[For Job Applicants]

Privacy Policy Statement

ACS SERVICING (THAILAND) COMPANY LIMITED

1.  Introduction

1.1  ACS Servicing (Thailand) Company Limited (“ACSS” or “we”) has established and discloses this privacy policy statement (the “Privacy Policy Statement”) as our approach to explain how we, as the data controller, collect, use, disclose or otherwise process personal information of our job applicants, and how we protect personal information and properly handle such information once the provisions under the Personal Data Protection Act B.E. 2562 (2019) (the “PDPA”) with respect to the processing of personal information become effective.

1.2  ACSS recognizes the importance of protecting personal information, and complies with the PDPA and other relevant laws and regulations as well as internal regulations of ACSS including this Privacy Policy Statement, and ACSS strives to properly protect and handle personal information.

1.3  ACSS collects personal information through appropriate and lawful means, and only to the extent necessary to achieve the purpose of utilization. Such collection, use, disclosure or otherwise processing of personal data will be in accordance with the provisions of relevant laws only.

1.4  ACSS specifies the purpose of collection, use, disclosure or otherwise processing of personal information, and collects such information to the extent necessary in relation to the purpose. In cases where the purpose of collection, use, disclosure or otherwise processing of specific personal information is limited by relevant laws and regulations, ACSS does not use such personal information beyond such limitations of the purpose. You may find details of purpose of collection, use, disclosure or otherwise processing of personal information in this Privacy Policy Statement.

1.5  ACSS does not disclose personal information to any third party, except where the person concerned has granted prior consent in that regard, or where disclosure of personal information is based on laws.

1.6  ACSS takes appropriate security measures for preventing unauthorized or unlawful loss, access to, use, alteration, correction or disclosure, of personal information. When appointing any third party to process personal information on behalf of ACSS, ACSS appropriately oversees such third party.

1.7  ACSS reviews the content of this Privacy Policy Statement as necessary, and strives to bring about continuous improvement such as to our systems and approaches for protecting personal information.

1.8  ACSS trains and educates our officers and employees regarding the importance of protecting personal information to ensure that they handle our job applicants’ personal information in an appropriate manner.  

1.9  ACSS responds in an appropriate and swift manner to requests for exercising data subject rights, any opinions or requests concerning its collection, use, disclosure or otherwise processing of personal information. Please see relevant details shown in this Privacy Policy Statement or please contact ACSS at contact details shown below.

2.  Personal Information We Collect, Use, Disclose or Process and Its Sources

2.1  What is personal information?

Personal information means any information relating to an individual, which enables the identification of such individual, whether directly or indirectly,

2.2  Personal information we collect, use, disclose or process

ACSS collects several types of personal information, including:

  • Identity data (for example, name, surname, identification card number, passport number, your photograph, birth date, gender, nationality, online identity (e.g. IP address, cookie, your username and password in case of online job application).
  • Contact data (for example, address, telephone number, email)
  • Data about your qualification that enable ACSS to assess your job application (for example educational background, employment records, special skills, other qualifications and personal data stated in your CV and CV cover letter or transcript)
  • Data about your background verification such as anti-money laundering information, credit bureau information, and bankruptcy status, and in some cases ACSS may process sensitive data such as criminal record [and disability conditions] only with your explicit consent or when permitted by law)
  • Military status (for male)
  • Identity and contact data of your emergency contact person indicated by you in your job application

2.3  Sources of information

ACSS may collect your personal information from various sources as follows:

(1)  Collect information directly from you, for example:

  • During the recruitment process, e.g. when you submit your application and relevant documents to us, etc.
  • Your communication with us via our contact channels, e.g. telephone, e-mail, etc.
  • ACSS online system when you use our online job application system.

(2)  Collect information from other sources, for example:

  • Government authorities such as criminal record division of Royal Thai Police, Anti-Money Laundering Office and Legal Execution Department. 
  • Other publicly available sources, such as information made available on the online public job application platform e.g. jobsDB.com
  • Recruitment agency.

3.  Purposes of Collection, Use, Disclosure or Processing of Personal Information

ACSS collects, uses, discloses or processes your personal information for various purposes depending on relationship between you and ACSS as follows:

4.  Data Retention Period

ACSS retains your personal information for as long as is considered necessary for the purpose for which it was collected, used, disclosed or processed as set out in this Privacy Policy Statement. In this regard, we will retain the personal information for the duration we have an ongoing relationship with you. If you are not recruited to work with ACSS, we will keep your personal information for 1 year after the recruitment process. If you are recruited to work with ACSS, we have a separate Privacy Policy Statement for employees which will be provided to you.

5.  Data Disclosure

ACSS may disclose your personal information in certain circumstances, for the purposes set out in this Privacy Policy Statement, to:

5.1  Government authorities, supervising authorities or other authorities as stipulated by laws, including competent official, e.g. courts, police officers, Anti-Money Laundering Office.

