Privacy Policy For Employees

%body%

1. When does this Privacy Policy apply to you?

This Privacy Policy applies to all Citi’s current employees, both permanent and temporary/contractual employees, and former permanent and temporary/contractual employees (“Employees”).

2. What types of Personal Data does Citi collect from you?

Citi collects the following categories of your Personal Data:

(a) General Personal Data: Full name, title, gender, date of birth, marital status, nationality, address, email address, contact number, work experience, educational background, photograph, languages, bank account details, national identification card number, passport number, social security number, copy of your national identification card, passport , certificate of name change, and any other Personal Data, which you may provide to Citi via your Resume, education certificate, work certificate, marriage certificate, birth certificate of your children, licenses, tax withholding form, or any other documents.

(b) Personal Data Related to Employment Relationship: Employment identification number , agent code, position, working records, working locations, years of service, salary, benefits, welfare, tax, provident fund, performance-related data, data related to work permit and visa in case of non-Thai citizens, username and password for accessing systems of Citi when performing tasks , information relating to your usage of Citi’s devices, systems and assets, voice, video record, and data relating to disciplinary or misconduct.

(c) Sensitive Personal Data: Health-related data which includes medical certificate, medical condition, sick leave records, health checkup result, disability, disciplinary record, and data pertaining to screening check such as criminal record.

(d) For the Employees who are regarded as key person, Citi may, in addition to the above, collect Personal Data from the Employees’ tax documents, credit bureau documents and training records.

(e) Citi also collects the Personal Data of its Employees’ related persons, including parents, children, business referees, spouse, and/or domestic partners via various channels, including marriage certificate, birth certificate, copy of their Thai identification card and/or passport. Citi may also collect Personal Data of your emergency contact person. Before providing their Personal Data to us, you shall ensure that such persons are duly notified about such collection, and that they have consented to the disclosure of their Personal Data to Citi.

3. Why does Citibank collect and process your Personal Data?

Citi collects and processes your Personal Data for different purposes, as set out below:

(a) Where the collection or processing is necessary for Citi to perform a contract with you, or to proceed with your request, prior to entering into a contract:

(i) To determine the terms of employment contract, scope of works, salary, benefits, employment term, and any other purposes related to the establishment and management of employment relationship, including to entering into an employment contract and performing obligations under an employment contract, and any amendments of the contract, appendixes, policies, rules, regulations and any other documents related to the employment relation.

(ii) To generate employment identification number, agent code, and username and password to access Citi’s systems for the purposes of performing tasks under the employment contract.

(iii) To issue employee access card, to manage and grant access rights within the premises and access rights to the systems pursuant to your position as indicated in employment contract. Citi also uses your Personal Data to facilitate and provide adequate supports and devices for you to perform your tasks under the employment contract efficiently.

(iv) To arrange for the payments/deduction to be made to/from your designated bank account or by other means as may be agreed between you and Citi from time to time, including, but not limited to salary, bonuses, other benefits and reimbursement.

(v) To administer and maintain records on your working days, working hours, vacation, absence, and leave.

(vi) To assess your performance, review your salary, compensation, benefits and entitlement, and determine your continued employment relationship with Citi or termination of employment contract. The assessment result may be used by Citi in order to provide you with an appropriate training or skill development courses.

(vii) To arrange for your accommodation and transportation which are necessary for or form part of the employment relationship. If you do not provide certain Personal Data when requested, Citi may not be able to proceed with your request to enter into an employment contract, or may not be able to perform contractual obligations, either in whole or in part, which may include the provision of benefits, welfare or compensation to you.

(viii) To manage, administer, and conduct other activities in the ordinary course of business or occasional situations, within Citi and its affiliates, as well as to contact, communicate, and coordinate with other persons, whether internally or externally on the same purpose.

(b) Where the collection and processing are required by applicable laws:

(i) To register you as an insured person with the Social Security Office (“SSO”), and to submit your Personal Data relating to your employment with us, termination of your employment or your resignation to the SSO.

