1. Introduction
This personal data protection policy (hereinafter referred to as the "Privacy Policy") contains the policies, procedures, and practices to be followed by OSG THAI CO., LTD. (hereinafter referred to as the "OSG", “we”, “us”, or “our”) in connection with the collection, use and disclosure of personal data (hereinafter referred to as "Personal Data") of our customer and/or individual having involvement with a juristic person which is our customer (hereinafter referred to as the "Customer", “you” or “your”).
We believe your privacy is important. Therefore, to fulfill our commitment to respect and protect your privacy in relation to the purchase and service, we have placed importance on personal data protection and shall comply with the Personal Data Protection Act B.E.2562 (2019) of Thailand and other relevant rules, regulations, notification and guidelines issued by the virtue of the Personal Data Protection Act B.E.2562 (2019), including all amendments shall be made afterwards (hereinafter collectively referred to as the "PDPA"). We hereby formulated this Privacy Policy to inform you, as a data subject, of the details of the collection, use, disclosure and processing of your Personal Data and other relevant data.
This Privacy Policy applies to our website www.osg.co.th (hereinafter referred to as the “Website”), apps offered through the website, call center, social network service (SNS), online communication channels, and other locations where we collect your Personal Data.
Under this Privacy Policy, we will comply with the following general principles:
1)
We will only collect the Personal Data that is necessary to carry out the specified purposes.
2)
We will use and/or disclose your Personal Data only for the purposes for which it has been collected, except the use and/or disclosure under your consent or as required by PDPA.
3)
We will retain your Personal Data only for the period as necessary to fulfill the specified purposes. Once your relationship with us ends or the purposes were completely accomplished, we may further retain your Personal Data for a period as necessary for our business operation or for a period as required or permitted by PDPA or other relevant laws and regulations.
4)
We will implement appropriate technical and organizational measures to secure your Personal Data.
5)
You, as a Data Subject, are entitled to, at any time, exercise your rights as appropriate in accordance with the rights of Data Subject under PDPA.
2. Personal Data Processing Method
(1) Purposes, Lawful Basis and Personal Data shall be collected
The type and amount of Personal Data collected by OSG will be in accordance with the necessity to accomplish reasonable business purposes only. We will process your Personal Data only for the following purposes. Failure to provide Personal Data may result in the inability or insufficiency of the responses described in the respective purposes.
A.
Purposes under the Lawful Basis other than Consent basis
B.
Purposes under Consent basis
In principle, we will not collect Sensitive Personal Data, such as data relating to political opinion or religious belief, data relating to medical treatment and health conditions, or data relating to committing an offence or being alleged to commit an offence, and so on. However, in case it is necessary for us to collect the said Sensitive Personal Data, we will notify you and proceed as appropriate to obtain explicit consent from you prior to the said collection.
In addition, we will not collect the Personal Data from any other sources, apart from you directly, except where we have notified you of the collection of such Personal Data from other sources without delay but shall not exceed 30 days from the date of such collection and has obtained the written consent from you.
(2) Use and Disclosure of Personal Data
In principle, the collected Personal Data shall only be used for the stated purposes. However, in case it is necessary to us to use or disclose the collected Personal Data for a purpose other than the originally stated purpose, we will ensure that the said use and/or disclosure shall be informed to you without delay and shall be conducted in accordance with the requirement or permission of the PDPA or, for the case where your consent is required, you will be informed and requested for explicit consent for such new purpose.
We will control the storage of all Personal Data to be secure and not disclose any Personal Data to the third party, except where any of the following conditions are applied.
(a) The disclosure has been proceeded under your explicit consent;
(b) The disclosure is for accomplishing the purpose for which the said Personal Data was originally collected.
(c) We are permitted or required to do so by any applicable laws.
(d) There is an emergency to protect your safety.
