PERSONAL DATA PROTECTION POLICY NOTICE OF APPLICANTS AND PERSONNEL OF KASIKORNBANK PUBLIC COMPANY LIMITED
Latest update May 2022
KASIKORNBANK PCL (“KBank”) operates its business in adherence with ethical standards and respect for your privacy. KBank has always placed importance on personal data protection and security of applicants and personnel of KBank to ensure that personal data obtained by KBank will be used in accordance with the objectives and in compliance with law. KBank has formulated this Personal data protection policy (the “Policy”) to inform you, as a Data Subject, of the objectives and details for collection, use and / or disclosure of personal data, including your legal rights.
This Policy is intended to inform you, applicants and personnel of KBank, whether being job applicants, scholarship applicants, scholarship recipients, directors, advisors, experts, employees or students under KBank’s internship program, including their family members, beneficiaries under welfare programs, emergency contact persons and reference persons, of objectives and details about collection, use and / or disclosure of your personal data including your legal rights related to the personal data which KBank has collected, used and / or disclosed for the purpose of job application, scholarship application, receipt and payment of scholarship, internship or employment.
Your personal data which KBank has collected, used and / or disclosed, other than that obtained from the process regarding job application, scholarship application, receipt and payment of scholarship, internship or employment, shall not be under the scope of the use of this Policy; for instance, your personal data that has been collected, used and / or disclosed by KBank for the use of products or services provided by KBank.
“Sensitive personal data” refers to personal information which is specifically determined by law; KBank has no intention of collecting your sensitive personal data.
In certain cases, however, KBank may be required to collect sensitive personal data from you for consideration of your employment and request for scholarship, action taken under the contract entered into by KBank with you or for compliance with law. Sensitive personal data collected by KBank includes religion, criminal record (such as result of examination into criminal record obtained from competent authorities), health data (such as health checkup result, physician’s certificate, medication history, vaccination history, KBank’s medical record data, psychological test result), disability (such as national ID card of the disabled), labor union data, biometric data (such as facial, fingerprint and iris recognition). KBank shall collect, use and / or disclose the sensitive personal data provided that KBank has been given explicit consent from you or as required and permitted by law. This shall be undertaken on a case-by-case basis when KBank is required to collect sensitive personal data from you.
(Unless specifically stated otherwise, personal data and sensitive personal data as earlier mentioned shall hereinafter be collectively referred to as “Personal Data.”)
KBank has no intention of collecting, using and / or disclosing Personal Data of minors, the incompetent or quasi-incompetent persons, unless consent from the guardian, protector or curator (as the case may be) is given. If KBank learns that the collection, use and / or disclosure of Personal Data of minors, the incompetent or quasi-incompetent persons is undertaken without consent given by the guardian, protector, and / or curator, KBank shall delete or destroy such Personal Data immediately, or the collection, use and / or disclosure of the Personal Data shall be undertaken only for the cases where KBank can apply other legitimate bases that require no consent.
If you are the provider of Personal Data of any other third party such as family members, beneficiaries of welfare benefits, emergency contact person and reference person, please inform those persons of the details under this Policy and request their consent, if necessary, or apply other legal bases to ensure that KBank can collect, use and / or disclose Personal Data of the aforementioned third party.
KBank will collect, use and/or disclose your Personal Data only as necessary under KBank’s legitimate objectives. Legal bases that KBank may use as reference for collecting, using or disclosing your Personal Data include: (1) Contractual basis; (2) Consent; (3) Vital interest; (4) Legal obligations; (5) Legitimate interest, and/or other legal bases that KBank can use in accordance with applicable law.
Please consider the following objectives which may be applied to you based on your relationship with KBank.
If KBank is required to collect, use and / or disclose your Personal Data for entering into or complying with the contract that you have entered into with KBank and / or complying with the relevant laws, and you do not provide such necessary Personal Data to KBank upon request, KBank may not be able to proceed per your request or the contract, thus affecting KBank’s compliance with the relevant laws or relationship between you and KBank.
