Sangsakao Clinic
Privacy Notice for Applicants and Employees
Sangsakao Clinic (“Clinic”) respects and highly values the privacy rights regarding the personal data of job applicants, internship applicants, current employees, former employees, directors, executives, consultants, and any other persons related to the Clinic's personnel (“You”). In compliance with the Personal Data Protection Act B.E. 2562 (2019) and related subordinate laws or regulations (“Personal Data Protection Law”), the Clinic has issued this Privacy Notice for Personnel to clarify the details, methods for managing and processing personal data received from you, the purposes for collection, use, disclosure, and transfer, the retention period, and your rights as the Data Subject, as follows:
- Clinic:
- Sangsakao Clinic, including the website https://www.laserbankclinic.com/about-us
- Personal Data:
- Data about a person which enables the identification of such person, whether directly or indirectly, but excluding the data of a deceased person specifically.
- Sensitive Personal Data:
- Personal data as stipulated in Section 26 of the Personal Data Protection Act B.E. 2562 (2019), such as racial, ethnic origin, political opinions, cult, religious or philosophical beliefs, sexual behavior, criminal records, health data, disability, trade union information, genetic data, biometric data, or any other data which affects the data subject in the same manner.
- Data Subject:
- A natural person who can be identified from the Personal Data, such as Clinic personnel, job applicants, family members/references/emergency contacts related to Clinic personnel or applicants, customers, service users, partners, website visitors, custodians authorized to act on behalf of minors, guardians authorized to act on behalf of incompetent persons, curators authorized to act on behalf of quasi-incompetent persons, etc.
- Data Controller:
- A person or legal entity having the authority to make decisions regarding the collection, use, or disclosure of Personal Data.
- Data Processor:
- A person or legal entity that carries out the collection, use, or disclosure of Personal Data on the instructions of or on behalf of the Data Controller.
- Personal Data Processing:
- Any operation performed on Personal Data, such as collection, recording, copying, organization, storage, adaptation, alteration, retrieval, disclosure, transfer, dissemination, transfer, amalgamation, erasure, destruction, etc.
- Personal Data Protection Law:
- The Personal Data Protection Act B.E. 2562 (2019) and related subordinate laws, and shall include any future amendments to such laws.
- Anonymization:
- A process that reduces the risk of identifying the Data Subject to a negligible level (Negligible Risk).
The Clinic collects, uses, or discloses your Personal Data received through various channels as follows:
2.1 Personal Data directly provided by you to the Clinic:
You may provide Personal Data directly to the Clinic when you express the intention to apply for a job or internship with the Clinic, or when you contact for inquiries, or when you send an application with your Personal Data to the Clinic, or when you exchange a card to access the building area.
2.2 Personal Data automatically collected by the Clinic from you:
The Clinic may automatically receive your Personal Data, such as CCTV recordings, technical data, activity and viewing patterns, website browsing history automatically by using cookies and other similar technologies. You can study more details in the Clinic’s “Cookies Policy”.
2.3 Personal Data received by the Clinic from third parties:
The Clinic may occasionally receive your Personal Data from third parties, such as job websites, recruitment agencies, or documents of persons related to you as your family members, emergency contacts, references, beneficiaries, or guarantors of such persons, etc.
Personal Data collected by the Clinic under this Privacy Notice is divided into the following categories of Data Subjects:
3.1 For Job Applicants
3.1.1 Personal Details such as name, surname, address, phone number... education history, work history... 3.1.2 Sensitive Personal Data such as religion, health data... 3.1.3 Other Data...
3.2 For Internship Applicants
3.2.1 Personal Details... 3.2.2 Sensitive Personal Data such as religion... 3.2.3 Other Data such as internship letter from university...
3.3 For Clinic Employees and Personnel
3.3.1 Personal Details... 3.3.2 Sensitive Personal Data... 3.3.3 Employment Data... 3.3.4 Welfare and Benefits Data... 3.3.5 HR Administration Documents... 3.3.6 Other Related Data such as CCTV recordings...
3.4 For Third Parties
The Clinic may receive third-party data related to you, such as spouse data, family data... You must obtain consent and inform these individuals about the processing of personal data under this Privacy Notice...
หมายเหตุ: In cases where the Clinic needs to collect Sensitive Personal Data, the Clinic will provide appropriate security measures and request your consent before collection, unless there is a legal exception...
4.1 For Job Applicants
- 4.1.1 For the Clinic to conduct business according to objectives (Contract)...
- 4.1.2 For necessary operations under legitimate interests (Legitimate Interest)...
