Privacy Notice for Customers
T.A.C. Consumer PCL.
T.A.C. Consumer PCL. and its affiliates (“as listed in the annex and hereinafter collectively referred to as company”) realizes the importance and duties under The Personal Data Protection Act, B.E. including natural persons acting on behalf of the legal entity which owns personal data with our customers (hereinafter referred to as the “you”) and is strongly committed to protecting your personal data security. and to ensure that the customer's personal data will be protected as required by the Personal Data Protection Law and other relevant laws. Therefore, company has prepared this privacy notice. To inform you of details related to the collection, use, disclosure (collectively, “Processing”), including your legal rights as the subject of personal data. The details are as follows.
1. To whom does this Privacy Notice apply?
This Notice covers your personal data. This includes natural persons acting on behalf of the legal entity which owns personal data, for instance, directors, consultants, executives, employees, agents, and any person related to Company's personnel.
“Customer” means the person who is the target for the sale of Company's products or services. and includes Participants in company marketing campaigns or activities Those who are interested in Company's products or services through diversified channels and/or users of Company through online and electronic media including those who have the authority to act on behalf of customers according to the law for instance, user’s guardian of the incompetent the quasi-incompetent guardian, etc.
2. Personal data definitions
2.1 “Personal Data” means information about an individual that enables it to be identified. that person can whether directly or indirectly but does not include information of dead person, for instance, name, surname, nickname, address, telephone number; ID number passport number social security card number Driver's license number Tax Identification Number bank account number Credit card number, email address (email address), vehicle registration, land title deed, IP Address, Cookie ID, Log File, etc.
However, the following information is not personal data, for instance, non-personally identifiable business contact information for instance, company name, company address. Company registration number Work phone number, work email address, email address, group of companies for instance, [email protected], Anonymous Data, or other non-identifiable information. Individuals can be obtained by technical means. (Pseudonymous Data) dead person information, etc.
2.2 “Sensitive data” means personal data about race, ethnicity, political opinions. cult religion or philosophy sexual behavior Criminal records, health information, disability, trade union information Genetic data, biological data or any other information which affects the owner of personal data in a similar manner as specified in the notification of the Personal Data Protection Committee or PDPC. which Company must proceed with special care Company will collect, use and/or disclose sensitive personal data. only with your express consent or if Company is necessary to act as permitted by law
Further in this privacy notice If there is no specific mention, it will call “Personal Data” and “Sensitive Personal Data” relating to the above users shall be collectively referred to as “personal data”. “Personal data”
In the case that Company receives a copy of your identification card or Company removes your information from your ID card by electronic means. for the purpose of proving the identity of the legal binding and/or any transaction with company, the information obtained will include religious information. This is considered as sensitive personal data (Sensitive Data). Company does not have a policy to collect sensitive personal data from you. except in the case where Company has obtained your consent Company will determine the management method according to the guidelines and as permitted by law.
3. Personal data Collected by Company
Company collects your personal data as necessary. for the purpose of using the information that Company will inform you in the next order In this regard, the types of personal data that Company stores are classified as follows:
Category | Description |
Personal Data | Title, name, surname, gender, photograph, date of birth, age, nationality, identification number current address Residential address, e-mail address, telephone number |
Additional data | (a) Contact Data for instance, address, telephone number, e-mail address, LINE account name (LINE ID), Facebook account name (Facebook ID) and accounts on other social media sites, emergency (b) Financial Data for instance, bank account numbers (c) Company contacts information (Communication Data), for instance, recording data or audio when contacting Company. (d) activity participation information for instance, still images or video recordings |
4. Data Sources of Personal Data
Company collects personal data. and your sensitive data through the process as follows:
4.1 To Provide Data for Company directly
for instance, personal data displayed in the subscription including various supporting documents, requests to change personal data or change other information Service requests or other requests for information about our products or services. Product and/or service complaint information used for applying for registration, creating an account (Account) or a profile (Profile) with Company to use Company's services both offline and online. Information that you contact with Company, whether communicated in a book or electronic form. as well as information you provide to Company through surveys. Providing suggestions or comments through various channels, including information that you use the service at the head office or branch office Customer service center or booth to showcase products or services, etc.