KBank may disclose your Personal Data to a third party under your consent or the criteria permitted by law. Persons or agencies receiving said data shall collect, use and / or disclose your Personal Data within the scope for which you have given consent or within the scope related to this Policy. In certain cases, you may be under the Personal Data Protection Policy of the recipient of Personal Data, and the recipient of your Personal Data may be in Thailand or other countries.
KBank may disclose your Personal Data to other persons or agencies, as follows :
KBank may find it necessary to send or transfer your Personal Data to other companies within KASIKORNBANK FINANCIAL CONGLOMERATE in other countries, or to other data recipients, as part of KBank’s normal business operations. For instance, Personal Data may be sent or transferred for storage on cloud platforms or servers in various countries, or to KBank’s counterparties abroad and / or government agencies abroad.
If the destination country fails to meet the given standards for data protection, KBank must ensure that Personal Data will be sent or transferred in accordance with legal requirements, while Personal Data protection measures will be put in place, appropriate for and consistent with the confidentiality standards. For instance, an agreement must be entered into with the data recipient in that country to ensure that your Personal Data will be protected under the personal data protection standard equivalent to that in Thailand. If the data recipients are other companies within KASIKORNBANK FINANCIAL CONGLOMERATE, KBank may ensure that binding corporate rules verified and certified by relevant competent authorities are in place, and shall send or transfer Personal Data to other companies within KASIKORNBANK FINANCIAL CONGLOMERATE abroad in accordance with said binding corporate rules.
KBank will safeguard your Personal Data during the period in which you are KBank personnel or have another relationship with KBank, or for the duration necessary to achieve the relevant objectives of this Policy. Once your relationship with KBank ends, KBank will further retain your Personal Data for an additional period thereafter as required according to the statute of limitations or for a period as required or permitted by law, for example :
KBank will undertake operations through appropriate steps to delete or destroy Personal Data or make it anonymous when it is no longer necessary or the said period ends.
KBank shall apply technical, administrative and physical measures for safeguarding your Personal Data in order to maintain confidentiality, accuracy and completeness, and availability of Personal Data to prevent unauthorized or illegitimate access, collection, revision, rectification, use and / or disclosure of Personal Data, in accordance with legal requirements.
KBank has put in place appropriate measures that safeguard against Personal Data breaches. KBank has therefore established policy, procedures and criteria on Personal Data protection. These include measures to control access to Personal Data, and the secure and proper use of devices for storing and processing Personal Data, restriction of access to Personal Data, determination of right to access users’ Personal Data, and authorization for employees assigned to access data and users’ responsibilities. All of these measures are intended to prevent unauthorized access to Personal Data, unauthorized disclosure or copying of Personal Data, or theft of devices used in the storing or processing of Personal Data. Measures have thus been put in place for tracing back access, change to, deletion or transfer of Personal Data, which are appropriate for and correspond to the methods and tools for collection, use or disclosure of Personal Data, including examination for assessing the effectiveness of compliance with policies, procedures and regulations for Personal Data protection.
KBank’s executives, employees, personnel, contractors, representatives, advisors, and recipients of data from KBank shall maintain the confidentiality of the Personal Data in accordance with the confidentiality measures determined by KBank.
Your exercising of the aforementioned rights may be restricted by applicable laws, and in certain cases, there may be compelling reasons that may cause KBank to deny your request or may prevent KBank from complying with your request, such as compliance with laws or court orders, public interest, or potential violation of other persons’ rights or freedom. If KBank opts to deny said request, KBank shall inform you the reason(s) for such denial.
KBank may consider adding to, rectifying or revising this Policy from time to time, as deemed appropriate and permitted by law. In case of addition to, rectification or revision of this Policy, KBank will announce the current Policy on the Company’s website at https://www.kasikornbank.com/en/privacy-policy/Pages/privacy-policy-data-personal.aspx
If you have any suggestions or enquiries regarding details of the collection, use and / or disclosure of your Personal Data, or would like to exercise the rights under this Policy, you may contact KBank and / or the responsible Personal Data Controllers via the following channels :