Privacy Policy

1. Principles and objectives

Stellar Talent Alliance Recruitment Limited ("Stellar" or "we"), a provider of talent solution services ("Service") is always committed to conduct its business under good corporate governances, including recognizing the importance of data security and privacy where we intend to process your personal data with transparency. We are committed to protecting the privacy of our candidates, clients and users of our website and services.

The purpose of this privacy policy ("Privacy Policy") is to maintain your trust and ensure that Stellar will properly manage and process your personal data including maintain the security measure as required by the laws and meet the international standard. Among others, we aim to fulfill the obligations under Personal Data Protection Act, B.E. 2562 (2019) of Thailand ("PDPA"), and other relevant laws and regulations that may be applicable.

This Privacy Policy applies when Stellar acts as the data controller of the personal data only. For any activities where Stellar is the data processor for other data controller, you may check the details of such processing activities from the privacy policy or notice of processing of such company, organization, or service provider who is the data controller of such activity directly.

2. Collection of Personal Data

Stellar may, directly or indirectly, collect your personal data from the following sources:

• Information provided to us directly by any transaction you may have with us, via the use of our website, meeting with our personnel, participation in our public relations activities, or communication with us via various channels;
• Personal data we received from firms or organizations that are our clients or suppliers, which you (whether as a director, representative, or contact person) are working with;
• Personal data we received from our affiliates and/or our shareholders;
• Social media and/or other public relation media that you use to communicate with us;
• Personal data from third-party, such as the referees, former employers, educational institutions; and
• Any reliable public sources.

3. Type of Personal Data Collected

Depending on purposes of use and requirement of the processing of your personal data, Stellar may collect various types of your personal data including:

(i) If you are Candidates

Types of Personal Data	Details and Examples
Identification Information	name-surname, date of birth, nationality, national identification card number, telephone number, contact address, postal address, email address, chat application ID, copy of national identification card, passport, or driving license, your photo, voice recording, and video
Educational and Work Experiences	your education information, work experiences, former employers, job position, skill set, and other information from your CV
Social Media Information	name and contact details and professional biographical details obtained from publicly available sources such as LinkedIn, and other social media websites
Financial Information	your bank sort code and account number, tax-related information and credit checks
Technical Data	internet protocol (IP) address, your login data that is automatically collected via our website including log-file, how you use of our website, browser type and version, and other technology on the devices you use to access our website or other online content of us
Other Information	any personal data that you provide when communicating with us through various channels

(ii) If you are Prospective Candidates

Types of Personal Data	Details and Examples
Social Media Information	name and contact details and professional biographical details obtained from publicly available sources such as LinkedIn, and other social media websites

(iii) If you are Clients and Potential Clients

Types of Personal Data	Details and Examples
Contact Information	name, job title and contact details such as e-mail and telephone number
Communication Information	any personal data on what communications we have had with you via various channels, your requests, feedback or comments about the candidates and services

 (iv) If you are Suppliers and Visitors

Types of Personal Data	Details and Examples
Contact Information	name, job title and contact details such as e-mail and telephone number, as a business contact for your organization

 Sensitive Personal Data

With regard to the processing of sensitive data, Steller will obtain consent from the data subject prior to or at the time of data processing, unless the processing of such sensitive data falls under the exceptions prescribed by any applicable laws.

In general, we will not collect your sensitive data in any cases as it is unnecessary for our processing activities. Therefore, please redact your sensitive data such as race, religion, or blood type in a document, a copy of identification card, a copy of passport, or a copy of other cards issued by government agencies, that you may have to provide to us. In the case that you do not redact such data, we reserve the right to redact such data received by ourselves.
 
4. Purpose of Use and Disclosure

Stellar will process your personal data to: (i) perform contractual obligations as a party to the contract, (ii) comply with legal obligations, or (iii) for the legitimate interest of our businesses. Stellar will use and disclose Personal Data for the abovementioned purposes and scope, including:

If you are:	Purposes
Candidates	to provide you with our talent matching services; to communicate and exchange information with you; to consider and provide tailor-made service to your CV to apply for matching; to personalize your experience by creating a candidate profile; to provide you with interviewing and salary advice; and to provide newsletters and direct marketing for the purposes of informing you about job opportunities, industry updates, events
Clients	to provide our Service to you; to communicate and exchange information with you; to get feedback from you on our services through client satisfaction surveys, in order to improve our services and to develop new services; to maintain our business relationship with you; to answer your enquiries when you contact us; to fulfil contractual obligations to you; to establish, exercise or defend legal claims; and for marketing purposes
Prospective Candidates and Clients	to consider if you may be interested in our Service and how we can assist you; and to contact you and find out if you are interested in our Service.
Suppliers and Visitors	to communicate with you; to maintain our business relationship with you; to answer your enquiries when you contact us; to fulfil contractual obligations to you; to establish, exercise or defend legal claims; and for marketing purposes

