บริษัท ขนส่ง จำกัด
THE TRANSPORT CO.,LTD​

Privacy Policy 19 ธันวาคม 2024 1. Introduction The Transport Co., Ltd. (hereinafter referred to in this policy as “TCL” or “the Organization”) recognizes the importance of personal data and other information related to you (collectively referred to as “Data”). To ensure your trust, TCL emphasizes transparency and accountability in the collection, use, or disclosure of your data, in compliance with the Personal Data Protection Act B.E. 2562 (2019) (“Personal Data Protection Law”) and other relevant laws. This Personal Data Protection Policy (“Policy”) has been established to clarify the details regarding the collection, use, or disclosure (collectively referred to as “Processing”) of personal data conducted by TCL, its employees, and individuals acting on behalf of TCL. The key contents are as follows: 2. Scope of Policy Enforcement This Policy applies to the personal data of individuals currently or potentially associated with TCL. The data is processed by TCL, its officers, contractual employees, business units, or other entities operating under TCL, including contractors or external parties processing data on behalf of TCL (“Personal Data Processors”). This includes data handled across TCL’s products and services, such as websites, systems, applications, documents, or other services controlled by TCL (collectively referred to as “Services”). Individuals associated with TCL, as defined above, include: Individual customers. Officials, workers, or employees. Business partners and service providers who are individuals. Directors, proxies, representatives, agents, shareholders, or employees of legal entities connected to TCL. Users of TCL’s products or services. Visitors or users of TCL’s website www.transport.co.th, systems, applications, devices, or other communication channels controlled by TCL. Other individuals from whom TCL collects personal data, such as job applicants, families of employees, guarantors, and beneficiaries of insurance policies. Items 1 through 7 are collectively referred to as “You”. In addition to this policy, TCL may issue Privacy Notices for specific products or services to explain the personal data being processed, the legal purposes for processing, the retention periods, and the rights of data owners. In the event of any significant conflict between this Policy and a Privacy Notice, the terms of the Privacy Notice for the specific service shall prevail. 3. Definitions TCL: Refers to Transport Co., Ltd. Personal Data: Refers to information about an individual that directly or indirectly identifies that person, excluding information about deceased persons. Sensitive Personal Data: Refers to data as defined under Section 26 of the Personal Data Protection Act B.E. 2562, including: Racial or ethnic origin Political opinions Religious or philosophical beliefs Sexual orientation Criminal records Health data Disability status Trade union membership Genetic and biometric data Other data impacting the personal data owner as specified by the Personal Data Protection Committee. Personal Data Processing: Refers to any operation performed on personal data, such as collection, recording, copying, organization, storage, modification, use, retrieval, disclosure, transfer, publication, merging, deletion, or destruction. Personal Data Owner: Refers to an individual who owns the personal data collected, used, or disclosed by TCL. Personal Data Controller: Refers to a person or legal entity with the authority to decide on the collection, use, or disclosure of personal data. Personal Data Processor: Refers to a person or legal entity processing personal data on behalf of, or under the instructions of, the personal data controller. The processor does not act as the controller. 4. Sources of Personal Data Collected by TCL TCL collects various types of personal data from the following sources: Direct Data Collection: Data provided directly by the data owner through TCL’s service channels, such as registration, application, employment processes, contract signing, surveys, or product and service usage. This includes when the data owner contacts TCL via offices or other controlled communication channels. Data Collected During Service Use: Data gathered when the data owner uses TCL’s websites, products, or services. This includes behavior tracking through Cookies or software on user devices. Data from External Sources: Personal data obtained from sources other than the data owner, where the source has a lawful basis, authority, or the data owner’s consent to disclose the data to TCL. Examples include: Integration of digital services from government agencies for public benefit. Receiving data from other government agencies under TCL’s mission to establish a central data exchange to support public service delivery. Exchange of data with contractual agencies to fulfill service agreements. If you provide third-party personal data to TCL, you are responsible for: Informing the third party about the details outlined in this Policy or related service Privacy Notices. Obtaining consent from the third party when necessary for disclosure to TCL. Failure to provide necessary personal data may result in TCL’s inability to deliver services in whole or in part. 5. Legal Basis for Personal Data Collection TCL determines the appropriate legal basis for collecting your personal data based on the context of the services provided. The legal bases for TCL’s collection of personal data include: Legal Basis for Data Collection Details For the execution of tasks for public interest or the exercise of state authority assigned to TCL. To enable TCL to operate under state assignments and carry out tasks for public benefit in accordance with legal provisions. Examples include: the Digital Government Administration and Services Act B.E. 2562, and other relevant laws, regulations, rules, and state orders. For compliance with legal obligations To enable TCL to comply with obligations set forth by applicable laws. Examples include: – Collecting computer traffic data as per the Computer Crime Act B.E. 2560. – The Accounting Act B.E. 2543. – Tax-related laws, including court orders or other legal mandates. For legitimate interests under the law For the legitimate interests of TCL or others. These legitimate interests must not override the fundamental rights and freedoms of the individual whose personal data is being collected. Examples include ensuring security at TCL facilities or processing personal data for organizational management purposes. For the prevention or suppression of danger to life, body, or health of individuals To prevent or suppress harm or danger to life, body, or health. Examples include processing personal data for emergency healthcare services under government policies.

