Privacy Notice: Regarding protection of personal data in relations to processes involving customers, investors, and shareholders

Article 1: General provisions

MT Multimedia Co.,Ltd. and its affiliates puts great importance on the protection of personal data of customers cooperating with MT Multimedia Co.,Ltd. and its affiliates, and to ensure that we will protect and treat your personal data in accordance with the Personal Data Protection Laws, and in order to comply with the Personal Data Protection Act B.E. 2562. Therefore, MT Multimedia Co.,Ltd. and its affiliates are posting this notice regarding protection of personal data in relations to processes involving customers of MT Multimedia Co.,Ltd. and its affiliates (“Notice”) was prepared to clarify details and methods of handling and processing personal data that MT Multimedia Company and its affiliates have received from you, including to clarify the consideration behind the collection, usage, disclosure and forwarding, as well as the period of retention of such personal data – such as the recording, organizing, storing, modifying or altering, retrieving, sending, transferring, publishing or making accessible or available by any means. Also, the arrangement, combination, restriction or prohibition of access, deletion or destruction (“processing”) as well as your rights as the owner of such personal data. MT Multimedia Co.,Ltd. and its affiliates advise you to read and understand the terms under this Notice, with the details are as follow:

Article 2: Definition

“Company” means “MT Multimedia Co.,Ltd.”

“Affiliated subsidiaries” means MT Multimedia Co.,Ltd. and its subsidiary companies

“You” means customers, investors, shareholders, and people related to customers

“Personal data” means data about an individual that enables certain individual to be identified, either directly or indirectly, but does not include the data of a deceased person in particular.

“Sensitive personal data” means personal data related to race, ethnicity, political opinions, religious or philosophical beliefs, sexual orientation, criminal history, health data, disability, labor union data, genetic data, biological data, or any other data that affects the data owner in the same way as announced by the Personal Data Protection Committee.

“Personal data custodian” means a person, or juristic person, who has the authority to make decisions regarding the collection, usage, or disclosure of personal data.

“Personal data processor” means a person, or juristic person, who implements the collection, usage, or disclosure of personal data in accordance with the order, or on behalf, of the personal data custodian.

“Personal Data Protection Law” means the Personal Data Protection Act of B.E. 2562 (2019) and related secondary laws and shall include any future amendments to the law.

Article 3: Groups or categories of persons whose personal data MT Multimedia Co.,Ltd. and its affiliates collect personal data

Under this Notice, the groups or categories of persons whose personal data the Company collects and processes consist of:

3.1 Customers: Means persons who employ, or use the services of, the Company, or any other persons with similar characteristics, such as event participants, website users, persons who contact the Company to obtain data, or to request services from the Company, including respondents who inquire about the processes to employ, or to use the services of, the Company, etc.

3.2 Persons with connection to customers: Means persons connected with, or are representatives of, customers, such as executives, directors, employees, agents or any personnel of customers who are juristic persons and shall mean to include persons whose personal data appearing in documents related to relevant processes, such as managers, purchasers, service recipients, and check issuers, etc.

3.3 Investors: Means persons, or juristic persons, who want to, or are interested in, investing in the Company’s shares.

3.4 Shareholders: Means persons with investments in businesses and are regarded as having indirect controlling role in the Company by appointing directors to be their representatives in supervising the business operations for their utmost benefit.

Article 4: Methods that MT Multimedia Co.,Ltd. and its affiliates employ to obtain and collect your personal data

4.1 The Company obtains and collects your personal data through the following channels:

(a) Personal data that you provide directly to the company:

(1) When you communicate, request for data, provide opinions or criticism to the Company. Be it written or verbal communication, by telephone, email, fax, post, direct in person or by any other means

(2) When you express intention to proceed with the employment, or avail of the services of the Company, enter into a contract with the Company, or deliver various documents containing personal data to the Company

(3) When you participate in marketing activities, certain events, or accepting prizes or other activities organized by, or on behalf of, the Company, etc.

(b) Personal data that the Company automatically collects from you

The Company may receive your personal data automatically, such as with data storage through CCTV cameras installed in the office building area and areas of affiliated companies’ offices, collection of technical data, activities and website traffic patterns, data about your website browsing history collected automatically through Cookies, and other similar technologies. You may learn more details at the Company’s “Cookies Notice”.

(c) Personal data that the Company receives from outsiders

The Company may receive your personal data from third parties, such as:

(1) Collection of data from various service providers of the Company, such as public relations service providers, and products/services promotions, etc.

