CCTV Privacy Policy
NEP Realty and Industry Public Company Limited (hereinafter referred to as the “Company”) uses closed-circuit television (CCTV) for surveillance within and around all areas of its buildings and premises (collectively referred to as the “Premises”) to protect life, health, and property. The Company collects personal data of staff, employees, customers, contractors, visitors, and any other individuals (collectively referred to as “you”) who enter the Premises through the operation of CCTV systems.
This CCTV Privacy Policy (“Policy”) outlines the Company’s practices regarding the collection, use, and disclosure of your identifiable personal data (“Personal Data”), as well as your rights under applicable data protection laws.
1. Legal Basis for Data Processing
The Company collects your personal data based on the following legal grounds:
❒ Necessity to prevent or suppress danger to life, body, or health of you or others.
❒ Legitimate interests pursued by the Company or a third party, which do not override your fundamental rights.
❒ Compliance with applicable legal obligations related to workplace safety, security, and protection of the Company’s property.
2.Purpose of Personal Data Collection
Your personal data is collected for the following purposes:
2.1 To protect your personal health, safety, and property.
2.2 To safeguard the Company’s buildings, facilities, and assets from damage, disruption, vandalism, or other criminal acts.
2.3 To support law enforcement in the prevention, detection, investigation, and prosecution of offenses.
2.4 To assist in disciplinary processes and grievance resolution.
2.5 To support investigation processes or complaint handling.
2.6 To assist in initiating or defending civil legal claims, including but not limited to employment-related matters.
2.7 Others (if any)
3. Types of Personal Data Collected
As stated in Objective 2, the Company installs CCTV cameras in visible locations and places warning signs at entrances, exits, and other areas deemed necessary for surveillance. This is done to collect your personal data when you enter the premises, as follows:
List of Personal Data Collected |
|
The Company will not install CCTV cameras in areas where your fundamental rights may be unreasonably violated, such as restrooms, bathrooms, sleeping quarters, or any areas designated for employee rest and relaxation.
4. Disclosure of Your Personal Data
The Company will treat CCTV data related to you as confidential and will not disclose it unless it is necessary to achieve the surveillance objectives stated in this notice. In such cases, the Company may disclose CCTV footage to the following types of individuals or legal entities:
4.1 Government authorities with legal powers and duties, for the purposes of law enforcement, investigation, inquiry, or legal proceedings.
4.2 Third-party service providers, as necessary to ensure the prevention or mitigation of harm to life, body, health, or property—whether yours or that of others.
4.3 Others (if any)
5. Your Rights Under the Personal Data Protection Act B.E. 2562 (2019)
The Personal Data Protection Act B.E. 2562 (2019) aims to give you greater control over your personal data. You may exercise your rights under this Act once the provisions concerning the rights of data subjects come into effect. The details of these rights are as follows:
5.1 Right of Access, Copy, and Disclosure of Source You have the right to access, obtain a copy of, and request the disclosure of the source of your personal data collected by the Company, except where the Company is legally entitled to refuse your request—such as in accordance with the law or a court order, or where fulfilling your request may adversely affect the rights and freedoms of others.
5.2 Right to Rectification
You have the right to request the correction of your personal data if it is inaccurate or incomplete, so that it becomes accurate, up-to-date, complete, and not misleading.
5.3 Right to Request the Suspension of Data Processing You have the right to request the suspension of the use of your personal data in any of the following circumstances:
- When the Company is verifying your request to correct your personal data to ensure it is accurate, complete, and up to date;
- When your personal data has been collected, used, or disclosed unlawfully;
- When your personal data is no longer necessary for the purposes for which the Company collected it, but you request that it be retained for the establishment, exercise, or defense of your legal claims;
- When the Company is in the process of demonstrating legitimate grounds for the collection, use, or disclosure of your personal data, or assessing whether such collection, use, or disclosure is necessary for the performance of a task carried out for the public interest—following your exercise of the right to object.
5.4 Right to Object to the Collection, Use, or Disclosure of Personal Data You have the right to object to the collection, use, or disclosure of your personal data, except where the Company is legally entitled to reject your request—such as when the Company can demonstrate that it has compelling legitimate grounds for such collection, use, or disclosure that override your interests, or when it is necessary for the establishment, exercise, or defense of legal claims, or for the performance of a task carried out in the public interest as part of the Company’s mission.
6. Retention Period of Personal Data
To fulfill the purposes of surveillance through the use of CCTV equipment as outlined in this notice, we will retain CCTV footage containing your personal data for a period not exceeding 30 days from the date you enter the Company’s premises, or until the expiration of the statutory limitation period for legal proceedings, whichever is longer. After the retention period has ended, the recorded footage will be automatically deleted.
7. Personal Data Security Measures
The Company has implemented appropriate technical and organizational measures to ensure the security of your personal data. These measures are designed to prevent the loss, unauthorized access, deletion, destruction, use, alteration, modification, or disclosure of personal data. Such measures are in accordance with our Information Security Policy and related practices.
In addition, the Company has established a Personal Data Protection Policy, which has been publicly announced and communicated throughout the organization. This policy includes operational guidelines to ensure the security of personal data during its collection, use, or disclosure, while maintaining its confidentiality, integrity, and availability. The Company also conducts periodic reviews of this policy and this notice, within an appropriate timeframe.
8. Responsibilities of the Data Controller
The Company has designated specific personnel who are authorized and responsible for the collection, use, or disclosure of personal data related to this processing activity. Only such authorized personnel are permitted to access your personal data. The Company will ensure that all personnel strictly comply with the provisions of this notice.
9. Amendments to This Privacy Notice
The Company may update or amend this notice as it deems appropriate. Any changes will be announced via the following channel: privacy policy with the date of the latest version indicated at the end of the notice. You are encouraged to review this notice regularly, particularly before entering the Company’s premises.
Your entry into the premises shall be deemed as acknowledgment and acceptance of the terms set out in this notice. If you do not agree with any part of this notice, please refrain from entering the premises. Continued access to the premises after any amendments have been published through the above channel will be regarded as your acknowledgment of such changes.
10. Contacting the Company You may contact the Company using the details provided below:
Data Protection Officer (DPO)
- Contact Address:
NEP Realty and Industry Public Company Limited
Head Office: 41 Soi Phahonyothin 5, Phahonyothin Road, Phaya Thai Subdistrict, Phaya Thai District, Bangkok 10400
Factory: Nava Nakorn Industrial Promotion Zone, Nakhon Ratchasima
999/5 Moo 1, Mittraphap Road, Naklang Subdistrict, Sung Noen District, Nakhon Ratchasima 30380
- Contact Channels:
Privacy Center: 044-335-520-21 Email: [email protected]
