PRIVACY POLICY FOR THIRD PARTIES
UD TRUCKS
This Privacy Policy has been prepared to explain how UD Trucks (Thailand) Co., Ltd., UD Trucks Corporation (Thailand) Co., Ltd, Thai-Swedish Assembly Co., Ltd., TMBP Limited and TSA Land Co., Ltd. (“UD Trucks”) collect, use, disclose and otherwise process (“process” or “processing”) the Personal Data under the Personal Data Protection Act, B.E. 2562 (2019) (“PDPA”).
Application of this Privacy Policy
The Types of Personal Data that We Process
This Privacy Policy applies to you if you are UD Trucks’ individual outsource service provider, supplier, vendor, business partner, contractor or subcontractors (collectively called a “Individual Third Party”), or in case of our corporate outsource service provider, supplier, vendor, business partner, contractor or subcontractors (“Corporate Third Party”), any authorized persons/directors, authorized representative(s), and/or contact person(s) of those Corporate Third Party (collectively called “Associated Persons”). The Individual Third Party and Corporate Third Party shall collectively be referred to as the “Contract Parties”.
In general, UD Trucks will collect and process the following types of your Personal Data:
Types of Personal Data | Example of the Personal Data |
|---|
Identification and contact information | Full name, date of birth, address, office telephone number, mobile phone number, email addresses, place of work, employment status, occupation, work position, identification card number and other Personal Data on the copy of identification card, passport number and other Personal Data on the copy of passport, photographs, signature |
Financial information | Bank account number, bank account name, and other information in relation to the payment |
Information about your qualifications and work experience | For example, your educational background, work experience, professional license(s), and other certificates and references containing your Personal Data |
Corporate related information | The information appearing in the corporate documents of a Third Party, e.g., Company Affidavit, List of Shareholders, Memorandum of Association, VAT certificate, bank statement, Power of Attorney, and other documents (if any) |
Information collected when you visit | Images, and motions collected via the installed CCTV when you enter our premises. |
Transactional information | Any information, which is required in order to enter into an agreement between UD Trucks and you or your company. |
Work related information | Information in relation to the performance of work under the agreement between UD Trucks and you or your organization, such as time attendance of workers, compensations, amount of works, scope of work, and work history. |
Sensitive Personal Data | Sensitive Personal Data contained in Thai identification card In the case where UD Trucks collects a copy of Thai identification card, which contains religion and/or blood type data, which are considered as Sensitive Personal Data under the PDPA. In this regard, UD Trucks does not have an intention to collect or process such Sensitive Personal Data, which is appeared on the copy of my national identification card, i.e., religion and/or blood type. Therefore, unless the copy of the Thai identification card is to be passed to local authority(ies) as required by law or such authority(ies), UD Trucks requires you to omit, blind or cross out the information about your religion and/or blood type, before surrendering/providing a copy of the Thai identification card to UD Trucks. In the case where the full copy of the Thai identification card is collected, whereby the Sensitive Personal Data still appears on such Thai identification card, UD Trucks may, at any time, blind or cross out the information about your religion and/or blood type from such document in order to comply with the PDPA that requires UD Trucks to collect personal data to the extent that is necessary and relevant for its business operations. Health data, e.g., medical data Criminal data Biometric data - UD Trucks processes your biometric data (i.e. fingerprint data) for the purposes of security and for accessing the premises of UD Trucks, as well as other employment-related purposes specified in this Privacy Policy.
|
In the case where UD Trucks will collect the Personal Data other than those proscribed in this Privacy Policy, UD Trucks will inform you about the collection or the processing of the Personal Data, in accordance with the conditions prescribed by the PDPA.
Any Personal Data voluntarily provided, which is not essential for the purposes specified in this Privacy Policy, will be promptly deleted or securely destroyed. We may provide you with our confirmation of such deletion or destruction on a case-by-case basis.
