Notice No. 013/2024

Privacy Notice

Jasmine International Public Co., Ltd. And its subsidiaries, namely 3BBTV Co., Ltd., Premium Assets Co., Ltd., Jasmine Internet Co., Ltd., Jasmine Submarine Telecommunications Co., Ltd. and Jas Green Co., Ltd. collectively referred to as “JAS Group” are committed to collecting, using and disclosing data called “Personal Data Processing” in accordance with the law and respecting the privacy rights of the data subjects. Therefore, this Privacy Notice is issued to inform the data subjects of the methods that JAS Group processes personal data, including the types of personal data and the purposes of such processing, as well as details on the retention period of personal data, measures to maintain the security of personal data, the rights of the data subjects, and the methods by which the data subjects can contact the Data Protection Officer (DPO) to ensure the data subjects that data that JAS Group receives will be processed in accordance with the law. This Privacy Notice protects the following aspects of the personal data of individuals:

• (1) Employees, job candidates, and related individuals
• (2) Visitors and related individuals
• (3) Clients and customers, and related individuals
• (4) Business partners and related parties
• (5) Shareholders and related parties
• JAS Group would therefore like to urge data subjects to read this notice to acknowledge and understand the purposes for which JAS Group collects, uses, and discloses personal data.

1. Personal data collecting method that JAS Group uses to obtain and collect the data

JAS Group receives personal data through the following methods.

• (A) Collect from the data subject directly
• (B) Collect from external agencies or individuals
• (C) Collect automatically from secondary sources

2. Personal data that JAS Group collected

Personal data that is collected (collected, used, or disclosed) under this Privacy Notice can be categorized into 12 groups as follows.

• 2.1 Personal information

  It consists of name and surname, birthdate, age, gender, citizen identification number, profile picture, autograph, nationality, marital status, military status, family member information (father, mother, spouse, and children), and recent photograph.

• 2.2 Contact Information

  This contains address, telephone number, email address, Line ID, Facebook account ID, Emergency contact persons, and reference contact

• 2.3 Education and Training

  This includes education and training history (name of the institute, faculty, major, and year of graduation), diploma, transcript, language proficiency, computer literacy, training and seminar, test score and certificate, and participated activities during the study.

• 2.4 Job Application Information

  This contains work experience, Resume/CV, applying position, expected salary, job interview history, recommendation letter or proof, and information from interview assessment form (interview result, assessment, knowledge and experience, characteristics, interpersonal qualities, and potentials).

• 2.5 Current Job Information

  This includes employee ID number, position, department, affiliation, chain of command, received trophy/award, training, transfer history, and resignation and reason for resignation.

• 2.6 Benefit and Remuneration

  This consists of salary, wages, compensation, bonus, commission, welfare, guarantor, beneficiary information, social security, provident fund, tax, tax deduction, health benefits, and/or other types of benefits, welfare loan form, salary deduction consent letter, receipt, invoice, claim form (for accident and life insurance), and approval for retirement benefit application form.

• 2.7 Statistics Data

  It includes start date, probation end date, clock-in date and time, number of working hours, number of overtime hours worked, annual leave, absent leave, leave form, details of absent history, work entry and exit record, and JAS Group System Use record.

• 2.8 Video and Image

  This includes motion and audio conversations recorded via CCTV cameras, and photographs.

• 2.9 Property Information

  Personal car license plate number, and number of shares

• 2.10 Financial Information

  This includes bank account number, loan fund installment and debtor information

• 2.11 Supporting Documents for Legal Transactions

  These are Resume, CV, copy of ID card, passport, name change certificate, house registration, military conscription certificate, marriage registration, diploma, transcript, copy of bankbook, health examination results, annual health examination, maternity leave notification form, new salary approval and monthly salary inclusion form, medical certificate, pre-employment physical examination results, beneficiary name list, social security registration form, consent letter for personal background investigation, background check report, criminal record from the Royal Thai Police, employment contract, employment guarantee letter and related documents (e.g. position certification, copy of civil servant ID card, salary certificate, etc.), Directorship Agreement, and power of attorney, etc.

• 2.12 Sensitive information

  This includes race, ethnicity, political opinions, religious or philosophical beliefs, sexual behavior, criminal history, health, disability or mental health information, trade union information, genetic information, biological information, biometric information such as facial images, fingerprints, X-ray films, iris scans, voice identity information and genetic information, and any other information that affects the data subject in a similar manner as prescribed by law.

3. Purposes and Lawful Basis for Collecting, Using, or Disclosing Personal Data

• 3.1 JAS Group collects, uses, or discloses personal data under the legal basis for the purposes considered from main activities
• 3.2 Personal data that JAS Group collects, uses, or discloses as per the purposes specified in no. 3.1 above in relation to legal compliance (legal obligation basis) is necessary for achieving such purposes. If subject does not wish to provide such personal data to JAS Group, legal consequences may occur.

4. Disclosure of Personal Information

• 4.1 JAS Group may disclose personal data under the purposes and criteria prescribed by law to persons and agencies as follow.
  1. Affiliated companies, business partners, regulatory agencies, government agencies that have regulatory duties under the law or that request to disclose personal data by virtue of legal authority or related to legal process or as permitted by relevant laws, such as the Ministry of Commerce, the Securities and Exchange Commission, the Stock Exchange of Thailand, the Court, the Office of the Attorney General, the Royal Thai Police, the National Anti-Corruption Commission, the Ministry of Labor, etc., whether organizations or agencies located in Thailand or abroad, including individuals, juristic persons or other organizations that have a legal relationship with the JAS Group, which the JAS Group is required to disclose personal data for the purposes under Section 3.
  2. Any other person or entity to whom the owner of the personal data has given consent to disclose personal data to.
• 4.2 Disclosure of personal data to shall be made only under the specified purposes or other purposes permitted by law. In cases where the law requires the consent of the owner of personal data, JAS Group shall seek the consent of the owner of personal data in accordance with the criteria prescribed by law.

