University of the Thai Chamber of Commerce [126/1 Vibhavadi Rangsit Soi 2, Ratchadaphisek Subdistrict, Din Daeng District, Bangkok 10400] Website [www.utcc.ac.th]
University of the Thai Chamber of Commerce, hereinafter referred to as “University”, has the status of a personal data controller under the Personal Data Protection Act B.E. 2562. The University therefore informs you in this document of the reasons and methods by which the University collects, uses or discloses your personal data, including informing you of your rights as a data subject.
2. Purpose of data processing
The University uses a CCTV system to capture your movements for:
Prevent or suppress dangers to life, body or health of individuals, such as the commission of crimes.
For the legitimate interests of the University or of another person or entity, such as to prevent dangers, unusual events or emergencies.
3. Period of retention of personal data
The CCTV system will capture the moving images of people who enter the range that the camera can capture 24 hours a day, and the moving images will be automatically deleted every 30 days.
In the event of a dangerous incident and the CCTV data is used in the investigation process by government officials, the CCTV data will be used until the investigation process is concluded.
If the CCTV data is required to be used in a court process to consider a case, the CCTV data will be used until the court process is concluded.
4. Safety measures
The University will manage the storage of personal data with organizational and technical measures no less than those required by law and with appropriate systems to protect and maintain the security of such personal data and store it in a location with a restricted access protection system.
In the event that any officer or agency wishes to examine images or request information from CCTV cameras, the following steps must be followed:
Fill out the form requesting information from CCTV cameras.
Submit the form to the Security Supervisor for presentation to the commander for approval according to the procedure.
Security officers in the CCTV control room receive information about requesting to view or request information from CCTV cameras from the Security Supervisor.
In cases where viewing of information is permitted, a security supervisor and a security officer from the CCTV control room must be present when the requester is viewing the information from the CCTV.
Record the information of the participants and the inspection results in the form requesting to view or request information from CCTV cameras and forward the form to the manager or manager responsible for security work for acknowledgement.
In the event that information is requested from the police, it must be approved in writing by the University Director.
5. Sharing CCTV data with third parties
The University may share CCTV data with government officials, for example, only if requested in writing and the request is for the purpose of a government investigation or for the purposes of legal proceedings.
The University may allow CCTV Vendors to access data for system maintenance only if authorized by the University and the provider must have a personal data security system that the University has approved to access personal data in CCTV.
6. Your rights
As a data subject, you have the right to request the University to process your personal data to the extent permitted by law, as follows:
Right to withdraw consent: You have the right to withdraw your consent to the processing of your personal data that you have given to the University at any time while your personal data is with the University.
Right of access: You have the right to access your personal data and request that the University make a copy of your personal data, including requesting that the University disclose to you the source of your personal data that you have not consented to the University.
Right to rectification: You have the right to request that the University rectify inaccurate or incomplete personal data.
Right to erasure: You have the right to request that the University erase your data for certain reasons.
Right to restriction of processing: You have the right to have the University restrict the processing of your personal data for certain reasons.
Right to data portability: You have the right to have your personal data portable, which you have provided to the University, transferred to another data controller, or to yourself, for certain reasons.
Right to object to processing of personal data (right to object): You have the right to object to the processing of your personal data on certain grounds.
7. Contact channels
You can contact the University’s Data Protection Officer (DPO) to file a request to exercise the above rights via email at [email protected]
