This Privacy Notice for Job Applicants and Personnel of Socket Nine Co., Ltd. (“Notice”) is issued by Socket Nine Co., Ltd. (“Company”).
A. Enforcement
- This Notice applies to any person with whom the Company interacts and whose Personal Data the Company must manage in connection with recruitment and employment / compensation and performance management / salary, wages and benefits / benefits administration / labor relations and communications / organizational development / training and development / scholarships / professional license and certification support / succession planning and high-potential personnel management, including (1) job applicants, (2) employees, including short-term employees, (3) consultants, (4) board members, (5) contractors , (6) interns, and (7) other persons for whom the Company has obtained Personal Data (e.g. family members, references, guarantors, beneficiaries, emergency contacts or other related persons) (collectively, “You” ).
B. Change of Notice
- The Company may amend or update this Notice from time to time in the event of any changes to the Company's practices or policies regarding the collection, use, disclosure and/or transfer of Personal Data or when applicable laws change, and the Company will notify you so that you are adequately informed of such changes. The Company would like you to read this Notice carefully and check the information on the Company's website regularly to see if the Company has made any changes to this Notice.
C. Collection, use, disclosure and/or transfer of Personal Data and protection of your Personal Data
- The purpose of this notice is to explain how the Company collects, uses, discloses and/or transfers your Personal Data, to inform you of your rights and choices you have with respect to your Personal Data as a data subject, and how to contact the Company should you have any questions.
1. Personal Data collected by the Company.
1.1 Types of Personal Data
“Personal Data” means any information about you, as defined below, which identifies or can be used to identify an individual. If any other information can be combined with your Personal Data or if other information is used to create a profile of an individual, the Company will treat such other information and the combined information as Personal Data. The Company may collect or obtain the following types of information, which may include your Personal Data, depending on the context of your relationship with the Company and what type of information you own:
1.1.0 Name details and abbreviations or names used to call you
Information that indicates the name of the person being called, the name used to address or refer to them, such as titles, first names, initials from first names, middle names, initials from middle names, surnames, female surnames before marriage, aliases or names previously used, including signatures.
1.1.1 Details about the characteristics of the person
Details about a person's characteristics including age, date of birth, gender, height, weight, marital status, nationality, country of birth, citizenship and status, military service details, physical or mental information and interests, photograph, language skills, number of children.
1.1.2 Contact Information
Contact details , current address, shipping address, residential address, home and fax numbers, personal email, personal mobile or wireless number, social media profile or handle, company email address, work phone number, work mobile or wireless number .
1.1.3 Educational information
Information about education , including educational qualifications and admissions, professional licenses, educational institutions, examination results, academic results from educational institutions or training institutions.
1.1.4 Employment details
Employment details, employment status and employment history , including information on occupation, rank, position, affiliation, employer registration number, job code, credit or debit card number of the organization, work permit status, name, number and age of former provident fund members, work permit details, reference check and background information, tax identification number, insurance claims, workers' compensation, employment history (including salary and benefits details), employment start date, length of employment, termination, property in possession during employment, assessments (e.g., performance and feasibility assessments, various types of competency assessments, skills, work knowledge and leadership, behavior), including the use of technological assessments and the use of various technologies (e.g. Internet, email), including information related to disciplinary offenses and compensation.
1.1.5 Government-issued identification information
A number or code issued by a government agency for identification purposes, including a national identification number, taxpayer identification number, any other identification number issued by the government, driver's license number, business license number, professional license number, license and certificate numbers, profession number, health plan number or government sponsored meal plan number, passport number and alien registration number.
1.1.6 Financial information
Financial information, financial status and history. This includes information regarding background checks, account numbers with financial institutions, financial transaction history, credit history, details of investment companies, deposits, insurance claim history, sources of income, income, salary, service fees, other compensation, deductions from employee salaries as required by law, voluntary deductions from employee salaries, financial assistance (e.g. benefits, welfare, welfare loans, assistance, grants, subsidies), customer purchase history (e.g. products, rental income, compensation), information about household income.
