PRIVACY NOTICE FOR EXTERNAL PARTY

3.1. The purpose of which you have given your consent:

We do not currently collect, use and/or disclose your Personal Data for any purposes which require your consent.

3.2. The purpose that we may rely on other lawful bases

We may also rely on (1) contractual basis, for our initiation or fulfilment of a contract with you; (2) legal obligation, for the fulfilment of our legal obligations; (3) legitimate interest, for the purpose of our legitimate interests and the legitimate interests of third parties. We will balance the legitimate interest pursued by us and your interest, fundamental rights and freedoms in relation to the protection of your Personal Data; (4) for preventing or suppressing a danger to a person’s life, body or health; and/or (5) public interest, for the performance of a task carried out in the public interest or for the exercising of the state authorities (6) for establishment and raising of potential legal claims or other legal bases permitted under applicable laws relating to Personal Data protection (as the case may be). Depending on the context of the relationship with us, we may collect, use and/ or disclose Personal Data for the following purposes:

1. To operate our businesses: To provide support and assistance as you may request; enter into a contract with our customers, suppliers, vendors and/or other third parties; to select and appoint directors; to issue power of attorney; to proceed with financial transactions; to monitor performance and responsibilities, allocate and mange company resources, impose disciplinary sanction;
2. Registration and Authentication: To register, verify, prove, affirm, identify, and/or authenticate you or your identity;
3. To manage our relationship with you: To contact and communicate with you on business/ work related news and updates; to set meeting appointments; to handle queries, request, feedback, complains, claims, disputes or indemnity; to provide technical assistance and deal with technical issues; to manage accounts; to process and update your information; to proceed with the activities or operation for us or on behalf of us as set out in our agreement, work rules or any document related to HR management and development;
4. To provide compensation and benefits: To provide dividend payment, payroll, tax reduction, provision of provident fund, social security provision, expenses reimbursement, medical and medication expenses reimbursement, provision of insurance, severance payment and other benefit.
5. Functioning of the websites, applications, and platforms: To administer, operate, track, monitor, and manage the websites, applications and platforms to facilitate and ensure that they function properly, efficiently, and securely; to facilitate your experience on the websites, applications and platforms; improve layout, and content of the websites, applications and platforms;
6. IT Management: For business management purposes including for IT operations, management of communication system, operation of IT security and IT security audit; internal business management for internal compliance requirements, policies, and procedures;
7. Compliance with regulatory and compliance obligations: To comply with legal obligations, legal proceedings, or government authorities’ orders which can include orders from government authorities outside Thailand, and/or cooperate with court, regulators, government authorities, and law enforcement bodies when we reasonably believe we are legally required to do so, and when disclosing your Personal Data is strictly necessary to comply with the said legal obligations, proceedings, or government orders. This includes to issue tax invoices or full tax forms; record and monitor communications; make disclosures to tax authorities, financial service regulators, and other regulatory and governmental bodies, and investigating or preventing crime;
8. Protection of our interests: To protect the security and integrity of our business; to exercise our rights or protect our interest where it is necessary and lawfully to do so, for example to detect, prevent, and respond to fraud claims, intellectual property infringement claims, or violations of law; to manage and prevent loss of our assets and property, the properties of our affiliates and subsidiaries under Gaysorn Group; to secure the compliance of our terms and conditions; to detect and prevent misconduct within our premises which includes our use of CCTV; to follow up on incidents; to prevent and report criminal offences and to protect the security and integrity of our business;
9. Fraud detection: To verify your identity, and to conduct legal and other regulatory compliance checks (for example, to comply with anti-money laundering regulations, and prevent and investigate fraud, illegal activities, omission of duties or misconduct). This includes performing sanction list checking, internal audits and records, asset management, system, and other business controls;
10. Corporate transaction: In the event of sale, transfer, merger, reorganization, or similar event, we may transfer your Personal Data to one or more third parties as part of that transaction;
11. Risks: To perform risk management, audit performance, and risk assessments; and/or
12. Life: To prevent or suppress a danger to a person’s life, body, or health.

Where we need to collect, use and disclose your Personal Data as required by law, or for performance of a contract with you and you fail to provide that Personal Data to us, we may not be able to perform the contract we have or are trying to enter into with you. In particular, we may not be able to provide our products and services to you.

Where consent is required for certain activities of collection, use or disclosure of your Personal Data, we will request and obtain your consent for such activities separately.