Thoresen Thai Agencies : Notification on Personal Data Protection for the 2024 Annual General Meeting of Shareholders

Notification on the Personal Data Protection

For the 2024 Annual General Meeting of Shareholders ("2024 e-AGM")

In order for the 2024 Annual General Meeting of Shareholders of Thoresen Thai Agencies Public Company Limited (the "Company" or "TTA") to comply with the Personal Data Protection Act of 2019 ("PDPA 2019"), the Company declares the following for your information.

1. Collected personal data

The Company will be collecting your personal data, which includes the personal data of proxy givers and/or proxies, namely the first name, last name, address, phone numbers, photo, ID number, securities holder registration number, and data concerning electronics system users, including the Email and IP address for electronic (online) Meetings. Note that the Company may collect your data from other sources, namely Thailand Securities Depository Co., Ltd., as the registrar of the Company, only as necessary with a means authorized by law.

The Company does not wish to collect sensitive data, such as religion, blood type. Nevertheless, it may receive such data appearing in your ID or other documents. Therefore, the Company requests you to cover such data before sending it to the Company; if this cannot be done for whatever reason, the Company will collect such data as part of the data set needed by the Company strictly to process them for the objective concerning you. It will not compile these sensitive data.

The Company will be recording and broadcasting this Meeting live for its lawful benefit and in the interests of shareholders and/or for publicizing the AGM through electronics means. Such video and images may show 2024 e-AGM attendees.

2. Objective of collection, usage, and disclosure of personal data

The Company will collect, use, and disclose your personal data for the objective of the 2024 e-AGM or for its lawful benefit or for compliance with the law.

3. Storage period and security period of personal data

The Company will store your personal data for as long as necessary for the objective stated in this notification. Unless it is necessary to keep personal data for any other reason, for example, to comply with the law or to investigate in the event of a dispute, the Company may be required to retain such data for a period longer than specified. Suitable and strict measures for maintaining data security are in place. If the storage period cannot be spelled out, the Company will store the data for an expected period by the standard of data collection, such as litigation limitation of up to 10 years.

4. Your right as personal data owner

As the data owner, you have personal data rights prescribed by PDPA 2019, namely the rights to withdraw your consent, request access to the data, request data changes, request data deletion, request suspension of data use, request data transmission or transfer, file a petition, and object to data collection, usage, or disclosure.

5. Disclosure of personal data to other parties or agencies

The Company may find it necessary to disclose personal data to a person, juristic person, or government agency that works with the Company under the objective stated in this notification only as necessary, including technological system service providers, regulators, government agencies, or as directed by the authority.

The Company may also find it necessary to publicize your personal data when called for by the law or the good corporate governance principle, including the AGM minutes.

If you have any questions or require further information concerning the protection, collection, usage, and disclosure of your personal data, the exercising of your rights, or having any complaints, please contact:

Thoresen Thai Agencies Public Company Limited

Personal Data Protection Officer

26/26-27 Orakarn Building, 8th Floor, Soi Chidlom, Ploenchit Road, Lumpinee, Patumwan, Bangkok, 10330 Tel : [phone] to 74 Email : [e-mail]