Privacy Policy (Privacy Notice) 19 ธันวาคม 2024 Privacy Notice This Privacy Notice (“Notice”) is designed to inform and help you, as a user of Transport Co., Ltd. (“TCL” or “we”), understand the collection, use, and disclosure (“processing”) of your personal data. TCL operates as a data controller or data processor, depending on the context, and processes your personal data for purposes described in this document. TCL’s Business Operations TCL operates passenger transport services: Company-operated buses between Bangkok and other provinces. Private joint-operated buses on routes licensed by TCL. Bus terminals. Parcel delivery services. 1. Legal Basis for Processing Personal Data 1.1 TCL processes personal data under the following legal bases: Contractual necessity: To fulfill contracts, including employment, service agreements, MOUs, or other agreements. Prevention of harm: To prevent or mitigate harm to life, body, or health (e.g., using applications to monitor diseases as part of government policies). Legal obligations: To comply with legal requirements, such as collecting computer traffic data under the Computer Crimes Act B.E. 2560, the Official Information Act B.E. 2540, tax laws, or court orders. Public interest or state authority: To perform tasks in the public interest under laws like the Digital Government Administration and Services Act B.E. 2562 and related regulations. Legitimate interests: To ensure TCL’s or others’ legitimate interests, such as maintaining facility security or processing personal data for internal operations. 1.2 TCL collects personal data under Section 26 without explicit consent in cases including: Emergency medical care: Collecting patient information from family members for unconscious patients. Disease control: Collecting COVID-19 symptoms data for public health purposes under the Communicable Disease Act. 2. Purposes for Collecting Personal Data TCL processes your personal data for the following purposes: To carry out public interest tasks assigned to TCL or fulfill legal obligations. To provide and manage TCL’s services under contracts or TCL’s mission. To conduct TCL transactions. To monitor, manage, and improve services for your convenience and satisfaction. To store and update relevant information and documents about you. To maintain records of data processing activities as required by law. To analyze data and resolve service-related issues. To prevent, detect, and investigate fraud, security breaches, or illegal actions that may harm TCL or data subjects. To verify and authenticate your identity when using TCL services or exercising your legal rights. To improve and develop the quality of TCL’s products and services. To send notifications, confirmations, and updates. To prepare and deliver necessary documents or information. To verify identity, prevent spam, or detect unauthorized or illegal activities. To monitor and analyze how users access and use TCL’s services for research and analysis. To ensure TCL’s or other entities’ legitimate interests related to TCL operations. To prevent or stop harm to life, body, or health, including disease monitoring. To prepare historical records, conduct research, or perform statistics-related tasks assigned to TCL. To comply with laws, regulations, court orders, or exercise TCL’s legal rights. 3. Personal Data Collected and Used To achieve the purposes outlined in Section 2, TCL collects the following personal data:                  3.1 Sources and Types of Personal Data Collected Sources/Methods of Data Collection  Types of Personal Data Collected 1. Direct collection from you through registration forms, applications, surveys, or interview processes Examples: Name, surname, phone number, photo, ID card number, address, video clips, employee ID, email, bank account number 2. Use of technology to monitor or track your usage behavior Examples: Cookie data, IP address, application logging, device ID, browsing history 3. Collection from other sources Examples: Information collected from websites such as www.transport.co.th                  3.2 Purpose of use of personal data Purpose of Data Usage Types of Personal Data Used 1. For registration purposes, identity verification, and service application – Specific personal data such as title, first name, last name, nickname, signature, ID card number, nationality, passport number, house registration, business license number (for specific professions), social security number, etc. 2. For government welfare arrangements (e.g., military personnel, elderly individuals) – Examples: Name, surname, phone number, ID card number, physical condition 3. For public relations, activities, and various programs – Examples: Name, surname, phone number, ID card number 4. Disclosure of Your Personal Data We disclose your personal data to individuals or entities as follows: 4.1 Government agencies or authorities to which TCL must disclose data for legal purposes or other significant public benefit objectives. 4.2 Business partners to facilitate the provision of services. 4.3 Public disclosure of basic data only when necessary, such as through TCL’s website, bulletin boards, or announcements via social media. 5. Your Rights Under the Personal Data Protection Act B.E. 2562 The Personal Data Protection Act B.E. 2562 aims to give you greater control over your personal data. You can exercise the following rights once the relevant provisions take effect: 5.1 Right to Access: You have the right to access, obtain copies, and request the disclosure of the source of your personal data, except where we are legally entitled to refuse (e.g., court orders or cases where disclosure may harm others’ rights and freedoms). 5.2 Right to Rectify: You can request corrections or updates to ensure the data is accurate, complete, and up to date. 5.3 Right to Restrict Processing: You may request restriction of data use in the following cases: 5.3.1 When verifying the accuracy of your data upon your request. 5.3.2 When your data has been unlawfully collected, used, or disclosed. 5.3.3 When the data is no longer needed, but you wish to retain it for legal purposes. 5.3.4 When verifying the legitimacy of data collection or use following your objection. 5.4 Right to Object: You may object to the collection, use, or disclosure of your data, except where we have legitimate legal grounds to refuse (e.g., for public benefit, legal claims, or to perform legal duties). 6. Retention Period for Personal Data We retain your personal data for up to 10 years or as instructed by authorities, starting from the termination of the relationship or last contact with TCL. Data may be retained longer where permitted by