LETTER OF CONSENT FOR APPLICANTS

This LETTER OF CONSENT FOR APPLICANTS (hereinafter referred as this “Letter”) hereby summarizes and describes how Scratch First Co. Ltd. (hereinafter referred to as the “Company,” “we,” “our,” or “us”) collects, uses, or discloses our applicants, candidates, or applicants’ family members’ personal data (the “Personal Data”) during the recruitment process, in accordance with the Personal Data Protection Act B.E. 2562 (2019) (the “PDPA”). We take our privacy responsibilities seriously and are committed to protecting and respecting your privacy.

1. Processing of Personal Data

(1) Category and Purpose of Processing: When you register your interest in current or future employment with us and in order to process your employment application, it is necessary for us to process your Personal Data. We may process the Personal Data collected directly from you or received by placement agencies or any other means in the course of business. In the event that you do not provide us with certain information when requested, we may not be able to provide you with our full support in the recruitment process, and we may not be able to comply with the law or fulfill your requests prior to entering into a contract.

The Personal Data that the Company collects, uses, or discloses may include sensitive personal data (including, but not limited to, medical history, and criminal record, etc.) as well as the following information for the following purposes of processing:

Order	Category	Purpose
1	Name, copy of ID card and details, address, telephone number, transcript, resume, educational background, graduation certificate, work experience, family information, date and place of birth, current age, nationality, gender, marital status, email, military status, signature, photo, previous or expected salary or wage, copy of house registration, medical history, criminal record, appearance, action, work portfolio, LinkedIn channel, social media channels, etc.	(i) To assess and evaluate suitability for employment in any current or future position in the Company, (ii) to verify identity and the accuracy of the Personal Data and other provided information, (iii) to enter into an employment contract, and (iv) to record CCTV for security, etc.
2	Other information, as necessary	To operate the Company in the ordinary course of business.

(2) Legal Ground of Processing: We process your Personal Data based on your consent. If you wish to withdraw your consent, you may proceed at any time by sending a letter of the withdrawal of consent to the Company. However, the withdrawal of consent will not affect the collection, use, or disclosure of the Personal Data you have already given consent to the Company. Other than where justified by your consent, we will usually process the Personal Data where necessary (i) for the performance of contracts executed with you; (ii) for ensuring compliance with our legal obligations; or (iii) for our legitimate interests (or those of a third party), provided your interests and fundamental rights do not override those interests.

(3) Personal Data of Others Provided by You: In certain situations, including, but not limited to, the recruitment process, you may provide the Personal Data of others (e.g., your family member(s)’s personal data) to the Company. It is your responsibility to confirm that they have consented to the processing and transferring of their Personal Data in accordance with this Letter, and you shall be authorized to receive any privacy notice and other related information on their behalf. In the event that you provide a minor’s Personal Data, you shall corporately provide necessary information or document for our age verification measure and representatively consent on behalf of such minor, or obtain the consent of his/her parent or legal guardian, as appropriate.

(4) Retention Period: In the event that you are not employed by Us, your Personal Data retained will be deleted or destroyed from our database within one (1) year upon the end of the recruitment process.

If the Company offers you employment, your Personal Data will be kept by the Company at least ten (10) years after the expiration of your employment contract. The Company may retain the Personal Data for a longer period if necessary; provided, however, that your Personal Data will never be kept for longer than required for the purpose(s) for which it has been collected or processed, in accordance with applicable laws or to allow the Company to protect the legitimate rights and interests of its own or of third parties.

(5) Disclosure: The Company may send or transfer your Personal Data to recruitment agencies, and/or other third parties that are our service assignees necessary to the ordinary course of business.

2. Your Rights

The PDPA provides you the following rights to (i) withdraw consent, (ii) access, (iii) rectification, (iv) erasure, (v) restriction of use, (vi) data portability, (vii) object the processing, (viii) complaint to the relevant data protection authority. In case you have any questions regarding this Letter or wish to make a request for the Personal Data specified in this Clause, please contact the following Department to obtain the Data Subject Rights Request Form. The contact details are as follows:

HR Department        E-Mail Address: jobs@scratchfirst.co