4.2 To Collect Data by Company automatically
When you access the Services through Company's system or visit Company's website via electronic devices for instance, mobile phones, computers, laptops, etc., with a technology called “cookies” or other technologies that have the same or similar functionality.
4.3 To Collect Data from external sources or reliable public information
for instance, Department of Provincial Administration, Department of Business Development Commercial Resources Websites Applications Social Media Resources Data Providers, entities or companies or associations or confederations related to your products or services, etc.
4.4 To Collect your contact data with Company
Information about your contact with Company, its employees, employees, agents, partners or partners. Attorney or person acting on his behalf or other persons or other entities related to or assigned by Company via the website, application, social media, telephone, e-mail, meeting, interview, short message (SMS), fax, post, VDO Call Service or by any other means. Company may collect information in text form. as well as picture and sound
4.5 To Collect that you participate in company’s activities
in respect of any marketing activities, contests, sweepstakes, events or competitions organized by or on behalf of Company; and/or partners or alliances participating in activities with Company, or company assigns or permits to do such activities
When you agree and consent to provide any personal data related to third parties to Company. which such outsiders including but not limited to those related to customers who use the service Regardless of business or otherwise, for instance, family members, you represent and warrant the accuracy of such personal data. and you represent and warrant that you have fully informed them of this Privacy Notice.
5. Objective for data collection, using and disclosing with personal data
Company collects, uses or discloses your personal data. The objectives under the data processing base are as follows:
5.1 Contractual Basis for the performance of contracts that you are a party to, such as employment contracts, sales contracts, service contracts or any other contract or to process your request/application prior to entering with the contract, depends on scenario bases
5.2 Legal Obligation to perform duties as required by law, such as labor protection laws. social security law tax law Electronic Transactions Law Civil and Commercial Laws, etc.
5.3 Legitimate interest, Not exceeding the extent you can reasonably expect. which will not violate your fundamental rights or freedoms
5.4 Consent, Company will ask for your consent. In cases where consent is required by law or Company has no reason to use the above processing base to process personal data collected from you.
Objective for collecting, using, and disclosing personal data of customers
Company collects, uses, or discloses your personal data. with the following objectives
Objectives | Description | Lawful Basis |
1. For proceeding of your request prior to entering the contract or for the performance of the contract | to sell products and/or services to you or performing any contracts to which you are a party, managing your account, subscription information, delivery of account and financial operations after sales service and return and take any action to enable you to obtain goods and/or services or as you have requested | • Contractual Basis |
2. For the governance of advertising and public relations | public relations, perform marketing campaigns, analyze product development, contact customers to make recommendations or offer products. including management of advertising media public relations which you are the presenter or appearing as part of Company's advertising media | • Consent • Legitimate interest |
3. For the Operation management and after-sale services | Review and analyze personal data | • Legitimate interest • Consent • Contractual Basis |
to develop online service channels for you to receive services with quality The fastest and most convenient | • Legitimate interest • Contractual Basis
| |
To be able to access or transfer information in your account, member number or various personal codes that Company has provided to you. Through more than one computer and/or other electronic devices and to enable Company to effectively monitor and monitor your access to your account, member number or personal codes To prevent unauthorized use or access by another person or fraudulent use or in a wrong way including to improve Company's service to be more suitable and efficient. | • Contractual Basis • Legitimate interest • Contractual Basis
| |
4. For Information Technology Management | Implement information system to collect data data processing and Connect with customers, agents | • Legal Obligation • Legitimate interest • Consent |
Prepare and provide information technology systems to process customer data from the use of Company's websites, applications and social media such as Facebook, Line, etc. | • Contractual Basis • Legitimate interest • Consent | |