The Methods for the collection of your Personal Data
Purposes for Processing your Personal Data
In general, UD Trucks will collect the Personal Data directly from you through various methods, e.g., CCTV, communications between you and us, and your Personal Data may also be collected from the representatives or your colleagues in the same organization. In addition, UD Trucks may also collect your Personal Data from other public sources, or in the case where you are a worker under the organization which is hired by UD Trucks, i.e., bule collars or contractor staff, UD Trucks may collect your Personal Data from the recruitment agencies or your organizations. UD Trucks may also collect your Personal Data from the government authorities or third-party service providers.
In the case you provide the Personal Data of any other persons to us, you warrant that you have informed such person about the processing of his/her Personal Data by UD Trucks as explained in this Privacy Policy. In addition, if the consent for the processing of the Personal Data is required, you agree to assist UD Trucks in obtaining the valid and enforceable consent from such person.
In general, UD Trucks will process your Personal Data for the following purposes:
Purposes | Details |
|---|
To enter into a contract or establish a legal relationship between UD Trucks and Contract Parties | Your Personal Data is necessary for UD Trucks to enter into an agreement with Contract Parties. Types of Personal Data Processed Identification and contact information Information about your qualifications and work experience Financial information Corporate related information Transactional information
Lawful basis Contractual necessity (for the processing of general Personal Data in the case of Individual Third Party, to proceed with your request to enter into a contract) Legitimate Interest (for the processing of the general Personal Data, and in the case of Corporate Third Party, which UD Trucks needs to process the Personal Data of the Associated Persons of such Corporate Third Party)
Remark: If you do not provide any Personal Data that is necessary for entering into a contract, we may not be able to enter into a contract with you. |
To perform rights and obligations under a contract or within the legal relationship between UD Trucks and you | After entering into a contract, UD Trucks may need to process your Personal Data to perform its rights and obligations under the contract, e.g., to proceed with the payment/repayment process, and to provide benefits as specified in the agreement. Types of Personal Data Processed Identification and contact information Financial information Corporate related information Transactional information
Lawful basis Contractual obligations (for the processing of general Personal Data in the case of Individual Third Party) Legitimate Interest (for the processing of the general Personal Data, and in the case of Corporate Third Party, which UD Trucks needs to process the Personal Data of the Associated Persons of such Corporate Third Party)
Remark: If you do not provide any Personal Data that is necessary for entering into a contract, we may not be able to perform our obligations under the agreement with you, whether in whole or in part. |
To verify a person or his/her authorization, and to assess qualifications | Before entering into a transaction or contract with you, whether you act on behalf of your organization or on your own interest, UD Trucks may need to undertake a process to verify your identity and/or your authorization. In addition, UD Trucks may need to process your Personal Data in order to assess your qualifications and suitability before engaging you or your organization. Types of Personal Data Processed Identification and contact information Information about your qualifications and work experience Corporate related information
Lawful basis |
To assess the qualifications in respect to criminal history of a worker | In certain circumstances, e.g., in the case of blue collars, UD Trucks may need to require the worker or staff to undertake a criminal check to ensure that the qualifications of such person could meet the qualifications required by UD Trucks. Types of Personal Data Processed Identification and contact information Corporate related information Sensitive Personal Data, i.e., criminal data/records
Lawful basis |
To communicate, contact, and coordinate | UD Trucks will need to process your Personal Data in order to communicate, contact, or coordinate with you. Types of Personal Data Processed Identification and contact information Corporate related information Transactional information
Lawful basis |
To ensure safety at our branches, premises, or other properties of UD Trucks | In order to ensure safety at our branches, premises, or other properties of UD Trucks, as well as life and body of any persons entering into our premises or visitors, including you, UD Trucks has installed CCTV cameras around its premises, whereby your pictures and videos may be recorded when you visit such locations. In addition, when you visit our office, factories, or premises, you may be required to identify yourself before entering our buildings. Types of Personal Data Processed Lawful basis |
