The Company recognizes that data security of your personal data is important. The Company as data controller which has collected, used and disclosed your personal data for the purpose of the employment application has undertaken strict measures to keep your personal data secured and to ensure implementation on your personal data in accordance with the requirements of Personal Data Protection Act 2019 (the "Act"). The Company has prepared this document for you to know and understand your rights under the law including the reasons for which the Company wishes to collect, use and/or disclose your personal data. Please read and understand this document for the benefit of your exercise on the rights.

1. 1. Scope and Purposes for Collection and Use of Personal Data
   • Information of candidate such as first name - last name, nickname, age, blood type, photographs, signature, weight, height, address, contact number, email, date of birth, place of birth, gender, nationality, religion, race, educational record, training record, work record, income from current work, language aptitude, computer knowledge, criminal record, health record, military service record, ability to drive a car, information on the vehicle possession, driving license data, marriage status, marriage registration, and Facebook and Line ID accounts;
   • Family information such as first names - last names, age, occupation, contact number and information about current business and employers' your spouse, parents and siblings, child amount and the income of your spouse (if available);
   • Information of contact persons, reference persons and introduction to the job such as first name - last name, contact data and relationships with candidate;
   • Additional information in the case of internship such as name of the internship program, name of the educational institution, education level, faculty/department/division - field of work, first name-last name and contact number of the certifying instructor, student card information, desired type of internship, length of internship, internship record, allowances received and special capacities;
   • Information specified in other documents that you have consented to provide to the Company for hiring review and other personal documents of candidate, such as, ID card, house registration, educational certificates, training certificates, driving license, marriage/divorce registration, name change certificate, military certificate, letter of consent from parents (in case of applying for internships or working by persons who are under the age of majority), work permit, tax ID card, social security card, social security registration form, passport (in case of foreign employees), resignation letter, work certificate and salary certificate;
   • Work- related information such as information about employment, commencement/resignation, position, information on training, information on termination of an employee, and disciplinary record;
   • Information collected and stored by the Company’s systems and equipment, namely, surveillance cameras within the Company’s premises, online interview data, and electronic data stored by any of the Company’s equipment; and
   • Health information, namely, examination results or health certificates, details about pregnancy, underlying conditions, disabilities and other disabilities.
   Purpose of collection and use of personal data
   • For information on considering the attributes and suitability for employment of the Company or affiliates or the business partners of the Company or affiliates;
   • For the benefit of the security of the Company; and
   • For contacting the candidate and/or the contact person in the event of emergency.
2. 2. Disclosure of personal data to third parties The Company may disclose your personal data as specified in Section 1.1 to any third party for the following events:
        2.1 domestic and international subsidiaries and other affiliated companies including directors, employees or representatives of related companies or the business partners of the Company or affiliates.
   • Disclosed information and purpose:as specified in Section 1.
        2.2 transferees of rights and/or duties from the Company in the event that the Company wishes to transfer the rights and duties of the Company including the transfer of part or all of the business, the adjustment of the Company's shareholding structure and in the case of sale, transfer, merger, and any other action relating to part or all of the business.
   • Disclosed information: information as specified in Section 1.
   • Purpose: for information on considering the attributes and suitability for employment of the Company or affiliates.
3. 3. Retention period of data collection
   • Case one: If you are selected for the employment/internship with the Company or the business partners of the Company or affiliates, the Company will retain your personal data throughout the period of your employment/internship with the Company and it will continue after a period of 10 years from the end of the employment/internship for information relating to the Company’s compliance with applicable laws.
   • Case two: If you are not selected for the employment/internship with the Company or the business partners of the Company or affiliates, the Company will retain your personal data as from the date when the result is known and it will continue after a period of 10 years from such date.
4. 4. Contact channel If you have any questions or concerns about your personal data, you can contact officer of the Human Resources Department of the Company.
5. 5. Rights of the data subject The data subject has the rights to be protected under the Act. You can exercise these rights through officer of the Human Resources Department of the Company.
