Pacifica Group of companies including Pacifica elements, Pacifica lifestyle company limited, Pacifica Max company limited, Pacifica retail company limited, Pro partners company limited and fitte cosmetics company limited (hereinafter referred to as the “company” or “us” or “our”), attach great importance to the protection of personal information of our clients and to ensure that   the company In order to protect and treat your personal data in accordance with the privacy laws, we have established this personal data notice to inform you of the details of the personal data, whether it is collected, used, and disclosed (hereinafter referred to as “processing” or “processing” of personal data), which may occur, and inform you of your personal data rights and our contact channels as follows :

1. The personal information we collect about you

We will collect your personal information as follows

Type of personal information:

• Customer’s first and last name
• First name of employee / agent customer
• Date of birth of the customer
• Date / month / year of birth of employee / agent customer

• The age of the client.
• Age of employee / agent customer
• The sex of the client.
• The gender of the employee/agent, the client
• The nationality of the client.
• Nationality of the employee / agent, customer

Information on identification and verification:

• Customer’s signature
• Signature of the employee / representative of the customer
• Customer identification number
• Identification number of the employee / agent customer
• Customer’s taxpayer ID number
• Customer’s passport information
• Passport information of the employee / client representative
• A photo that appears on the customer’s document
• A photo of the customer’s employee / agent’s document
• Photos, animations, and customer voices
• Photos, animations, including the voice of the customer’s employee / agent
• The customer’s license plate number.
• Customer’s photos / map
• Picture shows the customer’s social media Facebook / Instagram / YouTube / ID line account.

Contact information:

• Customer’s phone number
• Telephone number of the employee / agent, customer
• The customer’s address.
• Address of the employee/agent, customer
• Customer’s email
• Emails of employees/agents, customers
• Customer’s ID line
• Customer employee / agent line ID
• Account name of customer’s social media Facebook / Instagram / YouTube / ID line

Information about work:

• Customer’s job title
• Employee / agent job position customer
• Name of the client’s company / agency

Financial and service information:

• The name of the client’s bank account.
• Customer’s bank account number
• Customer’s points
• Customer’s order amount
• Customer payment information
• Date / month / year of purchase of the customer.
• Branches that purchase products / services of customers
• Customer’s order history

Information about access to the website:

• Customer IP address
• Customer’s cookie ID.

Sensitive information other than health information:

• The client’s religion appears on the ID card.
• Religion of the employee / agent of the customer on the ID card

However, we may need to collect and process your personal data in a sensitive manner for the purposes we provide in this privacy notice, including using the information on your identity card, which contains religious information, to verify your identity, or to do tax, etc.

Where necessary, we will process your sensitive personal data with your express consent or for other purposes only as required by law. At the same time, we will use our best efforts to provide adequate security measures to protect your rights and freedoms. In the event that we collect and process your personal data based on your consent, you have the right to withdraw your consent at any time. Withdrawal of this consent will not affect the collection, use, disclosure. Or process the personal data you have already consented to, and your withdrawal of the consent you have given us or refuse to provide certain information may result in us being unable to complete some or all of the purposes set out in this privacy notice.

2.   the purpose of processing personal data and the case where personal data is required

We are obliged to collect, use and disclose your personal information for the following purposes :

The contract base:

• To open a new customer as the INV. / CN opening information for the document inspection to open a new customer in the SAP system.
• To deliver and invoice.
• To pay off the debt.
• To deliver goods, for sales records and for delivery of goods.
• To use for shipping and verifying the accuracy of the payment with the account.
• To refund the customer if the customer does not want the product.
• To record the bill of sale and issue the tax invoice.

A righteous benefit base: (legitimate interests)

• To participate in the event and receive the prize
• To get back and reduce debt.
• To be used in the transaction, the preparation of the proposal for approval of the SAP system.
• To save the goods to the SAP system.
• Use it to make promotions to increase sales.
• To use for shipping.
• To provide customer service in various fields as required, such as issuing receipts, tax invoices, etc.
• To be used in consumer behavior analysis, to promote the sales.
• To report the sales of the customer’s cumulative purchases.
• To record, photograph, animation, including events and to ensure the safety of life and property.
• To use POS to cut for transfer / update of goods using Cegid, SAP, j-compile
• To bring the information from the program to produce the route for the shipment.
• To identify the plan for the pickup and drop-off at the points that are booked in the Google form and to track lost / over / out of the product.
• To collect information of customers for benefits such as redemption of points, collection of contact details, etc.

