Personal Data Protection Policy

            SRN Sound Proof Co., Ltd. recognizes the importance of personal data protection. In accordance with the Personal Data Protection Act B.E. 2562 (2019), the Company has established this Personal Data Protection Policy to comply with the law, effective from June 1, 2022, and to inform Data Subjects of the Company's policy on personal data protection as follows:

1. Definitions

            - Company: SRN Sound Proof Co., Ltd. located at 700/828 Moo 6, Nong Tamlueng, Phan Thong, Chonburi 20160 Thailand

            - Personal Data: Information relating to a natural person that enables the identification of such person, whether directly or indirectly, excluding the data of a deceased person.

            - Sensitive Personal Data: Personal data as stipulated in Section 26 of the Personal Data Protection Act B.E. 2562, including race, ethnic origin, political opinions, cult, religious or philosophical beliefs, sexual behavior, criminal records, health data, disability, trade union information, genetic data, biometric data, or any other data that similarly affects the data subject as prescribed by the Personal Data Protection Committee.

            - Data Subject: A natural person who is the owner of the personal data collected, used, or disclosed by SRN.

            - Data Controller: A person or legal entity with the authority and duty to make decisions regarding the collection, use, or disclosure of personal data.

            - Data Processor: A person or legal entity that proceeds with the collection, use, or disclosure of personal data pursuant to orders given by or on behalf of a Data Controller.

2. Collection of Personal Data

            The Company will collect personal data with legitimate objectives, scope, and methods. Collection will only be done to the extent necessary for the Company's operations. The Company will ensure the Data Subject is informed and provides consent via documents, electronic means, or other methods prescribed by the Company. If collecting Sensitive Personal Data, the Company will request explicit consent from the Data Subject before collection, except where exceptions apply under the Personal Data Protection Act B.E. 2562 or other laws.

3. Purposes of Collection or Use of Personal Data

            The Company will collect or use the Personal Data of Data Subjects for operational benefits, such as procurement, contracting, financial transactions, company activities, coordination, or improving operational efficiency. This includes any other lawful purposes and/or compliance with applicable laws or regulations. The Company will retain and use such data only for the period necessary as notified to the Data Subject or as prescribed by law. The Company will not use the data for purposes other than those specified, unless:

            3.1 The new purpose has been notified to the Data Subject and consent has been obtained.

            3.2 It is in compliance with the Personal Data Protection Act or other relevant laws.

4. Disclosure of Personal Data

            The Company will not disclose the Personal Data of Data Subjects to anyone without consent and will disclose it in accordance with the stated purposes. However, for operational benefits and service provision, the Company may need to disclose Personal Data to affiliates or third parties, domestic or international, such as service providers performing tasks related to the Personal Data. The Company will ensure those parties keep the Personal Data confidential and do not use it beyond the specified scope. Additionally, the Company may disclose Personal Data under legal criteria, such as to government agencies, regulatory bodies, or in response to legal requests for litigation, legal proceedings, or requests from private entities involved in legal processes.

5. Guidelines for Personal Data Protection

            The Company will establish measures, including security measures for Personal Data, in line with laws, regulations, criteria, and guidelines for personal data protection for employees and relevant parties. This includes supporting and encouraging employees to be knowledgeable and aware of their duties and responsibilities in collecting, maintaining, using, and disclosing Personal Data. Employees must strictly adhere to the policy and guidelines established by the Company to ensure effective legal compliance.

6. Rights of the Data Subject

            6.1 Right to withdraw consent given for processing Personal Data (withdrawal does not affect prior collection, use, or disclosure).

            6.2 Right to access and request a copy of Personal Data, and request disclosure of acquisition methods for unconsented data.

            6.3 Right to rectify Personal Data.

            6.4 Right to erase Personal Data.

            6.5 Right to restrict the use of Personal Data.

            6.6 Right to data portability.

            6.7 Right to object to the processing of Personal Data.

            Data Subjects may exercise these rights by submitting a written or electronic request using the Company's prescribed form via the "Contact Channels" below. The Company will consider and notify the result within 30 days from receiving the request. The Company may deny the request if permitted by law.

7. Policy Review and Changes

            The Company may occasionally review or amend this policy to align with legal requirements, operational changes, and feedback from various agencies. The Company will clearly announce any changes before implementation.

8. Contact Channels

            Human Resources Manager

            SRN Sound Proof Co., Ltd.

            700/828 Moo 6, Nong Tamlueng, Phan Thong, Chonburi 20160 Thailand. Tel: 038-185524-8

            Email: srncenter@srnsoundproof.com