5. To be able to manage develop and take any action to be able to run the business more efficiently Management of goods | in order to be able to run the business more efficiently Management of goods and/or services (including websites and applications), fraud detection and prevention. or other crimes, managing customer and potential customer relationships Maintenance and use of IT systems | • Legal Obligation • Legitimate interest • Consent |
To Measure the effectiveness of a company's marketing policy and to measure the effectiveness of Company's advertising through various channels | • Legitimate interest • Consent
| |
6. Work Management Complaints, disputes and litigation, and risk management | To investigate into fraudulent behavior, fraud or acts that are against the law or public order. | • Legal Obligation • Legitimate interest
|
any action to investigate, investigate, investigate, prosecute, or take any measures to exercise contractual and legal rights; Settlement of disputes or disputes that may arise between Company and you in connection with the provision of Company's services. | • Legal Obligation • Legitimate interest
|
6. Disclosure of your personal data
To carry out the purposes stated in this Privacy Notice. Your personal data May be disclosed or delivered to various departments within Company and individuals, or external entities as follows:
6.1 Internal usage
Your personal data It may only be disclosed or submitted to various departments within Company that are relevant and have the necessary roles and duties for the purpose. by these people or teams of Company will be allowed to access your personal data as necessary and appropriate
6.2 External usage
Your personal data may be disclosed or delivered to external organizations as follows:
6.2.1 Government agencies regulators or other agencies as required by law, such as the Revenue Department, Department of Business Development Ministry of Commerce auditors, governments, courts, the Legal Execution Department or any other agency by virtue of law.
6.2.2 Organizations or third parties Company may disclose your information. To organizations or third parties contacted by us for the purpose of verifying your transactions and to provide services or products according to your needs
7. Request for Consent and Possible Consequences of Consent Withdrawal
7.1 In case of Company collects, uses or discloses personal data based on your Consent You have the right to withdraw your Content provided to Company at any time. This withdrawal of Consent will not affect the collection, use or disclosure of personal data that you have already provided Consent.
7.2 If you are a minor under the Civil and Commercial Code Before giving Consent, please inform Company details of the user of parental power. for Company to be able to request a Consent from the user of the governing authority as well
You may revoke Consent for the collection, use, or disclosure of all or part of your Personal Data. as stated in this Privacy Notice. by notifying Company
If you revoke Consent, you consent to Company collecting, using, or disclosing your personal data for reasons or purposes other than for marketing purposes. Company may not be able to process any procedures or services and/or manage products or merchandise or your relationship and/or account with Company. This may result in you losing the benefit of using Company's services at the same level as if you had given Consent to collect, use or disclose personal data to Company.
8. Transmitting or Transferring Personal Data outside cross-boarder
8.1 Company may transmit or transfer your personal data to other parties both domestically and internationally where necessary to perform the contract to which you are a party. or is acting under a contract between Company and another person or entity for your benefit or for use in the processing of your request before entering the contract or to prevent or suppress a danger to life, body or health to you or others. To comply with the law or as necessary to carry out missions in the public interest
8.2 Company may store your information on a computer, server or cloud provided by another person. and may use third-party programs or applications in the form of providing software packages and in forms of ready-made platform services to process your personal data. Unrelated parties have access to personal data. and Company will require those other parties to have appropriate personal data security protection measures.
8.3 In the event that it is necessary to send or transfer your personal data abroad Company will comply with personal data protection laws and take reasonable measures to ensure that your personal data is protected and that you can exercise your personal data rights as required by law. Including Company will require those who receive your personal data to take appropriate measures to protect your information. and only process such personal data as necessary and take steps to prevent other people from unauthorized use or disclosure of personal data.
9. Data Retention and retention period of personal data
9.1 Company will keep your personal data for as long as necessary. considering the necessity and purpose for which Company shall collect use and process This includes complying with the requirements of applicable law.
