Stars Microelectronics (Thailand) Public Company Limited is a Thai company providing EMS, OSAT, and Photonics services across seven key industries, including automotive, green sustaiability, medical devices, semiconductors, and telecommunications. The company offers integrated One-Stop Service solutions, supporting customers from wafer-level processes through to final system assembly. Our operations focus on manufacturing efficiency, cost effectiveness, and the ability to support business scalability. We operate in accordance with international standards, supported by quality control systems and certified manufacturing facilities, to deliver consistent and reliable product quality. With operations located in a Free Zone and supported by a global partner network, the company is positioned to provide efficient and dependable services that help support our customers’ competitiveness in the global market.
To be a sustainably profitable and growing company by providing five-star customer
satisfaction and quality goods through a skilled workforce and world class
manufacturing facility.
To provide our customers with superior quality electronics, semiconductor devices,
and other technological products through total team commitment, skillful talents,
advanced manufacturing processes with world class facility.
We are committed to achieving total customer satisfaction through;
By choosing a certified partner, you are assured of reliability, quality, and a commitment to best practices
.png)
.png)
.png)
Stars Microelectronics (Thailand) Public Company Limited, hereinafter referred to as the "Company," places great importance on the privacy of employees, service users, and all related individuals. To ensure that the Company has fully implemented measures for the protection of personal data in accordance with the Personal Data Protection Act B.E. 2562 (2019), the Company has established the following policies and guidelines for the management of personal data.
This policy applies to the personal data of individuals who have a relationship with the Company, both currently and in the future, and whose personal data is processed by the Company, its officers, contracted employees, business units, or other entities operated by the Company. It also extends to contractors or external parties that process personal data on behalf of or in the name of the Company ("Personal Data Processors") under various products and services, such as websites, systems, applications, documents, or other services managed by the Company.
Individuals who have a relationship with the Company, as mentioned in the first paragraph, include:
In addition to this policy, the Company may issue a Privacy Notice ("Notice") for specific products or services to inform data subjects who use the Company's services about the personal data being processed, the legitimate purposes and legal basis for processing, the retention period of personal data, and the rights of data subjects regarding their personal data.
In the event of a material conflict between the contents of the Privacy Notice and this policy, the provisions in the Privacy Notice for that service shall prevail.
Personal data or personal information refers to any information related to an individual that can be used to identify that person. It does not include data that has been anonymized (anonymous data).
The Company may collect, use, store, and transfer various types of personal data, which have been categorized as follows:
|
Category |
Details and Examples |
|
Identity Data |
Includes, but is not limited to, first name, last name, username or similar identifiers, title, date of birth, and other personal details. |
|
Contact Data |
Includes billing address, residential address, email address, and phone number. |
|
Financial Data |
Includes details of bank accounts and payment information. |
|
Transaction Data |
Includes details of payments made to or received from you, as well as financial information and identity verification documents (e.g., bank account numbers). |
|
Technical Data |
Generally referred to as online identifiers, including Internet Protocol (IP) address, unique mobile device identifiers (e.g., MAC Address, Identifier for Advertising (IDFA), and/or International Mobile Equipment Identity (IMEI)), device type, login details, browser type and version, time zone settings, geographic location, browser plugin types and versions, operating system and platform, as well as other technologies required to access this website. |
|
Educational Data |
Includes login details, entrance exams, academic records, disciplinary records, other educational records, references, scripts, and exam scores. |
|
Usage Data |
Includes information about how you use the Company’s website and services, educational and employment-related data, images, audio recordings, video recordings, or CCTV footage. |
|
Marketing and Communication Data |
Includes your preferences regarding receiving marketing information from third parties and the Company, information about the Company's products, and your communication preferences. |
|
Sensitive Personal Data |
Includes your sensitive personal information, such as race, religious beliefs, disability status, political opinions, criminal history, biometric data (e.g., facial recognition data), and health-related information. |
The Company primarily collects personal data directly from the data subjects. However, in some cases, the Company may collect data from third parties (e.g., directors, references, or previous employers) or publicly accessible sources. The Company may also collect your data in the following circumstances:
The Company determines the legal basis for collecting your personal data based on appropriateness and the context of the service provided. The legal bases used by the Company for collecting personal data include:
|
Legal Basis for Data Collection |
Details |
|
For the Performance of a Task for Public Interest or the Exercise of Official Authority Granted to the Company |
The Company is authorized to exercise official authority and carry out tasks for the public interest in accordance with its legal mandates, such as: - The Royal Decree Establishing the Digital Government Development Agency (Public Organization), B.E. 2561 (2018) - The Digital Government Administration and Service Act, B.E. 2562 (2019) - Relevant regulations, orders, and Cabinet resolutions. |
|
For Compliance with Legal Obligations |
The Company is also required to comply with laws governing its operations, such as: - The collection of computer traffic data under the computer-Related Crime Act, B.E. 2560 (2017) - The Official Information Act, B.E. 2540 (1997) - The Public Organization Act, B.E. 2542 (1999) - Tax laws - Compliance with court orders. |
|
Legal Necessity for Legitimate Interests |
For the legitimate interests of the Company and other individuals, such interests are no less important than the fundamental rights to personal data of the data subject. For example, ensuring the security of the Company’s premises or processing personal data for the Company’s internal operations. |
|
Necessity for Preventing or Mitigating Harm to Life, Body, or Health |
