Your Rights Under GDPR
Under GDPR, the data subject has certain important rights. These include (but are not limited to) the following:
The right for access to data and data portability
You have the right to receive your personal data, which you have provided to us previously, in a structured, commonly used and machine-readable format. Further you have the right to request us to transmit your personal data to another data controller in circumstances where:
Where feasible, JAC will send the personal data to a named third party upon your request.
The processing is based on your consent or a contract; and
The processing is carried out by automated means
The right to have data rectified
You may request JAC to rectify any inaccurate or incomplete personal data concerning yourself. If JAC has given your personal data to any third parties we will tell those third parties that we have received a request to rectify your personal data unless this proves impossible or involves disproportionate effort. Those third parties should also rectify the personal data they hold. However, JAC is not in a position to audit those third parties to ensure that the rectification has occurred.
The right to “be forgotten”
This refers to your right to have your personal data completely deleted from our database, including from any third parties who may have access to that data. Further, the request to “be forgotten” must be as easy as it was to give consent.
You may request, at any time, to have your personal data deleted completely from all JAC’s databases. Upon receipt of such a request, we will ask you whether you want your personal datato be removed entirely or whether you are happy for your details to be kept on a list of individuals who do not want to be contacted in the future (for a specified period or otherwise). We cannot keep a record of individuals whose data has been erased completely so you may be contacted again by JAC should we come into possession of your personal data at a later date.
If JAC has given the personal data to any third parties, it will tell those third parties that we have received a request to erase the personal data, unless this proves impossible or involves disproportionate effort. Those third parties should also rectify the personal data they hold. However, JAC is not in a position to audit those third parties to ensure that the rectification has occurred.
It should be noted that where there are legal requirements for JAC to store data for a certain period of time, related to our business, which includes elements of your personal data, we will not be able to delete that data until after the statutory retention period.
The right to restrict the processing of your data
You have the right to ask JAC to restrict its processing of your personal data where:
You challenge the accuracy of the personal data we are storing;
The processing is unlawful but you oppose its erasure;
JAC no longer needs your personal data for the purposes of the processing, but your personal data is required for the establishment, exercise or defence of legal claims; or
You have objected to processing (on the grounds of a public interest or legitimate interest) pending the verification of whether the legitimate grounds of JAC override those of the individual.
If JAC has given your personal data to any third parties we will tell those third parties that we have received a request to restrict the personal data, unless this proves impossible or involves disproportionate effort. Those third parties should also rectify the personal data they hold. However, JAC is not in a position to audit those third parties to ensure that the rectification has occurred.
The right to lodge a complaint
You have the right to object to your personal data being processed based on a public interest or a legitimate interest. You also can object to the profiling of your data based on a public interest or a legitimate interest.
Upon receiving a claim from you, JAC shall cease processing unless it has compelling legitimate grounds to continue to process the personal data which override the individual’s interests, rights and freedoms or for the establishment, exercise or defence of legal claims.
You also have the right to object to your personal data being used for direct marketing
The right to object to automated decision making
JAC will not subject individuals to decisions based on automated processing that produce a legal effect or a similarly significant effect on the individual, except where the automated decision:
Is necessary for the entering into or performance of a contract between the data controllerand the individual
Is authorised by law; or
The individual has given their explicit consent.
JAC will not carry out any automated decision-making or profiling using the personal data of a child.
The right to receive damages in the event of a breach of regulations
Under the GDPR, should there be a breach of the regulations and it is judged that that breachhas occurred due to causes within the control of the data controller or data processor, and that the breach has caused material damage, the data subject may be due to receive compensation.
Enforcement Of Rights
All requests regarding individual rights should be sent to the person whose details are listed at the bottom of this policy document. JAC shall act upon any data subject access request, or any request relating to rectification, erasure, restriction, data portability or objection or automated decision making processes or profiling within one month of receipt of the request. JAC may extend this period for two further months where necessary, taking into account the complexity and the number of requests.
Where JAC considers that a request is manifestly unfounded or excessive due to the request’s repetitive nature then we may either refuse to act upon the request or may charge a reasonable fee, taking into account the administrative costs involved.
Changes To This Privacy Policy
JAC may amend this Privacy Policy from time to time. We suggest that you visit our website regularly to keep up to date with any changes.
Implementation of Policy
This Policy shall be deemed effective as of 15th May 2018. No part of this Policy shall have retroactive effect and shall thus apply only to matters occurring on or after this date.
Contact
You can contact our Data Protection Officer by email using this address:
privacyofficer.th@jac-recruitment.com
or in writing at the following address;
JAC Personnel Recruitment Ltd
10th Floor, Emporium Tower
622 Sukhumvit Soi 24
Klongton, Klongtoey
Bangkok 10110
Tel: +66 (0)2 261 1270