5.2  Agencies, service providers and/or sub-contractors for their implementation and procedure such as carriers, document storage and destruction service providers, printing house, IT development companies, etc.

6.  Data Subject Rights

6.1  Your rights under the PDPA

According to the PDPA, you have certain rights relating to your personal information as follows:

(1)  Right to Withdraw Consent

You have the right to withdraw consent given to us for collecting, using or disclosing your personal information at any time, unless there is a restriction of the withdrawal of consent by law or the contract which gives benefits to you.

However, the withdrawal of consent shall not affect the collection, use or disclosure of personal information you have already given consent legally. In addition, where you withdraw consent, you may experience less convenience in our recruitment process.

(2)  Right to Access

You have the right to request access to and obtain a copy of your personal information, which is under our responsibility, or to request the disclosure of the acquisition of the personal information obtained without your consent. At our discretion, we may require you to prove your identity before providing the requested information. If you require multiple copies of your personal information, we may charge a reasonable processing fee.

(3)  Right to Data Portability

Where ACSS arranges your personal information to be in the format which is readable or commonly used by ways of automatic tools or equipment, and can be used or disclosed by automated means, you have the right to receive your personal information and are also entitled to:

(a)  request us to send or transfer your personal information in such formats to other data controllers if it can be done by the automatic means;

(b)  request to directly obtain your personal information in such formats that we send or transfer to other data controllers, unless it is impossible to do so because of the technical circumstances.

(4)  Right to Object

You have the right to object to the collection, use, disclosure or otherwise processing of your personal information on grounds stipulated by law. We will abide by your request unless we have compelling legitimate grounds for the processing which override your interests and rights, or if we need to continue to process your personal information for the establishment, exercise or defense of a legal claim.

(5)  Right to Erasure

You have the right to request ACSS to erase, destroy or make your personal information become unidentifiable data, under certain circumstances unless we are required to retain your personal information in order to comply with a legal obligation or to establish, exercise or defend legal claims.

(6)  Right to Restriction of Processing

You have the right to request ACSS to restrict the use of your personal information under certain circumstances where you believe such personal information to be inaccurate, our processing is unlawful; or we no longer need to process such personal information for a particular purpose, but where we are not able to delete the data due to a legal or other obligation or because you do not want us to delete it.

(7)  Right to Rectification

ACSS will ensure that your personal information remains accurate, up-to-date, complete, and not misleading. However, if you consider that your personal information is inaccurate or changed, you have the right to request ACSS to rectify your personal information to be accurate, up-to-date, complete, and not misleading.

6.2  How to exercise your rights

You may exercise the data subject rights listed above via the channels specified in Clause 8 below.

In addition, you may exercise your right to withdraw the consent given to us by notifying your intentions via our Head Office, centers or branches where you submitted your employment application or via https://jobs.aeon.co.th/ if you submitted the employment application via our website.

Nonetheless, if we reject your request, we will inform you of the reasons.

6.3   Processing time

ACSS will process your request within 30 days upon receipt of your valid request together with complete supporting documents. Until then, your personal information will still be unchanged in our database and may still be processed or you may be contacted by us, our partners or those who have retained your personal information as of the date of your request.

7.  Data Protection Security Measures

7.1  Implementation of Security Measures

ACSS implements appropriate security measures for preventing unauthorized or unlawful loss, access to, use, alteration, correction or disclosure of personal information.

7.2  Disclosure of Personal Information to Data Processor

ACSS properly supervises third parties to which ACSS has appointed to process personal information pursuant to our orders or on our behalf.

8.  Contact information

If you have any questions or inquiries about the protection of your personal information, collection, use or disclosure of your personal information, or exercise of your rights, or have any claims, please contact us at:

ACS SERVICING (THAILAND) COMPANY LIMITED and Data Protection Officer ( Mr.Alongkorn  Sattabusaya )

Address: 699 Modernform Tower 11th Floor, Srinakarin Road, Pattanakarn, Suanluang, Bangkok

Tel:          DPO Office  02-769-1700 etx. 77940-43

E-mail:    ACSS-privacy@acsservicing.co.th

You also have the right to file a complaint with the relevant Personal Data Protection Committee if ACSS violates or do not comply with the PDPA or other regulations or notifications issued in accordance with the PDPA.

9.  Third Party Links

This Privacy Policy Statement applies to the use of website, mobile application and LINE account of ACSS only.  When you link to third party websites via ACSS Website, the personal information protection shall be in accordance with the privacy policy statement of such third party websites which are not related to ACSS.

10.  Update to this Privacy Policy Statement

ACSS regularly reviews and, if appropriate, updates this Privacy Policy Statement from time to time to ensure that your personal information is properly protected. In case of any update to this Privacy Policy Statement, ACSS will inform you through Privacy Policy Statement on this website or other appropriate methods. Please refer to this page for the updated Privacy Policy Statement.

 

Last updated on 1 April 2021