(2) In some cases, the Company may collect your personal data from public sources, data resources regarding your business or commercial data sources, regardless of whether you are the person who disclosed your personal data or have given your consent to anyone else to disclose your personal data.

4.2 In collecting your personal data, you will be notified of the details specified in this Notice including, but not limited to, the objectives and the legal basis for collection, usage, disclosure and/or the processing of personal data, or if it is the case where the Personal Data Protection Law requires that the processing of any personal data requires your consent, the Company will seek your explicit consent accordingly.

4.3 In the event that the Company has collected your personal data before the date on which the Personal Data Protection Law in relation to the collection, use, or disclosure of personal data, comes into force, the Company will continue to collect and make use of your personal data according to the original purpose for which the Company has originally informed you about the collection of personal data. You have the right to revoke your consent by contacting the Company through the contact details specified in Article 11 of this Notice. The Company reserves the right to consider your request to withdraw your consent and to proceed in accordance with the Personal Data Protection Law.

Article 5: Collected Personal Data

Your personal data that has been collected and processed under this Notice, whether it is your personal data provided directly to the Company, or personal data that the Company has automatically collected from you, or personal data that the Company has received from outsiders, including:

5.1 Personal data consists of given name, surname, position, national identification card number, taxpayer identification number, etc.

5.2 Contact data, such as address, delivery address, invoice mailing address, telephone number, fax number, email address, etc.

5.3 Payment data such as payment amount, payment terms, bank account number, personal data appearing on invoices, tax invoices, receipts and bank savings account debit slips, etc.

5.4 Data used as supporting documents for registering as a customer with the Company or for various transactions, such as personal data appearing on a copy of the identification card, copy of a passport, copy of house registration, copy of name change certificate, an application for opening a customer’s account page, power of attorney document, copy of the company certification, copy of Phor. 20 form and the buy-sale contract, or any other contracts related to the transaction, etc.

5.5 Technical data, such as computer log, computer serial numbers (IP address) and data that the Company collects through Cookies or other similar technologies, etc.

5.6. Shareholder data, such as given name, surname, telephone number, address, bank account number, nationality, number of shares, copy of identification card

5.7. Other data, such as recorded still images and moving images through CCTV cameras, etc.

Article 6: Objectives and Legal Basis for Processing Personal Data

6.1 The Company processes your personal data for various purposes under the following legal basis. (Collectively called “Purposes of processing personal data”):

6.2 As your personal data that the Company processes for the purposes set out in Section 6.1 above in connection with legal compliance, contract, or as necessary for contractual process with you, and therefore, the data is necessary to achieve those objectives. If you do not wish to provide such personal data to the Company there may be legal implications or may cause the Company to be unable to perform duties under the contract entered into between the Company and you, or may be unable to finalize the contract with you (in some cases). In such a case, the Company may have to refuse to enter into a contract with you, to cancel the transaction, or to provide services related to you whether in whole or in part.

6.3 In the case that the Company processes your personal data in a manner and/or for purposes that are not consistent with the objectives as specified above by the Company, there will be additional policies or announcements regarding the protection of personal data, and/or sending a written explanation to you on the processing of such data. You should read the related additional policies or announcements along with this Notice and/or the said written explanation (in some cases).

Article: 7: Disclosure of Personal Data

7.1 The Company may disclose your personal data under specified purposes and in accordance with legal criteria to the following persons and agencies:

a) Departments within the Company, include with executives, directors, employees, workers and/or other relevant Company’s personnel, and as necessary for the processing of your personal data.

b) Business partners, service providers, and personal data processors that the Company has assigned or hired to be responsible for the management/processing of personal data for the Company in providing various services, such as data technology (IT) service, payment service, postal service, parcel delivery service, or any other services that may be beneficial to you or related to the Company’s business operations, such as the commercial banks.

c) Company advisors such as legal advisors, lawyers, auditors, or any other experts both inside and outside the company, etc.

d) Government agencies with regulatory duties under the law, or those who have requested the disclosure of personal data by virtue of the law, or related to legal proceedings, or as permitted by relevant laws. These agencies may include the Revenue Department, Department of Business Development, Office of the Personal Data Protection Commission, Royal Thai Police, Office of the Attorney General, courts and Legal Execution Department, Securities and Exchange Commission (SEC) and the Shareholder Registrar, etc.

e) Any other persons or organizations to whom you have given consent to disclose your personal data to such persons or entities.

