Privacy Notice for use of CCTV

Company names:

• BDO Holding Company Limited
• BDO Audit Company Limited
• BDO Advisory Services Company Limited
• BDO Business Services Company Limited

(Collectively referred to as “BDO in Thailand” or “Company”)

We, BDO in Thailand, use closed-circuit television (CCTV) in and around our premises to monitor a specific space for the safety and security of our premises, assets, staff, customers and visitors. Under the Personal Data Protection Act, 2019, BDO in Thailand through this privacy notice provides information on our collection, use, and disclosure of your personal data collected in our use of CCTV. We may update this notice from time to time. You can find our updated notice at bdo.th

Types of personal data collected

Our CCTV place at 4 locations captures images of all individuals and their belongings entering the monitored area in or around our premises and facilities and may collect, use, disclose or process your personal data such as photos or videos:

• To protect and prevent life-threatening harm to people or damage to property,
• To protect and prevent the premises and facilities from damage, disruption, vandalism, and other criminal activities.
• For legitimate interest of the Company or of people, such as to suppress hazardous, unusual events, or emergencies.
• To support law enforcement agencies in the prevention, detection, and prosecution of crime and to act as a deterrent against crime.
• To comply with the legal obligations prescribed by the applicable laws, including but not limited to the laws regarding safety and environment in the workplace. We consider the use of CCTV as a necessary measure to enable us to meet those obligations.

Our CCTV’s are operational 24 hours, except in case of system error, repairs and maintenance.

Storage and retention of personal data

We store the data recorded on CCTV on a hard drive.

We retain the data recorded for a period of two year.

In the event of an unusual incident or an emergency situation, where the information on CCTV has been used in the investigation process of government officials. Such CCTV information will be used until the investigation process is terminated.

If the information collected on CCTV, is required to be used for legal proceedings or criminal investigations. The data on such CCTV cameras will be used until the proceedings/ investigations are over.

If we no longer need to retain your personal data, we may destroy, delete, remove or anonymize your personal data.

Your rights

As the data subject you have the right to request BDO in Thailand to process your personal data to the extent permitted by law, as explained below:

• Right to withdraw consent: If you have consented to our collection, use, or disclosure of your personal data, you have the right to withdraw that consent at any time.
• Right of access: You have the right to access your personal data and ask the Company to make a copy of such personal data. The request must be submitted in writing to the data protection office of BDO in Thailand (contact information provided below).
• Right to rectification: You have the right to request that the Company to rectify incorrect, incomplete, not updated or misleading information.
• Right to erasure: You have the right to ask the Company to delete or anonymize your data for specific reasons.
• Right to restriction of processing: You have the right to have the Company suspend the use of your Personal Data for specific reasons.
• Right to data portability: You may have the right to obtain your personal data we hold, in a structured, electronic format, and transmit such data to another data controller, where this is (a) personal information which you have provided to us, and (b) if we are processing that data on the basis of your consent.
• Right to object: You have the right to object from collection, use, or disclosure of your personal data.
• Right to lodge a complaint. You have the right to file a complaint against us to the relevant data protection supervisory authority if you believe that we breach or do not comply with any of our obligations under the applicable personal data protection laws.

You can contact the privacy office to process the application for the above rights or lodge a complaint. Please contact privacyoffice@bdo.th or visit bdo.th

Sharing data on CCTV with third parties

• BDO in Thailand may share CCTV information with government officials, in cases where written requests are made and the request is for the purpose of investigation conducted by government officials, for investigation or for judicial proceedings.
• The Company may provide CCTV vendor with access to data for purpose of system maintenance, only if authorized by the Company for agreed access to personal data on CCTV cameras.
• We may disclose your personal data to third parties (including our affiliates and service providers) if we consider that the disclosure is necessary for the purposes described above.

Safety measures

BDO in Thailand will arrange the retention of personal data with organizational and technical measures not less than the level required by law and with appropriate systems to protect and secure such personal data and store it in places with restricted access protection systems.

In the event that any officer or agency wishes to review the footage or request information from CCTV, a written request to the privacy officer -privacyoffice@bdo.th

In case of request for information from the police, the company's director must be approved in writing.

In case of any questions, clarifications or complaints please contact the privacy officer at privacyoffice@bdo.th or visit www.bdo.th