A.I. Technology Group Co., Ltd., consisting of A.I. Technology Co., Ltd., Tokai Gauge Technology Co., Ltd., A.I. Foundry & Manufacturing Co., Ltd., and AI Innovative Plus Co., Ltd. (hereinafter referred to as “we”) respects the privacy rights of our customers, including individuals who operate on behalf of customers who are legal entities (hereinafter referred to as “Processing”). To ensure that your personal data is protected, we have created this Privacy Policy to inform you about the details related to the collection, use, and disclosure (collectively referred to as “Processing”), including the deletion and destruction of your personal data through both online and other channels as required by applicable personal data protection laws.

1. Purposes of Personal Data Processing

1.1 To proceed with actions related to an employee’s request before entering into a contract or for the performance of a contract with us, such as employment contracts, agreements, compliance with employment regulations, codes of conduct, task assignments, employee transfers, secondments, training, performance evaluations, job positions, compensation, health and safety management, and employee welfare.

1.2 To comply with legal obligations, such as labor protection laws, labor relations laws, social security laws, occupational health and safety laws, and laws governing infectious diseases.

1.3 For legitimate interests of our company or other individuals, such as human resource management, workforce analysis, employee development, healthcare, insurance, and other benefits for employees, internal communication, government or regulatory agency reporting, and ensuring the security and confidentiality of information systems.

1.4 To prevent and mitigate harm to the life, body, or health of employees or others, including emergency contact purposes and controlling infectious diseases.

1.5 For public interests in fulfilling tasks assigned by the government or to use the authority delegated by the government.

1.6 To fulfill objectives based on consent provided by the employee.

2. Personal Data Collected

2.1 Data and documents related to the recruitment process, such as resumes, curriculum vitae (CV), application letters, and recruitment feedback.

2.2 Contact details of employees, such as name, surname, address, phone number, email, and social media information.

2.3 Personal information, such as date of birth, age, gender, marital status, interests, and opinions.

2.4 Family or dependent information related to employee benefits, such as spouse, children, parents, and beneficiaries.

2.5 Photographs and video recordings.

2.6 Education and qualifications of employees, such as academic degrees, qualifications, institutions, training records, and language skills.

2.7 Work experience and past employment details, such as job positions, employers, salaries, benefits.

2.8 Location information related to where employees can perform their duties.

2.9 Military service information.

2.10 Employee characteristics, such as behavior, attitudes, leadership skills, teamwork ability, emotional intelligence, organizational commitment, observed during employment or company activities.

2.11 Information required for reporting to regulatory agencies, such as the Ministry of Labor, Securities and Exchange Commission, or the Thai Institute of Directors Association (IOD).

2.12 Financial information such as salary, income, tax, provident funds, and banking information.

2.13 Social security, labor protection, and welfare benefits information.

2.14 Work attendance records, overtime, absences, and leave records.

2.15 Records related to work performance, positions, meetings, and opinions.

2.16 Usage and access information for information systems, computers, applications, networks, and email systems.

2.17 Participation information such as surveys, evaluations, and activities.

2.18 Information shared voluntarily through surveys, applications, and other company tools.

2.19 Copies of identity verification documents, such as national ID, passport, or government-issued documents.

2.20 Emergency contact information.

2.21 Vehicle-related data, driving licenses, and driving behavior when using company vehicles.

2.22 Data relevant to potential conflicts of interest, such as shareholding and business relationships.

2.23 Accident-related information, whether at work or during work activities

2.24 Other data necessary for labor contract fulfillment, welfare management, legal compliance, and post-employment management.

2.25 Data related to complaints, whistleblowing, investigations, or disciplinary actions.

Employees may be unable to fully access benefits or services provided by the company if they refuse to provide personal data required by law or the contract.

3. Special Categories of Personal Data

3.1 We may need to collect and process special categories of personal data for the purposes outlined in this Privacy Policy.

3.2 We may process special categories of personal data in the following cases

• Health information (e.g., height, weight, medical conditions, allergies) for labor protection, employee welfare, and health management purposes.
• Biometric data (e.g., fingerprints, facial recognition) for employee identification and security purposes.
• Criminal records for employment suitability assessments.
• Religious beliefs, ethnicity, disability, union membership, or genetic data for providing suitable accommodations or benefits in line with human rights and equality principles.

