The protection of your personal information is extremely important to SVI Public Company Limited (“SVI” or “we”, “us” or “our”) and its affiliates (referred to as SVI and its affiliates called "SVI Group"). This Privacy Policy aims to inform you about how SVI collect, use, or disclose your personal information lawfully in accordance with the Personal Data Protection Act B.E. 2562 (2019) and General Data Protection Regulation.

SVI Group refers to SVI Public Company Limited, SVI AEC Company Limited, BEI Company Limited, and Tohoku Solutions Company Limited.

Personal Information refers to the personal information of the data subject that is used to identify the identity, either in direct or indirect method. Personal information does not include the information of the deceased.

Sensitive Personal Information refers to the special category of personal information in accordance with the Personal Data Protection Act in clause 26th. Sensitive Personal Information includes personal information pertaining to racial, ethnic origin, political opinions, cult, religious or philosophical beliefs, sexual behavior, criminal records, health data, disability, trade union information, genetic data, biometric data, or of any data which may affect the data subject in the same manner.

Data Processing refers to the collection, use, or disclosure of personal information.

Data Subject refers the individual who owns the personal information.

We will collect, use, or disclose personal information when it is necessary to fulfill the following purposes:

3.1 To provide products or services;
3.2 To provide information about products or services;
3.3 To distribute SVI advertising messages;
3.4 To process and improve the SVI services;
3.5 To maintain SVI’s security level as defined in the company’s policy;
3.6 To investigate in the event of future disputes or problems;
3.7 To prevent or suppress life-threatening harm of the personal data subject;
3.8 To perform activities that is in the public interest;
3.9 To fulfill the requirements of a contract or agreement with the personal data subject or to process prior to entering into that contract.
3.10 To perform activities that is considered as the legitimate interests of SVI
3.11 To comply with the laws or regulators’ requirements.

Nevertheless, SVI will not use the personal information rather than the above purposes unless:
- SVI notifies the new purpose to the data subject and inform the with consent;
- It is required by Personal Data Protection Act or General Data Protection Regulation or relevant laws.

To comply with the Personal Data Protection Act, we will collect the personal information lawfully and fairly with the intended and scope for operation under the SVI's objectives. When necessary, we will inform the data subject with the consent request with clear description in accordance with the criteria specified by the Personal Data Protection Act and General Data Protection Regulation.

4.1 Types of Personal information

We may collect personal information of shareholders, stockholders, employees, customers, suppliers and our visitors. The types of personal information collecting by us depends on the nature of the activities, locations, and how it will be collected. Which may include the information as follows:

(1) Personal information identifies the identity of data subject such as name, surname, photograph, identification card number, passport number, driver’s license number, date of birth, occupation, position, name of workplace, nationality, gender, marital status, and vehicle registration number which record by the CCTV footage within the area under the control of the organization with access username and password in the system;

(2) Sensitive personal information as define in clause 2;

(3) Personal contact information includes home address or work location, phone number, E-mail, or Social Application such as LINE, Whatsapp, or Facebook;

(4) Personal financial information such as details of bank accounts or data of personal income tax;

(5) Organization business information for recommend the products promotion, activities, and services;

(6) Employment information such as the job interviews, performance appraisals, positions, salaries, employment benefits, and provident fund;

(7) Data includes the technical information from the use of the organization’s website or application tracking on the activity’s usage, log files, IP address, and Cookies.

4.2 Sources of Collection

SVI primarily collects personal information directly from the data subject. However, we may collect personal information from other sources of information as follows:

(1) Public sources;

(2) Government agencies and Regulators;

(3) Any communication method, either face-to-face or communication tools;

(4) Suppliers;

(5) Related persons of the data subject.

However, if SVI collects personal information from other sources, we will conduct in accordance with the procedure and guideline to comply with the Personal Data Protection Act and General Data Protection Regulation.

The consent of personal information is an agreement voluntary by the data subject to SVI. The data subjects may refuse to provide personal information as requested by us. Nevertheless, failure to provide the consent may result in unable to enter into an agreement, grant, or accept any product or service to the data subject. Besides, we may be unable to perform any action as requested by the data subject or duties under the contract in any terms and conditions.

We will store and retain the personal information only for the period of time as necessity to meet the legal obligations and to operate business smoothly. By default, the personal information will be retained up to 10 years from the date on which the data subject terminates the relationship with us, unless it is required by applicable law or the consent request state the retention period otherwise. We will delete, destroy, or destruct the personal information after the specified retention period.

We will not use or disclose personal information to the third parties or data processors without the consent from the data subject, except in the case of exemption from requesting consent in accordance with the Personal Data Protection Act to disclosure by law. However, for the benefit of the SVI’s operations and services to the data subject, we may disclose the personal information of the data subject to both domestic and international related parties as follows:

We will not use or disclose personal information to the third parties or data processors without the consent from the data subject, except in the case of exemption from requesting consent in accordance with the Personal Data Protection Act to disclosure by law. However, for the benefit of the SVI’s operations and services to the data subject, we may disclose the personal information of the data subject to both domestic and international related parties as follows:

(1) SVI affiliates;

(2) Parties, subcontractors, or service providers related to the operation of the SVI;

(3) Any related people whose data subject has given consent to use or disclose the data subject’s personal information;

(4) Government agency representatives according to the law under the court order or any other authority under the law.

In addition, the personal information will only be shared to the third parties or data processor whom we confident that they will keep the personal information confidentially and will not use the personal information for any purposes other than the agreement or given consent.

SVI will establish the security measures to collect, use or disclose the personal information in accordance with the requirement of the Personal Data Protection Act and General Data Protection Act as well as the related regulations and standards. SVI will enforce the same level of measures to our data processors whom we share the personal information.

In the event of a breach of security by external transfer of your personal information, storage or handling due to destruction, loss, alteration, unauthorized disclosure or access to such information without intent or unlawful. Based on the results of our assessment, we have established management processes and company requirements to identify and investigate such incidents. In the event of an incident such as information leakage we will take appropriate action in such situations, such as writing reports to the governing body and contacting any person who may be affected.

In respect of the personal information that SVI collects, the data subject has the rights to request in accordance with Personal Data Protection Act. SVI will review your request and will then respond accordingly.

The data subject has the following rights under the laws:

(1) The right to access, request a copy, or request of disclosure on unconsented data;

(2) The right to amend the Personal information;

(3) The right to request for deletion, destroying, or anonymization of the Personal information;

(4) The right to withdraw the consent;

(5) The right to obtain or transfer the Personal information;

(6) The right to request the suspension of the use of Personal information;

(7) The right to object to the collection, use, or disclosure of the Personal information;

(8) The right to complain to official or the regulatory authority for the protection of the Personal information.

The request of any rights shall neither affect the processing of personal information for which the data subject has lawfully consented, nor violate any statutory requirements to be complied by SVI.

According to the SVI's regulations, we do not intend to collect and use the youth personal information in a business-related manner. We will take appropriate action in accordance with applicable regulations and laws.

We will comply with all applicable laws, regulations, and guidance including other standards which involve with the handling of personal information and review the Privacy Policy regularly. Any amend of the Privacy Policy will take effect when the revised Privacy Policy is announced on the website.