If you are unable to provide us with the personal information we request, we may not be able to provide you with the services.

3. The period of storage of personal information

3.1 we will keep your personal data for a period of time necessary to achieve the purposes for each type of personal data. Unless the law allows for a longer retention period. In the event that the retention period of personal data is not clear, we will retain it for a period of time that may be expected in accordance with the following collection standards.

3.2   keep personal information for 10 years from the date of termination of membership. For registration, registration for orders via website, registration for news, customer service, and after-sales service.

3.3   store personal information for consumer behavior analysis, information and public relations to customers, giveaways, customer information and market analysis report for 10 years from the date of termination of the membership.

3.4 retains personal data for sales and delivery records and sales through the line official account for 10 years from the date of the purchase.

3.5   keep personal information for the return work for 10 years from the date of the return.

3.6   store personal information for marketing activity for the 10 years from the event date.

3.7 retains personal information for collecting car bookings through the Google form and the preparation of work plans and workbooks for drivers and messengers for 10 years from the date of issuance of the document.

3.8 storing personal personal information for company /individuals in the document to open a new customer in sap system for five years from the issuing the issued accounting act 2000.

3.9 retains personal data for opening the voice in the SAP system for the sale of goods for 5 years from the date of issuance of the document (according to the accounting act B.E. 2000)

3.10 retains personal information for credit note opening system for return for five years from the issuance of the accounting act 2000.

3.11 to store personal information for recording in the SAP system for receipt of payment up to five years from the issuance of the accounting act 2000.

3.12 to keep personal information for approval of payments, debt and receiving goods for five years from the is is issued on the imposed by the accounting act B.E.2543 

3.13   keep personal data for the customer’s data for 5 years from the date of termination of the membership.

3.14 retains personal data for the collection / transfer / adjustment of goods using the Cegid, SAP, j-compile system for 2 years from the date of issuance of the document.

3.15 stores personal data for CCTV recording for branches and headquarters for 30 days (according to the system storage capacity , Cctv)

We provide an audit system for the purpose of the collection of personal information, to remove or destroy personal information, after the retention period or beyond the need for the purpose of the collection of that personal information.

In the event that we use your personal data with your consent, we will process such personal data until you have received a cancellation request and we have completed your request. However, we will keep your personal data as necessary as a record that you have terminated your consent so that we can respond to your requests in the future.

4. Disclosure of personal information to other persons

4.1 we will disclose and share your personal information with our affiliates or brand owners, service providers and products, and other persons and entities not under our group (“other persons”) to achieve the purposes for which personal information is collected and processed as set out in this privacy notice, including :

• disclosed the customer’s name, email address /line ID, phone, date of birth, order resume, gender, customer’s payer identification number to partner
• disclosed the name-surname, identification number, phone phone phone mail, date of birth, gender, address
• Disclose the customer’s name, last name, job title, phone number, email line, ID, photo ID, date of birth, gender, religion, and other information to the shoe repair shop.
• Disclose name, phone number, email Line IDs, photo data, animation from the customer’s CCTV camera to the security officer, the office staff, the police officer to use to build evidence in case of abnormal incidents such as fraud, loss or theft, etc.

4.2 the disclosure of personal information to individuals or organizations outside the company must obtain the consent of the personal information owner and must be approved by the personal information protection officer (DPO), except in accordance with the laws or government regulations.

4.3 we will require the person who receives the information to take appropriate measures to protect your information and only process the personal information as necessary, and to prevent the wrongful use or disclosure of personal information without authority or in accordance with the law.

5. Sending or transferring personal information abroad

5.1 we may send or transfer your personal information to any of our affiliates or other overseas parties where necessary to fulfill a contract with a party, or to perform a contract between us and another person or entity for your benefit or to process your request prior to entering into the contract, or to prevent or withhold any harm to your life, body or health, or any other person, in order to comply with the law or as necessary to carry out a mission in the important public interest.

5.2 we may collect your data on computer server or cloud (cloud) provided by others and may use the finished program or application and the form of providing the finished platform services to process your personal data. However, we will not allow any unaffiliated person to access the personal data and will require such parties to take appropriate security measures.

