We, ABACUS digital Company Limited (the “Company”), are committed to protecting your personal data, thus, we provide this Privacy Notice for Candidates – ABACUS digital Company Limited (the “Privacy Notice”) to inform you of our policy regarding the collection, use and disclosure of personal data of individual (“you”) provided as candidate during the Company’s recruitment and hiring process in accordance with the Personal Data Protection Act B.E. 2562 (“PDPA”), relevant laws and regulations.

1. What Personal Data We Collect

The Company may collect the following types of your personal data as follows:

• Personal Information: such as title, full name, gender, date of birth, age, national identification number, and marital status;

• Contact Information: such as address, phone number, and email address;

• Job Application Documents: such as resumes/CVs, including but not limited to educational background, employment history, photos, academic transcripts, employment certificates, salary statements, application forms, and cover letters;

• References Contacts and Interview Records: including names and information of reference persons and notes taken during interviews;

• Employment Assessment Information: such as interview results, test scores, or assessment results (if any);

• Sensitive Personal Data: such as criminal records, health examination results, nationality, and religion. The Company will collect, use, and disclose such data only based on the performance under your explicit consent and other lawful basis; and/or

• Other Information voluntarily provided by you during the recruitment and hiring process.

In case you have given any personal data of any other person, such as reference persons, to us, you shall notify such person of the details relating to the collection, use and disclosure of personal data and rights under this Privacy Notice. In addition, you shall obtain consent from such person (if necessary) or rely on another legal basis to provide personal data to us.

2. Purposes of Personal Data Usage

Your personal data will be used solely for purposes related to the Company’s recruitment and hiring process, including but not limited to the following:

• To assess your qualifications, competencies, and suitability for the applied position;

• To facilitate communication regarding your job application;

• To verify information and conduct reference and background checks, where necessary;

• To support the consideration and decision-making in relation to employment;

• To retain your personal data for future job opportunities (based on your explicit consent); and/or

• To comply with applicable laws, rules, and regulations.

3. Legal Basis for Processing Personal Data

The Company may process your personal data based on one or more of the following legal bases:

• Your consent;

• Our legitimate interests (e.g., the necessity for recruitment and hiring purposes);

• Our legal obligation (e.g., verifying work eligibility); and/or

• In the case of sensitive personal data, processing will be based on your explicit consent or another legal basis permitted by applicable laws.

4. Disclosure of Personal Data

The Company may disclose your personal data to:

• internal departments and authorized personnel involved in the Company’s recruitment and hiring process;

• companies in SCBX Group as shown on www.scbx.com/th/affiliates-financial-business-group.html;

• external service providers involved in the recruitment process, subject to confidentiality obligations; and/or

• governmental agencies or other authorities as required by applicable laws (where necessary).

**The Company does not sell your personal data to any third parties.**

5. Retention Period of Personal Data

We will maintain and keep your personal data for a period not exceeding two (2) years from the completion date of the Company’s recruitment and hiring process, unless you have provided your consent for the Company to retain your personal data for a longer period in order to consider and contact you regarding future job opportunities that may be suitable for you, or a longer retention period as required by applicable laws.

6. Your Legal Rights

You can exercise your legal rights under the PDPA, details as specified below, through the channels prescribed by us:

• Right to Access and Obtain Copy: You have the right to access and obtain a copy of your personal data holding by us, unless we are entitled to reject your request under the laws or court orders, or if such request will adversely affect the rights and freedoms of other individuals;

• Right to Rectification: You have the right to rectify your inaccurate personal data and to update your incomplete personal data;

• Right to Erasure: You have the right to request us to delete, destroy or anonymise your personal data, unless there are certain circumstances where we have the legal grounds to reject your request;

• Right to Restrict: You have the right to request us to restrict the use of your personal data under certain circumstances;

• Right to Object: You have the right to object the collection, use or disclosure of your personal data in case we proceed with legitimate interests basis, unless we have legitimate grounds to reject your request;

• Right to Data Portability: You have the right to receive your personal data in case we can arrange such personal data to be in the format which is readable or commonly used by ways of automatic tools or equipment, and can be used or disclosed by automated means. Also, you have the right to request us to send or transfer your personal data to third party, or to receive your personal data which we sent or transferred to third party, unless it is impossible to do so because of the technical circumstances, or we are entitled to legally reject your request;

• Right to Withdraw Consent: You have the right to withdraw your consent that has been given to us at any time pursuant to the methods and means prescribed by us, unless the nature of consent does not allow such withdrawal. The withdrawal of consent will not affect the lawfulness of the collection, use, or disclosure of your personal data based on your consent before it was withdrawn; and

• Right to Lodge a Complaint: You have the right to make a complaint with the Personal Data Protection Committee or its office in the event that we do not comply with the PDPA.

7. Contacting the Company

If you have any inquiries or require further information regarding this Privacy Notice, please contact the Company at:

• ABACUS digital Company Limited
  No.19 SCB Park Plaza, Tower 3, East Building, 22nd Floor, Ratchadapisek Road, Chatuchak Sub-district, Chatuchak District, Bangkok 10900
• Talent Acquisition Unit, Human Resources Department
  Email: careers@abacusdigital.com
• Data Protection Officer
  Email: DPO@abacusdigital.com

8. Amendments to the Privacy Notice

The Company may revise, amend or update this Privacy Notice from time to time. The most current version of the Privacy Notice will be made available on the Company’s official website at: www.abacusdigital.com