PTT Co., Ltd. LNG Co., Ltd. (the "Company" or "we") value the protection of your personal data, which is an employee, a job applicant, a former employee. External/assistant employees (outsource) employees who go to work at other organizations Internship Scholarship students, counselors, speakers, and/or persons assigned to act on behalf of (collectively, "you") By the Company Know that you take into account and value how your information is collected. The Company and its affiliates will use the information you disclose to the Company for the implementation of human resource management by this Privacy Policy for human resource management (the "Privacy Policy"). It is not part of the employment contract between the Company and you or the service contract that the Company has made with your employer.

The Company reserves the right to amend this Privacy Policy from time to time. Please remain vigilant in ensuring that you amendments to this Privacy Policy are always reviewed. Any revisions will take effect immediately when the Company posts a revised privacy policy on the Company's website.

1. Definition

Subsidiaries refer to PTT Public Company Limited and PTT Group companies that hold shares of the Company, its subsidiaries and associates of the Company, and means the actors on behalf of such companies.

Subsidiaries means a company or juristic person with whom the Company has control over or holds more than 50% of the voting rights in that company or juristic person, whether it is directly or indirectly owned through any person or juristic person.

Associates means companies in which the Company or its subsidiaries hold a combined direct or indirect shareholding of 20% but not more than 50% of the Total Voting Rights of the Company and have the authority to: To participate in decisions about the Company's monetary policy and operations.

Personal Data means information that can identify that person or link to that person. Directly or indirectly. If differentiation is possible or can be traced back to the person, you can search for it. Whether alone or in combination with other information, it is considered personal information.

Sensitive Personal Data means information as defined in Section 26 of the Personal Data Protection Act and revised versions as they are revised from time to time and other applicable laws and regulations, including personal information about race, race, opinion, political opinion. Religion or Philosophy Sexual behavior, criminal record. Health, Disability Information Union data, genetic information, biological information, or any other information that similarly affects the owner of personal data.

Personal Data Controller means a person or juristic person who has the authority to make decisions regarding the collection, use or disclosure of personal data.

Personal Data Processor means a person or entity who acts in connection with the collection, use or disclosure of personal data in accordance with the directive or on behalf of the Data Controller. The person or legal entity who does so does not control personal information.

2. Your Personal Data Collected by the Company

The Company may collect your personal data types directly from you (e.g., through documents, the Company's website or the Company's applications) or indirectly from other sources (e.g. from affiliates, service providers, business partners or publicly available sources). As you communicate with the Company and in accordance with your requirements for entering into an employment contract with the Company, the Company may collect, use, disclose and/or transfer abroad. Your personal data types are subject to your duties and responsibilities, including but not limited to the following personal data:

(1) Personal and contact information such as prefix, full name, nickname, business card, photo, nationality, gender, marital status, marriage certificate, age, date of birth, blood type. Weight, height, signature, language of communication, interest/hobby, registration number of a car or other vehicle, Social Security number, type of house of residence (e.g., owning a rental house, dormitory, or living with another person) Important letter of identification for military service, military service status, or other identification information, including your shareholding (e.g., number of shares held, date of holding/sale of shares, type of shares held), house registration address, current address, email address, home phone number, mobile phone number. Social media account name (e.g. LINE ID).

(2) Personally identifiable information contained in government-issued documents and/or copies of such documents, such as id cards, government official identification cards, driver's licenses, etc.

Passport, visa, alien certificate, work permit, house registration, identification number, taxpayer.

(3) Personal profile information such as work experience, internship/work history (e.g. job title Start and end dates Company name, business type, country, role, responsibilities/performance Reasons for leaving work), history of various club members, history of education or information related to scholarships. (e.g., educational background, educational institutions, fields/subjects/faculties), other language skills (accredited by the institution), computer skills. Other special abilities, certificates, licenses of specific practitioners (e.g., auditor's license or license to be a lawyer), personal history Important information to use to verify your background.

(4) Information about your job, such as the type of employment or service contract, employee ID information, internal phone number, employee status. Job id, job level code, employee group code, agency code, job title Department Line of work and job description of interest, affiliated agencies, work areas/workplaces Responsibilities/Contributions Duration of work Start date, end date Type of employment contract or service contract, workplace address responsibilities), support position information. Provincial performance information, history of leave usage Foreign operations, photos, audio, and video during your operations. Performance evaluation results Information about employee training Disciplinary records, complaint details Disciplinary allegations, internal investigation results, disciplinary action information, bankruptcy history Dismissal Information.