To prevent or mitigate harm to an individual’s life, body, or health, such as providing an application for epidemic monitoring in accordance with government policies. |
|
For Contractual Compliance |
To enable the Company to fulfill its contractual obligations or undertake necessary actions related to entering a contract in which you are a party. Examples include employment contracts, service agreements, memorandums of understanding, or other forms of contracts. |
|
For Historical, Research, or Statistical Documentation |
To enable the Company to prepare or support the preparation of historical records, research, or statistical data as required. For example, compiling a directory of directors or committee members, gathering statistics on the use of digital government services, or monitoring the implementation of digital government policies. |
|
Your Consent |
For the collection, use, or disclosure of personal data in cases where the Company is required to obtain your consent, having first informed you of the purpose of such collection, use, or disclosure. Examples include the collection of sensitive personal data for purposes not covered under the exemptions of Sections 24 or 26 of the Personal Data Protection Act B.E. 2562 (2019), or presenting and promoting products and services of business partners or contractual affiliates to you. |
In cases where the Company is required to collect your personal data for contractual compliance, legal obligations, or the necessity of entering into a contract, if you refuse to provide such personal data or object to the processing for the intended purpose of the activity, it may result in the Company being unable to fully or partially carry out the requested actions or services.
The Company collects and uses cookies, as well as other similar technologies, on websites under the Company's management, such as www.starsmicro.com, or on your devices depending on the services you use. This is to ensure the security of the Company's services and to provide you, as a user, with convenience and a better experience when using the Company's services. This information will also be used to improve the Company's website to better suit your needs. You can configure or delete cookies yourself through your web browser settings.
The Company will obtain your consent in writing or through the website and will use the personal data received from you for the purposes, with necessity and appropriateness as required by law. Purposes for which the Company will use your personal data:
|
Purpose/Activity |
Type of Personal Data |
Legal Basis for Collection, Use, or Disclosure |
|
Inquiry, Selection, and Recruitment |
· Identity Information · Contact Information |
· Performance of a contract |
|
|
· Technical Information · Academic Information · Usage Information |
· Consent from the data subject |
|
Preparation and Notification of Training Programs |
· Identity Information · Contact Information · Technical Information · Academic Information · Usage Information |
· Performance of a contract · Consent from the data subject |
|
Protection of employee welfare and provision of holistic health care benefits, services, and support. |
· Identity Information · Contact Information · Academic Information · Sensitive Information |
· Performance of a contract · Consent from the data subject |
|
Compliance with legal and regulatory requirements. |
· Identity Information · Contact Information · Technical Information · Academic Information · Usage Information · Financial Information · Transaction Information |
· Legal obligation |
|
Management of operations, including employee record-keeping, invoice and fee administration, accounting, asset management, and security agreement management (including the use of CCTV and monitoring of the company’s IT and communication systems, in accordance with IT and communication facility usage policies). |
· Identity Information · Contact Information · Technical Information · Academic Information · Usage Information · Financial Information · Transaction Information |
· Performance of a contract · Consent from the data subject · Necessary for the company’s legitimate interest in maintaining security · Vital interest |
|
Employee management, including recruitment/hiring of contractors, payroll and pension administration, sick leave, performance evaluation, handling of complaints, competency assessments, disciplinary procedures, and maintaining appropriate HR records for current and former employees, including reference documentation. |
· Identity Information · Contact Information · Technical Information · Academic Information · Usage Information · Sensitive Information · Financial Information · Transaction Information |
· Performance of a contract · Consent from the data subject
|
|
Maintaining employee relations. |
· Identity Information · Contact Information |
· Necessary for the company’s legitimate interest in maintaining various relationships |
|
Preserving historical and memorable records related to employee history. |
· Identity Information · Contact Information · Academic Information |
· Necessary for the company’s legitimate interest in retaining company records |
|
Managing the relationship between the company and employees, including: |
· Identity Information · Contact Information · Marketing and Communication Information |
· Performance of a contract · Legal obligation · Necessary for the company’s legitimate interest in updating company records and tracking how customers use the company’s services. |
|
Managing and protecting the company and its website, including troubleshooting, data analysis, testing, system maintenance, support, reporting, and data storage. |
· Identity Information · Contact Information · Technical Information · Transaction Information · Usage Information · Academic Information |
· Performance of a contract · Necessary for the company’s legitimate interest in conducting its business, providing IT administration and network security services, preventing fraud, and in the context of business improvements or corporate restructuring. · Legal obligation · Necessary for the company’s legitimate interest in detecting or preventing illegal activities. |
|
Use data analysis to improve the company's website, products/services, marketing, customer relationships, and overall experience. |
· Technical Information · Usage Information · Marketing and Communication Information |
· Necessary for the company’s legitimate interest in identifying customer segments for the company’s products and services, keeping the company’s website up to date and aligned, developing the company’s business, and informing about the company’s marketing strategies. |
|
Process your job application submitted for employment with the company. |
· Identity Information · Contact Information · Sensitive Information |
· Necessary for the company’s legitimate interest in recruiting employees for vacant positions and sourcing candidates. · Performance of a contract |
Under the purposes specified in Section 9 above, the Company may disclose your personal data to the following entities. The types of recipients listed below serve as a general framework for the Company’s disclosure of personal data. Only those relevant to the products or services you use or engage with will be applicable.