9.2 Company will continue to collect, use and disclose your personal data. Even if you terminate your relationship with Company to the extent necessary by the provisions of the law for the legitimate interest or collecting in a form that makes it non-identifiable, either directly or indirectly, such as “anonymous data” or “paint information that is made identifiable again by means of Technical” (Pseudonymous Data)
9.3 Company may keep your personal data for as long as it is necessary to keep it for the purpose of fulfilling the purposes of processing your personal data as set forth in this Privacy Notice. Company will keep your personal data for no more than 10 years from the date you terminate the relationship. or the last contact with Company Company may retain your personal data for longer than required if permitted by law.
9.4 Company will conduct an investigation to delete or destroy personal data. making it impossible to permanently identify the owner of the personal data or otherwise to limit all personal data after the retention period has expired. or unrelated or beyond the necessity for the purpose of collecting that personal data or when Company must comply with your request for Company to delete your personal data
10. How does Company protect your personal data?
Company prioritizes the security of your personal data such as encryption, restriction of access to personal data. To ensure that our personnel and third parties acting on our behalf have complied with appropriate standards for personal data protection. This includes the duty to prevent data leakage and Company to take appropriate security measures in relation to the processing of the data.
Company will keep your personal data very well in accordance with the Technical Measures and administrative measures. (Organizational Measure) to secure the proper processing of personal data. and to prevent personal data breaches Company has established policies, rules and regulations for personal data protection. including measures to prevent recipients of information from Company using or disclose information outside the intended purpose or without power or wrongdoing and Company has updated the policy Such rules and regulations are periodically necessary and appropriate. In addition, Company's executives, employees, contractors, agents, consultants and recipients of information from Company are obliged to maintain the confidentiality of personal data in accordance with the confidentiality measures set by Company.
Company has reviewed Regularly update Company's personal data security procedures and measures. in order to obtain a level of security of personal data appropriate to the risk and to ensure the confidentiality of personal data, integrity, availability and flexibility in the processing of personal data on an ongoing basis. including protection Loss and collection, access, use, modification, alteration or unauthorized disclosure of personal data. Company will apply various measures to maintain the security of Company's personal data in data processing. all types of personal whether the processing of personal data is electronic, or document format
11. Rights of the data subject
11.1 You have the right to do the following:
(1) Right to withdraw the Consent
If you have given Consent to Company to collect, use and/or disclose your personal data (whether the Consent you provided before or after the date on which the Personal Data Protection Law comes into force), you have the right to withdraw the Consent at any time during the period your personal data is with Company. unless there is a limitation on that right by law or there exists a contract that benefits you.
However, your withdrawal of Consent may affect you from using the product. and/or services such as you will not receive benefits New promotions or offers do not provide products or services that are better and more in line with your needs. or do not receive useful information for you, etc. for your benefit Therefore, should study and inquire about the impact before withdrawing the Consent.
(2) Right to access personal data
You have the right to access your personal data. and ask Company to make a copy of such personal data for you including requesting Company to disclose the acquisition of personal data in Company's possession. Company may refuse your request if access and obtaining a copy of the personal data will affect the rights and the freedom of others or Company must comply with the law or a court order prohibiting the disclosure of that personal data
(3) Right to transfer personal data
You have the right to obtain your personal data in the event that Company has provided that personal data in a format that is readable or usable by means of a device or device that works automatically. And can use or disclose personal data by automatic means. as well as having the right to request Company to transmit or transfer personal data in such form to other personal data controllers whenever possible by automated means. and has the right to receive personal data that Company sends or transfers personal data in such form to other personal data controllers directly Unless it can't be operated due to technical reasons.
