CCTV Privacy Notice
Re-x Products Co., Ltd.
Re-x Products Co., Ltd. and its affiliates ("Company") have installed CCTV cameras inside and around company premises to maintain the security of the premises, property, employees, directors, executives, customers, partners, and visitors ("you"). The Company recognizes the importance of personal data protection and is committed to protecting the personal data of data subjects in accordance with the Personal Data Protection Act B.E. 2562. This Privacy Notice for CCTV has been prepared to inform you of the details relating to the collection, use, and/or disclosure of personal data, as well as your rights as a data subject, as follows.
1. Definitions
| Term | Meaning |
|---|---|
| Company | Re-x Products Co., Ltd. and its affiliates |
| Person | A living natural person |
| Processing | Any operation performed on personal data, whether automated or not, such as collection, recording, organizing, structuring, adaptation, modification, retrieval, consultation, use, disclosure by transmission, dissemination, combination, restriction, erasure, or destruction, etc. |
| Personal Data | Information about a person that can identify such person, directly or indirectly, such as name, surname, nickname, address, phone number, national ID number, passport number, tax ID, bank account number, credit card number, email address, IP Address, Cookie ID, Log File, etc. |
| Sensitive Data | Personal data relating to race, ethnic origin, political opinions, religious or philosophical beliefs, sexual behavior, criminal records, health data, disability data, trade union membership, genetic data, biometric data, or other data affecting the data subject in a similar manner as determined by the Personal Data Protection Committee. |
| Data Subject | The person to whom the personal data relates, excluding persons who own the data (Ownership) or who create or collect the data, and excluding juristic persons. |
| Data Controller | A person or juristic person with authority to make decisions regarding the collection, use, or disclosure of personal data. |
| Data Processor | A person or juristic person that processes personal data on behalf of or under the instruction of the Data Controller, but is not considered a Data Controller. |
| Data Protection Officer | A person or juristic person appointed by the Company to serve as Data Protection Officer under the PDPA B.E. 2562. |
| Other Definitions | Where not defined in this Privacy Notice, definitions shall follow the PDPA B.E. 2562. |
2. Data Collected by the Company
The Company installs CCTV cameras in visible locations and places warning signs at entrances, exits, and areas deemed necessary for surveillance. The Company collects the following personal data when you enter the premises:
| Personal Data Item | Details |
|---|---|
| Still Images | Photographs from CCTV that can directly or indirectly identify individuals |
| Video Footage | Video recordings capturing behavior, movements, or events inside and around the premises |
| Audio | Audio that may be recorded along with CCTV footage in certain areas (if applicable) |
| Property Images | Images of the data subject's property appearing in CCTV footage, such as vehicles, accessories, bags, hats, clothing, or other property |
However, the Company will not install CCTV cameras in areas that may excessively infringe upon your fundamental rights, such as bedrooms, bathrooms, shower rooms, or rest areas for workers.
3. Legal Basis for Processing Personal Data
The Company processes your personal data under the following legal bases:
- Legitimate Interest: For the lawful legitimate interests of the Company, within the scope you can reasonably expect, without infringing on your fundamental rights or freedoms.
- Legal Obligation: To comply with applicable laws such as criminal law, civil and commercial law, civil procedure law, criminal procedure law, etc.
- Other legal bases as provided by the personal data protection law.
4. Purposes of Personal Data Collection
The Company collects your personal data for the following purposes:
- To protect the health and personal safety of you, including your property
- To protect the Company's buildings, facilities, and property from damage, disruption, destruction, or other crimes
- To support relevant authorities in law enforcement, such as deterrence, prevention, investigation, and legal proceedings
- To assist in dispute resolution during disciplinary or grievance processes
- To assist in investigation processes or complaint handling
- To assist in initiating or defending court proceedings, such as civil claims or labor claims
- To comply with applicable laws
If the Company needs to collect your personal data for contractual or legal compliance and you do not provide such data, the Company may be unable to perform the contract, process your request, or comply with its legal obligations, which may have other impacts on you.
5. Disclosure of Your Personal Data
The Company will keep your CCTV data confidential and will not disclose it unless necessary to fulfill the surveillance objectives stated in this Notice. The Company may disclose CCTV data to the following:
- Internal departments of the Company that are relevant and have duties as necessary for the stated purposes. These personnel will be authorized to access your personal data as necessary with appropriate access procedures.
- Authorities with legal powers, to assist or support law enforcement, or for investigation and legal proceedings.
6. How the Company Protects Your Personal Data
The Company values the security of your personal data. We ensure that our personnel and third parties acting on behalf of the Company comply with appropriate personal data protection standards, including obligations to prevent data leaks.
The Company maintains your personal data with proper Technical Measures and Organizational Measures to ensure security in processing and prevent data breaches. The Company has established policies, regulations, and criteria for personal data protection, including measures to prevent unauthorized collection, use, or disclosure. These are reviewed and updated regularly.
The Company regularly reviews and updates security procedures and measures to maintain appropriate levels of data security, ensuring confidentiality, integrity, accuracy, and availability of personal data processing, with measures to protect against loss and unauthorized access, use, modification, or disclosure.
7. Data Retention Period
To fulfill the surveillance objectives using CCTV as stated in this Notice, the Company will retain your personal data obtained from the CCTV system for no longer than necessary, or as required by law. In some cases, the Company may retain your data for a longer period, such as for legal claims, disciplinary actions, or court proceedings.
The Company will retain CCTV personal data for 15 to 30 days from recording. After this period, the data will be deleted or destroyed, unless extended retention is necessary for legal claims, disciplinary actions, or court proceedings.
8. Data Subject Rights
8.1 Right to Withdraw Consent: If you have given consent for the Company to collect, use, and/or disclose your personal data, you have the right to withdraw consent at any time, unless restricted by law or an existing agreement that benefits you.
8.2 Right of Access: You have the right to access your personal data and request copies, as well as request disclosure of how data was obtained.
8.3 Right to Data Portability: You have the right to receive your personal data in a machine-readable format and request transfer to another data controller.
8.4 Right to Object: You have the right to object to the processing of your personal data at any time if processing is based on legitimate interests.
8.5 Right to Erasure: You have the right to request deletion, destruction, or anonymization of your personal data.
8.6 Right to Restriction: You have the right to request temporary suspension of processing while the Company verifies your request.
8.7 Right to Rectification: You have the right to request correction of your personal data to be accurate, current, complete, and not misleading.
8.8 Right to Complain: You have the right to file a complaint with the competent authority if you believe the data processing violates applicable law.
9. Changes to This Privacy Notice
The Company will regularly review this Privacy Notice to ensure compliance with practices, laws, and applicable regulations. If significant changes are made, the Company will notify you through the website and other appropriate channels.
10. Contact Us
If you have any questions or wish to exercise your rights regarding your personal data, please contact us at:
| Item | Details |
|---|---|
| Data Controller | Re-x Products Co., Ltd. |
| Contact Address | 2 Soi Nonthaburi 20 Yaek 1, Bang Kra Sor, Mueang, Nonthaburi 11000 |
11. Governing Law
You acknowledge and agree that this Privacy Notice shall be governed by and construed under Thai law, and Thai courts shall have jurisdiction over any disputes that may arise.
Effective January 2026