7.2 The disclosure of your personal data to others will be done under specified purposes, or other purposes that are permitted by law. In the case the law specifies that your consent in required, the Company will first seek your consent.

7.3 In disclosing your personal data to others, the Company will provide appropriate measures to protect the personal data that has been disclosed and to comply with the standards and duties to protect personal data as stipulated by the Personal Data Protection Law. In the case that the Company transmits or transfers your personal data abroad, the Company will take steps to ensure that the destination country, international organization, or the data recipients in the foreign country, possess adequate personal data protection standards, or to ensure that the transmitting or transferring of your personal data abroad is in accordance with the rules prescribed by the Personal Data Protection Law. In some cases, the Company may ask for your consent for the transmitting or transferring of your personal data to particular foreign countries.

Article 8: Retention Period of Personal Data

The Company will retain your personal data for the period that is necessary to achieve the objectives needed in your personal data processing. The retention period of personal data will change depending on the purposes for which the personal data is processed. In addition, the Company will retain personal data for the period specified by relevant laws (if applicable), taking into account the legal limitation for potential legal proceedings that may arise, or as related to documents or personal data that the Company collected in each item and taking into account the practices of the Company and of related business sectors for each type of personal data.

After the expiration of the retention period mentioned above, the Company will delete or expunge such personal data from the storage or systems of the Company and of others who provide services to the Company (if any), or make to cause your personal data unidentifiable to you. This is unless there is a case that the Company may retain such personal data as permissible by the Personal data Protection Law or other relevant laws. For more details on the retention period of your personal data, please contact the Company through the contact channels specified in Article 11 of this Notice.

Article 9: Your Rights as Data Owner

As the owner of the personal data, you have rights as specified by the Personal Data Protection Act of 2019 (B.E. 2562). You may invoke your rights through the contact channels specified in Article 11 of this Notice, by starting to avail of these rights when the Personal Data Protection Law becomes applicable to the Company. The various rights are detailed as follows:

a) Right to Withdraw Consent
In case the company requests for your consent, you have the right to revoke your consent to the processing of personal data for which you previously given consent to the Company. Unless the revocation of consent is limited by law or contract that may be to your benefit.
(However, the revocation of consent will not affect the processing of personal data for which you have already lawfully given consent.)

b) Right to Access
You have the right to request access and obtain a copy of your data which is under the Company’s responsibility, including asking the Company to disclose the acquisition of data for which you may not have given consent to the Company.

c) Data Portability Right
You have the right to request the Company to transfer your personal data that you have provided to the Company, as required by law.

d) Right to object
You have the right to object to the processing of information about you in cases where the collection, use or disclosure of personal information about you is required by law.

e) Erasure Right
You have the right to request the company Delete your personal information as required by law. However, the Company may store your personal information through electronic systems, which may not allow deletion of the information by some systems. In that case, the Company will arrange for the destruction or transformation of such information into information that cannot identify you personally

f) Right to Restrict Processing
You have the right to request the company to stop using your information as required by law.

g) Right to Rectification
In the event that you consider that the information the company has is incorrect or you have changed your personal information. You have the right to request the company to correct your personal information so that such personal information is accurate, current, complete, and not causing misunderstandings.

h) Right to Lodge a Complaint
You have the right to file a complaint with the authorized official in accordance with the Personal Data Protection Act 2019 if the company violates or fails to comply with the said act.

The company reserves the right to consider your request to exercise your rights and take action according to the law on the protection of personal data.

Article 10: Amendments to this Notice

The Company may update this personal data notification form from time to time. When such changes are made, the Company will make the announcement through the Company’s website and/or notify you via email. If it is necessary to obtain your consent in regard to the changes, the Company will also request additional consent from you.

Article 11: Method of Contact

If you have any questions or in need of more details about the protection of your personal data, collection, usage or disclosure of your information, or to exercise your rights, or have any complaints, you can contact the Company through the following channels:

Company Name: MT Multimedia Co.,Ltd.

Address: 65/36 Chamnanphenchat Building, 2nd Floor, Rama 9 Road, Huai Khwang Subdistrict, Huai Khwang District, Bangkok 10310

Phone: +66 (0) 83 988 1665

Business hours: 9.00 a.m. to 6.00 p.m.

Email: contact@mtmultimedia.com