Privacy Notice
AXA Insurance Public Company Limited (“AXA” or “We”), uses CCTV to monitor and record individuals on and around buildings and surrounding areas of AXA. So, we have prepared this privacy policy to inform you of the collection, use, disclosure, and international transfer of your personal data. Hereinafter, personal data and sensitive data will be mentioned as Personal Information.
- Personal data means any information that can directly or indirectly identify you.
1. Personal Information We Collect
We collect images caught on CCTV cameras which may include video images and static images.
2. How We Collect Your Personal Information
We collect the Identification information which is the images caught on CCTV cameras on and around our buildings and surrounding areas.
3. Purposes of Collection, Use or Disclosure of Personal Information
We collect, use or disclose your personal information for the purposes as follows:
4. Data Use & Disclosure
The images can be accessed by the security staff members of AXA and by Security Service Provider of AXA [“Authorized person”]. Access to the CCTV system is highly limited, being protected by a password and recording any log or action from any Authorized person. The personal data cannot be accessed without the authorization from AXA’s security team.
We may disclose your personal information to government authority which is enforced by the law e.g., supporting evidence for the investigation process.
5. Data Retention Period
We will keep your personal information for 90 days after your visit to our buildings and surrounding. After that period, any CCTV recorded footage will be deleted.
6. Your Rights as a Data Subject
You can ask us to do various things with your personal information. For example, at any time you can ask us for a copy of your personal information, correct mistakes, change the way we use your information, or even delete it. We’ll either do what you’ve asked or explain why we cannot.
You have the following rights in relation to our use of your personal information.
- The right to access your personal information
You are entitled to a copy of the personal information we hold about you and certain details of how we use it. There will not usually be a charge for dealing with these requests. Your personal information will usually be provided to you in writing, unless otherwise requested
- The right to rectification
We take reasonable steps to ensure that the personal information we hold about you is accurate and complete. However, if you do not believe this is the case, please contact our DPO team by using the contact information as specified in article 7 of this policy and you can ask us to update or amend it.
- The right to erasure
In certain circumstances, you have the right to ask us to erase your personal information, for example where the personal information we collected is no longer necessary for the original purpose or where you withdraw your consent. However, this will need to be balanced against other factors, for example according to the type of personal information we hold about you and why we have collected it, there may be some legal and regulatory obligations which mean we cannot comply with your request.
- Right to restriction of processing
In certain circumstances, you are entitled to ask us to stop using your personal information, for example where you think that the personal information, we hold about you may be inaccurate or where you think that we no longer need to process your personal information.
- Right to data portability:
In certain circumstances, you have the right to ask that we transfer any personal information that you have provided to us to another third party of your choice. Once transferred, the other party will be responsible for looking after your personal information.
- Right to object:
You have the right to object to the collection, use or disclosure of your personal information for direct marketing purposes or on grounds stipulated by law.
- The right to withdraw consent
For certain uses of your personal information, we will ask for your consent. Where we do this, you have the right to withdraw your consent to further use of your personal information. Please note in some cases we may not be able to process your insurance if you withdraw your consent.
- The right to lodge a complaint
You have a right to complain to the Personal Data Protection Committee at any time if you object to the way in which we use your personal information.
You can make any of the requests set out above using the contact details of the Data Protection Officer (DPO) as specified in section 7 of this Privacy policy. Please note that in some cases we may not be able to comply with your request for reasons such as our own obligations to comply with other legal or regulatory requirements. However, we will always respond to any request you make and if we can't comply with your request, we will tell you why.
7. Contact information
If you wish to contact AXA or the Data Protection Officer, the details are below:
AXA Insurance Public Company Limited.
Address: 23rd Floor, Lumpini Tower 1168/67 Rama IV Road, Sathorn, Bangkok 10120
Call Center : 02 – 118 – 8111
Monday to Friday - 8:30 AM - 6:30 PM and Saturday - 9:30 AM - 6:00 PM
Closed on Sunday and official holidays
The Data Protection Officer
Address: 23rd Floor, Lumpini Tower 1168/67 Rama IV Road, Sathorn, Bangkok 10120
E-mail: dpo@axa.co.th
Channels for exercise your rights as the Data Subject : https://direct.axa.co.th/PDPA
8. Update to this Privacy Notice
AXA regularly reviews and, if appropriate, updates this Privacy policy from time to time to ensure that your personal information is properly protected. In case of any update to this Privacy policy, AXA will inform you through Notice on this website, notification on your device or other appropriate methods. Please visit https://www.axa.co.th/privacy-policy-statement for the updated Privacy Notice.
This Privacy Notice shall take effect as of the date that the Personal Data Protection Act becomes effective.
[Published on 01/06/2022]
