STATEMENT OF PFG - PATAYA FOOD GROUP DATA
1. Which of your personal data will be collected, used or disclosed?
Personal data to be collected, used and disclosed (including sensitive personal data as defined in Personal Data Protection Act, B.E. 2562 (2019) and its future amendments and other subordinate laws issued under Personal Data Protection Act, B.E. 2562 (2019), hereinafter collectively referred to as “Law”) include the following data:
1.1 Personal data means the data that can identify yourself, whether directly or indirectly, which include:
Type or data
Personal data we may collect, use and/or disclose
• Title, first name, middle name, family name, pseudonym
|• Sex, date of birth, age|
|• Nationality, country of residence|
• Identification data issued by government authorities or
any other data which is necessary for us to check or
know about clients, authentication, verification to
|• Other personal data you may give us through website|
• Address indicated in important documents, current address,
position, and workplace
|• Phone number, mobile number, fax number, email address|
• Name or account for electronic communication or
other social media (e.g., Line ID)
|• Evidence of residence in Thailand (in case of foreigners|
|• Bank account details and payment method|
|Educational and work data||• Address indicated in the copy of student identification|
|• Occupation and field of work|
|• Position and current work period|
|• Job details, business type|
|Service usage data||
• Details of transactions and service usage, including
details of search of products, purchase orders, website
browsing,and other product and service details
related to you
1.2 Sensitive Personal Data
Sensitive Personal Data means personal data which is specifically categorized by the law. We do not intend to collect sensitive personal data from you. However, in some cases, it may be necessary for us to collect your sensitive personal data for the purpose of providing services or products to you. This includes religion on the copy of your identification or race that is shown on the copy of the passport of some countries, biometric data (e.g., facial recognition data, fingerprint data, electronic signatures in the case that the behavioral properties of such signature is used for authenticating the person who affixes the signature), criminal record, health data, disability data, sex data, and so on, to support the provision of services and products to you. We will collect, use and/or disclose your sensitive personal data only upon your clear consent or if it is necessary for us as required by the law, and your sensitive personal data will be collected from time to time.
(Personal data and sensitive personal data, unless specifically referred to as personal data and sensitive personal data, shall be collectively referred to as “Personal data”)
1.3 Personal data of the minors, incapable persons, or quasi-incapacitated persons
We do not intend to collect, use and/or collect personal data of the minors, incapable persons, or quasi-incapacitated persons unless the consent has been obtained from the guardians, curators or conservators (as the case may be) of such persons or we are permitted by the law to do so. If we aware that we have collected, used and/or disclosed the personal data of the minors, incapable persons, or quasi-incapacitated persons without the consent from the guardians, curators or conservators (as the case may be), we will delete or destroy such personal data or collect, use and/or disclose the personal data only when we are allowed to do on the basis of other laws without consent.
2. Objectives of collection, usage or disclosure of personal data
2.1 We may rely on (1) the contract basis to enter into the contract or perform in accordance with the contract with you, (2) legal obligations to perform our legal duties, (3) legal interests of ours and the third party, (4) essential benefits to protect or suppress danger to life, body or health of people, and/or (5) public interests for conducting the mission for the public benefits or exercise of the right of government officers to collect, use, disclose, and/or process your personal data for at least one of the following objectives:
To consider entering into the contract and/or contract relationship between you and the company under the terms of service of the company and to make financial transactions and provide services related to payment, as well as verifying and cancelling transactions.
To accept, process, manage, or complete transactions and/or proceed your requests regarding products and services and notify you of the problems of services and any suspicious account movement.
To ensure safety and rights of personal property or safety of other people.
To complete registration, identification, verification, or due diligence, or knowing clients’ identity.
To manage or facilitate service provision to you which is part of customer relationship building, comply with your orders, manage or reply the questions received (or supposedly received) from you on your behalf.
To improve the quality of business, products and services by using personal data to assess, develop, study, and research to identify problems, solve problems, and seek plans to promote product and service development for your future benefits.
To prevent or verify violations or suspicious acts of violation regarding our terms of service, frauds, illegal activities, ignorance or misconduct, regardless of relevance to our services or other matters arising from our relationships with you.
If you cannot give us your personal data upon request, we may not be able to provide you with our services.
2.2 We will request your consent when we collect, use, disclose, and/or process your personal data for the following purposes:
To consider the target groups to whom we send invitations to join our activities or sale promotions as deemed appropriate
To offer products and/or services, special rights to join activities, events or meetings held by us, as well as facilitating participation in the activities (e.g., registration)
To offer products, services, and/or special rights upon your request or notify your benefits
To offer products and/or services which are the same or similar to those you have with us
To organize sale promotions (e.g., benefits offers and rewards)
To analyze, research and/or prepare statistics for development and improvement of our internal products and/or services
To proceed with marketing activities, offers of products and/or services or special rights to join activities, as well as useful news and selected deals, and marketing strategies
Other objectives to be notified to you in a request for your consent
2.3 We may collect your sensitive personal data such as religion or race shown on the copy of your identification or the copy of passport of some countries as evidence for verification and authentication of your identity for service usage. This also includes your health record, only if it is necessary for the use of some of our products and/or services, provided that your consent will be requested each time we collecting such data.
2.4 You acknowledge that we may access, retain, and disclose your personal data as prescribed in Clause 1 if we are required to comply with the law or order of the court or other government agencies having the jurisdiction over us or under the good faith that such action should be taken to (a) comply with the law, or (b) to comply with the orders of any government agencies having the jurisdiction over us.