3.3 When necessary, we will process special categories of personal data only with explicit consent or for purposes as required by law, ensuring adequate security measures to protect such data.

3.4 Criminal record information will be collected either from evidence provided by the employee or with the employee’s consent to verify such information with authorized agencies as stipulated by law. We will implement data protection measures in accordance with legal requirements to ensure the confidentiality and security of this information.

4. Cookies

We use cookies to collect personal data, explained as follows:

4.1. Cookies are small text files stored on your computer or device when you visit our website. Cookies help us collect and remember your website usage information. We classify cookies as:

• Necessary Cookies: Essential for the website to function properly, such as logging in or verifying identity. You cannot disable these cookies.
• Analytic Cookies: Used to analyze website traffic and improve content and user experience. Disabling these cookies may limit our ability to improve the website.
• Functional Cookies: Enhance user experience by remembering preferences and settings.

4.2. Third-Party Cookies

Our website utilizes third-party cookies, with their usage and settings governed by the provisions in Section 2. However, you cannot customize the settings for third-party cookies on this website. Please note that we have no control over the use of data by third parties. You can review the list of third parties, their Privacy Notices, and Cookie Policies—distinct from our website—on the respective third-party websites.

4.3. Cookie Management

You can customize the settings for each type of cookie, except for Strictly Necessary Cookies, through the “Cookie Settings“ or your web browser settings. For example, you can block cookies from being installed on your device.

Please note that disabling cookies may affect the efficiency and functionality of various websites, potentially limiting your user experience

5. Consent Request and Potential Impact of Withdrawal

5.1 In cases where we collect and process personal data based on an employee’s consent, the employee has the right to withdraw their consent at any time. Such withdrawal of consent will not affect the collection, use, disclosure, or processing of personal data that was carried out based on the consent previously provided.

5.2 If an employee withdraws their consent previously given to us or refuses to provide certain information, it may result in our inability to carry out some or all of the purposes specified in this Privacy Policy.

6. Retention Period of Personal Data

6.1 We will retain employees’ personal data for as long as necessary to achieve the purposes of each type of personal data, unless the law allows for a longer retention period. In cases where a specific retention period cannot be determined, we will retain the data for a period that can reasonably be anticipated according to standard data retention practices (e.g., the general statute of limitations, which may be up to 10 years).

6.2 We will retain employees’ personal data for the entire duration of their employment with us to fulfill the contract and for the necessary period after the termination of their employment.

6.3 We will retain personal data of employees’ family members or dependents for the period necessary to process it in order to fulfill the objectives outlined in this Privacy Policy, particularly to respond to the employees’ rights to receive benefits according to the company’s regulations and personnel management guidelines.

6.4 In cases where we process employees’ personal data based on their consent, we will continue to process the data until the employee requests the withdrawal of consent and we have completed the processing of their request. However, we will retain the personal data for as long as necessary to record the history of the employee’s withdrawal of consent, so that we can respond to future requests from the employee.

6.5 We have implemented a verification system to ensure the deletion or destruction of personal data once the retention period has expired, or when the data is no longer relevant or necessary for the purposes for which it was collected.

7. Disclosure of personal data to others.

7.1 The Data Controller of each company in the group is as follows:

(1) The A.I. Technology Group Co., Ltd., which includes A.I. Technology Co., Ltd., Tokai Gauge Technology Co., Ltd., A.I. Foundry and Manufacturing Co., Ltd., and A.I. Innovative Plus Co., Ltd.

(2) Other individuals and entities that are not part of our group of companies (“Other Parties”) may be provided with personal data in order to achieve the purposes of collecting and processing personal data as outlined in this privacy policy. This includes service providers related to recruitment and personnel selection, employment, security, background checks, skill and qualification testing, information systems, financial institutions, business partners, information system developers, government agencies, and other individuals necessary for us to conduct our business and provide services to employees, including carrying out any activities in line with the purposes of collecting and processing personal data as described in this privacy policy.

7.2 We will require recipients of the data to implement appropriate measures to protect the employee’s information and process the personal data only to the extent necessary. Additionally, we will take steps to prevent unauthorized use or disclosure of the personal data.

