(For Customers, Business Partners, and Other Third Parties)
“Customer(s)” means the person(s), and/or organization(s), and/or “person(s) in any organization(s)” who will purchase a product and/or obtain service from the Company or other persons who contact and inquire for information of product and/or service of the Company, the person receiving information of product and/or service through relevant media and the person receiving advertisement and public relations concerning product and/or service of the Company.
“Business Partner(s)” means the person(s), and/or organization(s), and/or “person(s) who will sell or sells products and/or provide service for the Company, such as the contractual party, service provider and advisor, etc., and shall mean to include an ordinary person who is related to the conducting of the transaction between the Company.
“Other Third Partie(s)” means the person(s), and/or organization(s), and/or “person(s) which is not a customer or business partner that has a relationship in the manner relating to the conduct of business.
The personal data We Collect
We may collect your personal data that receive directly from you when you provide us personal data necessary to consider and enter into a contract, during the performance of our or your services for the Company, telephone number, e-mail address, or other contact channels or another source not directly from you such as search, social media, government authorities, third parties, etc.
The primary reason we process your personal data is to authorize, manage, administer, or enter into other agreements between the Company and the companies you represent or issue purchase orders, process payments, perform accounting, and manage our contracts. Review the services or your products, and other related activities.
In addition, we process personal data to comply with our legal obligations (such as record-keeping obligations, screening of committee member duties), as well as to manage our risks and operations (such as Prevention and detection of security threats Execute or defend legal claims
The personal information we collect from you is any information that can be used to identify you directly or indirectly It depends on the processing purpose. This includes, but is not limited to, the following personal data:
1.1) Identity and personal data
Such as First name, last name, nickname, date of birth, place of birth, age, gender, marital status, height, weight, interests, opinions, ability, photography, motion picture, audio, information about military obligations, information about habits, behaviors, attitudes, aptitude, skills, documents that can be used to identify you or issued by the government agencies (e.g., national identification card, passport, work permit, driving license, car registration book, professional license), signature.
1.2) Contact information
Such as Address, household registration, telephone number, mobile phone number, e-mail address, social media account, and include other similar information.
1.3) Third party/reference information
Such as Spouse, Family member, or other third party such as directors, executives, staffs, contractors, agents or consultants, parent company, subsidiary, group company or affiliated company related with you by recording Name, Surname, Relationship, Telephone number, Mobile phone number, and others as necessary.
If you provide Personal Data about third parties, it is your responsibility to inform them of their rights with respect to the contents as applicable to them. You are also responsible for obtaining any required consent from them and ensuring that you have the right to provide their personal data to the Company.[KS1]
1.4) Information about recruitment obtained from the application and selection process
Such as Information in resume or curriculum vitae (CV) such as working experience and previous employment (including position, department and title history and salary and benefits from previous employment), your education history, academic background, GPA, training history, certificates, and qualifications, job application form, job interview.
1.5) Financial data or information regarding payment
Such as income, salary, bank account details (e.g., bank account number, bank name, branch, account type), credit/debit card number, financial statement, payment term, and other financial-related information.
1.6) Sensitive data means the personal data classified by law as sensitive data. We will only collect, use, or disclose Sensitive Data, if we have received your explicit consent or as permitted by law
Such as health information, biometric information, religious, ethnic religious belief, philosophy, race, nationality, disability, information about criminal records, blood group, the labor union information, and face recognition.
1.7) Other information
Such as Information necessary for investigating conflicts of interest, information regarding whistleblowing, complaints, and disciplinary investigations, information collected from your participation in our activities as well as your responses in surveys and assessments, information that you choose to share and disclose through our application systems, tools, questionnaires, assessments, various documents.
2. The purposes of data collecting and process your personal data:
We will collect, use, or disclose your personal data under the following legal basis and circumstances, where:
2.1) It is necessary to consider and entry into a written or unwritten contract and manage our contractual relationship with you; purchasing, selling, and servicing; to carry out contract details, financial transactions, and services related to payments; to provide updates on your orders and on the delivery of the products; to process on invoice and receipt issuance;
2.2) It is necessary for managing and improving our services, products, and business operations for you;
2.3) It is necessary to inform you of information relating to marketing communication, activities, sales, services, public relations, notices, news, promotions, special offers, product display, procurement and support, special activities, and direct marketing.
