CCTV Privacy Notice

ST. Frame & Truss Co., Ltd.

ST. Frame & Truss Co., Ltd. operates a Closed-Circuit Television (CCTV) system for surveillance within and around the company’s premises (“Premises”) in order to protect the life, health, and property of individuals.

The Company collects personal data of officers, employees, customers, contractors, visitors, and any other individuals (collectively referred to as “you”) who enter the Premises through the use of CCTV systems.

This CCTV Privacy Notice (“Notice”) explains how the Company collects, uses, or discloses personal data that may identify you (“Personal Data”), as well as your rights regarding such data.

1. Legal Basis for Processing Personal Data

The Company collects and processes your Personal Data based on the following legal grounds:

1.1 Necessity for preventing or suppressing danger to the life, body, or health of you or other persons.

1.2 Legitimate interests of the Company or other persons, provided that such interests are not overridden by your fundamental rights in personal data.

1.3 Compliance with applicable laws governing workplace safety, environmental safety, and protection of the Company’s property.

2. Purpose of Collecting Your Personal Data

The Company collects your Personal Data for the following purposes:

2.1 To protect the health and personal safety of individuals, including your property.

2.2 To protect the Company’s buildings, facilities, and assets from damage, disruption, vandalism, or other crimes.

2.3 To support law enforcement authorities in preventing, investigating, and prosecuting criminal offenses.

2.4 To assist in dispute resolution processes, including disciplinary proceedings or grievance procedures.

2.5 To support investigation processes or complaint-handling procedures.

2.6 To assist in initiating or defending legal claims, including but not limited to employment-related legal actions.

3. Personal Data Collected by the Company

In accordance with the purposes described in Section 2, the Company installs CCTV cameras in visible locations. Warning signs indicating the use of CCTV are placed at entrances, exits, and other areas deemed necessary for surveillance.

When you enter the Premises, the Company may collect the following Personal Data:

3.1 Still images
3.2 Video recordings
3.3 Audio recordings
3.4 Images of your property (if applicable), such as mobile phones, computers, vehicles, bags, etc.
3.5 Other related information

The Company will not install CCTV cameras in areas that may excessively infringe upon your fundamental rights, such as rest areas, restrooms, shower rooms, or other private areas.

4. Disclosure of Your Personal Data

The Company will keep your Personal Data obtained from CCTV recordings confidential and will not disclose it unless necessary to fulfill the purposes stated in this Notice.

Your Personal Data may be disclosed to the following parties:

4.1 Government authorities or agencies with legal authority to assist in law enforcement, investigations, or legal proceedings.

4.2 External service providers when necessary to ensure safety and protection of life, body, health, or property of individuals.

4.3 Other parties where necessary and legally permitted.

5. Your Rights as a Data Subject

Under the Personal Data Protection Act B.E. 2562 (PDPA), you have the following rights:

5.1 The right to access, obtain copies of, and request disclosure of the source of your Personal Data collected by the Company, unless the Company has lawful grounds to refuse such requests.

5.2 The right to request correction of inaccurate or incomplete Personal Data.

5.3 The right to request restriction of processing of your Personal Data in certain circumstances, including:

• While the Company is verifying your request for correction
  
  

• When the data processing is unlawful
  
  

• When the data is no longer necessary but you request retention for legal claims
  
  

• While the Company verifies legitimate grounds for processing following your objection
  
  

5.4 The right to object to the collection, use, or disclosure of your Personal Data unless the Company demonstrates compelling legitimate grounds or legal obligations.

6. Data Retention Period

To achieve the purposes stated in this Notice, the Company will retain CCTV recordings containing your Personal Data for approximately one year after the recordings have been reviewed by authorized personnel.

After the retention period has expired, the Company will delete or destroy the Personal Data in accordance with the Company’s data retention standards.

7. Personal Data Security

The Company implements appropriate technical and organizational security measures to protect your Personal Data from loss, unauthorized access, alteration, disclosure, or destruction.

These measures are consistent with the Company’s Information Security Policy and are designed to ensure:

• Confidentiality
  
  

• Integrity
  
  

• Availability
  
  

The Company also regularly reviews its personal data protection policies and this Notice as appropriate.

8. Responsibility of the Data Controller

Only authorized personnel with relevant duties are permitted to access CCTV data related to this processing activity.

The Company ensures that such personnel strictly comply with this Privacy Notice.

9. Changes to This Privacy Notice

The Company may revise this Notice from time to time as deemed appropriate. Updated versions will be published on the Company’s website:

https://www.stframe.com/privacy-policy/cctv-policy

You are encouraged to review the Notice regularly before entering the Company’s Premises.

Entering the Premises shall be deemed as acknowledgment of this Notice. If you do not agree with this Notice, please refrain from entering the Premises.

10. Contact Information

If you have any questions regarding this Notice, please contact:

Data Controller
Information Technology
ST. Frame & Truss Co., Ltd.
29/4, 29/14, 29/15, 29/17 Moo 3, Pho Sam Ton
Bang Pahan, Phra Nakhon Si Ayutthaya 13220, Thailand

Tel: 035-779-554
Mobile: 092-282-6864
Email: it@stframe.com

Data Protection Officer (DPO)
Information Technology
ST. Frame & Truss Co., Ltd.

Tel: 035-779-554
Mobile: 092-282-6864
Email: it@stframe.com