The Company may transfer personal data abroad, ensuring that the destination country or recipient organization has adequate data protection standards and/or privacy policies in place.
The Company will retain your personal data only for as long as necessary to fulfill the purposes stated in this policy, unless there is a legal requirement to retain it for other reasons, such as compliance with laws or resolving disputes. In such cases, the Company may be required to retain the data beyond the stated period.
The Company has established appropriate security measures to prevent the loss, unauthorized access, use, alteration, modification, or disclosure of personal data, in compliance with its information security policies and applicable laws.
If the Company engages external parties to collect, use, or disclose personal data, it will require them to maintain confidentiality and security, ensuring that the data is not used, collected, or disclosed beyond the agreed scope or in violation of the law.
The Company has appointed a Data Protection Officer (DPO) to oversee, monitor, and provide guidance on the collection, use, or disclosure of personal data. The DPO also coordinates and cooperates with the Personal Data Protection Committee to ensure compliance with the Personal Data Protection Act B.E. 2562 (2019).
The Personal Data Protection Act B.E. 2562 (2019) establishes various rights for data subjects. These rights will take effect once the relevant provisions of the law become enforceable. The details of these rights are as follows:
The Company may review, amend, or modify this policy as deemed appropriate and will notify you via the website www.starsmicro.com, with the effective date of each revised version indicated. However, the Company recommends that you regularly check for updates to the policy via the application or specific channels related to Company activities, particularly before disclosing your personal data to the Company.
By continuing to use the Company’s products or services after the enforcement of a new policy, you acknowledge and accept the terms of the updated policy. If you disagree with the details of the revised policy, please discontinue using the services and contact the Company for further clarification.
If you have any questions, suggestions, or concerns regarding the Company’s collection, use, and disclosure of personal data or this policy, or if you wish to exercise your rights under data protection laws, you may contact:
Name: Stars Microelectronics (Thailand) Public Company Limited
Contact Address: 605-606 Moo 2, Bang Pa-In Industrial Estate, Klong Jik Subdistrict,
Bang Pa-In District, Phra Nakhon Si Ayutthaya 13160, Thailand
Contact Address: 605-606 Moo 2, Bang Pa-In Industrial Estate, Klong Jik Subdistrict,
Bang Pa-In District, Phra Nakhon Si Ayutthaya 13160, Thailand
In addition to strict compliance with applicable laws, all directors and employees are required to perform their duties in accordance with ethical principles. The Company considers strong business ethics to be one of its most valuable assets.
The Company encourages directors and employees to avoid situations where personal interests may conflict with the interests of the Company, including dealings with government agencies, suppliers, business partners, or competitors.
Directors and employees must dedicate their time and efforts to Company activities and must not utilize working hours for unrelated personal activities.
Employees must comply with Company policies and applicable laws relating to secure and responsible use of Company computer networks.
The Company is committed to operating its business in compliance with environmental laws and regulations, recognizing the importance of environmental protection and sustainability.
The Company assigns the Risk Management Committee to be responsible for continuously assessing corruption risks in order to review and improve anti-corruption measures, and to report the results to the Board of Directors for acknowledgment.
To ensure that the operations of Stars Microelectronics (Thailand) Public Company Limited are in accordance with good corporate governance principles, the Responsible Business Alliance (RBA) Code of Conduct, and international anti-corruption standards, the Company has established an Anti-Corruption and Anti-Bribery Policy to be announced and disseminated as guidance for all executives and employees, as follows:
The Company has established the following monitoring measures:
The Company has no incidents of fraud, ethical violations, or related penalties, and there have been no resignations of non-executive directors related to corporate governance concerns. No negative operational practices affecting the Company’s reputation have been identified due to oversight failure by the Board of Directors.
Additionally, the Company has received no complaints regarding human rights violations from employees, business partners, or surrounding communities. The Company continues to promote the adherence to universal human rights principles among all employees and management in a sustainable and ongoing manner.