1.1.7 Views and opinions
Information about your views and opinions, including your preferences regarding employment contracts, training and development / scholarships / encouraging employees to obtain professional licenses and certifications / working relationships or any other information you choose to submit to the Company, your comments, feedback, complaints, suggestions, responses to surveys, inquiries and information you voluntarily provide during communications with Human Resources.
If you do not provide your Personal Data to the Company, the Company may not be able to offer you a job position upon request, and the Company may not be able to perform all of its duties to you, or fulfill its obligations under the employment contract, compensation administration / benefits administration / payment of salaries, wages and benefits / training and development / scholarships, encouraging employees to obtain professional licenses and certifications / succession planning and high-potential personnel management, working relationship with you, or unable fulfilling the Company's legal obligations. Additionally, the Company may collect your sensitive personal data, such as criminal records, health information, and biometric data.
Personal Data of third parties
If you provide the Company with Personal Data of another person, such as your mother's maiden name, information about your spouse, family members, children, guardians, dependents, board members, directors, shareholders, representatives, supervisors, managers, guarantors, beneficiaries, or if you request the Company to disclose such person's Personal Data to a third party, you are responsible for informing such person of the details in this Notice and obtaining the consent of such third party (if consent is required). You are also responsible for ensuring that the Company is lawful in collecting, using, or disclosing such individuals' personal data as described in this Notice.
Personal Data of minors, incompetent persons and quasi- incompetent persons
In the event that the Company is aware in advance that the data subject for which the Company must obtain consent is a minor or a person who is unable to give consent by law, the Company will not collect information from a minor unless it receives consent from a person exercising parental authority who has the authority to act on behalf of the minor, and will not collect information from a person who is a quasi-incompetent person and incompetent person until consent is obtained from a guardian or a custodian (as the case may be).
If the Company does not know in advance that the data subject is a minor, a quasi-incompetent person, or an incompetent person, but later learns that the Company has collected the Personal Data of the minor without the consent of the person exercising parental authority to act on behalf of the minor (in cases where consent is required and the minor is not legally able to give consent by himself/herself), or has collected the Personal Data of a quasi-incompetent person or an incompetent person without the consent of the guardian or custodian (as the case may be), the Company will promptly delete such data and will collect, use, disclose, and/or transfer such data only in cases where the Company can rely on other lawful grounds than consent.
1.2 Collection of your Personal Data
The Company may collect Personal Data from you directly or indirectly from other sources, such as publicly accessible sources, recruitment service providers or platforms (including employment agencies, recruiters, career websites, social media platforms, event organizers), business partners, or third parties, such as hospitals, universities, government agencies, government departments, data companies, training and development service providers, competency assessment service providers, educational institutions, and websites of professional bodies or associations that regulate licensing and certification, including survey, engagement, or employment relationship service providers.
2. Legal bases and purpose for collecting, using or disclosing your Personal Data
2.1 Legal bases
The Company will consider determining the legal bases for collecting, using or disclosing your Personal Data as appropriate. The legal bases that the Company relies on as the main bases includes:
2.1.0 To comply with the contract
To enable the Company to take necessary actions to enter into a contract with you and/or to comply with the agreement or provide you with the benefits under the contract. (e.g. fulfilling an employment agreement, service agreement, or consultancy agreement.)
2.1.1 To comply with the law
To enable the Company to carry out its legal duties (e.g. requesting evidence to prove your identity in order to comply with the Company's legal obligations).
2.1.2 For legitimate interests
For the legitimate interests of the Company and others (e.g. to detect and prevent fraud, etc.)
2.1.3 Necessity to life
To prevent or suppress danger to life, body or health of a person. (e.g. providing information to assist individuals in emergency accidents.)