   

   5.1 Right to withdraw consent In the event that the Company has requested and obtained the consent of the data subject to collect, use or disclose the personal data for the purpose of collecting, using or disclosing such personal data according to the purposes obtaining the consent of the data subject, the data subject has the right to request withdrawal of consent for the collection, use or disclosure of your personal data that the Company has obtained from you at any time.      5.2 Right to request access to and receive a copy of personal data held by the Company The data subject has the right to request access to and receive a copy of the data subject’s personal data that the Company has held in in accordance with the criteria set by the Personal Data Protection Committee.      5.3 Right to request disclosure of the acquisition of personal data that the Company has obtained from other sources In the event that the Company obtains the personal data of the data subject from other sources which is not directly from the data subject, and the Company will use such data, the Company will notify the data subject within 30 days as from the date when receiving such personal data (unless exempted by law). In this case, the data subject may inquire and ask the Company to disclose the source of the personal data of the data subject.      5.4 Right to obtain and ask the Company to transfer or pass the personal data of the data subject to another data controller in the event that the Company has made the data subject's personal data in a format that can be read or used by automatic device and can be forwarded by automatic methods Transfer or pass of personal data in accordance with this Section means cases where the data subject's personal data is stored in electronic form which forwarding can only be done through an electronic device that can read data in electronic format not including the case which the Company transfer or pass the personal data in another form.      5.5 Right to object to the collection and use of personal data of the data subject The data subject has the right to object to the collection and use of personal data of the data subject in the following cases:      (1) If the collection of personal data is under exceptions from obtaining consent as it is necessary for the legitimate interest of the Company or other entity which is not the data controller (unless such interests are less important than the data subject's basic rights); or      (2) In the case that the collection, use or disclosure of personal data is for the purpose of direct marketing.      5.6 Right to request the Company to destroy or make the personal data provided to the Company unidentifiable The data subject can notify the Company to destroy his/her personal data and/or make the personal data that he/she has provided to become anonymous in the following cases:      (1) When the personal data is no longer necessary to keep the personal data for the purpose;      (2) When the data subject withdraws the consent to collect, use or disclose that personal data and the Company has no legal authority to collect, use or disclose that personal data;      (3) When the data subject exercises the right to object to collection, use or disclosure of personal data and the Company has no reason to reject the request; or      (4) When the personal data is unlawfully collected, used or disclosed. 5.7 Right to request the Company to suspend the use of the data subject's personal data The data subject can immediately notify the Company to suspend the use of the personal data in the following cases:      (1) When the data controller is in the process of investigating the accuracy, completeness or updating of the personal data at the request of the data subject;      (2) When such personal data may be erased or destroyed, but the data subject requests that the use of the personal data be suspended instead of deletion or destruction of the personal data;      (3) When the personal data is no longer necessary for the purposes for which it was collected but the data subject is required to retain it for the purpose of establishing legal claims, compliance with or exercising legal claims or defending legal rights; or      (4) When the Company is in the process of exercising the data subject’s right to object to the collection, use or disclosure of personal data.      5.8 Right to request the Company to adjust the data subject's personal data to be correct, complete and update In case of any change regarding the personal data which the data subject has provided to the Company or which the Company has collected, the data subject can notify the Company to adjust the data subject's personal data to be correct, complete and update d at any time.      5.9 Right to appeal in case of any violation against the provisions of the Act In the event that the data subject finds that the Company and/or the employees of the Company have contravened or failed to comply with the Act, the data subject can identify such violation to the Company and/or state agencies involved as detailed in Section 4. Please be aware that when the Company is notified of the intention to exercise any rights from the data subject, the Company will consider the request of the data subject to take appropriate action within 30 days from the date of receiving the request. However, the Company reserves the right to refuse such requests to exercise the right of the data subject if the exercise of the right does not comply with the legal requirements or the Company has necessity and the right to refuse such request under the law.