(ii) To comply with the obligations and duties under the Thai revenue code, tax legislation and applicable laws, including the Foreign Account Tax Compliance and the Common Reporting Standard of the United States of America and/or other applicable laws.

(iii) To arrange and provide you with skill development training and reporting the same to the Department of Skill Development.

(iv) If you are non-Thai citizen, your Personal Data is required in order to apply for a work permit and appropriate visa for you to be able to legally work in Thailand.

(v) Data pertaining to your disability will be collected, processed and disclosed by Citi pursuant to the legal requirements.

(vi) To record telephone conversations and electronic communications between you and Citi’s customers, as required by Citi’s internal policies and procedures, authorities or regulators under applicable laws and regulations.

(vii) To disclose your Personal Data to Citi affiliates, any other governmental agencies or regulatory authorities, or to the courts.

(i) To monitor, detect, prevent, investigate and prosecute fraud and other criminal activity, or violation of employment contract, or other policies, rules and regulations of Citi, and to share your Personal Data with Citi affiliates for the aforesaid purposes. This includes gathering information and evidence relating to your disciplinary or misconduct.

(ii) To monitor your use of our information, data, properties, assets and communication systems and devices to ensure your compliance with our policies, rules, regulations and to provide work related support and planning.

(iii) To examine whether any conflict of interests may arise which would be detrimental or cause disadvantageous to the business operations or reputation of Citi.

(iv) To protect Citi’s rights, property, personnel, safety, business operations, and customers, Citi may record your voice during your communications with Citi’s personnel. In addition, Citi also records your images and motions via our installed CCTV when you are in our premises, or Citi may request for footage from other third parties, which may include your images and/or motions, if this is required to protect our lawful interests.

(v) To manage Citi’s information technology systems, to ensure the adequacy of the security relating to such systems, and to prevent any loss, unauthorized or unlawful access to Citi’s computers, networks, systems or servicers, and to prevent any malicious software distribution or spams.

(vi) To investigate and respond to any complaints, disputes, or inquiries raised by any other person against or relating to you which are relating to your employment relationship with Citi, for example, your services or your performance.

(vii) To analyze information gathered during the exit interviews in order to gain better understanding on the turnover rates, and to determine necessary plans or actions in order to manage and improve employee retention.

(d) Where you consent to the processing of your Personal Data:

(i) In certain circumstances, to collect your Sensitive Personal Data for the purposes prescribed herein. Citi may also collect your health-related data, or request a medical certificate, to support your request for sick leaves or other employment-related request, or to reimburse for the medical expenses (if applicable)

(ii) To publish your photograph on public domain such as Citi’s website, newspaper, or other social media. You may withdraw your consent in this section at any time, subject to the conditions under the applicable laws. Furthermore, if we need your consent to process or provide you with our services or products, or to carry out certain activities, we might not be able to do so. Withdrawal of your consent will not affect any processing of your Personal Data for which you have already provided consent, and which has already taken place prior to such withdrawal.

(e) Where necessary for the establishment, compliance, exercising, or defense of Citi’s legal claims.

(f) Where the collection or processing of your Personal Data is necessary to protect the vital interest, including where you have an accident or serious illness.

4. Where does Citi collect your Personal Data?

(a) Directly from you: Citi collects and processes Personal Data that you provide to us directly during the employment process and via Citi’s systems.

(b) Other sources: Citi may collect your Personal Data and/or Sensitive Personal Data from other sources, including but not limited to online public sources, third party vendors who provide background checking services, hospitals, insurance companies, court judgements, and any other governmental agency or entity.

5. To whom does Citibank disclose your Personal Data?

Citi discloses your Personal Data to others, as follows:

(a) To any of Citi’s affiliates or group companies, both within and outside Thailand, for the purpose of managing your employment relationship with us, to perform our contractual obligations, and for other purposes as identified in this Privacy Policy.

(b) to third party vendors who provide services to Citi, including payroll service provider, insurance companies, hospitals, provident fund providers, and criminal or screening check services.

