CCTV Policy

CCTV Policy (the “Policy”) is to inform you about Toys Retailing (Thailand) Limited or Its affiliates (the “Company”) use of closed-circuit television (CCTV) devices to monitor within or around our premise, building, other of our facilities and/or event areas and/or showroom and/or other areas relating to the Company business, in order to protect life, health and property. The Company collects personal data of all employees, directors, contractors, workers, visitors, customer or any individuals entering the monitored space within our buildings and facilities (collectively referred to as “you” or “your”) through the use of CCTV devices. This Policy provides information on our collection, use, disclosure of individually identifiable information about you (“Personal Data”).

This Policy is formulated in compliance with the Thailand Personal Data Protection Act (PDPA) and other applicable laws.

The Company reserves the right to amend this Policy at any time, in its sole discretion, to modify, revise, delete and update this Policy. The Company will use reasonable endeavours to notify you in appropriate manner of any modification to the terms of this Policy.

1.  
   • 2.1 The Company will not collect, use, disclose, transfer, and carry out any operation, including but not limited to recording, holding, adapting, altering, modifying, destroying, deleting, retrieving, combining, copying, transmitting, storing, extracting, amending, or adding, your Personal Data concerning you, for the purposes as listed below (“CCTV Monitoring Purposes”) without your consent, except for the following:
     • (1) Vital interest: it is to prevent, protect and/or suppress a danger to a person’s life, body and health, such as to protect your health and personal safety, including your belongings;
     • (2) Legitimate interest: it is in our legitimate interest:
       • 1) to protect your health and personal safety, as well as your belongings, our buildings, facilities and assets from damage, disruption, vandalism, and other crime,
       • 2) to assist in the effective resolution of disputes which arise in the course of disciplinary or grievance proceedings,
       • 3) to assist in the investigation or proceedings concerning a whistleblowing complaint,
       • 4) to assist in the establishment or defence of any litigation, including but not limited to employment proceedings, and
       • 5) to carry out any other acts to achieve the CCTV Monitoring Purposes.
2.  
   •  
     • (3) Legal obligation: it is to comply with applicable legal obligation, cooperating with governmental authorities, governmental agency, and law enforcement authority, including but not limited to the laws regarding safety and environment in the workplace. The Company considers the use of the CCTV as a necessary measure to enable us to meet those obligations, such as to support law enforcement organisations in the deterrent, prevention, detection, and prosecution of crime.
   • 2.2 The Company will install CCTV devices in plain sight.
   • 2.3 The CCTV devices are in operation 24 hours a day and 365 days a year and will capture with and without audio recordings.
3.  
   • 3.1 The Company will keep your Personal Data confidential and will not disclose or transfer it except to our subsidiaries, affiliates, and other carefully selected third parties now or in the future, licensees, joint venture partners, and/or service providers, who may be located overseas, to achieve the CCTV Monitoring Purposes provided in this policy.
   • 3.2 The Company may disclose your Personal Data in order to achieve the purposes set forth in this Policy. The parties to which the Company may disclose your Personal Data to includes, but is not limited to:
     • (1) Toys Retailing (Thailand) Limited and Its affiliates: The company may disclose or transfer Personal Data concerning you to our affiliated companies, as part of our legitimate interest and our affiliates' interest to achieve the CCTV Monitoring Purposes.
     • (2) Governmental and/or regulatory organisations: The Company may disclose or transfer Personal Data concerning you to comply with legal obligations, or to support or assist law enforcement organisations with regards to the investigation and prosecution of civil or criminal or administrative proceedings.
     • (3) Third-party: The Company may disclose or transfer Personal Data concerning you as our necessary steps to ensure our protection of your health and personal safety, and belongings.
4.  
   • 5.1 The Company uses reasonable organisational, technical, and administrative security measures to protect Personal Data concerning you from accidental, unlawful, or unauthorised destruction, loss, access, use, alteration, or disclosure.
   • 5.2 The Company will from time-to-time review and update our security measures as necessary or upon development of the concerning technology to ensure effective and appropriate security measures, and in line with minimum legal requirements as prescribed by the relevant governmental organisations.
5.  
   • (1) Access: You may have the right to access or request a copy of the Personal Data the Company is collecting, using and disclosing about you. For your own privacy and security, the Company may require you to prove your identity before providing the requested information to you.
   • (2) Rectification: You may have the right to request for rectification of the incomplete, inaccurate, misleading, or not up-to-date Personal Data that the Company collects, uses, stores, discloses and/or cross-border transfers.
   • (3) Data Portability: You may have the right to obtain Personal Data the Company holds about you, in a structured, electronic format, and to send or transfer such data to another data controller, where this is
     • (a) Personal Data which you have provided to us, and
     • (b) if the company is processing such data on the basis of your consent or to perform a contract with you.
   • (4) Objection: You may have the right to object to certain collection, use and disclosure of your Personal Data.
   • (5) Restriction: You may have the right to restrict the use of your Personal Data in certain circumstances.
   • (6) Withdraw Consent: For the purposes you have consented to our collecting, using and disclosing of your Personal Data, you have the right to withdraw your consent.
   • (7) Deletion: You may have the right to request that the Company deletes or de-identification of Personal Data that the Company collects, uses and discloses about you, except the Company is not obligated to do so if the Company needs to retain such data in order to comply with a legal obligation or to establish, exercise, or defend legal claims.
   • (8) Lodge a complaint: You may have the right to lodge a complaint to the competent authority where you believe our collection, use and disclosure of your Personal Data is unlawful or noncompliant with applicable data protection law.

This Policy is available in Thai and English. In case of discrepancy, the Thai version prevails.