2.5 We may change the objectives of collecting, using, disclosing, and/or processing your personal data in accordance with the circumstances in the future. However, we will notify you and request for your consent upon having such change except for the case that we are legally permitted to collect, use, disclose, and/or process your personal data under the changed objectives without consent.
3. Channels for collection of personal data
We may collect your personal data via the following channels:
3.1 Your personal data directly given to us or when you join activities or search information through the channels of service provision and/or other contact such as website, application, email, questionnaire, business card, meeting, training, seminar, event, recreation acidity, marketing campaign, gathering, or any other channels.
3.2 Your personal data that we receive or access from other sources such as the company co-launching the products and/or services with us, data providers, our customers, online social media, and online platform of the third party.
4. Disclosure of your personal data to other people
It may be necessary for us to disclose your personal data to other people in order to proceed according to the objectives prescribed in Clause 2 or as permitted by the law to be disclosed. In this case, the persons or authorities who receive your personal data shall collect, use and/or disclose your personal data under the objectives indicated herein only. In some cases, you may be subject to the Personal Data Protection Policy of the said persons. The persons who receive your personal data may be in Thailand or other countries, including but not limited to:
Contractors, representatives, service providers, and other third parties that we use the service to support our business, including but not limited to the above persons who provide management services to us such as mail delivery service providers, financial service providers, auditing companies, advertising and marketing agencies, telecommunication companies, information companies, and information centers.
Third parties as determined by the law
5. Transfer of data to other countries/interterritorial data transfer
Your personal data may be transferred, retained, or processed otherwise by PFG or sent to other individuals or authorities as prescribed in Clause 4, which may be located or provided services in Thailand or other countries such as sending or transferring of personal data to be stored on Cloud platform or servers located in other countries. However, if it is required by the applicable law, we may ask you to share your personal data as prescribed in Clause 4, and your personal data shall be transferred to other places having the satisfactory standard of personal data protection which, at least, shall be equivalent to the level of protection applied in the country or region or territory where your personal data is given.
6. Period of personal data storage
We will store your personal data for the necessary period to achieve the objectives determined for personal data processing. The personal data storage period is subject to change depending on the objective of personal data collection and processing. After such period, we may eliminate your personal data from our storage or system without a prior notice.
7. Our personal data protection measures
We will store your personal data well in accordance with our technical measures, management measure, and physically protective measure to maintain confidentiality, completion, availability of personal data and to prevent unauthorized or illegal access, collection, modification, change, usage, and/or disclosure of personal data pursuant to the law.
We have arranged for appropriate measures to prevent the breaches of personal data by determining the policy, rule and procedure of personal data protection such as measures to control access to personal data and usage of appropriate and safe equipment for personal data storage and processing, restriction of personal data access, assignment of users’ right to access personal data to prevent access to personal data, disclosure, knowing, or unauthorized reproduction of personal data, or stealing the equipment for personal data storage and processing. The said policy, rule and procedure of personal data protection are subject to change as deemed appropriate and in accordance with our operation plans.
8. Your rights concerning personal data
8.1 Rights to access and accept copies of your personal data
You have the right to access and accept copies of your personal data. However, we reserve the right to refuse your request as required by the law or court order. For your privacy, we may ask you to authenticate your identity prior to giving personal data as requested.
8.2 Right to correct
You have the right to ask us to correct or update your personal data which is incorrect to ensure that it is complete and up-to-date.
8.3 Right to delete
You have the right to delete or destroy your personal data or make your personal data unidentifiable unless we have a legal reason to refuse your request.
8.4 Rights to request for suspension of personal data usage
You have the right to request for temporary suspension of your personal data usage in some cases.
8.5 Rights to object to collection, usage or disclosure of personal data
You have the right to object to the collection, usage or disclosure of your personal data if we proceed without your consent or for the purpose of direct marketing or scientific research or statistics unless we have a legal reason to refuse your request.
8.6 Rights to transfer your personal data
You have the right to transfer your personal data for which you have given consent or which is collected by us on the legal basis or as necessary for entering into contracts or performing in accordance with the contracts under Section 24 (3) in the format that is generally readable or usable with automatic devices or equipment. Also, you have the right to request your personal data in such format to be sent or transferred to other personal data controllers or to you unless it is technically impossible, which is subject to the law.
8.7 Rights to withdraw consent
You have the right to withdraw your consent given to us in accordance with the determined procedures and methods. Withdrawal of your consent shall not affect collection, usage, or disclosure of your personal data for which you have given consent prior to such withdrawal.
8.8 Rights to complain
You have the right to complain to Personal Data Protection Committee or Office of Personal Data Protection Committee if we collect, use, disclose, and/or proceed your personal data illegally.
For you to log in to our website or application continuously
For studying your website or application usage behaviors in order for us to improve to be easier, faster and more efficient for users
10. How to contact us?
If you want more information about the collection, usage and/or disclosure of your personal data, you may call 02 1194399 or email us at: firstname.lastname@example.org. Place of contact: 1011, Supalai Grand Tower, 27th Floor, Rama 3 Road, Chong Nonsi Sub-district, Yan Nawa District, Bangkok Metropolis 10120.
If you wish to exercise your rights as the personal data owner as specified herein, please complete the form available on website: www.patayafood.com and submit it through the above channels
If you are suspicious of any breach of your personal data, you may contact Personal Data Protection Office via email: email@example.com.
12. Governing Law
Version: April 2022