2.1.4 Your consent
To collect, use or disclose your Personal Data where consent is required.
2.2 Purpose requiring legal bases other than consent
The Company may collect, use, disclose and transfer your Personal Data that it has collected for various purposes based on legal bases other than consent, depending on your relationship with the Company, the benefits you receive from the Company, the nature of the relationship between the Company and you and the Company's business partners, and/or other considerations as set out above or below.
Please note that the purposes set out below are merely the Company's practices for using your information and are applicable only to purposes relevant to your use of your data.
2.2.0 Pre-employment process
To carry out recruitment processes (such as recruiting, selecting, making hiring decisions or checking references in the case of repeat hires and inter-company transfers of employment), processing employment applications, conducting employment interviews, evaluating qualifications based on information contained in employment applications, suitability, your qualifications, as well as your work performance, background checks and screening in the event that you have been offered employment with the Company, checking-your qualifications, as well as your work performance, background checks and screening in the event that you have been offered employment with the Company, checking your information on any prohibited or restricted employment list, contacting references you provide or apply with (e.g. contacting to inform you whether your application has been approved or denied).
2.2.1 Authentication process
Identity verification and signing, including identity confirmation when you apply for a job with the Company or establish a working relationship with the Company, or in the event that the Company provides you with benefits, to verify access and login rights, including proving your location to grant access to your account.
2.2.2 Hiring and Onboarding Process
Carrying out the recruitment process, entering into employment contracts, determining employment details, performing and certifying employment, communicating and disseminating information to you, contacting you and emergency contact persons, applying for work permits and visas, handling employment-related matters, complying with the Company's work regulations, conducting organizational development activities, providing learning and development opportunities, providing scholarships, arranging training, referencing and reporting, handling registration and renewal of professional licenses and certificates, providing services and information for entry and exit, providing references and advice for performance evaluation using an evaluation system, handling signatures, promotions, talent programs and succession, as well as disciplinary investigations.
2.2.3 Compensation, salary, wages, compensation and benefits
Management, including analysis and planning of salary, wages and other compensation, calculation of salary / net income, issuance of certificates, issuance of payment documents, provident funds, social security, compensation funds, compensation, returns and prizes, withholding taxes and legal and voluntary remittances, operations of health insurance cards and contracting of insurance (including life insurance, health insurance, physical health, accident, health insurance and travel insurance), employment or welfare such as loans, housing allowances, annual health checks, medical treatment, granting benefits in the event of a dispute, granting benefits in the event of childbirth and children's scholarships, registering with the Cremation Welfare Associations.
2.2.4 Various processes related to transactions and/or payments
Transferring funds, payments and transactions for the Company's operations, payment of debts and closing of amounts offered to you, tracking and servicing contract enforcement, processing your account in accordance with the various obligations for loans granted to you.
2.2.5 Internal management and relationship maintenance
Data analysis, reporting and activities related to data maintenance, facilitation, provision of tools and equipments, handling of complaints, claims and surveys, management of employees’ contact addresses.
2.2.6 Post-termination steps
Processing of various matters related to off-boarding, providing post-termination services, issuance of certificates, termination/dismissal, conducting special inspections or surveys, transferring to a new position in the Company's affiliated companies.
2.2.7 Preservation of the Company's rights and benefits
Maintaining the security and integrity of the Company's business operations, exercising rights or maintaining the Company's benefits when required by law, such as investigating, preventing, responding to claims of fraud, embezzlement, and risk assessment, investigating transactions, claims of intellectual property infringement, business rehabilitation, dispute management, preventing the loss of assets, checking the list of persons according to regulatory agencies or laws, preventing criminal offenses or resolving disputes that may affect the business, body or health of individuals, including compliance with laws, reporting unusual events, preventing and investigating criminal offenses, discipline, or using as evidence in disputes or legal proceedings.