Furthermore, we may disclose your Personal Data to the subsidiary company, subcontractors or any organization which is responsible for performing the purposes specified in this Privacy Policy. In this regard, we will require the said person, company, or organization to take appropriate measures to maintain the security of the Personal Data, which may receive from us for their performance, in consistence with our Privacy Policy and will require the said person, company or organization not to use the Personal Data received from us for any other purposes.
3.
Transfer of Personal Data
Your Personal Data may be transferred to the affiliate companies located outside of Thailand, (hereinafter referred to as “Affiliates”), as follows.
Japan | Global Network | ABOUT OSG｜OSG
Asia | Global Network | ABOUT OSG｜OSG
America | Global Network | ABOUT OSG｜OSG
Eastern Area | Global Network | ABOUT OSG｜OSG
In case the destination country has insufficient standards for protecting the personal data in accordance with the personal data protection standards stipulated in the personal data protection law of Thailand, we will ensure that the transfer of your Personal Data proceeds in accordance with the appropriate security standards, and will ensure that all Affiliates are required to follow the relevant privacy policy relating with the provisions set forth in this Privacy Policy.
4.
Retention Method and Period
The Personal Data collected by us shall be stored in the secured computer and network, the lockable storage shelves, or shared folder under the appropriate technical and organizational measures.
In this regard, your Personal Data shall be retained by us for the period as necessary to fulfill the specified purposes. However, the retention period shall not exceed 5 (five) years after the end of the agreement you have made with us or completion of the specified purposes. Once your relationship with us ends or the purposes are completely accomplished, we may further retain your Personal Data for a period as necessary for our business operation or for a period as required or permitted by the PDPA. After the purpose is completely accomplished or the retention period required or permitted by the PDPA, as the case may be, is finished, we will take appropriate steps to delete or destroy your Personal Data or make it anonymous.
5.
Rights of the Data Subject
As a Data Subject, you are entitled to, at any time, exercise any of the rights specified below, as stipulated in the PDPA.
(a)
Rights to access your own Personal Data;
(b)
Rights to obtain a copy of your own Personal Data;
(c)
Rights to request to delete or suspend the use of your own Personal Data after the contract or agreement is terminated or expired, except for the Personal Data which is necessary to be retained by us for the period stipulated by the PDPA and/or any applicable laws;
(d)
Rights to rectify your own Personal Data to be correct, complete, and up-to-date;
(e)
Rights to object to the collection, use or disclosure of your Personal Data at any time. However, we will continue to collect, use, and/or disclose your Personal Data if the collection, use or disclosure, which you lodge the objection, is undertaken under legitimate ground or other grounds permitted by PDPA.
(f)
Rights to lodge a complaint in case you are of the opinion that the said collection, use or disclosure is not in accordance with this Privacy Policy or PDPA;
(g)
Rights to withdraw your consent which was given to us;
(h)
Rights to be informed when your Personal Data is at risk as stipulated by PDPA.
6.
Cookies
We will collect the data about your use or visit to our Website, including your Personal Data, through the use of Cookies which is a small piece of data consisting of downloaded information that is stored in your web browser or other internet-connected devices, such as, a computer, smartphone or tablet, which the server can be viewed later. However, certain types of Cookies are required for the Website to function properly and efficiently. Other types of Cookies are used to store or track information about your use of the Website or help distinguish your Website usage patterns from other users, enabling us to manage and improve the quality and efficiency of Website to provide you good experiences using Website. This may include the use of data to analyze behavior of customers, market trend and popularity trend to provide or offer products and/or services that suit your needs.
You can manage and adjust your Cookies setting as your preference. However, please note that if you choose not to use Cookies while you are browsing our Website, some services or pages may not work as expected.
7.
Third-party Links
Our Website contains links to external websites, including but not limited to, our Japan headquarter and the U.S. company. This Privacy Policy applies only to our Website and not applies to those external websites that we link to, who will have their own privacy policies. Therefore, we highly recommend that you check the privacy policy of that external site before entering each of those sites.
8.
Data Controller and Contact Information
This detail of Data Controller is as follows:
