Personal Information Protection Policy
Purpose and Scope
Nishimatsu Vietnam Co., Ltd. (hereinafter referred to as “the Company”) has established this Personal Information Protection Policy (hereinafter referred to as “the Policy”) in accordance with the Personal Data Protection Act (BE2562) and other relevant laws, including any subsequent amendments (collectively referred to as “PDPA”). In compliance with the PDPA, this Policy provides detailed guidelines regarding the collection, usage, and disclosure of personal information of our employees and staff, as well as the employees and staff of third parties who represent or act on behalf of the Company, in the context of the Company’s business operations.
Protection Measures
To prevent loss, unauthorized access, misuse, alteration, or leakage of personal data, the Company regularly reviews its personal information protection and technical policies, ensuring appropriate management of personal data. We take necessary and appropriate measures to prevent incidents such as loss, unauthorized access, destruction, alteration, or leakage of personal data.
Records of Personal Information Usage and Disclosure
The Company shall maintain records regarding the use and disclosure of collected personal data, which shall include, at minimum, the following:
- ・ A list of collected personal data, its purpose of collection, and retention period;
- ・ The usage or disclosure of personal data based on legal grounds other than consent;
- ・ The rights of data subjects to access their personal information, and the methods and conditions for exercising these rights;
- ・ Explanations regarding any refusals or objections to requests for exercising rights, including reasons as defined within the Policy, as well as details of the security measures implemented by the Company.
These records are intended to enable data subjects to verify and exercise their own rights when they notify or make requests to the Company.
Personal Information Leakage Handling Process
In the event of a personal information leakage occurring within The Company that may impact the rights and freedoms of the data subject, all employees and related parties must cooperate fully to ensure compliance with applicable laws. Upon becoming aware of such a leak, The Company is required to notify the Personal Information Protection Commission Office without undue delay, and within 72 hours whenever possible. Moreover, if the leak poses a high risk of affecting the rights and freedoms of the data subject, the Company must immediately inform the affected individuals about the incident and provide details regarding the remedial actions taken.
Revision of the Personal Information Protection Policy
This Personal Information Protection Policy may be amended or revised from time to time, as appropriate, to reflect changes in applicable laws and regulations or to ensure the ongoing suitability of our business practices.