5. Data Security Measures for Personal Information

JAS Group obtains measures to maintain the security of personal data in accordance with the Personal Data Protection Act and related laws, including limiting access to personal data from employees, workers, and agents of JAS Group to prevent personal data from being lost, accessed, used, changed, modified, or disclosed without authority or improperly.

In disclosing personal information to other parties, JAS Group will take appropriate measures to protect the disclosed personal data and to comply with the standards and obligations to protect personal information as required by the Personal Information Protection Act. In the event that JAS Group sends or transfers personal information overseas, JAS Group will take steps to ensure that the destination country, international organization or overseas recipient has adequate standards to protect personal information or to ensure that the overseas sending or transfer of personal information complies with the criteria specified by the Personal Information Protection Act. In some cases, JAS Group may request the consent of the data subject for such overseas sending or transfer of personal information.

In the event of a personal data leak or breach, JAS Group will take action in accordance with the measures to respond to a personal data breach by notifying the owner of the personal data when it is found that the leaked or breached personal data has a serious impact on the owner's rights and freedoms, and will also notify the Office of the Personal Data Protection Committee (PDPC) within the time period specified by the Personal Data Protection Act.

6. Retention Period of Personal Data and Destruction

• 6.1 JAS Group will retain personal data for a period of time that is appropriately necessary or as required by the statute of limitations and document retention standards that JAS Group adheres to, namely 30 (thirty) days from the end of the last period that JAS Group terminates its relationship with the owner of the personal data, except for the cases where it is necessary due to legal proceedings, JAS Group may retain personal data for as long as such necessity ceases.
• 6.2 When the period for storing personal data has expired or when JAS Group is no longer able to claim the right to collect, use and disclose personal data, JAS Group will delete personal data or destroy personal data or make such personal data anonymized.

7. Rights of Data subject

Data subjects have the rights under the Personal Data Protection Act over the following conduct:

• 7.1 Right to withdraw consent

  The data subject has the right to withdraw the consent given to JAS Group at any time, except where such withdrawal of consent is impossible. However, the withdrawal of the consent will not affect the collection, use or disclosure of personal data for which consent has been legally given prior to such withdrawal of consent.

• 7.2 Right to request access to personal data

  Data subjects have the right to access their personal data by requesting JAS Group to make a copy of their personal data, including the right to request JAS Group to disclose the acquisition of personal data that the data subject has not given consent to.

• 7.3 Right to request portability of personal data

  Data subjects have the right to request personal data about themselves from JAS Group and request JAS Group to send or transfer such personal data to other data controllers as required by law.

• 7.4 Right to request deletion of personal data

  Data subjects have the right to request JAS Group to delete, destroy, or anonymize the owner's personal data in the following cases:

  1. Personal data is no longer necessary to be kept for the purposes specified in the collection, use or disclosure of the personal data of the data subject.
  2. Owner of the personal data withdraws consent on which the personal data is based for the collection, use or disclosure of the personal data and JAS Group no longer has the legal authority to collect, use or disclose such personal data.
  3. The owner of personal data has objected the collection, use, or disclosure of personal data.
  4. The collection, use, or disclosure of personal data is unlawful.
• 7.5 Right to request suspension of use of personal data

  The owner of personal data has the right to request JAS Group to suspend the use of the personal data in the following cases:

  1. JAS Group is reviewing requests to exercise the right to correct personal data or object to the collection, use or disclosure of personal data.
  2. The owner of personal data requests JAS Group to suspend the use of personal data instead of deleting or destroying personal data that is no longer necessary because the owner of personal data needs to request JAS Group to keep his/her personal data for use in establishing legal claims, complying with or exercising legal claims, or defending legal claims.
• 7.6 Right to object to collection, use or disclosure of personal data

  The owner of personal data has the right to object to collection, use, or disclosure of personal data in the event that JAS Group collects, uses or discloses personal data for the legitimate interests of JAS Group.

• 7.7 Right to request correction to personal data

  Data subjects have the right to request that their personal data be corrected if it is inaccurate, out of date, incomplete or misleading.

• 7.8 Right to file a complaint

  The owner of personal data has the right to file a complaint if he/she sees that JAS Group has acted in a way that violates or fails to comply with the Personal Data Protection Act. In the event that the owner of personal data wishes to exercise such rights, he/she may contact the Personal Data Protection Committee Office (PDPC) directly.

  However, JAS Group may refuse to exercise the above rights of the data subject in accordance with the criteria and conditions prescribed by the Personal Data Protection Act or other relevant laws. In the event that JAS Group refuses to exercise the rights, JAS Group will inform the data subject of the reasons for the refusal each time.

8. Channel to Contact Data Protection Officer (DPO)

In the event that the data subjects have any questions or wish to exercise the rights as specified in this notice, they may contact the JAS Group's Data Protection Officer (DPO) through the following channels:

Data Protection Officer: DPO
Jasmine International Public Company Limited
200 29^th-30^th Fl. Moo 4, Chaengwatana Road, Pakkred Sub-district, Pakkred District, Nontaburi 11120
e-mail: dpo@jasmine.com
Tel: 02-1003189

9. Alternation of this Privacy Notice

JAS Group may change this Privacy Notice to comply with any changes regarding the processing of personal data and as required by the Personal Data Protection Act or other relevant laws, including for appropriateness and to ensure fairness and transparency for data subjects. JAS Group will announce the revised Notice via the JAS Group website.

JAS Group recommends that data subjects check the Privacy Notice periodically for any changes.

Dated 09 July, 2024