2.2.8 Compliance with legal and regulatory duties
Compliance with legal obligations, legal proceedings or orders from government authorities, which may include orders from authorities outside Thailand and/or cooperating with courts, regulators, government officials and law enforcement agencies when the Company has reasonable grounds to believe that the Company is legally required to do so and when the Company is reasonably required to disclose your data in order to comply with legal obligations, legal proceedings or orders of government authorities, including complying with the Company's Code of Conduct and internal policies, exercising the Company's rights or raising objections to legal claims, maintaining records and resolving complaints and disputes, governance-related activities.
2.2.9 Monitoring of security and system maintenance
Identity verification and access control and related records for monitoring systems, devices and the Internet, securing information technology systems, preventing and solving crimes, managing risks and preventing fraud.
2.2.10 Corporate transactions
In the event of a sale, transfer, merger, restructure or similar transaction, the Company will disclose and transfer your Personal Data to one or more third parties in accordance with the terms of such transaction.
2.3 Purpose requiring consent basis
The Company will collect, use or disclose Personal Data for which it cannot rely on any other legal bases apart from explicit consent, including sensitive personal data, for the following purposes:
2.3.0 To consider for employment, verify, screen background, and conduct investigations.
The Company may collect, use, and record your criminal history data to consider for employment, verify, screen background, and conduct investigations.
2.3.1 To manage welfare and benefits.
To effectively manage your welfare and benefits, including leave, payroll, wages, health insurance reimbursements, scholarships, and other related benefits. The Company may collect and use your health information, including hospital patient numbers, health insurance beneficiary numbers, health plans, medical device and serial numbers, medical treatments, information related to medical care, diagnoses and medical history, medical payment information, healthcare reimbursement claim details, medical images and metadata, prescription (Rx) numbers, health insurer ID or account numbers, bank, card, or medical product or device usage information, medical or general health data, physical and mental health data, test results or genetic information, family medical history, and hospitalization records.
2.3.2 To use the Face Scan system for identity verification and access control within designated company areas.
The Company may collect your biometric facial characteristics for use in its Face Scan system for identity verification and access control within designated company areas, including building entry and exit, restricted area access, or timekeeping.
2.3.3 To use for public relations and company activities.
The Company may collect, use, and disclose your Personal Data, such as your name-surname, photographs, voice, and video images, for public relations and company activities.
3. Persons to whom the Company discloses your Personal Data
The Company may disclose your Personal Data to the following persons for the purposes set out in Section 2 above, depending on the nature of your relationship with the Company and the nature of the services you receive from the Company.
Types of Personal Data recipients
3.3.0 Banks and affiliated companies of banks or financial institutions
The Company may have to disclose your Personal Data to the Bank, the Bank's affiliates or financial institutions located in both Thailand and abroad for purposes related to providing business services, internal management or to comply with relevant laws and regulations.
3.3.1 Service Provider
The Company may hire external companies to provide services on behalf of the Company and assist the Company in entering into employment contracts / compensation administration / benefits administration / salary, wages and benefits / training and development / scholarships / encouraging employees to obtain professional licenses and certifications / various types of competency assessments, services to prepare or store your Personal Data for use in various purposes of the Company, including human resources management, such as the Company hires and assigns some tasks to infrastructure, software and website development providers as well as information technology work, data storage and cloud service providers, private recruitment agencies and outsourced personnel forecasting providers, research service providers, domestic and international development and analysis providers in various forms, various types of The Company may hire external companies to provide services on behalf of the Company and assist the Company in entering into employment contracts / compensation administration / benefits administration / salary, wages and benefits / training and development / scholarships / encouraging employees to obtain professional licenses and certifications / various types of competency assessments, services to prepare or store your Personal Data for use in various purposes of the Company, including human resources management, such as the Company hires and assigns some tasks to infrastructure, software and website development providers as well as information technology work, data storage and cloud service providers, private recruitment agencies and outsourced personnel forecasting providers, research service providers, domestic and international development and analysis providers in various forms, various types of competency assessment providers, external training providers, providers of preparation or manage your Personal Data as required by law, life insurance service providers, accommodation service companies, transportation service providers, communication network service providers, marketing service providers, advertising service providers, mass media and social media service companies, online marketing service companies, event organization service providers, publishing service providers, telecommunications system service providers, legal consulting service providers, auditing service providers, internal auditing service providers, internal control service companies, brokerage business service providers, electronic payment service providers, document storage and destruction service providers, mailing or postal service providers, document printing service providers, cloud or data backup service providers, document storage or data storage rental service providers, data backup service providers, various system organization service providers, communication system service providers, software system service providers, and information service providers, etc.
