Privacy Notice for Closed-Circuit Television (CCTV)

Muangthai Capital Public Company Limited (the “Company” or “we”) uses closed-circuit television (“CCTV”) cameras to monitor areas inside and surrounding our head office, branches, service centers, and auction centers (collectively, the “Premises”) to protect life, health, and property. Through these CCTV systems, we collect personal data relating to officers, personnel, customers, employees, contractors, visitors, and any other persons who enter the Premises (collectively, “you”).

This CCTV Privacy Notice (the “Notice”) explains how we collect, use, or disclose information that can identify you (“Personal Data”), as well as your rights, as follows.

1. Legal Bases for Processing Personal Data

We collect your Personal Data on the following legal bases:

1. It is necessary to prevent or suppress danger to your life, body, or health, or that of another person.
2. It is necessary for our legitimate interests or those of another person, where such interests are not overridden by your fundamental rights in relation to Personal Data.
3. It is necessary for compliance with applicable laws governing workplace safety and environment and the security of our property.

2. Purposes for Collecting Your Personal Data

We collect your Personal Data for the following purposes:

1. To protect your health, personal safety, and property.
2. To protect our buildings, facilities, and property against damage, obstruction, vandalism, or other criminal activity.
3. To assist relevant authorities with law enforcement, deterrence, prevention, investigation, and legal proceedings.
4. To assist with resolving disputes arising during disciplinary or grievance proceedings.
5. To assist with investigations or complaint-handling procedures.
6. To assist with initiating or defending civil claims, including, without limitation, legal proceedings relating to employment.

3. Personal Data We Collect and Use

For the purposes described in Section 2, CCTV cameras are installed in visible locations. Notices indicating the use of CCTV are displayed at entrances, exits, and other areas that we consider necessary for monitoring. When you enter the Premises, we may collect the following Personal Data:

We will not install CCTV cameras in areas where doing so could unreasonably infringe your fundamental rights, such as private rooms, restrooms, shower rooms, or employee rest areas.

4. Disclosure of Your Personal Data

We will keep CCTV recordings relating to you confidential and will not disclose them unless necessary to achieve the monitoring purposes described in this Notice. We may disclose CCTV recordings to the following persons or entities:

1. Authorities empowered by law, where disclosure is necessary to support law enforcement, investigation, inquiry, or prosecution.
2. Third-party service providers, where necessary to prevent or suppress danger to your or another person’s life, body, health, or property.

5. Your Rights Under the Personal Data Protection Act B.E. 2562 (2019)

The Personal Data Protection Act B.E. 2562 (2019) (the “PDPA”) is intended to give you greater control over your Personal Data. Subject to the conditions prescribed by law, you may exercise the following rights:

1. Right to Withdraw Consent: You may withdraw consent previously given for processing. Withdrawal will not affect any collection, use, or disclosure lawfully carried out before the withdrawal.
2. Right to Object: You may object to processing based on a legal ground other than consent.
3. Right to Be Informed and Access: You may request information about how your Personal Data is processed and request a copy of your Personal Data.
4. Right to Rectification: You may request that inaccurate or outdated Personal Data be corrected.
5. Right to Restriction of Processing: You may request that processing be restricted. In such cases, the Company will retain the Personal Data without otherwise processing it, except as permitted by law.
6. Right to Erasure: You may request the deletion or destruction of your Personal Data from the Company’s records.
7. Right to Data Portability: You may request your Personal Data in a readable or commonly usable format and, where technically feasible, request that it be transmitted to another data controller. This right applies where processing is automated and based on consent or a contract to which you are a party, or on steps taken at your request before entering into a contract.
8. Right to Lodge a Complaint: You may lodge a complaint with the competent authority if you believe the collection, use, or disclosure of your Personal Data violates or fails to comply with applicable law.

6. Personal Data Retention Period

To achieve the CCTV monitoring purposes described in this Notice, we will retain CCTV recordings relating to you for no longer than 90 days after the responsible building officer completes the retrospective review. Once that period expires, the system will delete and destroy the Personal Data in accordance with our procedures.

7. Personal Data Security

We maintain appropriate technical and administrative security measures to protect your Personal Data against loss and unauthorized access, deletion, destruction, use, alteration, modification, or disclosure, in accordance with our information security policies and practices.

We have also established and communicated a Personal Data Protection Policy throughout the organization, together with guidelines for maintaining the confidentiality, integrity, and availability of Personal Data. We periodically review this policy and this Notice.

8. Responsibilities of the Data Controller

Only personnel whose duties relate to the collection, use, or disclosure of Personal Data in this processing activity are authorized to access your Personal Data. We require those personnel to comply strictly with this Notice.

9. Changes to This Privacy Notice

We may amend this Notice when necessary or appropriate. We will notify you through the Company’s communication channels, such as notices posted at entrances to the Premises or on the Company’s official website at muangthaicap.com. The date of the latest revision will be indicated. We recommend that you review this Notice regularly, particularly before entering the Premises.

By entering the Premises, you acknowledge this Notice. If you do not agree with its terms, please refrain from entering. If you continue to enter the Premises after an amended Notice has been published through the channels described above, you will be deemed to have been informed of the changes.

10. Contact Information

You may contact us with questions about this Notice through the following channels:

Data Protection Officer (DPO)
Muangthai Capital Public Company Limited
332/1 Charansanitwong Road, Bang Phlat Subdistrict,
Bang Phlat District, Bangkok 10700
Call Center: 02-483-8888 or 1455
Email: dpo@muangthaicap.com