Personal Data Protection Policy of Bangkok Industrial Gas Co., Ltd. (BIG Personal Data Protection Policy for BIG’s Employees and Affiliates)

With an attention to embrace significance of the personal data concerning security and confidentiality to (i) prevent illegal actions and loss including but not limited to access, destroy, use, modify, revise or disclose of such personal data without compliance with PDPA, relevant laws and this Policy and (ii) to collect, keep, manage and use the personal data from a possession, Bangkok Industrial Gas Co., Ltd., (BIG) has then developped the Personal Data Protection Policy (the “Policy”) and encourages the data owners to learn this Policy in order to understand BIG’s practices responding to the compliance with the Personal Data Protection Act (PDPA) and the relevant laws.

In this Policy, the data owners refers to BIG’s employees, staff, directors, executive, customer, vendor, supplier and/or partners, affiliates and joint venture partners.

1. Personal Information

“Personal Data” means any information relating to a Person, which enables the identification of such Person, whether directly or indirectly, for instance, first and last name, date of birth, address, telephone numbers, personal email addresses and/or any other information as required by law, either in paper or paperless or electronic forms.

“Sensitive Personal Data” means any information relating to a particular person which is sensitive and presents significant risks to the person’s fundamental rights and freedoms, which includes data regarding racial or ethnic origin, political opinions, cults, religious or philosophical beliefs, sexual behavior, criminal records, health data, disabilities, trade union information, genetic data, biometric data, or any data which may affect the Data Subject in the same manner.

2. Purposes of Personal Data Collection

The collection of the personal data shall be limited to the extent necessary basis in relation to the lawful purpose of BIG and as the laws provided. BIG shall seek prior consent from the data owners for each collection whether in the paper or electronic means or any other means as the case may be. For clarification, BIG shall collect the personal data for the following purposes.

1. For compliance with laws and regulations, covenants and orders.
2. For legitimate interests of BIG including but not limited to labor relations, labor protection, insurance, social security, taxes, occupational health and public health.
3. For necessity to prevent or suppress from a danger to a life, body or health harm of the data owners or other persons.
4. For necessity of the contractual purposes to which the data owners is a party, or as requested by the data owners before entering into the contract including the necessity to work under the terms and conditions of BIG.
5. For purposes of quality control of BIG’s service, research and development, improvement on users’ experiences of BIG’s website via Cookies or marketing activities.

3. Period and Storing of the Personal Data

1. BIG shall store/keep the personal data in the form of paper and/or soft files as appropriate.
2. BIG shall retain the personal data for a necessary period of time taking into account of the purposes and law requirement.

4. Using and/or Disclosing Restrictions on the Personal Data

1. BIG shall use/disclose the personal data in accordance with the consent of the data owners and BIG’s purposes as obtained consent from the data owners to solely collect and use by BIG. BIG shall then supervise other employees to strictly use and/or disclose the personal information according to the consent and purposes except for the following circumstances.
   • For compliance with laws and regulations, covenants and orders.
   • For the benefit of the investigation of the officials or the court proceedings.
   • For the benefit of the data owners; provided that the request for prior consent cannot be made at that time.
   • For necessity of legitimate interests of BIG.
   • For necessity to prevent or suppress from a danger to a life, body or health harm of the data owners or other persons.
   • For necessity of the contractual purposes to which the data owners is a party, or as requested by the data owners before entering into the contract.
2. BIG may use the information technology services of the third-party service providers as part of the personal data collection; provided that such service provider shall take security measures and shall not collect, use or disclose the personal data other than those prescribed by BIG.

5. Privacy Rights

The data owners are entitled to the following actions.

1. The right to request access to their personal data and to obtain a copy of such personal data in accordance with the procedures prescribed by BIG or to request disclosing the acquisition of the personal data where BIG may reject the request as permitted by law or a court order.
2. The right to request alteration or correction of the incomplete or incorrect personal data and/or make the personal data up-to-date.
3. The right to request deletion or destroy the personal data, unless BIG is entitled to retent such personal information pursuant to applicable laws.
4. The right to suspend the use of the personal data, and to revoke the consent which the data owners is entitled to do sold at all times.

6. Review and Changes of Policy

Company may review this policy to ensure that it remains in adherence to laws, any significant business changes, and any suggestions and opinions from other organizations. Company shall announce and review amended policies thoroughly before implementing all the changes.

7. Contact Channel

Bangkok Industrial Gas Co., Ltd.
3 Rajjanakarn Building 11th Floor, South Sathorn Road, Yannawa, Sathorn, Bangkok 10120
Tel : 02-685-6789 Fax: 02-685-6790 Email: bigpersonaldata@bigth.com

Effective date : 1 May 2021