3.3.2 Professional consultant
The Company may be required to disclose your Personal Data to professional advisors in the areas of auditing, legal and accounting.
3.3.3 Company or partner company
The Company may need to disclose your Personal Data to its business partners in order for them to provide services or conduct business transactions related to providing services to the Company or for them to provide related services (e.g. hospitals that provide insurance or insurance company partners that provide benefits and programs).
3.3.4 Association or Institution
The Company may disclose your Personal Data to associations or institutions in The Company may disclose your Personal Data to associations or institutions in Thailand or abroad of which the Company is a member or where disclosure is required by law, internal policy or Company policy announcement, etc.
3.3.5 Third parties to whom you entrust or to whom you request to disclose your Personal Data.
The Company may hire external companies to provide services on behalf of the Company and assist the Company in entering into employment contracts / compensation administration / benefits administration / salary, wages and benefits / training and development / scholarships / encouraging employees to obtain professional licenses and certifications / various types of competency assessments, services to prepare or store your Personal Data for use in various purposes of the Company, including human resources management, such as the Company hires and assigns some tasks to infrastructure, software and website development providers as well as information technology work, data storage and cloud service providers, private recruitment agencies and outsourced personnel forecasting providers, research service providers, domestic and international development and analysis providers in various forms, various types of The Company may hire external companies to provide services on behalf of the Company and assist the Company in entering into employment contracts / compensation administration / benefits administration / salary, wages and benefits / training and development / scholarships / encouraging employees to obtain professional licenses and certifications / various types of competency assessments, services to prepare or store your Personal Data for use in various purposes of the Company, including human resources management, such as the Company hires and assigns some tasks to infrastructure, software and website development providers as well as information technology work, data storage and cloud service providers, private recruitment agencies and outsourced personnel forecasting providers, research service providers, domestic and international development and analysis providers in various forms, various types of competency assessment providers, external training providers, providers of preparation or manage your Personal Data as required by law, life insurance service providers, accommodation service companies, transportation service providers, communication network service providers, marketing service providers, advertising service providers, mass media and social media service companies, online marketing service companies, event organization service providers, publishing service providers, telecommunications system service providers, legal consulting service providers, auditing service providers, internal auditing service providers, internal control service companies, brokerage business service providers, electronic payment service providers, document storage and destruction service providers, mailing or postal service providers, document printing service providers, cloud or data backup service providers, document storage or data storage rental service providers, data backup service providers, various system organization service providers, communication system service providers, software system service providers, and information service providers, etc.
3.3.8 Government agencies and other agencies to which the Company is required to disclose Personal Data in order to comply with legal requirements or legal purposes.
The Company may be required to disclose your Personal Data to government agencies, compliance agencies, regulatory agencies, law enforcement agencies or other agencies with legal authority, both domestic and foreign, to comply with laws, regulations, court orders or requirements of legal authorities, including to exercise or defend rights in legal proceedings or legal proceedings.
3.3.9 Other types of data recipients
Companies, financial institutions or educational institutions that the Company is not affiliated with, that request your Personal Data from the Company for reference purposes, as provided by you or under other legal bases.