5. Disclosure of Personal Data

We will not disclose your personal data without any lawful basis. In the case we are required to transfer your personal data to other third parties, we would merely disclose information that is necessary for the purpose of such disclosure. Further, we will proceed according to an appropriate procedure in order to ensure that other third parties will protect and prevent your personal data from any lost, unauthorized access, usage, modification or disclosure. Your data may be disclosed to other third parties including:

• our group company or affiliate relating to us and/or our shareholders;
• our clients, if you are a candidate, we share your personal data with clients who have vacancies for jobs which you are interested in;
• service provider who performs services and functions on our behalf, such as, cloud service provider, data analytics provider and etc.;
• governmental and regulatory bodies;
• auditors, legal advisors, and other professional advisors; and
• other data controller to whom you have previously disclosed or transferred data.

 6. Cross-Border Transfer

We will disclose your personal data to the recipient outside of Thailand only where it is permitted by data protection law or other applicable laws. In this regard, we may follow the rule for the transfer of data to outside Thailand by entering the standard agreement or use other available tools under the applicable laws and may use the data transfer agreement or other permitted tools for the transfer of personal data to other country.
 
7. Retention Period

We will retain your personal data only to the extent required by law or as necessary for the purposes for which it was collected. Upon the completion of such retention period, Stellar will follow the deletion and destruction procedure to ensure that all your personal data is safely deleted from our database or is retained in the form of anonymous data.

 8. Data Security Measure

We recognize the importance of maintaining the security of your personal information. We, therefore, take reasonable measures to prevent the unlawful loss access, destruction, use, alteration or disclosure of personal data. Electronic security certification based on SSL (Security Socket Layer) standards approved for websites by CA (Certificate Authority) is encrypted to protect information such as personal information, passwords, credit card numbers.

We will delete and destroy your data immediately when it is no longer necessary for the purpose of data processing, or when the retention period expires. In this regard, we may delete or destroy your personal data using appropriate and safe method without prior notice.

Although we make its best efforts to protect personal data with our technical mechanism along with the management by our personnel to control access and keep personal data against unauthorized access, we cannot always guarantee the security and confidentiality of personal data from every incident that may arise, such as virus threat and unauthorized access. A data subject should regularly keep up with technology news, install personal firewall software to prevent his computer from threat or data theft. Also, monitoring own account on a regular basis (such as monitoring balance, transaction date) and keeping personal data and financial status confidential are strongly recommended.

 9. Rights of Data Subject

In accordance with the PDPA, you, as a data subject has the following rights (which may be amended pursuant to any regulations of the PDPA) which are exercisable in compliance with applicable laws:

• to access personal data;
• to rectify personal data;
• to erasure or destroying of personal data;
• to restrict the use of personal data;
• to object the collection, use and disclosure of personal data;
• to data portability; and
• to withdraw the consent.

In case that we cannot comply with your request to exercise the right of data subject, or that we fail to comply with the PDPA, you may make a complaint to the regulator, including the Personal Data Protection Committee, Ministry of Digital Economy and Society.

In case where you have given the consent for the processing of personal data to Stellar (where the consent is not required by other applicable laws), you shall have the right to withdraw the consent at any time. Should a withdrawal of any consent affect any transactions or provision of services, you will be informed at the time of withdrawal request.

In responding to your request under this clause, we may be able to consider only for your personal data that we processed as a data controller. For the exercising of your right for the personal data that we processed as a data processor, we will inform such data controller to consider and proceed according to your request as your data controller.

 10. External Websites and Hyperlinks

Our website may contain links to external websites which may collect information about your use of the service and personal information. We are not responsible for your security or privacy collected by external websites. You must review the privacy policies of those external websites, and comply with the privacy policies displayed on the external websites instead.

11. Amendments

This Privacy Policy may be revised or changed as appropriate to comply with the Personal Data Protection Act or other applicable laws. We, therefore, recommend periodically reviewing changes to this Privacy Policy.
 
12. Contact Details

If you have questions, suggestions, or would like more details about our Privacy Policy, please contact

Personal Data Controller
Email: recruit@stellartalent.co.th 
Phone number: 026861262
Contact via the form at https://www.stellartalent.co.th/contact 
 
13. Account Deletion

In case the user wants to delete the user account, you can notify us to request deletion of your account at any time, by sending an email to recruit@stellartalent.co.th for account deletion. After deleting the user account, your personal data on our server will be permanently deleted and cannot be recovered.