Privacy Policy

Privacy policy

Yaskawa Electric (Thailand) Co., Ltd.

Yaskawa Electric (Thailand) Co., Ltd. (“the Company”) values the protection of personal data and has therefore established this Personal Data Protection Policy to define the guidelines for operations related to the processing of personal data in compliance with the Personal Data Protection Act B.E. 2562 (2019). The details are as follows:

1. Definitions

Term Definition
the Company Yaskawa Electric (Thailand) Co., Ltd.
Personal Data
Protection Law
The Personal Data Protection Act B.E. 2562 and its relevant subordinate regulations
Personal Data Information relating to an individual that enables the identification of such an individual, whether directly or indirectly, but excluding deceased persons, such as name, surname, email, phone number, or national ID card number.
Special Categories of Personal Data Personal data concerning race, ethnicity, political opinions, religious or philosophical beliefs, sexual behavior, criminal records, health information,disability status, trade union membership, genetic data, biometric data, or any other data affecting the data subject in a similar manner as prescribed by the Personal Data Protection Committee.
Data Subject A natural person to whom the personal data relates, such as job applicants, directors, employees, customers, and business partners.
Data Processor A person or legal entity that processes personal data on behalf of or under the instructions of a Data Controller but does not determine the purpose or means of processing such data.
Processing Any operation performed on personal data, whether by automated means or not, such as collection, recording, structuring, storage, adaptation, alteration, use, disclosure, transmission, dissemination, making available, alignment, combination, restriction, deletion, or destruction.
Other Definitions If a definition is not provided in this policy, the definition shall be in accordance with the Personal Data Protection Act B.E. 2562.

2. Objectives

  • 2.1 To define the roles and responsibilities of departments, executives, and employees involved in personal data.
  • 2.2 To establish guidelines for employees in compliance with the Personal Data Protection Law.
  • 2.3 To ensure trust in the security of personal data for individuals, customers, business partners, and relevant stakeholders.

3. Scope of Application

This policy applies to the Company, its directors, executives, and employees, as well as individuals or entities processing personal data under the Company's instructions or on its behalf.

4. Personal Data Processing

The Company shall strictly process personal data in accordance with the principles of legality, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, confidentiality, security, and accountability as prescribed by the Personal Data Protection Law.

  • 4.1 Governance—The Company shall establish an organizational structure for personal data protection, involving all levels of personnel, including senior management, the Data Protection Committee, the Data Protection Officer, and employees.
  • 4.2 Policies and Practices—The Company shall implement policies, procedures, manuals, and operational guidelines to ensure personnel understand their roles and responsibilities.
  • 4.3 Training and Awareness—The Company shall provide training and raise awareness regarding personal data protection.
  • 4.4 Data Subject Rights—The Company shall establish mechanisms for responding to data subject rights requests.
  • 4.5 Transparency—The Company shall process personal data transparently.
  • 4.6 Records of Processing Activities—The Company shall maintain records of personal data processing as required by law.
  • 4.7 Disclosure of Personal Data—The Company shall disclose personal data only as permitted by law.
  • 4.8 Risk Management—The Company shall implement personal data risk management measures based on recognized standards and/or legal requirements.
  • 4.9 Security Measures—The Company shall implement security measures in compliance with legal requirements.
  • 4.10 Data Breach Management—The Company shall establish measures to handle personal data breaches to protect personal data.

5. Roles and Responsibilities

Senior management is responsible for ensuring compliance with this policy and promoting employee awareness.

The Data Protection Committee, or Data Protection Officer (DPO), is responsible for providing guidance, monitoring, and overseeing compliance with the Personal Data Protection Law and reporting directly to senior management.

Employees must comply with the policy, relevant documents, procedures, and the Personal Data Protection Law and report any personal data incidents to their supervisor.

6. Additional Measures

The Data Protection Committee, or DPO, may issue guidelines, measures, manuals, recommendations, or advice related to personal data protection to ensure compliance.

7. Penalties

Any person violating this policy and/or the Personal Data Protection Law may be subject to disciplinary action.

If such a violation causes harm to the Company and/or any third party, the Company may take further legal action.

8. Policy Review and Amendments

The Company shall regularly review this policy and announce any amendments accordingly.