(5) Information about your salary and benefits, such as the desired salary rate. Record compensation (e.g. base salary, salary level, bonuses, overtime pay, shift pay, mobile work, extra pay) Welfare information and supporting documents for the exercise of various welfare rights (e.g. compensation, pensions, etc.) Benefits for rent and medical expenses Oil discount drawdown information child tuition, education funding, and employee special benefits), deduction information (e.g., for provident funds; Tax, Social Security), Social Security Fund Information, Compensation Fund Information, Provident Fund Information. Education loan fund information (e.g., reasons for applying for a loan; Loan amount Reimbursement for borrowing and interest loans). Wage deduction information due to legal proceedings, including bank account details, amounts of liabilities, collateral, payment dates and payment methods. Payment currency.

(6) Technical information such as IP address, media access control address information, computer traffic history, cookies, website usage data. operating systems and platforms, and other technologies on the devices used to access the platform.

(7) Participation in activities and trainings, such as training registration information Course Name Course start and completion dates, duration, training hours, training fees Training locations, reasons for attending, and results of the training survey Information on participation in the Company's activities.

(8) Location information, such as information from GPS systems.

(9) Other information, such as still images, movies, cctv camera audio.

(10) Sensitive personal information, such as sensitive personal information specified in government documents. Religious information, health information, criminal history Biological data (such as facial recognition data and fingerprint data) Disability information (e.g. disability identification card)

If you have provided personal information of a family member or other person (e.g., parents, children, spouses, guarantors, emergency contacts, referrals, emergency referrals, dependents, dependents and beneficiaries) to the Company (e.g. first name, last name, address and telephone number) For the purposes specified in this Privacy Policy. You should ensure that you have the right and/or authority to provide such personal data and allow the Company to provide such personal data. Such personal information may be used in accordance with this Privacy Policy. You are also responsible for notifying them of this Privacy Policy and/or obtaining their consent (if necessary) and/or relying on other rules or legal bases.

We do not collect personal information of minors (i.e., under the age of 20 or under the age of majority by marriage as required by law), incompetent persons, incapacitated persons, and do not allow such persons to apply for or purchase our products, services, and services. If consent is not obtained or if it does not rely on any other legal basis. However, if we learn that we have accidentally collected personal information from these individuals without their consent and without any other legal basis, we will not be able to obtain any other personal information. We will take steps to delete such personal data as soon as we become aware of such cases and may be required to stop providing these individuals unless we may rely on rules or legal bases other than consent.

3. The purposes and legal basis on which the Company collects, uses or discloses your Personal Data.

3.1 Purposes for which the Company collects, uses or discloses your Personal Data by virtue of your express consent.

We may collect, use or disclose your sensitive personal data for purposes for which legal consent is required. The purposes for collecting, using or disclosing sensitive personal data are as follows:

· Sensitive personal data in government documents for identification, for verification of your identity, and as employment supporting documents.

· Religious information to provide benefits and benefits for you (e.g., proper food preparation; Prayer rooms or places for religious ceremonies)

· Health information to consider employment, to assess occupational health risks in the workplace and to determine the suitability of your position. To consider adjusting the position to determine benefits, leave dates and/or disbursement of benefits and expenses related to medical treatment. Health insurance, annual physical examinations to prepare proper food.

· Criminal record for consideration for employment Modify your position or work assignments, report and take disciplinary action.

· Biological data for access to and exit of the Company's premises.

· Disability information for consideration for employment, to calculate and pay according to the Disability Fund.

The Company will collect, use and/or disclose sensitive personal data only with your express consent or only if permitted by law and the Company may request your consent on a case-by-case basis. If we are unable to rely on other legal bases to collect, use and disclose your Personal Data, we will not be able to disclose your Personal Data.

3.2 Purposes for which the Company collects, uses or discloses your Personal Data on other legal grounds.

The Company may rely on or claim (1) the performance of the contract; (2) For initiation of a contract or entering into a contract or performing a contract with you( 2) on the basis of compliance with the law; Perform the Company's legal duties (3) on the basis of the Company's legitimate interests and those of third parties( 4) on the basis of preventing or suppressing life-threatening harm. and/or (5) public interest bases for carrying out missions in the public interest or performing duties in the exercise of governmental power or other legal bases as permitted by the Law on Personal Data Protection, as the case may be, to collect, use and/or disclose your Personal Data for the following purposes:

It's all Some of the following purposes may not apply to you: Please consider the relevant objectives according to your relationship with the Company.