To undertake any administration and management activities within UD Trucks and its group company | In operating the business of UD Trucks, your Personal Data may be processed as part of our internal processes or of the administration and management work. For example, to manage data for the purpose of managing, storing, recording, backing up, or destroying Personal Data. Types of Personal Data Processed Identification and contact information Financial information Corporate related information Transactional information Transactional information
Lawful basis |
To negotiate, plan, or undertake necessary activities in relation to restructuring of the business | UD Trucks may negotiate, plan, or undertake necessary activities in relation to restructuring of the business, as well as entering into such transactions as business acquisition, merger, and sale of any part of the business. Types of Personal Data Processed Identification and contact information Financial information Corporate related information Transactional information Transactional information Any other Personal Data which may be related to you
Lawful basis |
To provide you with an access to UD Trucks’ property, data, or assets | In certain circumstances, the performance of your work may require an access to UD Trucks’ property, data, or assets, whereby, to provide you with such access, UD Trucks may need to process your Personal Data to set the security setting or to arrange to implement the access control of the access to such property, data, or assets. In the case where you are a worker under the organization which is hired by UD Trucks, i.e., bule collars or contractor staff, UD Trucks may also need to process your Sensitive Personal Data, i.e., fingerprint data, which is the biometric data, for the purpose of security and for accessing the premises of UD Trucks. Types of Personal Data Processed Identification and contact information Corporate related information Sensitive Personal Data, i.e., fingerprint data, which is the biometric data.
Lawful basis |
To assess work performance | During the period of the relationship between UD Trucks and Third Parties, UD Trucks may process your Personal Data to assess the work performance conducted by you or your personnel. Types of Personal Data Processed Lawful basis |
To provide trainings in respect to UD Trucks’ products, services, work and safety | In certain circumstances, you may be required to attend trainings provided or arranged by UD Trucks, in order to perform the work as indicated by UD Trucks, whereby your Personal Data may need to be processed in such case. For example, in the case where you are a worker under the organization which is hired by UD Trucks, i.e., bule collars or contractor staff. Types of Personal Data Processed Lawful basis Legitimate interest Legal Obligation
|
To provide you with benefits or undertake other activities, which may be beneficial to you and/or UD Trucks | In certain circumstances, during the performance of your work, UD Trucks may provide you with the benefits, or undertake any other activities, which may be beneficial to you or UD Trucks, such as the medical consultation at our nursing room, or medical health checks in the case where you are a worker under the organization which is hired by UD Trucks, i.e., bule collars or contractor staff. Types of Personal Data Processed Identification and contact information Corporate related information Work related information Sensitive Personal Data, i.e., health data
Lawful basis |
To comply with laws | UD Trucks may be required to process your Personal Data for compliance with laws, regulations, orders, notifications, or other rules issued by authorities. For example, complying with the PDPA by fulfilling your requests in respect to your Personal Data. Types of Personal Data Processed Lawful basis Remark: If you do not provide any Personal Data that is necessary for compliance with the law concerning the operation of the business of UD Trucks, we may be unable to enter into a contract with you, or continue our relationship with you. In addition, without the required Personal Data, it may result in us and/or you being deemed to be in violation of the applicable laws. |
To establish, exercise, comply or defend legal claims | Your Personal Data may be processed as part of the establishment, exercising, compliance or defense of legal claims. Types of Personal Data Processed Lawful basis |
Disclosure of Your Personal Data
In Processing Personal Data for the above purposes, it may be necessary for us to disclose your Personal Data to third parties, both within and outside Thailand, as follows:
to any of UD Trucks’ affiliates or group companies for the purpose of internal management and administration work, to perform our contractual obligations, and for other purposes as identified in this Privacy Policy;
to third party vendors who provide services to UD Trucks, such as cloud service provider, IT service provider, platform service provider, hospitals, doctors and nurses;
to commercial banks and financial institution or companies;
to external legal counsels in the case of debt collection, legal proceedings and legal execution;
to general counsels, advisors, auditors, and other experts;
to any competent regulatory, prosecuting, tax or governmental agencies, courts or other tribunals in any jurisdiction, including the Revenue Department;
to UD Trucks’ business partners, customers, and other relevant persons;
to third parties in connection with a change of ownership in UD Trucks, or any of its assets or properties; and
to any other persons or entities to whom UD Trucks is required to make disclosure by applicable law or is otherwise requested or permitted by you.