4. Transfer of your Personal Data abroad (if applicable)
The Company may need to transfer your Personal Data to third parties located overseas in order for the Company to achieve its business objectives or for your benefit and/or when it is necessary for the Company to transfer your Personal Data to a third country whose data protection standards are not equivalent to those in Thailand. The Company will take steps to ensure that adequate protection measures are in place for the transferred Personal Data or to ensure that the transfer can be carried out in accordance with applicable data protection laws. For example, the Company may request that third parties who are authorized to access the transferred Personal Data agree with the Company to ensure that the data will be protected in accordance with data protection standards equivalent to those in Thailand.
5. Period for retention your Personal Data
The Company will collect and retain your Personal Data only for as long as necessary to fulfill the purposes stated in this notice and as required by applicable law, as follows:
5.1 For job applicants and any other individuals whose Personal Data the Company has obtained in relation to job applications:
The Company will retain your Personal Data for a period of 1 year from the date of your application, or as required by law, or until the data is no longer necessary for the purposes related to employment consideration.
5.2 For employees (including short-term employees), consultants, board members, contractors, interns, and any other individuals whose Personal Data the Company has obtained in relation to their work performance:
The Company will retain your Personal Data throughout the duration of your relationship with the Company and for an additional 10 years from the date such relationship ends. This is to comply with applicable laws and regulations, internal company policies, or to meet the Company's operational requirements, such as proper account keeping, facilitating customer relationship management, pursuing legal claims, or responding to requests from regulatory authorities.
6. Your rights
Subject to the provisions of the Personal Data Protection Act, you have the following rights regarding the collection, use, disclosure and/or transfer of your Personal Data:
You have the right to request access to information relating to the collection, use, disclosure and/or transfer of your Personal Data, and to obtain a copy of the Personal Data held about you or to request disclosure of the source of Personal Data that you have not consented to.
You have the right to request that your Personal Data is accurate, current, complete and not misleading. If you believe that your Personal Data is inaccurate, not current or incomplete, you may request that the Company correct such Personal Data.
You have the right to request that your Personal Data be erased, destroyed or anonymized, as required by law.
- Right to restriction of processing
You have the right to request that your Personal Data be suspended.
You have the right to object to the collection, use, disclosure and/or transfer of your Personal Data, in particular where it concerns you directly. You have the right to object to the collection, use, disclosure and/or transfer of your Personal Data for direct marketing purposes in all cases, including the profiling in connection with such direct marketing.
- Right to withdraw consent
If you have given consent for the collection, use, disclosure and/or transfer of your Personal Data, you have the right to withdraw your consent at any time.
- Right to data portability
Where provided by law, you have the right to obtain from us your Personal Data in a commonly used, human-readable format that can be transferred using automated tools or devices, including sending or transferring Personal Data in such a format to another organization.
- Right to lodge a complaint
You have the right to lodge a complaint with a competent authority regarding the collection, use, disclosure and/or transfer of your Personal Data, whether done by the Company or by another person acting on its behalf. However, the Company requests that you give the Company an opportunity to address and resolve your concerns before you contact the competent authority. If you have any concerns, the Company requests that you contact the Company at the earliest opportunity.
To exercise the rights set out above, you can contact the Company at the address shown in the “Contact the Company” section. However, exercising your rights as set out above may be limited by law and in some cases, the Company may refuse your request when there is a reasonable and lawful reason, such as in the case where the Company is required to perform its duties under the law or by a court order.
7. Contact the Company
If you have any questions, suggestions or concerns about the Company's practices with respect to the protection of Personal Data, or if you would like to make a request to exercise any of the rights set forth in this Notice, please contact the Company at the address listed below. The Company will endeavor to answer your questions and provide you with additional information about the protection of Personal Data.
Socket Nine Co., Ltd.
Empire Tower Building 1 , Unit 3507-3508 , 35th Floor , Sathorn Tai Road, Yan Nawa Subdistrict, Sathorn District, Bangkok 10200