Advisory Group/Speakers

(1) Employment arrangements such as identity verification, suitability and qualification assessment, background checks, selection of consultants/speakers. Entering into contracts or related jurisprudence Payment of remuneration and disbursement of expenses

(2) Operations such as facilitating the performance of duties of consultants/speakers.

Candidate pool

(1)     Arrangements related to job application and/or employment, such as recruitment, verification of your identity. Recording information collected from job applicants as part of the application process. Assessment of suitability and qualifications of job applicants, background checks on job applicants.

(2)     Communications with you, such as communications relating to interviews with you. Document delivery to contact your referrer in case of need and emergency, and publicity.

Employee groups Who used to be employees External employees/outsource employees who work at other organizations Interns scholar

(1)    Employment-related arrangements, such as employment decisions. Entering into employment contracts or service contracts that the Company enters into with your employer, providing orientation to employees, determining salaries, benefits and other basic contract information for new employees.

(2)     Administration Payment of remuneration and benefits such as payroll, compensation, bonuses, and welfare arrangements (e.g., compensation, medical and health expenses, insurance, social security, provident fund; Scholarships (This may include the preparation of the applicant's profile and the use of documentary evidence for the grant.) Education loans and other funds), assessments to adjust salaries/remuneration, including deductions from income tax, and disbursement of expenses to you.

(3)    Human resources management and employment relationship management, such as the preparation of employee databases and employee histories. Recording of work information, issuance of employee IDENTIFICATION cards, office building entrance and/or other cards, organizing training or other activities, talent management and professional development. Functional support Tracking working hours and entry times Management or approval of leave dates Issuance of affidavits as requested Business communications, delivery of related documents Performance evaluation, human resources management, job suitability assessment Considering, adjusting, moving, changing your location or workplace. Changes in the type of employment contract (e.g., from an intern to a full-time employee) or a service contract entered into by the Company with your employer. Assignments to work outside the company, management and monitoring of business travel, management of work permits (e.g., of foreign employees) Data analysis to support and develop human resource management Supporting and facilitating the work and use of the Company's assets, including viewing and maintenance, managing employee retirement plans. Providing social and environmental responsibility to the organization To promote and ensure equality among employees, prepare and maintain an organizational chart. Agencies and working groups within the organization Management of training on ethics and compliance Investment decisions Forecasting and budgeting, handling complaints Disciplinary actions, actions related to dismissal. Leaving work and retirement, managing a blacklist

(4)    For the operation of the Company and its affiliates, such as providing customer services and communicating with affiliates and business partners.

and to manage contractual relationships and rights with affiliates and business partners in order to consider appointing, cancelling or authorising you to conduct transactions with affiliates and business partners, including using your name and personal data in the relevant contracts to do so and for other purposes at Company to determine reasonable factors in relation to your employment (e.g. to carry out activities or actions for the Company/on behalf of the Company) and for the purposes specified in the labor contract or service contract entered into by the Company with your employer. Work regulations and any documents related to human resources management to be used as proof of various transactions, auditing and accounting (both internal and external). Cost/budget analysis and control and screening for communicable diseases

(5)    Information technology management, e.g. for the purposes of managing our business. Conduct public relations within the organization, including information technology operating system management, communication system management. Enterprise Information Technology Security Internet, email, and phone tracking

The following objectives apply to all of you.

(1) Performing legal duties, such as to carry out legal proceedings, proceedings or orders of government agencies and/or cooperate with courts, regulators, etc. In the event that the Company has reasonable grounds to believe that it complies with laws and/or orders or cooperates thereto the Company may be required to disclose your Personal Data in order to comply with the provisions of the law. strictly the legal process or order of such state, including to carry out internal investigation procedures; Complaints or claims investigating or preventing crime, fraud, and/or establishing legal claims;

(2) To protect the legitimate interests of us and our affiliates, such as to secure and validate our business or those of our affiliates, to analyze, evaluate, manage and manage risks, to exercise our rights and protect the interests of us or those of our affiliates when necessary and lawful (e.g.,

To detect, prevent and take action on any fraud complaints. Intellectual property infringement or legal infringement) ) to ensure compliance with the Agreement and the investigation of violations of the Agreement, to detect and prevent misconduct within our premises (e.g., the use of CCTV cameras), and to report offences. Internal policies to the extent of our operations Remedies or limitations for damages that may occur to the Company Establishing, using or raising against the Company's legal claims and/or any other actions for the protection of customers, employees, other persons, information, trade secrets, rights and property of the Company and its affiliates.