The Cross-Border Transfer of The Personal Data
Retention of the Personal Data
To achieve the purposes described in this Privacy Policy, UD Trucks regularly transfers your Personal Data to its affiliates and group companies, and in certain circumstances, to third parties as described in Clause 5 of this Privacy Policy, located outside Thailand, which may have different data protection standards to those prescribed by the data protection authority in Thailand.
In addition, most of our servers, which we use to process and store your Personal Data for the purposes prescribed herein this Privacy Policy, are located outside Thailand.
Notwithstanding that, UD Trucks ensures that it will protect your Personal Data by implementing adequate personal data protection standards for the transfer of your Personal Data outside Thailand. UD Trucks shall also ensure that any third parties to whom your Personal Data will be disclosed, shall implement adequate personal data protection standards, and where your Personal Data will be transferred within UD Trucks’ affiliates or group companies, UD Trucks shall use data transfer mechanisms as permitted by the applicable personal data protection laws.
UD Trucks retains your Personal Data for as long as is required in order to fulfil our contractual obligations under the agreement with the Third Parties, to exercise our rights under the contract entered into with the Third Parties, and the Personal Data will be retained for a period not exceeding 10 (ten) years after the cessation of our contractual relationship with the Third Parties, or the last communication between UD Trucks and you.
We may retain your Personal Data longer than the above period, only as otherwise permitted or specified by the applicable law.
Your Rights to Personal Data
You have the following rights with respect to your Personal Data:
To withdraw your consent, or to request a change to the scope of your consent;
To request that we confirm to you whether we have in possession any Personal Data that is related to you, to access or to obtain a copy of any such Personal Data, to request information about how we have processed or are processing your Personal Data, and to request that we disclose the source(s) of your Personal Data which has been obtained without your consent;
To request that we correct, update, or complete any Personal Data that is related to you;
In certain circumstances, to request that we delete, destroy or de-identify your Personal Data;
In certain circumstances, to request to object the Processing of your Personal Data;
In certain circumstances, to request to have Personal Data in a format which is generally readable and usable by automatic tools or device and which can be used or disclosed via electronic means, or to request to have Personal Data in said format transmitted to another organization; and
In certain circumstances, to request suspension of the use of your Personal Data.
We reserve the right not to comply with your request if this is appropriate, and as permitted by the applicable law.
In addition to the rights above, you have the right to file a complaint in relation to our Processing of your Personal Data with an expert committee, in accordance with the procedures set out in the PDPA.
As far as permitted by the applicable law and regulations, we may be entitled to charge reasonable expenses incurred in respect to handling any of the above requests.
Contact Us
If you have any inquiries in relation to your Personal Data, or you would like to exercise any of your Data Subject Rights, you may contact us at:
UD Trucks Corporation (Thailand) Co., Ltd.
(Responsible entity of all affiliated and group companies listed below):
UD Trucks (Thailand) Co., Ltd.
Thai-Swedish Assembly Co., Ltd.
TMBP Limited
TSA Land Co., Ltd.
Address: 199 Moo 1, Bangna-Trad Highway T. Srisajorrakaeyai A.,
Bang Sao Thong District, Samut Prakan 10570
Data Protection Officer (For UD Trucks Corporation (Thailand) Co., Ltd.)
Email: dpo_thailand@udtrucks.com
Changes to this Privacy Policy
UD Trucks may amend, change, or update this Privacy Policy from time to time, whereby UD Trucks will update the changes on UD Trucks’ website. In the event that the amendment, change, or update will affect the purposes for which your Personal Data has originally been collected, UD Trucks will notify you about such changes, and obtain your consent (if required by law), prior to such changes becoming effective.
This Privacy Policy shall take effect from 26 June 2026 onwards
