Century Grow Co., Ltd. (hereinafter referred to as the “Company”) recognizes the importance of protecting the personal data of job applicants and individuals employed by the Company and is committed to strictly respecting the privacy rights of such individuals.
This Privacy Notice (the “Notice”) is issued to inform you, as a job applicant and/or employee, of the nature, purposes, methods of collection, use, and disclosure (collectively referred to as “processing”) of personal data, as well as your rights under the Personal Data Protection Act B.E. 2562 (2019).
The Company acts as the Data Controller in respect of the processing of your personal data under this Notice, meaning that the Company determines the purposes and means of collecting, using, or disclosing your personal data.
For the purposes of this Notice, “Personal Data” means any information relating to an individual which enables the identification of such person, whether directly or indirectly, excluding data of deceased persons.
1. Legal Basis for Processing Personal Data
The Company processes your personal data under the following legal bases:
1.1 Contractual Necessity The processing of your personal data is necessary for the performance of a contract or for steps prior to entering into a contract with you, such as an employment contract. This includes recruitment processes, employment administration, performance evaluation, welfare and benefits management, leave administration, group insurance, and other related employment matters. Failure to provide necessary personal data may result in the Company being unable to proceed with your application or employment.
1.2 Legal Obligation The Company processes personal data where necessary for compliance with applicable laws, including labor laws, ministerial regulations, tax laws, court orders, or any other legal obligations relating to employment and human resources management.
1.3 Legitimate Interests The Company processes personal data based on its legitimate interests, provided that such interests are not overridden by your fundamental rights and freedoms. This includes security management, pre-employment screening, verification of employment history, candidate evaluation and selection, and internal administrative purposes.
1.4 Consent Where required by law, the Company will obtain your consent for certain processing activities, including but not limited to criminal record checks, biometric data collection for attendance systems, use of employee images for marketing or public relations purposes, birthday announcements, condolence communications, and CCTV monitoring for safety and security purposes within Company premises.
1.5 Sensitive Personal Data The Company may process sensitive personal data under Section 26 of the Personal Data Protection Act B.E. 2562 (2019) where necessary for compliance with labor protection laws and other applicable legal obligations. In such cases, explicit consent may not be required where permitted by law.
2. Purposes of Processing Personal Data
The Company collects and uses your personal data for the following purposes:
2.1 Recruitment and selection of job applicants
2.2 Verification of qualifications and eligibility
2.3 Interviewing, assessment, and verification of education and employment history
2.4 Retention of applicant data for future employment opportunities
2.5 Employment registration and onboarding, including issuance of employee identification, equipment, system accounts, and access credentials
2.6 Administration of employee welfare and benefits
2.7 Payroll administration, compensation, overtime, allowances, provident fund, cooperative membership, and other benefits
2.8 Tax administration and statutory compliance, including withholding tax
2.9 Security and safety of premises, employees, visitors, and Company assets
2.10 Organization of employee activities, including events, seminars, training, and company outings
2.11 Attendance tracking, leave management, and work-time records
2.12 Marketing and public relations activities involving employees
2.13 Internal communications, including announcements of new employees, promotions, transfers, employee recognition, and service anniversaries
2.14 Performance management, goal setting, evaluation, salary review, and compensation adjustments
2.15 Training and competency assessments
2.16 Investigation of misconduct, fraud, legal violations, disciplinary actions, and enforcement of Company policies and applicable laws
3. Categories of Personal Data Collected
The Company collects your personal data from the following sources:
| Sources / Methods of Personal Data Collection | Types of Personal Data Collected |
| 1. Personal data collected directly through the company’s website registration or job application form, or when you voluntarily submit your personal data to the company via other applications such as Line or Facebook, etc. | Full name, surname, nickname, date of birth, age, gender, photograph, nationality, contact address, mobile phone number, national identification number, driving license, emergency contact information, military status, education history, employment history, etc. |
| 2. Data collected through the use of tracking technologies that monitor your usage behavior on the company’s website | Cookies, device information, computer data, email usage, internet usage, Line, Facebook, etc. |
| 3. Data collected during employment or work performance | Employee family information, provident fund data, employee ID, salary, compensation, bonus, position, welfare benefits, taxation information, employment start date, employment end date, assigned duties, performance evaluation results, transfers, training records, leave records, disciplinary records, facial recognition data, criminal record information, religion, health information, etc. |
4. Disclosure of Personal Data
The Company may disclose your personal data to the following parties:
4.1 Insurance companies for the purpose of providing group insurance coverage
4.2 Government authorities or regulatory agencies with legal authority, including compliance with court orders or legal requirements
4.3 Business partners and relevant third parties, including educational institutions, training providers, private organizations, hotels, temples, foundations, and other related entities
5. Rights of the Data Subject
Under the Personal Data Protection Act B.E. 2562 (2019), you are entitled to the following rights:
5.1 The right to access and obtain a copy of your personal data, including disclosure of sources where applicable
5.2 The right to request rectification of inaccurate or incomplete personal data
5.3 The right to request suspension of data processing under prescribed circumstances
5.4 The right to object to the collection, use, or disclosure of personal data, subject to lawful exceptions
6. Data Retention Period
The Company retains personal data as follows:
The Company may retain personal data for a longer period where necessary in relation to disputes or legal proceedings until final resolution.
7. Data Security Measures
The Company implements appropriate technical and organizational security measures to safeguard personal data against loss, unauthorized access, misuse, alteration, or disclosure, in accordance with its Information Security Policy and internal Privacy Policy. Such measures ensure confidentiality, integrity, and availability of personal data.
8. Data Subject Participation
The Company may disclose personal data upon request by the data subject, heirs, legal representatives, guardians, or authorized persons. Any objection or request for correction shall be recorded as evidence.
The Company reserves the right to refuse such requests where permitted by law or where the data has been anonymized in a manner that prevents identification of the data subject.
9. Access to Personal Data
Access to personal data is strictly limited to authorized personnel of the Company who are responsible for data processing activities. Such personnel are required to comply with this Notice and applicable data protection laws.
10. Amendments to This Notice
The Company reserves the right to amend, revise, or update this Notice as it deems appropriate. Any updates will be published via the Company’s official website, together with the date of the latest revision.
Applicants and employees are encouraged to review this Notice periodically. Submission of an application or employment documentation shall be deemed acknowledgment of this Notice.
11. Contact Information
If you have any questions or would like further information regarding this Notice, you may contact: The Company’s Data Controller