2.4) It is necessary to create and maintain a database of your, to generate statistics pertaining to you; and to continuously improve our services, and necessary for evaluate your performance for future management and collaboration.
2.5) It is necessary to contact the parent company, a subsidiary, a group company, and an affiliated company of the Company.
2.6) It is necessary for preventing or suppressing a danger to a person’s life, body, or health, for instance, to prevent an epidemic, to provide first aid, or to make contact in case of an emergency.
2.7) It is required by law to obtain your explicit consent under PDPA.
2.7.1) Medical information about serious ill, chronic disease, disability: to provide work capability assessment, appropriate management compliance with relevant laws.
2.7.2) Biometric data e.g., fingerprint, face recognition
2.7.3) Your religious belief, philosophy, race, nationality, disability, genetic data for verification purposes and welfare allocation (e.g., food preparation, provision of religious holiday, and workforce planning)
2.8) In case, it is necessary for us to collect, use, or disclose your personal data to perform a contract or comply with the law, but you do not give such personal data to us. As a result, we may not be able to perform a contract or follow your request or violate the laws, or have other negative impacts.
3. Disclosure or Transfer of the personal data
3.2) Our service providers, business partner, and any other person or juristic person; we may also transfer or allow access to your personal data to third party, business partners and service providers including, but not limited to law firm, accounting firm, auditing firm and broker insurance.
3.3) Other third parties required by law: In certain circumstances, we may be required to disclose or share your personal data in order to comply with a legal or regulatory obligation. This includes any law enforcement agency, court, regulator, government authority or other third party where we believe it is necessary to comply with a legal or regulatory obligation, or otherwise to protect our rights, the rights of any third party or individuals’ personal safety, or to detect, prevent, or otherwise address fraud, security, or safety issues (e.g., The Royal Thai Police, etc.).
Personal Data Retention
We will delete or destroy your personal data when the retention period expires or when it becomes irrelevant or unnecessary for the purpose of collecting that personal data.
Our Contact Details
Staff for Personal Data management
Osaka Gas (Thailand) Co., Ltd.
55 Wave Place Building 10th floor, Wireless Road,
Lumpini, Pathumwan, Bangkok 10330 Thailand
(Monday– Friday: 08.20 – 17.00 hrs. except public holidays)
Cross-border Transfer of the Personal Data
We may disclose or transfer your personal data to individuals, organizations, or third-party provider to Japan where the Osaka Gas Group is located or to any other destination outside Thailand. However, in some cases, the personal data protection standard in the destination country may not be adequate as required by the authority under the PDPA.
Your Rights as a Data subject
You have the following rights pursuant to the provisions of the PDPA subject to the limitations and conditions under PDPA:
7.1) Right to withdraw consent: You have the right to withdraw consent for the Data Processing of the Personal Data by the Company at any time during the period of collection and retention of such Personal Data except where the withdrawal is restricted by law or a contract which gives benefits to you.
7.3) You have the right (i) to request that the Company transfers the Personal Data to other data controller if it can be done by the automatic means or (ii) to request for the Personal Data in such formats that the Company sends or transfers to other data controller unless it is impossible to do so due to technical circumstances.
7.4) Right to object: You have the right to object the Data Processing of the Personal Data by the Company under certain circumstances as prescribed in the PDPA.
Right to request the erasure, destruction, and anonymization: You have the right to request the Company to erase, destruct, and anonymize the Personal Data under certain circumstances as prescribed in the PDPA.
Right to request the suspension of use: You have the right to request that the Company suspends the use of the Personal Data under certain circumstances as prescribed in the PDPA.
Right to request the update: You have the right to request the Company to ensure the Personal Data remains accurate, up to date, complete, and not misleading.
Right to lodge the complaint: You have the right to lodge the complaint to the relevant official authority under the PDPA of the violation of the PDPA by the Company and the employees or sub-contractors thereof.
Osaka Gas (Thailand) Co., Ltd.
Mr. Yuichi Ishisaka