Privacy Notice on CCTV Use

We, Thai Toshiba Lighting Co.,Ltd., Use closed-circuit television (CCTV) in and around our premises to monitor a specific space for the safety and security of our premises, assets, staff, customers and visitors. This privacy notice provides information on our collection, use, and disclosure of your personal data collected in our use of CCTV. We may update this notice from time to time.

1.     TYPES OF PERSONAL DATA WE COLLECTED

Our CCTV captures images of all individuals and their belongings (e.g. vehicles) entering the monitored area in or around our premises and facilities and may collect photos or videos of you.

2.    HOW WE PROCESS YOUR PERSONAL DATA

2.1.  We may collect, use, disclose, or process your personal data, for the following purposes:

(a)    To protect individuals’ life, body, health, personal safety, and belongings;

(b)   To protect and prevent our premises, facilities and assets from damage, disruption, vandalism, and other crime;

(c)    To support law enforcement agencies in the prevention, detection, and prosecution of crime and to act as a deterrent against crime;

(d)   To assist in the effective resolution of disputes which arise in the course of disciplinary or grievance proceedings;

(e)    To assist in the investigation or proceedings concerning a whistleblowing complaint; and loment proceedings

2.2  Our CCTV is in operation 24 hours a day, except in case of system failure or maintenance.

We place appropriate signage in the monitored areas to alert you that a CCTV installation is in use and your personal data is recorded.

3.    LEGAL BASES

We may collect, use, disclose, or process your personal data on any of the following legal bases.

(a)    Vital interest. The collection, use, disclose, or processing is necessary for the prevention or suppression of a danger to a person’s life, body, or health

(b)   Legitimate interest. It is in our legitimate interest to collect, use, disclose, or process, your personal data to achieve any of the purposes described above.

(c)    Legal obligations. We owe a duty to comply with the legal obligations prescribed by the applicable laws, including but not limited to the laws regarding safety and environment in the workplace. We consider the use of CCTV as a necessary measure to enable us to meet those obligations.

4.    DISCLOSURE OF YOUR PERSONAL DATA TO THIRD PARTIES

4.1 We may disclose your personal data to third parties (including our affiliates and service providers) if we consider that the disclosure is necessary for the purposes described above.

4.2 We may disclose your personal data to law enforcement agencies if the disclosure is necessary for compliance with our legal obligations and to support or assist them in the prevention, detection, and prosecution of crime.

5.   PERIOD OF RETENTION

5.1 We may retain your personal data no longer than as is necessary to achieve the purposes described in this notice or as is required by applicable laws. We may need to retain your personal data for so long as is necessary to deal with any disputes or legal proceedings that may arise.

5.2 If we no longer need to retain your personal data, we may destroy, delete, remove or anonymize your personal data.

6.    YOUR RIGHTS

You have the following rights pursuant to the laws:

(a)    Right of access. You have the right to access and obtain a copy of your personal data or request to disclose your personal data. The request must be in writing and sent to the channel provided in the “CONTACT US” section. Your request will be processed within the period required by law. We may, to the extent permitted by law or a court order, refuse to act on your request where such request could affect the rights and freedom of another person.

(b)   Right to rectification. You have the right to have incomplete, inaccurate, misleading, or not up-to-date personal data that we process about you rectified.

(c)    Right to data portability. You may have the right to obtain your personal data we hold, in a structured, electronic format, and transmit such data to another data controller, where this is (a) personal information which you have provided to us, and (b) if we are processing that data on the basis of your consent.

(d)   Right to object. You have the right to object to the collection, use, or disclosure of your personal data for the purposes of achieving our legitimate interest (or that of other persons). We may refuse to comply with your request if we can demonstrate compelling legitimate grounds for such collection, use, or disclosure, which may override your own interests or if such collection, use, or disclosure is for the purposes of establishment, compliance, exercise or defense of legal claims.

(e)    Right of erasure. You have the right to request us to erase or destroy your personal data or to anonymize your personal data if you believe that (i) the personal data is no longer needed for the purposes described in this notice or (ii) the collection, use, or disclosure of your personal data is unlawful. We may refuse to comply with your request for erasure or destroy for the purposes of establishment, compliance, exercise or destroy for the purposes of establishment, compliance, exercise or defense of legal claims, or compliance with laws.

(f)     Right to restrict processing. You have the right to request us to suspend the use of your personal data if you believe that we no longer need to retain the personal data for the purposes described in this notice, but you still require the retention for the purposes of establishment, compliance, exercise or defense of legal claims, or compliance with laws.

(g)    Right to withdraw consent. If you have consented to our collection, use, or disclosure of your personal data, you have the right to withdraw that consent at any time.

(h)   Right to lodge a complaint. You have the right to file a complaint against us to the relevant data protection supervisory authority if you believe that we breach or do not comply with any of our obligations under the applicable personal data protection laws.

7.    CONTACT US

If you have any question about this notice or if you would like to exercise your rights, please contact us at dpo@ttlc.toshiba.co.th or call 02-5011425-9