POLICY_CLIENT |19AUG2022

Asahi Networks (Thailand) Co., Ltd.
PRIVACY POLICY
1. Our Privacy Statement
The protection of your personal data is of great importance to Asahi Networks (Thailand) Co.,
Ltd. (the "Company" or "we").
We process the personal data of customers (include corporate client’s person) and Business
partner's person to whom those regulations apply (referred to as the "you" throughout thisprivacy policy) in accordance with the applicable the regulation relating to personal dataprotection, in particular the Personal Data Protection Act B.E. 2562 (“PDPA”). This privacypolicy explains how we, as the data controller, process your personal data.
Asahi Networks (Thailand) Co., Ltd.
2. Personal data to be collected
We may collect the following personal data for processing to achieve the purpose as herein
provide and process based on the legal bases provided for in the PDPA. In addition, we process
your personal data of a sensitive nature, including your religious beliefs and health status, inaccordance with special criteria provided for in the Section 26 of the PDPA.
- Name- Address- Contact information (Telephone/Mobile number, E-mail Address, Line ID)- Workplace (Workplace’s Name, Address, Telephone Number, Position)- Identification Number- Passport Number- Photo- Birth Date, Age- Nationality (Sensitive Data)- Sex (Sensitive Data)- Bank Account Number- CCTV Movie
3. Purpose of the processing
The Company collect and process your Personal Data for the following purpose;- Contacting- Providing services- Promotion of the Company’s business and service- Complying with laws and regulation and order of the governmental authorities- Preparation of relevant documents- Evaluating the transaction.
- Management of business partner information, payments, and revenue processing

Page 1 of 5

POLICY_CLIENT |19AUG2022-Communication, business discussion, contract conclusion, etc. necessary for thebusiness
Security purposes

4. Legal basis for the processing
4.1 The legal basis for the processing is as follows-

When the processing is necessary for the performance of contractual obligations to you
based on Section 24(3) of PDPA.
When processing is required for the pursuit of legitimate interests under the Section 24(5)
When processing is required for compliance with our legal obligations in accordancewith the Section 24 (6) of PDPA.

4.2 You have the right to withdraw your consent at any time by the method separately
designated by us at the timing of obtaining your consent. However, your withdrawal of consent
will not affect the legality of processing conducted based on your consent before its withdrawal.
4.3 We will notify you separately, if the provision of personal data is a statutory or contractual
requirement, or a requirement necessary to enter into a contract, as well as the possible
consequences of failure to provide such data.
5. Sources of Personal Data
We obtain your personal data directly from you or indirectly through third parties such as thosestated below.
- Department of Business Development (DBD)- Revenue Department- Other governmental authorities as required by relevant laws and regulations.
6. Retention Period for Personal Data
We will retain your personal data for as long as necessary to fulfill the aforementioned purposesfor obtaining and processing your personal data. Specific retention periods are decided basedon the following considerations, the purpose for obtaining and processing the personal data;
the nature of the personal data; and the necessity of retaining the personal data for legal orbusiness reasons.

Page 2 of 5

POLICY_CLIENT |19AUG2022

Categories of Personal Data

Period of Retention

1. Identification information i.e name,last name, address, telephonenumber.
2. Workplace (Workplace’s Name,Address, Telephone Number,Position)
3. Identification Number
4. Passport Number
5. Photo
6. Birth Date, Age
7. Nationality (Sensitive Data)
8. Sex (Sensitive Data)
9. Bank Account Number
10. CCTV Movie

No longer than 10 years after the contract
has expired

The aforementioned table does not include the situation whereby we are required by the law of
any necessary event such as litigation to retain the personal data for a longer period. However,please kindly be ensured that the retention of personal data after the expiry date of retention
period will only occur only in the necessary circumstance.
When the retention period has ended or the retention of such data is no longer necessary(whichever is applicable), we will destroy or erase such data from our system.
7. Sharing and Disclosure of Personal Data
7.1 We share and disclose your personal data to the following third parties in accordance with
the PDPA for the purposes stated in this privacy policy. The Company will inform you toacknowledge and request for consent as necessary and required by the PDPA.
- Government and Regulatory Authorities or any Organizations to which the Company isunder an obligation to make disclosures under the requirements of any law andregulations.
7.2 As a result of the aforementioned sharing and disclosure, in some cases your personal data
will be transferred to the following third countries outside Thailand:- JapanPage 3 of 5

POLICY_CLIENT |19AUG2022

In such a case, we will implement appropriate safeguards by executing with the transferee thestandard data protection causes including Binding Corporate Rules or Data Processing
Agreement (if any or whichever is appropriate) pursuant to the PDPA, unless the datatransferred country has appropriate data protection standard as prescribed by the Personal Data
Protection Committee or we obtain your consent pursuant to the PDPA. If you wish to receive acopy of documentation related to these safeguards, please inquire using the contact details at
the end of this privacy policy.
8. Your Rights
You have the following rights regarding personal data obtained and processed by us.
- Obtaining information regarding processing of data: You have the right to obtain from us
all the requisite information regarding our data processing activities that concern you.
- Access to personal data: You have the right to obtain from us confirmation as to whether
personal data concerning you are being processed, and, if so, then access to the personal
data and certain related information.
- Rectification or erasure of personal data: You have the right to have us rectify inaccurate
personal data concerning you without undue delay and the right to have us complete any
incomplete personal data. Also, if certain conditions are satisfied, you will have the rightto have us delete personal data concerning you without undue delay.
- Restriction on processing of personal data: If certain conditions are satisfied, you will havethe right to have us restrict processing of personal data concerning you.
- Objection to processing of personal data: If certain conditions are satisfied, you will havethe right to object to processing of personal data concerning you.
- Data portability of personal data: If certain conditions are satisfied, you will have the rightto receive personal data concerning you in a structured, commonly used, and machinereadable format and the right to transfer those data to another controller without hindrance
from us.
- Right to rectification: If you believe that the personal data we collect or process is wrong,
you have the right to ask for such data to be rectified.

‐THIS SPACE INTENTIONALLY LEFT BLANK‐

Page 4 of 5

POLICY_CLIENT |19AUG2022

If you intend to exercise any of the aforementioned rights, or if you require further
information about how your personal data is used by the Company, then contact:

Email: antpdpa@gmail.com
Asahi Networks (Thailand) Co., Ltd.
No. 287 Liberty Square Building, Room No. 2004 20th Floor, Silom,Bangrak, Bangkok 10500 (Head Office)Tel. +6626312121

9. Amendment to this Privacy Policy
We amend this privacy policy from time to time. We will contact you through this website andby e-mail if necessary, when we make any substantive or material amendments.

*****************

Page 5 of 5