Privacy Notice for Job Applicants / Employees
Last updated: June 2, 2026
Rakcom Co., Ltd. and its external service providers under data processing contracts (collectively referred to as “we”) acknowledge our privacy rights and responsibilities regarding the collection, use, and disclosure (“processing”) of your personal data as a job applicant or employee of the company. Therefore, the company has prepared this Privacy Notice to inform you of the details of the processing of your personal data in accordance with the Personal Data Protection Act B.E. 2562 (2019).
Definition
- “Personal data” means information about an individual that makes it possible to identify that individual, directly or indirectly, but does not include information about deceased persons.
- “Sensitive personal data” means data as defined in Section 26 of the Personal Data Protection Act, such as race, ethnicity, political opinions, religion or philosophy, sexual behavior, criminal history, health information, disability, trade union information, genetic information, biometric information, or any other information that similarly affects the data subject.
- “Personal Data Protection Act” refers to the Personal Data Protection Act B.E. 2562 (2019), including related subordinate legislation and amendments thereto.
- “The Committee” refers to the Personal Data Protection Committee.
Personal information that we collect.
The personal information we may collect includes:
- Personal information such as full name, nickname, date of birth, age, province of birth, national ID number, copy of house registration, copy of national ID card, copy of driver’s license, address, weight, height, photograph, military service certificate.
- Contact information such as phone number and email address.
- Family and reference information, such as marital status, spouse’s name, parents’ information, number of children, emergency contact, and reference persons.
- Educational and work history.
- Information system usage data and internal system access logs, including CCTV footage within the company premises, are maintained for security purposes.
In addition, the company may process your sensitive personal data, such as criminal history, for pre-contract verification purposes (e.g., anti-money laundering checks) which is necessary to consider entering into a contract. If you do not provide such information, the company may not be able to consider entering into a contract with you.
In the event that you provide us with the personal information of another person, you certify that you have notified this notice and obtained the consent of that person to disclose the information to us.
How do we collect your data?
Generally, we collect personal information from you directly, except in certain cases where it may be collected from individuals who recommend you, from public sources, from business sources, or from commercial sources.
Purpose and legal basis for processing.
| Sequence | Objectives | Legal Basis |
|---|---|---|
| 1. | To enter into a contract with you and to fulfill the rights and obligations under the contract based on | consent/contract. |
| 2 | To verify and confirm identity, and to check background and qualifications before employment. | Consent basis |
| 3. | For internal management of the employment process, such as submitting applicant information/interview reports to decision-makers, drafting employment contracts, training, and preparing new employees, based on | legitimate interests/contractual basis. |
| 4. | To consider other suitable positions in the future. | Legitimate interest |
| 5. | To maintain security within the company building or premises. | Legitimate interest |
| 6. | To manage access rights to information systems and maintain the security of the company’s systems and infrastructure, based on | legitimate interests. |
| 7. | In some cases, companies may use digital tools or artificial intelligence (AI) to assist in the initial screening of applications, with a human agent always making the final decision based on | legitimate interest/consent. |
Individuals who may receive your personal information.
We may disclose and/or transfer your personal information to the following individuals, who may be located in or outside of Thailand.
- The data processor under the company’s data processing agreement.
- Internal and external consultants or experts, such as legal advisors, auditors, and human resource management system providers (including cloud-based systems).
- Law enforcement agencies, government agencies, regulatory agencies, or dispute resolution bodies, acting in accordance with duties prescribed by law or related agreements.
- Persons who enter into or intend to enter into transactions with the company, such as in the case of a sale or offer to buy or sell the company (if any).
- Another person to whom you have given your express consent.
Transferring personal data to foreign countries.
Your personal data may be stored or processed by the company or service provider as detailed above, which may be located in Thailand or abroad (e.g., cloud-based human resource management systems). Any transfer of data abroad will be subject to the data protection conditions stipulated in the Personal Data Protection Act.
Personal data retention.
We will retain your personal data for as long as necessary to achieve the purposes stated above, but not exceeding 10 years from the date you terminate your relationship or last contact with us, unless permitted by law to retain it longer. Upon expiration, we will delete, destroy, or anonymize the data.
Your rights regarding personal data.
You have the right to have the following actions taken regarding your personal data:
- Withdraw or request a change to the scope of consent you have given us.
- I would like to check if we hold your personal data, request access to or obtain a copy of your data, and ask how we process your data.
- Please correct your personal information.
- In some cases, we may request the deletion or destruction of your personal data.
- Please limit the processing of your personal data in certain cases.
- In some cases, we may request the transfer of your personal data.
- We kindly request that you temporarily suspend the processing of your personal data in certain cases.
We will process your request within 30 days of receiving the complete request and supporting documents. However, we reserve the right to withhold the request to the extent permitted by law and may charge reasonable fees. Furthermore, you have the right to appeal to the expert committee according to the procedures under the Personal Data Protection Act.
This amendment to the policy.
The company reserves the right to amend, supplement, change, or revise this policy to the extent permitted by law. If a significant change occurs, the company will notify you and/or obtain your consent (if required by law).
Contact channels
If you have any questions about this policy or wish to exercise your rights regarding your personal data, please contact us at:
Personal Data Protection Section, Rakcom Co., Ltd.
Vanich Place Ari Building (Building A), Unit 2703, 27th Floor.
304 Phahonyothin Road, Samsen Nai Subdistrict, Phaya Thai District, Bangkok 10400
Email: [email protected]
