Privacy Notice for CCTV on Passenger Buses
Privacy Notice – CCTV
Chaipattana Transportation Chiang Mai Co., Ltd.
Chaipattana Transportation Chiang Mai Co., Ltd. (the “Company”) recognizes the importance of protecting personal data under the Personal Data Protection Act B.E. 2562 (2019). This Privacy Notice explains the collection, use, and disclosure of personal data through closed-circuit television (CCTV) installed on the Company’s passenger buses.
This notice applies to natural persons using the Company’s passenger bus services, collectively referred to as the “data subject,” “customer,” or “you.”
1. Purposes for collecting, using, and disclosing personal data
The Company processes your personal data only on lawful bases permitted under personal data protection law, including legitimate interests, legal obligations, legal claims, vital interests, medical-management purposes, and social or labor protection, for the following purposes:
- To protect the life, body, health, or personal property of individuals.
- To maintain the security of passenger buses, personnel, employees, and the Company’s property and information against damage and other crimes.
- To assist in resolving civil, criminal, and other legal disputes.
- To comply with legal duties, including investigations by government agencies and cooperation with courts, regulators, and law-enforcement authorities.
The Company installs CCTV at important points inside its passenger buses, but not in certain private areas such as restrooms. Warning signs will be displayed where CCTV is in use.
Where personal data is required to enter into or perform a contract, or to comply with law, failure to provide it may prevent the Company from carrying out your request.
2. Personal data collected by the Company
The Company collects personal data directly from you through CCTV, including:
- Moving images, still images, and audio relating to natural persons.
- Moving images, still images, and audio relating to the property or vehicles of natural persons.
3. Disclosure of your personal data
Government agencies
Such as the Royal Thai Police, Department of Labour Protection and Welfare, courts, or other legally authorized agencies.
External service providers
Such as software and IT system providers, security providers, organizational-management assessors, external auditors, and professional advisers including legal advisers.
Other third parties
Such as affiliated companies, customers, business partners, and injured parties.
4. International transfer of personal data
If personal data must be sent or transferred overseas, the Company will comply with personal data protection law and apply appropriate safeguards against unauthorized or unlawful use or disclosure.
5. Retention and retention period
The Company retains your personal data for as long as necessary to fulfill the purposes described in this notice. It may be retained longer where required or permitted by law, for example for no more than 10 years in accordance with applicable limitation periods.
6. How the Company protects your personal data
The Company applies appropriate technical and organizational measures to safeguard personal data and prevent personal data breaches in accordance with personal data protection law.
7. Rights of data subjects
(1) Right to withdraw consent
You may withdraw consent at any time while the Company holds your personal data. Withdrawal may affect consideration, benefits, or useful information you receive; you should review and ask about the effects before withdrawing consent.
(2) Right of access, copy, and information about acquisition
You may access and request a copy of your personal data and ask the Company to disclose how data in its possession was obtained.
(3) Right to data portability
Where personal data is held in a structured, machine-readable format and can be processed automatically, you may request it, request an automated transfer to another controller, or request data transferred directly to another controller where technically feasible.
(4) Right to object
You may object to processing based on legitimate interests or public tasks, direct marketing, or scientific, historical, or statistical research purposes.
(5) Right to erasure
You may request deletion or destruction of your personal data, or that it be anonymized.
(6) Right to restriction of processing
You may request temporary restriction while the Company verifies a correction or objection request, or where the Company no longer needs the data and would otherwise delete it but you request restriction instead.
(7) Right to rectification
You may request that personal data be accurate, current, complete, and not misleading.
(8) Right to complain
You may lodge a complaint with the expert committee under personal data protection law if you believe the collection, use, or disclosure of your personal data violates or fails to comply with the law.
The Company will handle rights requests within the period prescribed by law. It may refuse or be unable to comply where permitted, including compliance with law or a court order, public interest, or protection of another person’s rights or freedoms, and will notify you of the reason.
11. Changes to this Privacy Notice
If this Privacy Notice changes, the Company will notify you through an appropriate channel.
12. Contact channels
Chaipattana Transportation Chiang Mai Co., Ltd.
Address: 107/2 Moo 4, Chiang Mai–San Sai Road, Nong Pa Khrang Subdistrict, Mueang Chiang Mai District, Chiang Mai 50000, Thailand
Telephone: 053-241-933
Email: info@greenbusthailand.com
Data Protection Officer: dpo@greencapital.co.th
13. Governing law
This Privacy Notice is governed by Thai law, and Thai courts have jurisdiction over any dispute that may arise.
Effective 1 August 2026