- 4.1.3 To prevent or suppress danger to life, body, or health of a person (Vital Interest)...
- 4.1.4 Consent when the Clinic cannot rely on exceptions or legal bases specified above...
4.2 For Internship Applicants
- 4.2.1 For the Clinic to conduct business according to objectives (Contract)...
- 4.2.2 For necessary operations under legitimate interests (Legitimate Interest)...
- 4.2.3 To prevent or suppress danger to life, body, or health of a person (Vital Interest)...
- 4.2.4 Consent...
4.3 For Employees and Personnel
- 4.3.1 For the Clinic to conduct business according to objectives (Contract)...
- 4.3.2 To perform duties under relevant or applicable laws (Legal Obligation)...
- 4.3.3 For necessary operations under legitimate interests (Legitimate Interest)...
- 4.3.4 Necessary for the establishment of legal claims...
- 4.3.5 To prevent or suppress danger to life, body, or health of a person (Vital Interest)...
- 4.3.6 Consent...
For job applicants, please note that the Clinic needs to process your Personal Data for the purpose in 4.1.1. If you do not provide Personal Data under 3.1 to the Clinic, it may affect legal compliance...
The Clinic may disclose your Personal Data under the specified purposes and according to legal criteria to the following entities and persons:
5.1 Internal Departments
Such as HR officers, executives, supervisors, accounting department, IT department.
5.2 Group Companies
Your Personal Data may be accessed or disclosed to other legal entities within the Group Companies...
5.3 The Clinic's Service Providers
The Clinic may use services of individuals, legal entities, agents, or contractors... including but not limited to (a) IT service providers... (b) Survey agents...
5.4 Third Parties as Permitted by Law
In some cases, the Clinic may be required to disclose or transfer your Personal Data to third parties to comply with legal or regulatory obligations...
In cases where the Clinic sends or transfers your Personal Data abroad, the Clinic will take steps to ensure that the Clinic has sent or transferred it to a destination country...
- 6.1 Unsuccessful Applicant Data – The Clinic will store your data for 1 year after the selection process is completed.
- 6.2 Employee and Personnel Data – The Clinic will store your data throughout the employment contract period and for a further 5 years after the termination of employment...
- 6.3 In case of exercising rights as specified in this Notice, the Clinic will keep evidence of the history of rights exercise under the Personal Data Protection Law for 1 year...
Upon expiry of the specified period, the Clinic will delete or destroy your Personal Data, or take other actions as required by the Personal Data Protection Law...
- 7.1 Strictly define rights for access, use, disclosure, and processing of Personal Data...
- 7.2 In sending or transferring Personal Data abroad (if any)...
- 7.3 In case of a breach of the Clinic's security measures...
8.1 Right to Withdraw Consent
If you have given consent to the Clinic... You have the right to withdraw consent at any time...
8.2 Right to Access Personal Data
You have the right to request access to or obtain a copy of your Personal Data...
8.3 Right to Data Portability
You have the right to request the Clinic to transfer your Personal Data to another Data Controller.
8.4 Right to Object
You have the right to object to the collection, use, and/or disclosure of Personal Data at any time...
8.5 Right to Erasure
You have the right to request erasure or destruction of Personal Data...
8.6 Right to Restriction of Processing
You have the right to request suspension of the use of Personal Data temporarily...
8.7 Right to Rectification
You have the right to request correction of your Personal Data to be accurate...
8.8 Right to Lodge a Complaint
In case the Clinic violates or fails to comply with the Personal Data Protection Law...
The Clinic will use its best efforts to process your request within a reasonable period and not exceeding the period stipulated by the Personal Data Protection Law...
If you have any questions or complaints about your Personal Data under this Privacy Notice, please contact the following channels:
9.1 Data Controller
Name: Sangsakao Clinic
Address: 518/3 Ploenchit Road, Lumpini, Pathum Wan, Bangkok 10330
Tel: 090-026-9555
Email: totale2564@gmail.com
9.2 Data Protection Officer (DPO)
Name: HR Department
Address: 518/3 Ploenchit Road, Lumpini, Pathum Wan, Bangkok 10330
Tel: 090-026-9555
Email: totale2564@gmail.com
However, if you wish to exercise any of the rights above under Clause 8, you can contact the Clinic via the contact details above or fill out the “Data Subject Right Request Form”.
The Clinic may amend, review, and update this Privacy Notice from time to time to align with any changes related to the processing of your Personal Data...
© 2026 Sangsakao Clinic. All Rights Reserved.