Tidlor Public Company Limited uses CCTV cameras inside and around our premises to record specific areas for the security and safety of our premises, assets, employees, customers, and visitors. This Privacy Statement provides information about the collection, use, and disclosure of your personal data that we collect using CCTV cameras. We may update this statement from time to time. You can find our updated statement at https://www.tidlor.com/en/policy/privacy/cctv

1. Types of Personal Data We Collect

   Our CCTV cameras record images of all individuals, including their assets (such as vehicles), who enter the monitored areas located inside [or around] our premises and facilities, and may collect photographs or video recordings [or audio] of you

2. How We Process Your Personal Data

   1. We may collect, use, disclose, or process your personal data for the following purposes

      1. Protecting the life, body, health, personal safety, and property of various individuals
      2. Protecting and preventing our premises, facilities, and assets from damage, disruption, destruction, and other crimes
      3. Supporting law enforcement agencies in preventing, investigating, and prosecuting crimes, and actions to suppress crimes
      4. Assisting in effectively resolving disputes as they arise in disciplinary or complaint processes
      5. Assisting in investigations or processes related to whistleblowing, and
      6. Assisting in initiating or defending any civil cases, including but not limited to employment cases
   2. Our CCTV cameras operate 24 hours a day, except in cases of system malfunctions or system maintenance
   3. We have installed appropriate signage in monitored areas to inform you of the use of CCTV cameras and the recording of your personal data
3. Legal Principles or Bases

   We may collect, disclose, or process your personal data based on the following legal principles or bases

   1. Vital Interest Basis The collection, use, disclosure, or processing of personal data is necessary to prevent or suppress danger to life, body, or health of individuals
   2. Legitimate Interest Basis The collection, use, disclosure, or processing of your personal data is an action for our legitimate interests to achieve any of the purposes stated above
   3. Legal Obligation Basis We have a duty to comply with obligations as prescribed by applicable laws, including but not limited to laws on workplace safety and environment. We consider the use of CCTV cameras as an important measure that helps us comply with these obligations
4. Disclosure of Your Personal Data to Third Parties
   1. We may disclose your personal data to third parties (including our affiliated companies and service providers) in cases where we consider it necessary to disclose such personal data for the purposes stated above
   2. We may disclose your personal data to law enforcement agencies if it is necessary to disclose for our legal duties and to support or assist law enforcement agencies in preventing, investigating, and prosecuting crimes
5. Personal Data Retention Period
   1. We may retain your personal data for no longer than necessary to achieve the purposes stated in this statement, or as necessary under applicable laws. However, we may need to retain your personal data for as long as necessary to manage disputes or legal processes that may arise
   2. If we no longer need to retain your personal data, we may destroy, delete, remove from the system, or anonymize your personal data so that it cannot identify the data subject
6. Your Rights

   You have the following legal rights

   1. Right of Access You have the right to access and request copies of your personal data, or request disclosure of your personal data. Such requests must be made in writing and sent to the channels specified in the "Contact Us" section. Your request will be processed within the time period prescribed by law. We may refuse to comply with your request if such request may affect the rights and freedoms of other individuals, only to the extent permitted by law or court orders
   2. Right to Correction You have the right to request correction of personal data that we have processed about you to be complete, accurate, not misleading, or current
   3. Right to Data Portability You may have the right to request your personal data that we have in an organized electronic format, and transmit such personal data to another personal data controller, provided that (a) it is personal data that you have provided to us, and (b) we process such data based on your consent
   4. Right to Object You have the right to object to the collection, use, or disclosure of your personal data for the purpose of achieving our legitimate interests (or those of other individuals). We may refuse to comply with your request if we can demonstrate that there are legitimate grounds for collecting, using, or disclosing such personal data that may override your interests, or if the collection, use, or disclosure of such personal data is for establishing legal claims, complying with or exercising legal claims, or raising defenses against legal claims
   5. Right to Deletion or Destruction You have the right to request us to delete or destroy your personal data, or anonymize your personal data so that it cannot identify the data subject, if you believe that (1) such personal data is no longer necessary for the purposes stated in this statement, or (2) your personal data has been collected, used, or disclosed unlawfully. However, we may refuse to comply with requests to delete or destroy your personal data for establishing legal claims, complying with or exercising legal claims, raising defenses against legal claims, or complying with laws
   6. Right to Restrict Processing You have the right to request us to suspend the use of your personal data if you believe that we no longer need to retain such personal data for the purposes stated in this statement, but you still want to retain such personal data for establishing legal claims, complying with or exercising legal claims, raising defenses against legal claims, or complying with laws
   7. Right to Withdraw Consent In cases where you have consented to our collection, use, or disclosure of your personal data, you have the right to withdraw such consent at any time
   8. Right to File Complaints You have the right to file complaints against us with the personal data protection supervisory authority if you believe that we have violated or failed to comply with any of our duties under applicable personal data protection laws
7. Contact Us

   The Company values protecting personal data of customers and is committed to complying with all provisions of the Personal Data Protection Act B.E. 2562. You can contact the Data Protection Officer to complain about personal data management at email [email protected], or if you wish to exercise your rights, please contact: