Email Us
export_bd@asiatic.co.th

Call Center
+66 (02) 073 0977

shopping
@asiaticshop

Privacy Notice

Asiatic Agro Industry Company Limited (collectively referred to as “Company”) are aware of the importance of Personal Data (defined below) protection of Company’s customers and trading and business partners (collectively referred to as “you” or “Data Subject”). The collection, use and/or disclosure (collectively referred to as “Processing” or “Data Processing”) of Personal Data shall act in accordance with the Personal Data Protection Act BE 2562 as the Personal Data protection is a social responsibility so as to build trust and strong business relations between Company and its customers and trading and business partners. Company hereby announces this Privacy Notice in order to inform you of your rights and legal duties, as well as terms and conditions concerning the collection, use, or disclosure of your Personal Data.

Personal Data

The term “Personal Data” means any information relating to a person which enables the identification of such person, whether directly or indirectly, but not including the information of deceased persons in particular. The term “Sensitive Personal Data” means any information relating to a particular person which is sensitive and presents significant risks to the Person’s fundamental rights and freedoms, which includes data regarding racial or ethnic origin, political opinions, cults, religious or philosophical beliefs, sexual behaviour, criminal records, health data, disabilities, trade union information, genetic data and biometric data.

Collection of Personal Data

Company shall collect Personal Data within the purpose, scope, and lawful and fair methods as is necessary which is defined in the scope of Company’s corporate objectives. The Personal Data that Company collects shall include:

  1. Personal Data, including but not limited to given name, family name, date of birth, age, gender, nationality, travel document number, driver’s license number, signature, marital status, position, career, education, and shareholder registration number;
  2. Contact information, including but not limited to home address, phone number and email address;
  3. Government documents, including but not limited to copy of national identification card, copy of civil registration from the Government registration database, and copy of travel document;
  4. Pictorial information, including but not limited to photo, video record of Data Subject or Data Subject’s asset obtained CCTV and camera photographs within Company’ site;
  5. Financial information, including but not limited to bank account information, credit card number and copy of passbook detail page;
  6. Data obtained by Company or automated methods from other devices, including but not limited to username, password, MAC address, IP Address, photo, photo of Data Subject’s face, audio file, video, Social Media account, chat and Geolocation and

In this regard, Company shall request consent from Data Subject before such collecting, except for where:

  1. It is necessary for the performance of a contract where the collection, use, or disclosure of Personal Data is required to provide service or for performance of a contract between Data Subject and Company;
  2. It is to prevent or suppress a danger to a Person’s life, body or health;
  3. It is necessary for compliance with the law;
  4. It is necessary for legitimate interests of Company so as to fulfill its operational objectives in which suitable measures to safeguard Data Subject's rights and freedoms are put in place, including but not limited to fraud prevention, network security and safeguards for Data Subject’s rights and freedoms;
  5. It is for the achievement of the purpose relating to the preparation of the historical documents or the archives for public interest, or for other purposes relating to research or statistics, in which suitable measures to safeguard Data Subject's rights and freedoms are put in place; and
  6. It is necessary for the performance of a task carried out in the public interest, or it is necessary for the exercising of official authority.

Sensitive Personal Data

Company may be required to collect Sensitive Personal Data from Data Subject, including but not limited to medical data. By doing so, Company shall request for explicit consent from Data Subject upon each collecting, using and/or disclosing of such Sensitive Personal Data accordingly, except for where:

  1. It is to prevent or suppress a danger to a person’s life, body or health
  2. It is carried out in the course of legitimate activities with appropriate safeguards by the foundations, associations or any other not-for-profit bodies with a political, religious, philosophical, or trade union purposes for their members, former members of the bodies, or persons having regular contact with such foundations, associations or not-for-profit bodies in connection with their purposes, without disclosing the Personal Data outside of such foundations, associations or not-for-profit bodies;
  3. It is information that is disclosed to the public with the explicit consent of Data Subject;
  4. It is necessary for the establishment, compliance, exercise or defense of legal claims; and
  5. it is necessary for compliance with the law so as to achieve the purposes with respect to:
    1. Preventive medicine or occupational medicine, the assessment of working capacity of Employee, medical diagnosis, the provision of health or social care, medical treatment, the management of health or social care systems and services
    2. Public interest in public health, such as protecting against cross-border dangerous contagious disease or epidemics which may be contagious or pestilent;
    3. Employment protection, social security, national health security, social health welfare of the entitled person by law;
    4. The scientific, historical, or statistic research purposes, or other public interests; and
    5. The substantial public interest.

Source of Personal Data

  1. Personal Data can be directly obtained from Data Subject through any activities, including but not limited to website, application, membership sign-up, newsletter sign-up, entrance – exit company’s building, purchasing goods or using services, organizing seminars, procurement, online and offline transaction, response email, fill in or provide data for applying a job, communication between Company and Data Subject and marketing activities;
  2. Data can be obtained from related third parties including but not limited to relatives and family members;
  3. Data can be obtained from automated system, including but not limited to recordings from CCTV; and
  4. Personal Data can be obtained from other sources, including but not limited to public data and partners of Company.

