As of March 2024

Gulf Energy Development Public Company Limited and our affiliated companies (“we”, “us”, or “our”) are using closed-circuit television (CCTV) devices for monitoring our designated areas within and around our buildings and facilities for the security and safety of our premises, assets, staff, customers and visitors. We therefore establish measures for protection of your personal data received from our use of CCTV as detailed below in order to enhance your confident that we will protect and manage your personal data in accordance with the Personal Data Protection Act B.E 2562. We may update this notice from time to time. You can find our updated notice at [ Privacy Notice on CCTV Use ]


1. Types of Personal Data We Collected

Our CCTV captures moving or still images of all individuals and their belongings (e.g. vehicles) when entering the monitored area in or around our premises and facilities.


2. How We Process your Personal Data
2.1 We may collect, use, disclose, or process your personal data, for the following purposes:

(a) to protect your health and personal safety, including your belongings

(b) to protect and prevent our premises, facilities and assets from damage, disruption, vandalism, and other crime;

(c) to support law enforcement organizations in the prevention, detection, and prosecution of crime and to act as a deterrent against crime;

(d) to assist in the effective resolution of disputes which arise in the course of disciplinary or grievance proceedings;

(e) to assist in the investigation or proceedings concerning a whistleblowing complaint; and loment proceedings

2.2 Our CCTV is in operation 24 hours a day, except in case of system failure or maintenance.
2.3 We place appropriate signage in the monitored areas to alert you that a CCTV installation is in use and your personal data is recorded.

3. Legal Basis

We may collect, use, disclose, or process your personal data on any of the following legal basis;

(a) Vital interest. The collection, use, disclosure, or processing is necessary for the prevention or suppression of a danger to a person's life, body, or health.

(b) Legitimate interest. It is in our legitimate interest to collect, use, disclose, or process, your personal data to achieve any of the purposes described above.

(c) Legal obligations. We owe a duty to comply with the legal obligations prescribed by the applicable laws, including but not limited to the laws regarding safety and environment in the workplace. We consider the use of CCTV as a necessary measure to enable us to meet those obligations. above.


4. Disclosure of Your Personal Data to Third Parties
4.1 We may disclose your personal data to third parties (including our affiliates and service providers) if we consider that the disclosure is necessary for the purposes described above.
4.2 We may disclose your personal data to law enforcement agencies if the disclosure is necessary for compliance with our legal obligations and to support or assist them in the prevention, detection, and prosecution of crime.

5. Period of Retention
5.1 We may retain your personal data no longer than as is necessary to achieve the purposes described in this notice or as is required by applicable laws. We may need to retain your personal data for so long as is necessary to deal with any disputes or legal proceedings that may arise.
5.2 If we no longer need to retain your personal data, we may destroy, delete, remove or anonymize your personal data.

6. Rights of Data Subject

You, as the data subject shall have the following rights as prescribed under the Personal Data Protection Act B.E 2562;

(a) Right to Access. You have the right to access and obtain a copy of your personal data or request to disclose your personal data. We may, to the extent permitted by law or a court order, refuse to act on your request where such request could affect the rights and freedom of another person. above.

(b) Right to Rectification. You have the right to have incomplete, inaccurate, misleading, or not up-to-date personal data that we process about you rectified. above.

(c) Right to Object. You have the right to object to the collection, use, or disclosure of your personal data for the purposes of achieving our legitimate interest (or that of other persons). We may refuse to comply with your request if we can demonstrate compelling legitimate grounds for such collection, use, or disclosure, which may override your own interests or if such collection, use, or disclosure is for the purposes of establishment, compliance, exercise or defense of legal claims.

(d) Right to Erasure. You have the right to request us to erase or destroy your personal data or to anonymize your personal data if you believe that (i) the personal data is no longer needed for the purposes described in this notice or (ii) the collection, use, or disclosure of your personal data is unlawful. We may refuse to comply with your request for erasure or destroy for the purposes of establishment, compliance, exercise or defense of legal claims, or compliance with laws.

(e) Right to Data Portability. You may have the right to obtain your personal data we hold, in a structured, electronic format, and transmit such data to another data controller, where this is (a) personal information which you have provided to us, and (b) if we are processing that data on the basis of your consent.

(f) Right to Restrict Processing. You have the right to request us to suspend the use of your personal data if you believe that we no longer need to retain the personal data for the purposes described in this notice, but you still require the retention for the purposes of establishment, compliance, exercise or defense of legal claims, or compliance with laws.

(g) Right to Withdraw Consent. If you have consented to our collection, use, or disclosure of your personal data, you have the right to withdraw that consent at any time.

(h) Right to Lodge a Complaint. You have the right to file a complaint against us to the relevant data protection supervisory authority if you believe that we breach or do not comply with any of our obligations under the applicable personal data protection laws. We would, however, appreciate the chance to deal with your concerns before you approach the competent authority, so please contact us in the first instance.

If you would like to exercise any of your rights, you may do so by downloading our request form at Data Subject Rights Request Form and sending the completed request form to our contact as detailed in this notice.


7. Our Contact Details

If you have any inquiries or concerns in connection with the personal data protection procedures under this notice, please contact us at:

Gulf Energy Development Public Company Limited 87 M. Thai Tower 11th Floor, All Seasons Place, Wireless Road, Lumpini, Pathumwan, Bangkok 10330