Your personal data above must be personal data that you have given Consent to Company for collecting, using and/or disclosing. or is personal data that Company needs to collect, use and/or disclose in order for you to use Company's products and/or services according to the wishes of which you are a party to Company. or for use in the processing of your request before using Company's products and/or services. or other personal data as required by law
(4) Right to object to data processing
You have the right to object to the collection, use and/or disclosure of your personal data at any time. If the collection, use and/or disclosure of your personal data is made for the purpose of carrying out necessary operations under Company's legitimate interests. or of another person or juristic person without exceeding the scope that you can reasonably expect or to carry out missions for the public benefit If you object Company will continue to collect, use and/or disclose your personal data only to which Company can reasonably demonstrate by law that it is more important than your fundamental rights. or in order to assert legal rights compliance with the law or fighting legal action on a case-by-case basis
You also have the right to object to the collection, use and/or disclosure of your personal data for marketing-related purposes. or for the purpose of scientific research studies history or statistics as well
(5) Right to request erasure of personal data
You have the right to request deletion or destruction of your personal data. or make your personal data non-identifiable If you believe that your personal data has been unlawfully collected, used and/or disclosed in accordance with applicable law. or deems that Company no longer needs to maintain it for the purposes involved in this Privacy Notice. or when you have exercised the right to withdraw the Consent or exercise the right to object as stated above unless Company has to comply with the law or use any legal claim related to the retention of such information
(6) the right to request the halted/suspended to use of personal data
You have the right to request to temporarily suspend the use of personal data in the event that Company is in the process of reviewing the request for the right to correct your personal data or object to it. or any other cases where Company is no longer necessary and has to delete or destroy your personal data according to the relevant laws, but you request Company to suspend its use instead.
(7) Right to rectification of personal data
You have the right to request that Company correct your personal data to be accurate, current, complete and without causing misunderstandings.
(8) Right to complain
You have the right to lodge a complaint with the relevant legal authority. If you believe that the collection, use and/or disclosure of your personal data is in a manner that violates or fails to comply with applicable laws,
If you have any concerns or questions about Company's guidelines About your personal data, please contact Company by using the contact details pursuant to Clause 16 of this Customer Privacy Notice. has violated the data protection laws You have the right to lodge a complaint with a panel of experts appointed by the Personal Data Protection Committee in accordance with the rules and procedures prescribed by the Personal Data Protection Law.
If the Personal Data Subject submits a request to exercise their rights under the Personal Data Protection Law when Company has received such request It will be done within the period specified by law. In addition, Company reserves the right to refuse or not act upon such request if it is required by law.
11.2 Company has all rights and sole discretion to accept to process your request or to reject your request.
Your exercise of rights under section 11.1 may be limited under applicable law. And there are cases where it is necessary that Company may refuse or fail to act on your request to exercise the above rights, such as to comply with the law or a court order. for public benefit The exercise of rights may infringe upon the rights or liberties of others, etc., if Company refuses the above request. Company will also inform you of the reason for the refusal.
12. Correlative with Third Party Websites
in using the services of Company's website There may be links to other social networks, platforms and websites operated by third parties. Company attempts to link to websites that have standards for personal data protection only. However, Company cannot be held responsible for the content or standards of personal data protection of those other websites. unless otherwise specified Any personal data you provide to third-party websites is collected by that individual and is subject to. Notices/policy regarding the protection of personal data of such third parties (if any) in such cases Company asks you to study and follow the notices/policy regarding personal data protection appearing on that website separately from Company.
13. Changes to Customer Privacy Notice
Company will regularly review Privacy Notice for customer to ensure compliance with applicable practices and laws and regulations. If there is a change to the privacy notice for the customer, Company will notify you of any important changes to this Privacy Notice together with the revised Privacy Notice. Through appropriate channels, Company recommends that you review the changes to the Privacy Notice this edition periodically
14. Contact Point
If you consider that the processing of your personal data is inconsistent with the Personal Data Protection Act B.E. 2562 (2019), you have the right to lodge a complaint to the Data Protection Officer.
Data Protection Officer | Name: Data Protection Officer Email: [email protected] Phone: +66-2-717-2898 Fax :+66-2-717-2899 |
Address | T.A.C Consumer PCL. Head Office 23rd Floor, UM Tower, 9/231-233 Ramkumheng Road, Suanlaung, Bangkok, Thailand. 10250 |
15. Governing Law
You acknowledge and accept this Privacy Notice. under compulsion and be construed in accordance with Thai law and the courts of Thailand have jurisdiction to consider any disputes that may arise.
Announced on 01 June 2022