5.3 in the event that your personal data is transmitted abroad, we will comply with the personal data protection law and take appropriate measures to ensure that your personal data is protected and that you can exercise your rights in relation to your personal data according to the law. We will also require that the person who receives the data takes appropriate measures to protect your data and only process the personal data as necessary, and to prevent others from using or disclosing the personal data without their authority.

6. Your rights as the owner of personal information

You have the right to your personal information in accordance with the privacy laws. We will respect your rights and will act in a timely manner in relation to the processing of your data. You have the right to process your personal information as follows :

6.1  Right to request the withdrawal of consent

In the event that we process your personal data based on your consent, you have the right to withdraw your consent at any time to process your personal data. We may continue to process your personal data if we are able to use other bases to process your personal data.

6.2  Right to request access to personal information

You have the right to request a copy of your personal information from us.

6.3  Right to request correction of personal information

You have the right to request that your personal information be corrected, up to date and complete.

6.4  Right to request the deletion of personal information

You have the right to request that we delete, destroy or otherwise make your personal data in a manner that is not identifiable to you, where we are not allowed to continue processing your personal data. You may, in addition, request us to delete this personal data in the following way, to the right to object. However, the use of this right shall not be exercised to request the complete deletion of your personal data. We will consider each request with caution in accordance with the laws governing the processing of your personal data.

6.5  Right to object

You have the right to object to the processing of your personal data processed by us under the legitimate interest of us. You also have the right to object to the processing of your personal data if we process your personal data for marketing purposes, recording and analyzing the psychological and behavioral characteristics of individuals.

6.6  The right to request the suspension of processing.

You have the right to request that we temporarily suspend the processing of your personal data, such as when you want us to correct your personal data, or when you request us to prove the reason or legal basis for processing your personal data.

6.7  Right to send or transfer personal information

In some cases, you may request the company to send or transfer your personal data in a generally available electronic form to another controller of personal data. This right is only valid in the case of personal data you have delivered to us and the processing of such personal data is done with your consent, or where such personal data is required to be processed to enable compliance with obligations under the contract.

 

6.8  Right to file a complaint

You have the right to file a complaint with the relevant government, including the personal information protection committee, in the event that you see that the company or its employees or service providers violate or fail to comply with the privacy laws or other notices issued by such law.

You may exercise your rights at any time by contacting us through the contact channels as set out in Section 8.

We may need to obtain certain information from you to verify your identity and ensure your right to access personal information (or to any other rights) in accordance with the security measures that ensure that your personal information is not disclosed to persons who do not have access to such information.

We will try to respond to all legitimate requests within 30 days. In some cases, we may take more than 30 days if your request is complicated or you submit more than one.

Except for the request to make a complaint, the operation of our personal information protection law and is a direct complaint against us. We reserve the right to charge a fee for the processing of a request from the individual who has other personal information. However, we will expressly notify you of any request to exercise your personal information that may be required to pay such charges.

7. Basic guidelines for maintaining personal information security

We take security measures within the company and strictly enforce such measures to keep your personal information secure, including encryption and other means of data protection, while requiring our employees and third-party contractors to comply with the appropriate standards. Including the provision of data and the appropriate measures for the use or transmission of your personal data.

8. Collection and use of personal information for the original purpose

The company has the right to collect and use your personal information collected by us before the date when the laws on the protection of personal information in relation to the collection, use and disclosure of personal information are in force for the original purpose. If you do not wish to continue to collect and use such personal information, you may notify us at any time to withdraw your consent.

9. Security of personal information

We shall take measures to protect the security of personal information and other measures as required by law, and enforce such measures to process your personal information, including the encryption of information and other measures to prevent access to information by other means, and require our employees and external contractors to comply with the standards, privacy policy and appropriate privacy notices, and to provide the proper information maintenance and appropriate measures for the use and transmission of your personal information.

10. Changes to the privacy notice

In accordance with the privacy protection act, 2019 this privacy notice may be changed from time to time. The current version of this privacy notice will be shown on the company’s website.

11. Contact us

If you have any questions, concerns, or wish to exercise your rights in relation to your personal information, please contact us at

Personal information protection officer

2032 Italthai tower, 5th floor, New Petchburi road, Bangkapi,

Huaykwang District, Bangkok 10310

E-Mail: dpo@pacifica.co.th

Phone Number: 02-0349770-97