Privacy policy
This privacy notice describes how BDO Audit Company Limited, BDO Advisory Services Company Limited, BDO Business Services Company Limited and BDO Phuket Company Limited (collectively ‘BDO in Thailand’, 'we', 'us') collects and processes personal information about you; how we use and protect this information; and the choices you can make about how we use this information when you apply for a position.
Personal information is information, or a combination of pieces of information that could reasonably allow you to be identified.
We use SAGE HR, an online application provided by The Sage Group plc, to assist in our recruitment process and to process personal information as a data processor on our behalf following our instructions. If you have any questions on how SAGE HR process personal data you can read their privacy policy (https://www.sage.com/en-gb/legal/privacy-and-cookies/).
1 Information we collect
We may collect your personal information from a variety of sources, including information we collect from you directly when you apply for a job, and information we collect about you from other sources.
1.1 Information we collect directly from you
The categories of information that we may collect directly from you include the following:
(a) personal details (e.g. name, age, date of birth);
(b) contact details (e.g. phone number, email address, postal address);
(c) copies of identification card, passport, driving license, criminal record, education records, confirmation of previous employment and proof of address;
(d) family contact personal details (e.g. emergency contact details);
(e) other information about you and your family (e.g. gender, marital status, family status, dietary requirements, hobbies)
(f) educational and career background (e.g. your curriculum vitae);
(g) employment details (e.g. employee number, career planning reports, annual review reports, job start date, job end date);
(h) employment and salary administration (e.g. salary amount, bank details, benefit details);
(i) other relevant data in respect of your job application or employment with us or members of the BDO network (e.g. job location, working conditions, special leave, special needs, holidays, etc.);
(j) data regarding special agreements (e.g. study allowances, guarantees for mortgage loans, health insurance allowances, etc.); and
(k) information about your health, including medical needs or conditions, vaccination records.
1.2 Information we collect from other sources
We may collect information from other sources, that may include personal data, including:
(a) publicly available information about you that you have published on the Internet – this may include sources such as LinkedIn, Facebook and other social media profiles;
(b) references from former employers; and
(c) recruitment agencies or other third parties who recommend you as a candidate.
2 How we use your personal information and the basis on which we use it
We use your personal information in relation to your job application to:
(a) move your application forward;
(b) check that you are the right candidate for the role;
(c) get in touch with your; and
(d) send you notifications for other roles that may be suitable.
We must have a legal basis to process your personal information. Our legitimate interests are the processing of your personal data to move forward your application for a position with BDO in Thailand, including pre-employment checking and preparation of an employment contract, where you are successful.
We rely on your consent, which is freely given by you during the application process, to disclose your personal data for this purpose.
3 Your rights over your personal information
Please let us know by contact us at [email protected] if any of the personal information that we hold about you changes so that we can correct and update the information on our systems.
In certain circumstances you may object to specific processing activities (including where we rely on our legitimate interests as set out above), require us to restrict how we process your personal information and ask us to share your personal information in a usable format with another company. Where you have given your consent to a particular type of processing, you may withdraw that consent at any time.
To exercise any of the above rights, please contact us using the contact details set out below.
4 Information sharing
In general, we do not share your personal information with third parties (other than service providers acting on our behalf) unless we have a lawful basis for doing so.
We rely on third-party service providers to perform a variety of services on our behalf relating to the recruitment process. This may mean that we have to share your personal information with these third parties. When we share your personal information in this way, we put in place appropriate measures to make sure that our service providers keep your personal information secure.
Other situations in which we may disclose your personal information to a third party, are:
(a) where permitted by law, to protect and defend our rights and property; and
(b) when required by law, and/or public authorities.
5 Information Security
We have implemented generally accepted standards of technology and operational security to protect personal information from loss, misuse, alteration or destruction. We require all employees and principals to keep personal information confidential and only authorised personnel have access to this information.
We will keep your personal information for as long as we have a relationship with you. Once our relationship with you has come to an end, we will retain your personal information for a period of time that enables us to: maintain our business records for analysis and/or audit purposes; comply with record retention requirements under the law; defend or bring any legal claims; and deal with any complaints.
We will delete your personal information when it is no longer required for these purposes, which will not exceed 10 years. If there is any information that we are unable, for technical reasons, to delete entirely from our systems, we will put in place appropriate measures to prevent any further processing or use of the data.
6 Information Transfer
Your personal information may be transferred to, stored, and processed in a country other than the one in which it was provided. When we do so, we transfer the information in compliance with applicable data protection laws in Thailand.
7 Children’s privacy
We may process personal information of your family members, including your children. When we do so, it will be in compliance with data protection laws as they apply to children.
8 Contact Us
If you have questions or concerns regarding the way in which your personal information has been used, please contact us at [email protected].
9 Changes to the Privacy Notice
You may request a copy of this privacy notice from us using the contact details set out above. We may modify or update this privacy notice from time to time. You will be able to see when we last updated the privacy notice because we will include a revision date. Changes and additions to this privacy notice are effective from the date on which they are posted.