privacy policy

United Motor Works (Siam) Public Co., Ltd. and

United Capital Equipment Co., Ltd.

Privacy Policy

United Motor Works (Siam) Public Co., Ltd. and United Capital Equipment Co., Ltd. (the “Company”) adhere to ethical business operation, respect, and comply with the law. And realize to build trust with partners, customers, dealers, suppliers, coordinators, shareholders, directors, and its employees. Therefore, the company emphasizes the observance of rights to privacy and security of your data and established policies, regulations, and guidelines for all activities with severe measures to maintain the securement of personal data. So, you can be confident that the personal data that you have given to the company will be protected and is going to use according to your wishes and following the Personal Data Protection Act B.E. 2019 (PDPA).

The Company intends to collect, use, process, disclose, transfer, and store the personal data of partners, customers, dealers, suppliers, coordinators, shareholders, directors, and employees. Our control actions are under the Personal Data Protection Act B.E. 2562 (A.D. 2019) (PDPA) as such “Data Controller”.

1. Personal data we collect

Personal Data means any information relating to a person, which enables the identification of such person, whether directly or indirectly, such as first name, last name, date of birth, ID number, passport number, address, telephone number, email address, photo. Moreover, it includes customer or dealer, or supplier data, employee data, data of directors, shareholders, contractors, etc. but not including the information of the deceased Persons in particular (anonymous data). The Company will collect personal data through the following detail:

1. 1. Third party

The Company collect, use, process, disclose, transfer, and store personal data as below;

Personal details and Identification: (first name, last name, address, date of birth, ID card, passport, driving license, visa, work permit, photo)

Contact information: (First name, last name, position, company name, billing address, delivery address, telephone numbers, email address, name card)

Security Data: (photograph and/or voice recording by means of CCTV, photograph, footage, video, voice recording of conversations)

1. 2. Employees

The Company collect, use, process, disclose, transfer, and store personal data as below;

Personal details and Identification: (first name, last name, date of birth, address, house registration, ID card, passport telephone number, email address, marital status, registration of marriage (if any), spouse (including phone number and address), names of family members who can be contacted in an emergency, certificate of first name-last name change, driving license and vehicle information, photo, footage),

Sensitive Personal Data:

(Race, religion, blood type, vaccination record, personality height and weight, hobby and interest, criminal record, health examination result, narcotics, drug and alcohol testing information, medical condition, biometric data (fingerprint) for finger scan, disability)

Employee status information:

(position, phone number and email used within the company, job application (including digital and document format), work history, skills, qualifications, reference, career development, training department transfer, performance)

Security Data:

(photograph and/or voice recording by means of CCTV, photograph, footage, video, voice recording of conversations)

2. Purpose of personal data processing

The company will collect, use, process, disclose, transfer, and store your personal data only permitted by the Personal Data Protection Act (PDPA). We process for the following purpose;

1. 1. Third party

• • To register partners, customers, dealers, contractors, and coordinators.
  • To verify the credibility of partners, customers, dealers, contractors, and coordinators.
  • To execute agreements consisting of sales and purchase agreements, lease agreements, service agreements, and other agreements created by the company.
  • To manage health and safety for employees and company areas.
  • To publicize the company’s business.
  • To comply with any laws and regulatory applications to the company.
  • To exercise or protect the legal rights of the company’s legitimate operation consisting of administration, management, business plan, and auditing.

1. 2. Employees

• • To operate and support Human Resources management and administration (including recruitment, payroll, employee management, training, performance management, portfolio, expenditure report, welfare management, and employment information.
  • To manage employment contracts.
  • To record employees’ health and safety consisting of reimbursement of medical expenses.
  • To submit information to social security.
  • To use data for group health insurance.
  • To disburse payroll cheque.
  • To refer and manage occupational health.
  • To check the security, criminal record, and credit check (if any force or allowed by law).
  • To verify brief personal information and historical performance.
  • To administrate employees and promotions.
  • To provide the employee information to customers, agents, and suppliers for the company service.
  • To monitor from CCTV and maintain security in the area of the company.
  • To manage the business, accounting, and auditing.
  • To comply with any laws and regulations applicable to the company.
  • To plan work management consisting of travel arrangements and accommodation.
  • To exercise the rights and protect the company rights for legitimate business operations.

3. Consent

The company may collect your data without the consent of the data subject if this operation is for (1) to comply with the law; (2) for our legitimate interest; (3) necessary for the performance of any contract; (4) to prevent or suppress a life-threatening event. However, in some cases, the company may need to obtain written consent from data subject for the company to use sensitive data. The company will explain the details and reasons for using personal data so that the data subject can carefully consider whether to give consent or not.

4. Cross-border transfer

If personal data is required to transfer outside of Thailand, the destination country must have adequate personal data protection standards and operate following the Personal Data Protection Act B.E. 2562. Unless the transfer of personal data to such foreign countries is for  (1) for compliance with the law, (2) with the consent of the Data Subject, (3) for the performance of a contract to which the Data Subject is a party (4) for compliance with a contract between the Company and others for the interests of the Data Subject, (5) for preventing or suppressing a danger to life, body, or the health of data subject and other people, (6) necessary for carrying out missions in the public interest.

5. Retention period of Personal Data

The company will retain your data only to the extent reasonably necessary to achieve the purposes for collection. The company perhaps maintains personal data for the period required by relevant laws and regulations comprising the purpose for processing through the applicable legal, tax, accounting, report, or other requirements.

6. Data Security

The company has appropriate security measures to prevent personal data from unauthorized or unlawful loss, use, or access. We limit access to Personal Data only to those involved in the business who need to know. The data processor will only act as authorized and have a duty of confidentiality.

7. Rights of data subject

Under the PDPA, the data subject has insignificant rights as follows;

1. 1. 1. 1. 1. Right to be informed
            2. Right to access and obtain a copy
            3. Right to data portability
            4. Right to object
            5. Right to erasure
            6. Right to restriction
            7. Right to rectification
            8. Right to lodge a complaint

The data subject always obtains the right to withdraw consent of personal data processing. This action will not affect the lawfulness of any processing accomplishment before such withdrawal. If the data subject withdraws their approval, the company may not be able to provide certain products or services to them. So, the data subject should consider carefully before repealing consent.

If you have any questions regarding this privacy policy or require the rights exercise under the Personal Data Protection Act B.E. 2562, please contact our Data Protection Officer (DPO) at 02 033 5959 email: corporate@umws.8content.com

The company reserve the rights to update and amend this privacy policy. You can find the latest version on our website: www.umwsiam.com

This policy is effective from 1 June 2022 onwards.

Sincerely Yours,

Mr. Atsushi Tomita

Managing Director