Sangsakao Clinic
CCTV Privacy Notice
Sangsakao Clinic is operating Closed-Circuit Television (CCTV) for surveillance within and around our clinic premises ("Area") to protect life, health, and property. We collect personal data of officers, operators, customers, employees, contractors, visitors, or any individuals (hereinafter collectively referred to as "You") entering the Area through the use of such CCTV equipment. This CCTV Privacy Notice ("Notice") provides information regarding the collection, use, or disclosure of data that can identify you ("Personal Data"), as well as your rights as follows:
- Company
- Sangsakao Clinic, including the website https://www.laserbankclinic.com/about-us
- Business Partner
- A person or juristic person who bids to sell goods and/or provide services to the Company, business partners, business participants (both in the case of selling goods directly to the Company and in the case of joint product development with the Company for sale), service providers, service recipients, employers, contractors, consultants, experts, academics, speakers, contract parties of the Company.
- Prospective Business Partner
- A person or juristic person who may become a business partner with the Company, both in the case where such person has expressed an intention to enter into a contract and/or register as a business partner of the Company, those interested in joining the business, those operating jointly with the Company, or any other person requesting a quotation or to whom the Company offers a quotation.
- Personal Data
- Information about an individual that enables the identification of that person, whether directly or indirectly, but excluding information of a deceased person in particular.
- Sensitive Personal Data
- Personal data as stipulated in Section 26 of the Personal Data Protection Act B.E. 2562, namely racial, ethnic origin, political opinions, cult, religious or philosophical beliefs, sexual behavior, criminal records, health data, disability, trade union information, genetic data, biometric data, or any other data which affects the data subject in the same manner, as prescribed by the Personal Data Protection Committee.
- Data Subject
- A natural person who can be identified from personal data, such as Company personnel, job applicants, family members/references/emergency contacts related to Company personnel or job applicants, customers, service users, business partners, visitors to the Company's website, persons exercising parental power authorized to act on behalf of minors, curators authorized to act on behalf of incompetent persons, guardians authorized to act on behalf of quasi-incompetent persons, etc.
- Data Controller
- A person or juristic person having the power and duty to make decisions regarding the collection, use, or disclosure of personal data.
- Data Processor
- A person or juristic person who operates in relation to the collection, use, or disclosure of personal data pursuant to the orders given by or on behalf of a Data Controller.
- Personal Data Processing
- Any operation performed on personal data, such as collection, recording, copying, organizing, keeping, updating, changing, using, retrieving, disclosing, forwarding, disseminating, transferring, combining, deleting, destroying, etc.
- Personal Data Protection Laws
- The Personal Data Protection Act B.E. 2562 and relevant subordinate laws, and shall include any future amendments.
- Anonymization
- A process that reduces the risk of identification of the data subject to a very low level until risk management is almost unnecessary (Negligible Risk).
We collect your personal data under the following legal bases:
- Necessity for preventing or suppressing a danger to a person's life, body, or health.
- Necessity for the legitimate interests of us or any other persons, where such interests are not overridden by your fundamental rights in your personal data.
- Necessity for compliance with relevant laws regulating safety and environment in the workplace and our property.
We collect your personal data for the following purposes:
- To protect your personal health and safety, including your property.
- To protect our buildings, facilities, and assets from damage, disruption, vandalism, or other crimes.
- To support relevant authorities in law enforcement for deterrence, prevention, investigation, and legal prosecution.
- To assist in dispute resolution processes arising during disciplinary or grievance proceedings.
- To assist in investigation processes or proceedings related to complaint submission.
- To assist in the process of initiating or defending civil litigation, including but not limited to legal proceedings related to employment.
For the purposes stated in Clause 2, we install CCTV in visible locations and place signage indicating CCTV operation at entrances and exits, as well as areas we deem necessary for surveillance, to collect your personal data when you enter the Area as follows:
List of Personal Data Collected:
- Still images
- Moving images
- Sound
- Images of your property, such as vehicles, bags, hats, clothing, etc.
However, we will not install CCTV in areas that may unreasonably infringe upon your fundamental rights, such as break rooms, toilets, shower rooms, or relaxation areas for operators.