(3)     Trading of corporate affairs, including in the event of a reorganization. Mergers, sales, purchases Joint Ventures, Assignments Change of ownership or disposition of business, property or shares, rehabilitation of business Joint ventures or similar transactions The Company may disclose your Personal Data to our assignees and/or obligations, whether in one or more persons, where such personal data disclosure is part of the transaction.

(4)     To prevent or suppress life-threatening harm. A person's body or health

It's all Your failure to provide personal information to us may affect you. In other words, we may not be able to perform the actions requested by you, or you may not be comfortable or not perform the contract, and may suffer damages/loss of opportunity, and in some cases we may not be able to agree to hire you or perform employment with you. Your failure to provide such information may also affect your compliance with any laws that we or you are obligated to comply with and may impose applicable penalties. 

4. Which persons or entities may we disclose or transfer your Personal Data to?

The Company may disclose or transfer your Personal Data to the following third parties who collect it: Use or disclose personal information for the purposes described in this Privacy Policy. You may also fall under those third party privacy policies. We therefore recommend that you read the privacy policies of such third parties to learn more about how such third parties collect them. Also use or disclose your personal data.

4.1 Affiliates

The Company may be required to disclose or transfer your Personal Data to a group company or allow that affiliate to access your Personal Data for the purposes described in this Privacy Policy.

4.2 Service providers of the Company

The Company may hire other companies, agents or contractors to provide services on our behalf or facilitate the provision of products and services to you. The Company may disclose your Personal Data to third-party service providers or distributors. These include, but are not limited to: (1) Infrastructure developers, internet, websites, and information technology service providers (2) Logistics and freight service providers (3) Data analytics service providers (4) Storage and cloud services providers (5) Seminar/speaker service providers. (6) Financial service providers for employee compensation (7) service providers of employee benefits (e.g., insurers, hospitals, or healthcare facilities; Provident Fund Management Company) (8) (9) Printing or email delivery service providers (10) Recruitment and HR services providers. (11) Background check service providers for recruitment, (12) work permit and visa providers, (13) venue providers, (14) poll/satisfaction providers, and/or (15) banks and financial institutions. in the provision of such services. Service providers may have access to your personal data. However, the Company will provide personal data to our service providers only to the extent necessary for providing such services, and will ask the service provider not to use your personal data for any other purpose.

4.3 Business partners of the Company

The Company may disclose and/or Transfer your Personal Data to our business partners. Personal information that is disclosed or transferred in this manner is subject to the third party's privacy policy. Not subject to this Privacy Policy.

4.4 Third parties as required by law

In some cases, the Company may be required to disclose and/or Transfer your personal data to government agencies Law enforcement agencies, courts, officials Government agencies, law enforcement officers, or other persons. Have reasonable grounds to believe that it is necessary to perform its duties in accordance with legal laws or regulations or to protect the rights of the Company. the right of another person, or for the safety of a person, or to investigate, prevent or deal with corruption, or security or security issues.

4.5 Expert Advisors 

The Company may be required to disclose personal information to the Company's expert advisors, which may include, but are not limited to, (1) independent consultants such as project advisors, financial advisors, accounting consultants, marketing consultants, (2) legal advisors who assist in the company's business operations and provide litigation services, whether fighting or litigation, (3) auditors who provide accounting or auditing services to the Company, and/or (4) other auditors or auditors.

4.6 Assignee and/or Obligations

In case of reorganization. Mergers, sales, purchases Joint Ventures, Assignments The assignee and/or the Company's obligations will comply with this Privacy Policy in order to respect your Personal Data.

