent or address harm to your life, body, or health in situations where you are unable to provide consent, for any reason. To comply with legal obligations to achieve purposes mandated by law (e.g., public health regulations). Explicit consent (where not otherwise required by law, for the Company to collect sensitive personal data without consent).
3. Promote the Company’s policies and activities, such as using photographs or videos of participants in Company events, like blood donation drives, on the Company’s Facebook page or website, among other platforms.	General Personal Data Explicit consent is required.

Purpose of Collection

Legal Basis

1. Verify facts in accordance with security procedures, crime prevention, or other emergency situations, including retaining evidence and disclosing it to law enforcement for investigation if unlawful events occur on Company premises. This may also involve disclosing information to other affected parties (if applicable). Additionally, protect the Company's legal rights or contest allegations against the Company, such as legal proceedings, initiating or defending legal actions, settling disputes out of court, and taking other actions as permitted by law to protect the Company’s legal rights or contest allegations against the Company.

General Personal Data

For the legitimate interests of the company and other individuals.

2. Verify facts and record your health data, such as collecting body temperature readings, to prevent the spread of infectious diseases or illnesses that may lead to widespread transmission. This includes addressing emergency situations affecting the life, body, or health of individuals within the Company. Additionally, this may involve disclosing information to external organizations for these purposes, such as sharing data with the Department of Disease Control, medical institutions, and other relevant government agencies.

General Personal Data

For the legitimate interests of the Company.
To comply with laws applicable to the Company.
To prevent or address harm to the life, body, or health of individuals.

Sensitive Personal Data

To prevent or address harm to your life, body, or health in situations where you are unable to provide consent, for any reason.
To comply with legal obligations to achieve purposes mandated by law (e.g., public health regulations).
Explicit consent (where not otherwise required by law, for the Company to collect sensitive personal data without consent).

3. Promote the Company’s policies and activities, such as using photographs or videos of participants in Company events, like blood donation drives, on the Company’s Facebook page or website, among other platforms.

General Personal Data

Explicit consent is required.

Impact of Not Providing Personal Data

The Company collects your personal data to verify and identify you in accordance with its security measures. If you do not provide the required personal data, the Company may decide not to permit you access to its premises.

Disclosure and Transfer of Personal Data Domestically and Internationally

To achieve the purposes for collecting personal data as specified in this notice, the company may, in certain cases, need to disclose your personal data to individuals or organizations, including but not limited to the following:

Individuals or departments within the company, includes executives, supervisors, employees, contractors, and/or internal personnel of the company as necessary for processing your personal data.
Customers or external organizations involved in award contests.
Service providers and representatives hired by the Company, such as security system providers, consultants, and their employees.
Law enforcement officers, courts, arbitrators, attorneys, individuals, or organizations involved in legal proceedings and dispute resolution, as well as other governmental agencies as required by law, such as the Department of Disease Control and the Ministry of Public Health.

In certain cases, the company may need to transfer your personal data to an international affiliate for the purposes mentioned above. The company will ensure that the destination country has adequate data protection measures in place in accordance with the applicable laws. If the company must transfer personal data to a country with insufficient data protection standards or where no legal standards are established, the company will comply with legal requirements to ensure the transfer is lawful. This may include obtaining your consent where required by law or implementing appropriate measures to uphold your rights and ensure effective legal remedies as stipulated by the law.

Retention Period for Personal Data

The Company will retain your personal data for security and disease prevention purposes for a period not exceeding 1 month from the date you enter the Company's premises. The specific retention periods are as follows:

- Still and motion images recorded by CCTV: Retained for no more than 1 month.
- Health check results (e.g., ATK): Retained for no more than 1 day.
- Personal data recorded in entry/exit logs: Retained for no more than 1 day.

Personal data may be retained beyond the specified period if necessary for compliance with applicable laws and for protecting the company’s legal rights or addressing any claims against the company. In such cases, personal data will be retained for the duration necessary to achieve these objectives and/or within the timeframe prescribed by law.

Your Rights Regarding Personal Data

You have the legal rights to take actions concerning your personal data collected by the company as follows:

Right to withdraw consent: You have the right to withdraw your consent for the collection, use, or disclosure of your personal data, in whole or in part, at any time during the period the company retains your personal data. Withdrawal of consent does not affect the legality of the data collection, use, or disclosure that occurred before the consent was withdrawn.
Right to access and copy personal data: You have the right to access your personal data and request a copy of it from the company. You may also request information about the sources of personal data that you did not provide directly to the company.
Right to request data portability: You have the right to request the company to transfer or send your personal data to another person or to yourself, in accordance with legal conditions.
Right to object to collection, use, or disclosure: You have the right to object to the company's collection, use, or disclosure of your personal data under the conditions prescribed by law.
Right to request deletion of personal data: You have the right to request the company to delete, destroy, or anonymize your personal data, subject to legal conditions.
Right to request suspension of personal data use: You have the right to request the company to suspend the use of your personal data, in accordance with legal conditions.
Right to request correction of personal data: You have the right to request the company to correct any inaccurate information or to add any incomplete information.
Right to lodge a complaint: You have the right to file a complaint with the Office of the Personal Data Protection Committee if you believe that the company or its employees or contractors have violated or failed to comply with data protection laws.

You can exercise these rights by submitting a written request to the company using the contact information provided below. If the company is unable to fulfill your request, it will explain the reasons for the denial along with its response.

Request Form: Click here. You may send your request along with any additional documents to: Jorakay Corporation Co., Ltd. 10 Krungthepkreetha Road, Thapchang, Saphansung, Bangkok 10250

Email : info@jorakay.com

Privacy Policy Changes

The company reserves the right to amend or update this privacy notice as necessary. This notice was last updated on March 30th, 2023.

Company Contact Information

Jorakay Corporation Co.,Ltd.
10 Krungthepkreetha Road, Thapchang, Saphansung, Bangkok 10250
Phone: 02-7201000 Email: info@jorakay.com
(Office Hours: Monday-Friday, 08:00 – 17:00)