We will keep the CCTV data concerning you confidential and will not disclose it unless necessary to achieve the surveillance objectives specified in this Notice. We may disclose CCTV data to the following types of persons or legal entities:
- Authorities empowered by law to assist and support law enforcement, or for investigation, inquiry, or various litigation proceedings.
- Third-party service providers, as necessary to ensure the prevention or suppression of danger to life, body, health, and property of you or others.
The Personal Data Protection Act B.E. 2562 aims to give you more control over your personal data. You can exercise your rights under the Personal Data Protection Act B.E. 2562 when the provisions regarding the rights of data subjects come into effect, as detailed below:
1. Right to Access
To access, receive a copy, and request disclosure of the acquisition of your personal data that we collect, unless we have the right to refuse your request by law or court order, or if your request would adversely affect the rights and freedoms of others.
2. Right to Rectification
To request rectification of your inaccurate or incomplete personal data to ensure it is accurate, up-to-date, complete, and not misleading.
3. Right to Suspend Use
To request the suspension of the use of your personal data in any of the following cases: 3.1. When we are examining your request to rectify your personal data to be accurate, complete, and up-to-date. 3.2. Your personal data is collected, used, or disclosed unlawfully. 3.3. When your personal data is no longer necessary to be retained for the purposes we notified during collection, but you wish for us to continue retaining it to exercise your legal rights. 3.4. When we are proving to you the legitimate grounds for collecting, using, or disclosing your personal data, or verifying the necessity of collecting, using, or disclosing your personal data for public interest, following your exercise of the right to object to the collection, use, or disclosure of your personal data.
4. Right to Object
To object to the collection, use, or disclosure of your personal data, unless we have legitimate grounds to refuse your request (e.g., we can demonstrate compelling legitimate grounds for the collection, use, or disclosure of your personal data, or for the establishment, compliance, or exercise of legal claims, or for public interest according to our mission).
The Clinic's CCTV equipment operates 24 hours a day. However, when the recording capacity period of the Clinic's equipment is exceeded, images will be automatically deleted from the system unless a review is requested. The Clinic will retain your personal data for as long as reasonably necessary to fulfill the Clinic's duties to achieve the purposes set out in this Notice. In cases where the exact retention period cannot be clearly determined, the Clinic will retain the data for a period that can be reasonably expected according to personal data collection standards (e.g., general statutory limitation period of up to 10 years). The Clinic will arrange for appropriate procedures to delete or destroy personal data when the retention period expires, or when it is irrelevant or exceeds the necessity of the purpose for collecting that personal data.
We have appropriate measures to maintain the security of your personal data, both technical and administrative, to prevent data loss, unauthorized access, deletion, destruction, use, alteration, modification, or disclosure, consistent with our Information Security Policy. Furthermore, we have established a Personal Data Protection Policy announced throughout the organization, along with guidelines to ensure security in the collection, use, or disclosure of personal data, maintaining Confidentiality, Integrity, and Availability of personal data. We arrange for the review of such policy and this Notice periodically as appropriate.
We have designated that only officers with relevant authority in collecting, using, or disclosing personal data for this processing activity can access your personal data. We will ensure that officers strictly comply with this Notice.
In improving or changing this Notice, Sangsakao Clinic may consider amendments as deemed appropriate and will notify you through the Clinic's public relations channels, with the date of the latest version indicated at the end. However, Sangsakao Clinic recommends that you regularly check for new versions of the Notice, especially before entering Sangsakao Clinic's area. Entering the area constitutes acknowledgment of the terms in this Notice. Please refrain from entering the area if you do not agree with the terms in this Notice. If you continue to enter the area after this Notice has been amended and announced via the channels mentioned above, it will be deemed that you have acknowledged such changes.
You can contact us regarding this Notice at:
Data Controller
Name: Sangsakao Clinic
Address: 518/3 Ploenchit Road, Lumpini, Pathum Wan, Bangkok 10330
Tel: 090-026-9555
Email: totale2564@gmail.com
Data Protection Officer (DPO)
Name: HR Department
Address: 518/3 Ploenchit Road, Lumpini, Pathum Wan, Bangkok 10330
Tel: 090-026-9555
Email: totale2564@gmail.com
ประกาศ ณ วันที่ 1 พฤศจิกายน 2565
© 2026 Sangsakao Clinic. All Rights Reserved.