Yushiro (Thailand) Co., Ltd. and its affiliates (collectively, “we”) are committed to protecting the personal data of our business partners or customers, contractors and related persons who are natural persons (collectively, “you”) as stipulated in the Personal Data Protection Act B.E. 2562 (2019). Under this Privacy Policy Notice, we are the “data controller” under the Personal Data Protection Act B.E. 2562 (2019) which collects, uses or discloses your personal data. In order to comply with the duty to inform the data subject of the purpose of collecting personal data on a lawful basis, the period for collecting personal data, the disclosure of personal data, information about the data controller and the rights of the data subject under Section 23 of the Personal Data Protection Act B.E. 2562 (2019), we have issued this Privacy Policy Notice for Business Partners or Customers, Contractors and Related Persons, which will explain the nature and reasons for collecting, using and disclosing your personal data.

This Privacy Policy Notice is made in compliance with Section 23 of the Personal Data Protection Act and is published by Yushiro (Thailand) Co., Ltd. We may revise or amend this document as we deem appropriate and will notify you of any such changes. This Privacy Policy Notice is effective immediately on the date of posting.

1. Personal information we will collect
   Personal information means information about an individual that can identify that individual directly or indirectly, but does not include information about a deceased person in particular. We may collect various types of personal information, depending on the purpose of use, including the following personal information:
   1.1. Information used for identification, such as first and last name, and information in various forms used for identification
   1.2. Information used for contact, such as first and last name, telephone number, email, company name, work address
2. Purpose of collecting, using and disclosing personal data
   2.1. We have the following legal basis for collecting, using and disclosing personal data:
   2.1.1. For our legitimate interests as a personal data controller or for other persons or entities other than us, such as for our business management, product and service development, research, fraud or other crime prevention and control, information system maintenance, and information technology security.
   2.1.2. With your express consent, where the law requires consent, such as for market research and providing news and information through various channels.
   2.2. In cases where we need to collect your personal data to comply with the law, if you do not provide us with such personal data, we may not be able to process your request, or we may be liable under the law or may have other related consequences.
3. Changes in the purpose of using personal information
   We will use your personal information only for the purposes for which it was collected. In the event that we need to use your personal information for other purposes, we will notify you as soon as possible.
4. How is your personal information collected?
   We collect your personal information through your submission of personal information to us when you contact us, provide services, or conduct any transactions with us, or through our website or social media, or by telephone. We collect information about your website usage based on https://www.yushiro.co.th/privacy
5. Disclosure of your personal data
   For the purposes of collecting, using and disclosing your personal data as stated in this document, we may disclose your personal data to individuals and entities such as:
   (1) Our affiliated companies
   (2) Our service providers, contractors, agents and related contractors
   (3) Government agencies and other types of entities as required by law
6. Transfer of personal data abroad
   Where necessary, we may transfer your personal data to our affiliated companies located abroad. To protect your personal data sent abroad, we have established a policy on the protection of personal data for the transfer or transfer of personal data to personal data controllers or personal data processors located abroad.
7. Security of personal data
   We have measures to protect your personal data that prevent the personal data collected from being accidentally lost, or from being accessed, disclosed or altered unlawfully or without authorization. We will limit access to your personal data to employees, agents, contractors or third parties. We will only grant access to those individuals who need to access such personal data to perform their duties. In the event that a third party processes your personal data, we will supervise them to process it appropriately according to our instructions.
8. Period for retaining personal data
   We will retain your personal data for the period necessary to achieve the purposes of collecting, using and disclosing personal data set out in this document. The period for retaining your personal data may depend on the need to perform a contract with you, the need to comply with the law, or the statutory limitation period to establish, exercise or exercise legal rights, etc. When the retention period has expired or we no longer have the right or legal basis to collect, use or disclose your personal data, we will delete or destroy such personal data.
9. Rights of data owners
   9.1. According to the conditions specified in the Personal Data Protection Act B.E. 2562 (2019), you have the following rights:
   (1) Request to withdraw the consent you have given us to process your personal data.
   (2) Request to access and receive a copy of the personal data about you that is under the responsibility of the data controller or request to disclose the source of your personal data.
   (3) Send or transfer personal data in electronic form as specified in the Personal Data Protection Act to another person.
   (4) Object to the collection, use or disclosure of personal data about you.
   (5) Request the data controller to delete or destroy it. Or make personal data anonymized.
   (6) Request the personal data controller to suspend the use of personal data.
   (7) Request the personal data controller to take action to make personal data accurate, up-to-date, complete and not misleading.
   (8) File a complaint with the Personal Data Protection Committee in the event that we or the personal data processor, including our employees or contractors or the personal data processor violate or fail to comply with the personal data protection law.
   9.2. You can exercise such rights in accordance with the law by using the request form or the consent withdrawal form that we provide and can return it via the original channel where such request form was received. You will be able to exercise your rights when the personal data protection law comes into effect for the personal data controller.
10. Contacting us
    In the event that you have any questions about the collection, use or disclosure of your personal data, you can contact us through the following channels:
    10.1. In case of contacting Yushiro (Thailand) Co., Ltd.
    700/533 Moo 7, Don Hua Loh Subdistrict, Mueang Chonburi District, Chonburi Province 20000 Tel. 038-454-873
    Email: Natcharawee@yushiro.co.th