Privacy Policy

Group Island Spirit Co. Ltd and its affiliates in Thailand (“GIS”) hereby inform you of details of the processing, whether collection, usage and disclosure ("Processing”), of personal data which enables the identification of such person, whether directly or indirectly (“Personal Data”) through various channels, both online and offline. This includes, for example, information of contractors, information collected through websites, information collected through points of sale and events, information collected from social networks such as Facebook and search engines such as Google. Your Personal Data will be processed in accordance with applicable legislations e.g., Thailand’s Personal Data Protection Act B.E. 2562, the EU General Data Protection Regulation and other applicable laws and regulations. This Privacy Notice provides important information in the following areas:

1. OBJECTIVES FOR PERSONAL DATA COLLECTION

The Processing of your Personal Data is for management and administrative purposes in order to ensure that GIS is able to run the business with you appropriately, effectively and lawfully in order to fulfil any and all obligations under contracts, to perform transactions, to provide suitable products and services, to respond to orders and requests, to improve the quality of products and services, and/or to pursue any other legitimate interest of GIS. If you have provided Personal Data of any third party to us, please ensure that such third party has acknowledged this Privacy Policy or granted consent for Processing their Personal Data where applicable. You are free to decide whether you will allow GIS to collect your Personal Data. However, please kindly note that if you decide not to provide your Personal Data, you may not be able to earn some certain benefits i.e., GIS may have insufficient information to enter into a contract with you or perform our obligations or commitments in some circumstances. The objectives for GIS’s Processing of your Personal Data are as follows:

 

No.	Objective	Legal Basis
	A. OBJECTIVES RELATING TO CUSTOMERS
1.	to create customer’s account and/or membership account, to manage purchase order, to manufacture products and/or to provide services, to deliver products and/or services, to manage accounting and financial activities, after-sale services, product return services and any activity in connection with the sale of products, provision of services and customers’ request.	contractual basis
2.	o contact customers, to conduct marketing communications, to advertise and promote products and services, to coordinate and contact for business, marketing and data analysis including offering appropriate products and/or services through various channels e.g., email, SMS, applications, social media, phone and direct mail. In addition, to perform marketing research such as a survey, interview and satisfaction inquiry regarding products and services.	legitimate interest basis
3.	to implement and maintain security measures, e.g., logging into websites.	legitimate interest basis
4.	to establish, exercise or defend legal rights or claims of GIS, and to comply with applicable laws	legitimate interest basis
	B. OBJECTIVES RELATING TO SUPPLIERS AND BUSINESS PARTNERS
1.	to conduct transactions regarding pre-execution of contracts such as vendor/supplier registration, account opening, qualification evaluation, vendor selection and procurement process.	contractual basis
2.	to prepare and execute contracts as well as to manage contracts e.g., identity authentication, verification of authority, delegation of authority including supporting evidence for consideration, preparation and execution of the contracts.	contractual basis
3.	to contact and coordinate with you in relation to the business operations between you and GIS.	legitimate interest basis
4.	to comply with all applicable laws related to transactions e.g., the Civil and Commercial Code, the Securities Exchange Act and etc.	Legal obligation
	C. OBJECTIVES RELATING TO VISITORS AND PERSONS ACCESSING BUILDINGS, OFFICES, FACTORIES, CHARTER BASES AND/OR PROPERTIES OF GIS
1.	to implement and maintain security and control of buildings, offices, factories and/or properties of GIS, to conduct a security risk assessment, to manage on-site verification (e.g., exchange of identification card for visitor/entry card) in order for working or accessing buildings, offices, factories and/or properties of GIS, to monitor regarding surveillance and security (e.g., CCTV recording), and to record Personal Data for security management (both electronic and non-electronic means).	legitimate interest basis
2.	to manage security control processes of GIS, for example, to conduct safety training before entering into buildings, offices, factories and/or properties of GIS.	legitimate interest basis
3.	to perform health and safety management	vital interest basis
4.	to comply with all applicable laws related to public health interest e.g., health protection from dangerous diseases, contagious diseases or epidemics which enter into the Kingdom of Thailand	Legal obligation

 

2. COLLECTED DATA

For objectives as specified above, GIS may collect, use and disclose your Personal Data. The types of Personal Data collected will depend on the interaction between you and GIS, including but not limited to the following information:

• personal details such as name, surname, photo, gender, birthday, weight, height, ID number, passport number and resident country;
• sensitive Personal Data such as health data, food allergy data and biometric data;
• contact information such as address, contact number, fax, email, WhatsApp;
• financial information such as bank account number, credit/debit card data; purchase and service history, satisfaction information as provided by you;
• technical information such as IP address, cookies, accessed devices, location while using the website;
• voice recording of conversations, and photo and video recording by means of CCTV;
• any information that you sent to us for the website connecting such as comment and your location;
• and any other information you are willing to provide.

GIS’s websites may link to third party websites to provide relevant references. GIS is not responsible for such external content managed by third party websites, which may contain separate privacy policies and data processing disclosures. The link to a website is not an authorisation or representation of our affiliation with that third party. GIS is not in a position to endorse or control privacy policy, security policy, cookies policy and data collection policy of the third parties.