4.7 Other recipients of personal data

The Company may disclose your Personal Data to any other person or juristic person. For the purposes of this Privacy Policy, the recipients of such personal data may include, but are not limited to, the person or entity requested by you. The requester reviewed the recordings from CCTV cameras. Media and/or public disclosure

5. Transfer of your Personal Data abroad

The Company may disclose or transfer your Personal Data to third parties or service providers located abroad whose destination country may have higher or lower standards of personal data protection than Thailand. It's all When it is necessary to transfer your Personal Data to a foreign country with lower personal data protection standards. The Company will take steps and measures to ensure adequate protection of the transferred Personal Data. And the person who transfers the Personal Data has appropriate or legal standards of personal data protection, and where necessary, the Company may ask for your consent to transfer your Personal Data to foreign countries. If this is the case, consent must be obtained by law.

6. Retention period of your Personal Data

The Company will retain your Personal Data for the period necessary and appropriate to serve the purposes for which the Company Inform you in accordance with this Privacy Policy and to comply with all laws and regulations, we may retain your Personal Data for a longer period of time. If necessary and/or can be done in accordance with applicable law.

7. Your rights as a data subject

Subject to the provisions of law and exceptions to applicable laws. You may have the following rights:

(1) Access You may have the right to request access to or obtain a copy of the Personal Data collected, used or disclosed by the Company about you.

(2) Correcting it You may have the right to request corrective actions of the Personal Data collected, used or disclosed about you to be accurate, current, complete and misleading.

(3) Transfer of Personal Data You may have the right to obtain personal data at the Company. It is about you in an organized and electronically readable form and to transmit or transfer such personal data to another data controller. This must be (a) personal data that you have provided to the Company and (b) if the Company has obtained your consent to collect, use or disclose your Personal Data or to perform contracts that the Company has with you. It's all If the exercise of your rights infringes the rights or freedoms of another person, or the Company must use your Personal Data for the public interest or to comply with the law, the Company has the discretion to refuse your request.

(4) Objections You may have the right to object to the collection. Use or disclose your Personal Data in accordance with applicable law.

(5) Suspension Of Use You may have the right to request that you suspend the use of your Personal Data in certain circumstances.

(6) Withdrawal of consent for the purposes for which you have consented to the company's collection. Use or disclose your personal data You may have the right to withdraw your consent. In some cases, however, withdrawal of consent may result in us being unable to perform certain contractual obligations on you. If you wish to further understand the implications of withdrawing your consent or wish to exercise your right to withdraw consent, please contact us at the contact details provided below.

(7) Deletion or destruction You may have the right to request that the Company delete, destroy or anonymize your Personal Data collected, used or disclosed by the Company. It is personal data that cannot be personally identified to you, unless the Company's retention of such personal data is for the purposes of law enforcement or to establish legal claims for the use or protection of legal claims.

(8) Complaints You have the right to complain to government agencies related to the protection of personal data. In the event that you believe that the Company Failure to comply with personal data protection laws

Before we process your request for exercise. We may need to verify and verify the identity of the rights user. This is for the privacy and security of your personal data. For this reason, we may ask you to provide/inform. Your identity verification information (e.g. a copy of your ID card, excluding any sensitive personal data) Once we have completed verifying your identity. We will act on your request as soon as possible, but in no event shall it be more than 30 days from the date of receipt of such request. In the event that we find that the request is manifestly unfounded or excessive, a fee may be charged for the fulfillment of such request.

8. Security measures

The Company has established appropriate personal data security measures, which include administrative safeguards. Technical precautionary measures and physical protective measures In regards to accessing or controlling access to personal data, to maintain the confidentiality, accuracy, completeness and availability of personal data to prevent loss.

Access, use, change, modify or disclose personal data without authority or abuse, in accordance with applicable law.

The Company has established measures to control access to personal data and access to devices for storing and processing personal data that are safe and suitable for collecting, using and disclosing personal data. By determining the user's access to the data. The right to allow delegates to access the information. and the responsibilities of users to prevent unauthorized access to personal information. Disclosure, harassment or copying of personal data, or theft of devices storing or processing personal data. In addition, the Company has put in place measures for audits.

Historically relating to accessing, changing, deleting or transferring personal data in accordance with the methods and materials used to collect it. Use or disclose personal information

9. Contact Us

If you wish to exercise your rights in relation to your Personal Data or have any questions about your Personal Data under this Privacy Policy, please contact us.

PTT Company LNG Ltd.

555/1 Energy Complex Building A, 3rd Floor

Vibhavadi Rangsit Road, Chatuchak, Bangkok 10900

Tel. +66(0) 2140 1555

Email pdpa@pttlng.com

Announced on May 19, 2022

(Mr. Rattikul Piyavankwanich)

Acting Director of the President