(c) to third parties in the circumstances where you have given consent to the third parties to contact Citi and obtain information about yours, including when you apply for loan or financial products with other financial institutions.

(d) to external legal counsels in the case of disputes, fraud, legal proceedings and legal execution, as well as to protect Citi’s rights, property, personnel, safety, business operations, and customers.

(e) to both Citi’s internal and external auditors, and accountants.

(f) to any competent regulatory, prosecuting, tax or governmental agencies, courts or other tribunals in any jurisdiction, including relevant government authorities.

(g) to third parties in connection with a change of ownership in Citi, or any of its assets or properties; and

(h) to any other persons or entities to whom Citi is required to make disclosure by applicable laws.

6. Where does Citi transfer your Personal Data?

Citi regularly transfers your Personal Data to its affiliates and group companies for contractual obligation purposes i.e. to management employment relationship, and in certain circumstances, to third parties (e.g. service providers), located outside Thailand, which may have different data protection standards to those prescribed by the data protection authority in Thailand. In addition, most of our servers, which we use to process and store your Personal Data for the purposes prescribed herein this Privacy Policy, are located outside Thailand. Notwithstanding that, Citi ensures that it will protect your Personal Data by implementing adequate personal data protection standards for the transfer of your Personal Data outside Thailand. Citi shall also ensure that any third parties to whom your Personal Data will be disclosed, shall implement adequate personal data protection standards, and where your Personal Data will be transferred within Citi’s affiliates or group companies, Citi shall use data transfer mechanisms, i.e. binding corporate rules.

7. For how long does Citi retain your Personal Data?

(a) Citi will retain your Personal Data for the entire term of your employment with us, and for 10 (Ten) years after your termination or resignation, unless otherwise required or permitted by applicable laws.

(b) Where Citi processes your Personal Data solely with your consent, your Personal Data will be deleted, destroyed, or de-identified, subject to the requirements and conditions prescribed by the applicable laws.

8. What are your rights in relation to your Personal Data?

You are entitled to:

(a) request to have access to and obtain a copy of your Personal Data, and to request the disclosure of source of Personal Data in the event that your Personal Data was collected without your consent;

(b) receive your Personal Data in a commonly used and machine-readable format, and to have your Personal Data in said format transmitted to another Data Controller;

(d) object to the collection, use and/or disclosure of your Personal Data, especially where such collection, use, or disclosure is for the direct marketing purposes;

(e) request that the processing of your Personal Data be suspended;

(f) request that your Personal Data be corrected, updated or completed;

(g) withdraw your consent at any time, provided that there is no other legal ground for Citi to continue with the processing of your Personal Data; and

(h) lodge complaints to the competent authority. The exercise of your rights is subject to the limitations prescribed by law.

9. How can You Contact Citi?

If you would like to exercise any of your Data Subject Rights, you may contact us at:

Citibank N.A., Bangkok Branch
Interchange 21 Building, 399 Sukhumvit Road,
Klongtoey Nua Sub-district, Wattana District,
Bangkok, Thailand 10110
Email Address: dpo.officethailand@citi.com

Remarks: The above email address is reserved for the contact related to the exercise of your Data Subject Rights only.

10. Updating your Personal Data

As an Employee, keeping your Personal Data accurate, complete and up-to-date is very important for both of Citi and your own interests. If your Personal Data is inaccurate, incomplete, or there is any change to your Personal Data, you should promptly update such data in relevant Citi’s systems, or contact our Human Resources Department.

11. Changes to this Privacy Policy Citi may amend, change, or update this Privacy Policy from time to time, whereby Citi will notify you about such changes via Citi website. In the event that the amendment, change, or update will affect the purposes for which your Personal Data has originally been collected, Citi will notify you about such changes and obtain your consent (if applicable), prior to such changes becoming effective.

This Privacy Policy shall take effect from 1 June 2022 onwards.

PRIVACY POLICY FOR EMPLOYEES