 

3. RETENTION

Your Personal Data will be collected for as long as necessary to satisfy the objectives for which your Personal Data has been collected. For example, if you ordered our products through our online channel, GIS will collect data related to your transaction and will keep such information as long as necessary to achieve the objective of that particular transaction, or if you subscribed to GIS’s newsletter, your information will be collected and used until you unsubscribe or notify us that you no longer want to receive the newsletter.

 

4. CONSENT GIS

may acquire your consent to collect, use and disclose your Personal Data for the following purposes, which include but are not limited to:

• collection and use of your sensitive Personal Data as necessary;
• analysis of your preferences and consumption behavior in order to forecast your preferences based on your profile analysis in order to offer you targeted content and advertisements;
• if you are a minor, incompetent or quasi-incompetent person whose consent must be given by their parent, guardian or curator (as the case may be); and/or
• sending or transfer of your Personal Data to another country, which may have inadequate personal data protection standards.

If it is necessary for compliance with the applicable laws, GIS may process your Personal Data without your consent. In this regard, GIS will strictly comply with the relevant laws regarding your Personal Data.

 

5. DISCLOSURE OF PERSONAL DATA

Gis may be required to disclose your Personal Data internally and may need to disclose Personal Data to a third party, both within Thailand and in other countries, who have appropriate personal data protection standards. In this regard, GIS will provide appropriate contract to protect your Personal Data:

Types of third parties that may receive your information e.g.;

• contractual parties who provide GIS’s services such as:
  • Data analysis service providers
  • Marketing agencies
  • Other agencies who operate or have an agreement with GIS
• trade partners certified authorities which GIS has requested to be
• certified for its own benefit including other auditing agencies
• any third party who has legitimate rights to access your Personal Data.

 

6. ACCESSING WEBSITE GIS

is obliged under Thai law to retain your computer traffic data, for at least 90 days from the date you entered GIS’s website. However, GIS will not use such data to analyze consumption behavior or conduct market research without your explicit consent.

 

7. COOKIES

Cookies are small text files that are stored on your computer's browser or devices when you connect or visit any website to navigate you through our website, deliver user friendly and more personalized services to you. However, Cookies will not collect information stored on your computer (“Cookies”).

GIS may use Cookies to learn more about how you interact with the content on our website in order to give you more satisfaction when using our website. Cookies will remember the browser you used and installed while you are on our website. In addition, Cookies remember your preferences such as languages used and regions and automatically adjusts settings when you return to our website. Some of the Cookies are session Cookies and some are persistent Cookies which will be stored on your computer for a longer period.

For certain operations, GIS will use a third party services provider, for example, to track and analyse statistical use and information of users of the GIS website in order to customize our website according to your individual interests and manage content on the website.

GIS will not use Cookies to collect Personal Data. If you do not want to accept Cookies you may choose to decline Cookies or block Cookies sent by GIS or third-party service providers by changing the settings in your browser (you can find more information in the Help menu of your browser). However, most browsers accept Cookies automatically. If you do not wish to accept Cookies, you may have to constantly block or delete Cookies.

 

8. YOUR RIGHTS

As a Data Subject, you have the following rights:

• to withdraw consent for the collection, use or disclosure of Personal Data;
• to request access to and obtain a copy of your Personal Data or to request the disclosure of the acquisition of your Personal Data obtained without consent;
• to request to obtain Personal Data and request the transfer of Personal Data to a third party if it can be done automatically;
• to object to the collection, use or disclosure of the Personal Data;
• to request to erase or destroy Personal Data, or anonymised the Personal Data to become anonymous;
• to request to restrict the use of Personal Data; and
• to request to update and complete Personal Data collected so that they are not misleading.

You can exercise your rights by sending GIS an email or sending a written notice to GIS, attaching a copy of your ID or equivalent details as requested. GIS will process such information received in accordance with, and to the extent permitted, by applicable laws.

Please note that GIS shall retain our rights under the laws to reject your request in certain circumstances. If GIS decides to reject your request, you will be notified of the reason for such rejection. GIS will try our best, also with considering technical capabilities, to answer your request on how we process your Personal Data. However, if you have unresolved concerns, you can complain to GIS or proceed further to the Data Protection Authorities.

 

9. PROTECTION OF PERSONAL DATA GIS

is committed to protecting your Personal Data under our security standards, and will provide appropriate safeguards to protect your Personal Data in order to ensure that Personal Data will be legally and appropriately collected, used or disclosed.

 

10. CHANGES TO PRIVACY NOTICE GIS

reserves the right to make changes to this Privacy Notice to be appropriate and in accordance with any laws. Please frequently check to see any updates or changes to GIS’s Privacy Notice.

 

11. CONTACT

If you have any enquiries or would like to exercise your rights or need any help regarding your Personal Data, please send an email to: and provide us with your personal information together with evidence to verify your identity such as ID card. However, GIS may ask for additional relevant documents or may reject your request if GIS has received insufficient information.