CCTV Privacy Notice
- Objective
This privacy notice explains the collection, use, and disclosure of personal data (“processing”) through the use of Closed-Circuit Television (CCTV) systems in and around the buildings and premises of Rambuttri Rungruang Co., Ltd. for individuals entering these areas.
- Reasons for Processing Data
The company processes your personal data via CCTV for the following reasons:
To control access to the building and offices, ensuring the safety of employees, visitors, and contact persons, as well as property and information located or stored within the company’s premises.
To prevent, deter, and investigate unauthorized physical access, including access to secure areas and rooms containing IT infrastructure or information.
To prevent, detect, and investigate undesirable incidents that may occur within the building, hotel premises, and common areas.
- Remarks
The company’s CCTV system is solely for the purpose of ensuring the safety of life and property for service users. The company is aware of the privacy concerns of service users, therefore, the CCTV system will not record or reveal sensitive areas or infringe upon the privacy of service users. CCTV footage will be restricted to authorized personnel only.
The CCTV system will not be used as a tool for investigation or evidence in internal investigations or disciplinary proceedings, unless a security incident is involved. Data may be transferred or disclosed to investigative authorities within the framework of disciplinary or criminal investigations by legally authorized agencies.
- What information does the CCTV system collect?
The company collects only motion images recorded by the CCTV system and does not record conversations.
- Legal Basis for Processing
The company uses the CCTV system for security and access control purposes, which is necessary for the management and operation of the company. This processing is based on the legitimate interests of the company (as the data controller) in accordance with Section 24 (5) of the Personal Data Protection Act B.E. 2562 (2019).
- Who can access your personal data?
Your image data can only be accessed by the company’s security officers, department heads, and executives involved in security and building management. Furthermore, access to the hard disk recorder is highly restricted, protected by passwords, and any recording or operations by staff are not accessible without authorization from the Head of Organizational Services.
- Disclosure of information to third parties
The company does not have a policy to transfer or disclose your personal data to third parties unless:
The company receives your prior consent.
Data is transferred or disclosed to legally authorized agencies or by court order.
- Personal data security measures
The company is committed to protecting the security of your personal data. Therefore, we employ both technical and physical security technologies and procedures to help protect your personal data from unauthorized access, use, or disclosure[cite: 2]. We store your data in computer systems with limited access and in controlled facilities.
- Storage Period
The company will retain your personal data for 90 days after your visit to our premises. After this period, recorded CCTV footage will be automatically deleted.
- Data Subject Rights
You can exercise and manage your personal data rights by contacting the Data Protection Officer at Email: dpo@rbt.co.th to exercise and manage your personal data rights or to report any issues regarding the collection, use, and processing of your personal data.
CCTV Privacy Policy Commencement Version 1: February 18, 2025