8. Transferring or transferring personal data abroad.

8.1 We may transfer or transmit employees’ personal data to group companies or other parties abroad when necessary to fulfill contracts with employees, or as part of contracts between us and other individuals or entities for the benefit of employees, or to process employees’ requests prior to contract formation. This may also occur to protect or prevent harm to employees’ lives, bodies, or health, to comply with legal obligations, or when required to carry out tasks for significant public interest purposes.

8.2 We may store employees’ data on computer servers or cloud services provided by third parties and may use third-party software or applications in the form of ready-made software services and ready-made platform services to process employees’ personal data. However, we will not allow unrelated parties to access personal data, and we will require these third parties to implement appropriate security measures to protect the data.

8.3 In the case of transferring employees’ personal data abroad, we will comply with data protection laws and take appropriate measures to ensure that employees’ personal data is protected and that employees can exercise their rights concerning their personal data under the law. Additionally, we will require recipients of the data to implement appropriate safeguards and process the personal data only to the extent necessary, as well as take steps to prevent unauthorized individuals from using or disclosing the personal data improperly.

9. Security Measures for Personal Data

9.1 The security of employees’ personal data is important to us, and we have implemented appropriate technical and administrative security standards to protect personal data from loss, unauthorized access, use, or disclosure, misuse, alteration, and destruction. These security measures include technologies and procedures such as encryption and access restrictions to ensure that only authorized individuals can access employees’ personal data. Additionally, these authorized individuals are trained on the importance of protecting personal data.

9.2 We have implemented appropriate security measures to prevent the loss, access, use, modification, alteration, or disclosure of personal data by unauthorized individuals who do not have the relevant rights or responsibilities related to that data. Additionally, we will review these measures when necessary or when technological advancements occur to ensure that they remain effective in providing appropriate security.

10. Employee rights regarding personal data include:

10.1 Employees have rights under personal data protection laws, summarized as follows:

• Withdraw consent previously given for processing personal data.
• Request to view and copy personal data or request the source of the personal data.
• Transfer personal data in electronic form to another data controller as stipulated by the personal data protection law.
• Object to the collection, use, or disclosure of personal data related to the employee.
• Delete, destroy, or anonymize the employee’s personal data.
• Suspend the use of personal data.
• Correct personal data to ensure it is accurate, up-to-date, complete, and not misleading.
• File a complaint with the Personal Data Protection Commission if the organization or data processor, including employees or contractors, violates or fails to comply with personal data protection laws.

We will consider and respond to the employee’s request to exercise these rights within 30 days of receiving the request. The rights mentioned above are in accordance with personal data protection laws.

10.2 To exercise these rights, please contact the Human Resources Department at extension 2350 to 2354 or visit https://www.aitechgroup.net/ (the right can be exercised once the personal data protection law applies to the data controller).

11. Information about the Data Controller and Data Protection Officer:

11.1 The Data Controllers of the group companies are listed as follows:

A.I. Technology Co., Ltd.: 56 Moo 9, Koo Bang Luang, Lat Lum Kaeo, Pathum Thani 12140, Thailand. Phone: +66(02) 407-3460

Tokai Gauge Technology Co., Ltd.: 56/1 Moo 9, Koo Bang Luang, Lat Lum Kaeo, Pathum Thani 12140, Thailand. Phone: +66(02) 407-3474

A.I. Foundry & Manufacturing Co., Ltd.: 56/3-4 Moo 9, Koo Bang Luang, Lat Lum Kaeo, Pathum Thani 12140, Thailand. Phone: +66(02) 407-3474

AI Innovative Plus Co., Ltd.: 29/73 Moo 2, Lam Pho, Bang Bua Thong, Nonthaburi 11110, Thailand. Phone: +66(02) 625-4975, +66(02) 925-4805

11.2 If you have any questions regarding data protection, please contact +66(02) 407-3460 or email: info.marketing@aitech.co.th.

In the event of changes to this Privacy Policy, we will publish the new Privacy Policy on this website. You should check the Privacy Policy periodically for any changes. The new Privacy Policy will take effect immediately upon its publication.