Personal Data Protection Policy AXA Insurance
AXA Insurance Public Company Limited (“AXA” or “we”) recognizes the importance of protecting the participants of Human Resource Management Activities and/or the candidate’s ("You”) personal data including sensitive data, so we have prepared this privacy notice to inform you of the collection, use, disclosure, and international transfer of your personal data and sensitive data. Hereinafter, personal data and sensitive data will be mentioned as Personal Information.
- Personal data means any information that can directly or indirectly identify you.
- Sensitive data means any information that is defined by the Personal Data Protection Act ("PDPA") as sensitive data such as racial, ethnic origin, political opinions, cult, religious or philosophical beliefs, sexual behavior, criminal records, health data, disability, trade union information, genetic data, biometric data, or of any data which may affect the data subject in the same manner
This privacy notice applies to your personal information and other people’s personal information relating with you (“Third Party”) that is necessary for your job application e.g., your family, reference person.
1. Personal Information We Collect
The detail of personal information is as follows:
1.1 Personal Data
(a) Contact details such as name, surname, e-mail address, postal address, telephone number
(b) Identification information such as your date of birth, gender, age, identification number, passport number, marital status, photo
(c) Financial information such as income
(d) Information relevant to your education and experience such as educational background, work experience, skills, qualifications, training course records
(e) Other information such as information of family members, references, emergency contact persons
1.2 Sensitive Data
(a) Identification card details such as religion and blood type
(b) Information about your health, disability, drug test results
(c) Criminal records
2. How We Collect Your Personal Information and Third Party’ Information
We might collect your personal information from you directly and from other sources, for example;
- Registration or application form
- Government authorities such as Royal Thai Police, Immigration Bureau
- References provided in job application form of AXA
- Event or Activity organizer
- Other publicly available sources such as our website, other job posting sites, information made available on the internet or other online or social media platforms
3. Purposes of Collection, Use or Disclosure of Personal Information
We collect, use or disclose your and third party’s personal information for the purposes as follows:
3.1 Collection, use or disclosure of your personal information
3.2 Collection, use or disclosure of third party’s information
Please inform third party and obtain the consent before you disclose his/her information to us.
4. Data Disclosure and Transfer
For the purposes set out in this Privacy Notice, we may disclose your personal information to companies inside the AXA Group and other recipients outside the group as follows:
4.1 Companies and affiliates within our group for our efficiency and accuracy of business administration or the prevention and/or detection of fraud and screening against international sanctions, counter-financing terrorism and anti-money laundering.
4.2 Recipient and their affiliates for the purposes set out in this Privacy Notice, for example;
(a) Government authorities, supervising authorities or other authorities as stipulated by laws, including competent official, e.g. courts, police officers, etc.
(b) Agencies and/or service providers, such as document storage and destruction service providers, IT development companies, etc.
(c) Other recipients as per your consent or contractual requirements or legal requirements, as the case may be
Disclosure of your personal information to recipient outside of AXA will only be made where the recipient has agreed to keep your information strictly confidential and shall only be used for the specific purpose for which we provide it to them.
We may also disclose your personal information to other recipients where:
- we are required or permitted to do so by the law or by regulatory bodies; or
- we believe that such disclosure is necessary in order to assist in the prevention or detection of any criminal action including fraud or is otherwise in the overriding public interest; or
- exemptions under the data protection legislation allow us to do so
Some of the business partner set out above may be in countries outside of Thailand notably in Singapore, where AXA has a Data Centre, or any other designated AXA group entity as the case may be. Where we make a transfer of your personal information outside of Thailand, in all cases where personal information is transferred to a country which is deemed not to have the same standards of protection for personal information as Thailand will ensure Appropriate Safeguards have been implemented to ensure that your personal information is protected where standards are not the same or similar to those standards within Thailand.
5. Data Retention Period
AXA retains your personal information for as long as is considered necessary for the purpose for which it was collected, used or disclosed as set out in this privacy notice. If your application is unsuccessful regarding the position you applied for, we will retain your information for 5 years after receiving your application.
6. Your Rights as a Data Subject
You can ask us to do various things with your personal information. For example, at any time you can ask us for a copy of your personal information, correct mistakes, change the way we use your information, or even delete it. We’ll either do what you’ve asked or explain why we cannot.
You have the following rights in relation to our use of your personal information.
- The right to access your personal information
You are entitled to a copy of the personal information we hold about you and certain details of how we use it. There will not usually be a charge for dealing with these requests. Your personal information will usually be provided to you in writing, unless otherwise requested
- The right to rectification
We take reasonable steps to ensure that the personal information we hold about you is accurate and complete. However, if you do not believe this is the case, please contact our DPO team by using the contact information as specified in article 7 of this policy and you can ask us to update or amend it.
- The right to erasure
In certain circumstances, you have the right to ask us to erase your personal information, for example where the personal information we collected is no longer necessary for the original purpose or where you withdraw your consent. However, this will need to be balanced against other factors, for example according to the type of personal information we hold about you and why we have collected it, there may be some legal and regulatory obligations which mean we cannot comply with your request.
- Right to restriction of processing
In certain circumstances, you are entitled to ask us to stop using your personal information, for example where you think that the personal information we hold about you may be inaccurate or where you think that we no longer need to process your personal information.
- Right to data portability:
In certain circumstances, you have the right to ask that we transfer any personal information that you have provided to us to another third party of your choice. Once transferred, the other party will be responsible for looking after your personal information.
- Right to object:
You have the right to object to the collection, use or disclosure of your personal information for direct marketing purposes or on grounds stipulated by law.
- The right to withdraw consent
For certain uses of your personal information, we will ask for your consent. Where we do this, you have the right to withdraw your consent to further use of your personal information. Please note in some cases we may not be able to process your insurance if you withdraw your consent.
- The right to lodge a complaint
You have a right to complain to the Personal Data Protection Committee at any time if you object to the way in which we use your personal information.
You can make any of the requests set out above using the contact details of the Data Protection Officer (DPO) as specified in section 7 of this Privacy Notice. Please note that in some cases we may not be able to comply with your request for reasons such as our own obligations to comply with other legal or regulatory requirements. However, we will always respond to any request you make and if we can't comply with your request, we will tell you why.
7. Contact information
If you wish to contact AXA or the Data Protection Officer, the details are below:
AXA Insurance Public Company Limited.
Address: 414 Siam Patumwan House, Floor 25th, unit2511-1-2, Phayathai Rd., Wangmai Sub-district, Pathumwan, Bangkok 10330 Thailand
Call Center : 02 – 118 – 8111
Monday to Friday - 8:30 AM - 6:30 PM and Saturday - 9:30 AM - 6:00 PM
Closed on Sunday and official holidays
The Data Protection Officer
Address: 414 Siam Patumwan House, Floor 25th, unit2511-1-2, Phayathai Rd., Wangmai Sub-district, Pathumwan, Bangkok 10330 Thailand
E-mail: dpo@axa.co.th
Channels for exercise your rights as the Data Subject : https://direct.axa.co.th/PDPA
8. Update to this Privacy Notice
AXA regularly reviews and, if appropriate, updates this Privacy policy from time to time to ensure that your personal information is properly protected. In case of any update to this Privacy policy, AXA will inform you through Notice on this website, notification on your device or other appropriate methods. Please visit https://www.axa.co.th/privacy-policy-statement for the updated Privacy Notice.
This Privacy Notice shall take effect as of the date that the Personal Data Protection Act becomes effective.
[Published on 01/06/2022]