Purposes of Processing Personal Data

Company may use Personal Data for the following purposes or for other purposes notified at the time of collecting Personal Data or for which Data Subject has given consent after Company has collected such Personal Data. Reasons for collecting, using or disclosing are provided below:

  1. It is to enter into a contract or for the performance of a contract between Company and Data Subject or third party for Data Subject’s interests;
  2. It is to verify identity Data Subject;
  3. It is to inform and recommend Data Subject about goods, products and services or to publish marketing and promotional materials or other benefits to contact details given by Data Subject upon the consent of Data Subject;
  4. It is for delivery product and service to Data Subject;
  5. It is to operate, evaluate and improve business for products and services;
  6. It is to carry out any accounting and financial activities; including but not limited to auditing, debt notification and collection, tax operations and transactions as prescribed by law;
  7. It is for Company’s legitimate interests, including but not limited to recordings obtained from Call Center recording, CCTV and entrance – exit building recording;
  8. It is to inspect, supervise and secure the safety in Company’s sites;
  9. It is to compliance with Company rules;
  10. It is to apply a job and employee and/ or any other purposes;
  11. It is for compliance with law, investigation process, relevant regulations and Company’s legal duties;
  12. It is to respond to Data Subject’s enquiry and assist Data Subject;
  13. It is to facilitate and offer benefits to Data Subject;
  14. It is to inform and recommend Data Subject about goods, products and services or to publish marketing and promotional materials or other benefits to contact details given by Data Subject upon the consent of Data Subject;
  15. It is to survey feedbacks, analyse, research, and gather statistical data for marketing purposes or in order to develop and improve Company’s corporate operations upon the consent of Data Subject and
  16. It is for other purposes upon the explicit consent from Data Subject.

Transferring and Disclosing of Personal Data

Company shall not disclose and transfer Personal Data to third party unless explicit consent is given, or except for where:

  1. Company is subject to disclosing or sharing Personal Data with partner, service provider, agency, bank, payment service provider or third party, if necessary, in order to fulfill and achieve the purposes contemplated in this Privacy Notice; by doing so, Company shall create a Data Processing Agreement in accordance with the law;
  2. Company may disclose or share Personal Data to Company’s affiliates; in this regard, the Processing of Personal Data shall merely be in keeping with the purposes contemplated in this Privacy Notice; and
  3. It is required to disclose Personal Data by law or legal procedures or to disclose Personal Data to officers, authorities or authorized organizations in order to comply with lawful order or request.

International Transfers of Personal Data

Company may send or transfer Personal Data to a foreign country. In this regard, Company shall ascertain that the destination country or international organization that receives such Personal Data shall have adequate data protection standards and measures.

Personal Data Protection

Company has provided and adopted Personal Data storage system equipped with appropriate mechanism and technical features by encrypting the transferring of Personal Data via internet network, as well as safeguard measures in accordance with the law concerning the protection of Personal Data and relevant relegations. Company also restricts its employees, contractors and representatives from accessing to the use, disclosure, destroying or unauthorized access of Personal Data.

Retention Period of Personal Data

Company shall retain and use Personal Data as long as necessary for the purposes of Processing Personal Data contemplated in this Privacy Notice or as prescribed by law, except for where it is necessary to retain such Personal Data for other reasons, including but not limited to acting in accordance with the law, to fulfilling Company’s legal duties and obligations or to inspecting in case where any disputes arise. Under such circumstances, Company may retain Personal Data longer than the abovementioned period.

Changes to Privacy Notice

Company may amend this Privacy Notice or parts of it and will inform you of the respective amendments or changes to this Privacy Notice as well as the recent date of such amending on https://www.asiaticagro.com Company suggests you regularly check this Privacy Notice. By using products or service on Company’s website after the amending of this Privacy Notice, you are deemed to acknowledge such amending or changes.

Data Subject Rights

Data Subject may exercise Data Subject Rights with respect to the law and as contemplated in this Privacy Notice, details as specified below:

  1. Right to access and obtain copy of Data Subject’s Personal Data;
  2. Right to have inaccurate Personal Data rectified, or completed if it is incomplete;
  3. Right to Data Portability in case where Company has made such Personal Data publicly accessible in the format readable or commonly used by ways of automatic tools or equipment, and can be used or disclosed by automated methods;
  4. Right to erase, destroy or anonymize Personal Data, should such Personal Data be no longer necessary or unless there are certain circumstances where Company has legal grounds to reject Data Subject’s request;
  5. Right to restrict the use of Personal Data under circumstances where Personal Data is subject to erasure or is no longer necessary;
  6. Right to withdraw consent given by Data Subject; and
  7. Right to object the Processing of Personal Data at any time.

Should you have any questions or wish to rectify or erase your Personal Data or to exercise the aforementioned rights or contact Company regarding Personal Data issues or Company’s Personal Data protection practices, please contact Company or complete >> the reject consent form << by your request.

Contact Details

Asiatic Agro Industry Company Limited

1526-1540 Soi Phatthanakan 48, Phatthanakan Road, Phatthanakan, Suan Luang, Bangkok 10250, Thailand
Phone number: (+66) (02) 073 0977
Email address: dpogroup@gfca.com

Announced on January 20,2022


Vijai Visuthikraisee
Chief Executive Officer
Asiatic Agro Industry Co., Ltd.