Mrs. CBD (“Mrs. CBD”) is committed to providing quality services to meet your expectations. Mrs. CBD attaches great importance to protecting your personal data and compliance with applicable laws and regulations. Therefore Mrs. CBD has prepared this statement on how we collect, handle and process data for our customers and visitors and to inform you of the protection of your personal data and your rights as the personal data subject.
Mrs. CBD would like to inform you as the Personal Data Subject who is:
(1) A person who has been in contact with Mrs. CBD, whether it was a visitor or a customer of the Mrs. CBD.
(2) An employee, personnel, officer, representative, shareholder, director, personal contact, an agent or a person related to a juristic person, a person under (1) above, a group of assets, or a body of persons who have been in contact with Mrs. CBD, whether they were a customer of Mrs. CBD or were not.
About protecting your personal information that Mrs. CBD receives or will receive from business operations and providing services through venues, websites, telephones, electronic channels, applications, social media or other sources to ensure that Mrs. CBD will take care of your personal information. And will collect, use or disclose your personal information only if Mrs. CBD deems it necessary, correct and appropriate and notifies you of your rights as the personal data owner.
- Personal data of the personal data subject that Mrs. CBD will collect, use and disclose consists of:
1.1 information that can identify the owner of the personal data. Whether directly or indirectly.
(2) Personal information such as name – surname, gender, date of birth, age, and information on or in documents such as identification cards, passport, residence certificate, alien identification card, work permit, social security card, driving license, car registration or house registration, signature, taxpayer identification number information about family members educational background, occupation, status, membership, work history and other benefits that are not compensation for work insurance-related information.
(3) Contact information such as the address according to the house registration. Address for sending documents. Electronic postal address (Email Address). Home phone number, mobile phone number and fax number. Your name or details for use through applications or digital channels such as LINE, Google, Facebook, YouTube or Twitter, WhatsApp or WeChat and contact information provided to Mrs. CBD through its services.
(4) Financial information and financial transactions including payment deposits. Movements of deposits into accounts. Income and Expenditure Information. Information about an act or alleged offence within Mrs. CBD. Prosecution and the execution of information about insurance or investments. Information relating to shareholders and their assets. Information about paying or receiving payments. Information for compliance with local laws and regulations.
(5) Information relating to the Mrs. CBD’s dealings, i.e. information Mrs. CBD receives via its venues, telephones, and electronic or digital channels. Social media Information from CCTV and off-site services. Such information may be displayed or recorded in written form. Recording tapes or recordings of transactions Photographs or moving pictures.
(6) Technical data These are the IP Address, Media Access Control (MAC), the ID number attached to the device connected to the network and the network (MAC Address), Log, Device ID ( Device ID), application interface information (APIs), cookies (Cookies), plug-in type and version, browser, operating system and platform. Internet system or mobile phone network geolocation information Settings. Information on the device and other technical information from using Mrs. CBD applications and operating systems.
(7) Usage Information Including the name or code for using the service (Username), the password for using the service (Password), and information about searches. Time of use on websites, platforms, applications, timestamp of the last click, favourites, Q&A, log files, and communications.
(8), Behavioral data, such as data about personal interests or preferences, nature of use or use of data.
1.2 Personal data that is sensitive information which Mrs. CBD must first obtain your consent before being collected, including biological data (e.g. biometric data, fingerprint and audio identity), criminal history, health information, or any other information as announced by the Personal Data Protection Committee.
- Purpose of collecting, using and disclosing your personal information.
Mrs. CBD will collect, use and disclose your personal data in accordance with the rules outlined in the law, namely: (1) necessity according to a contract or request or service that you have made to Mrs. CBD; to then comply with any contract or request or service you have made with Mrs. CBD; (2) legal obligations which Mrs. CBD must comply with under the law; (3) Mrs. CBD’s legitimate interests or other persons or juristic persons (4) the necessity to prevent harm to the life, body or health of persons; (5) the necessity for the public interest or the exercise of government rights, or (6) your consent if it is not required by the criteria specified in (1) to (5), for one of the following purposes:
2.1 For communication or to provide information related to or related to the products or services or information that you use or will use with Mrs. CBD.
2.2 For the execution of the agreement specified in your request (e.g. an employment application) or the contract you have entered into with Mrs. CBD or related to contracts (e.g. employment contracts) or requests that you make with Mrs. CBD, such as the transfer of documents or to comply with agreements entered into between Mrs. CBD and other parties that are necessary and relevant to the provision of services to you;
2.3 In order to manage your relationship with Mrs. CBD and provide details or history of using a service provided by Mrs. CBD or for offering a service to you in the future.
2.4 To verify your identity according to Mrs. CBD’s, know your client process, including checking and confirming your information and following up with any guidelines required by law and the Mrs. CBD.
2.5 For any action as required by the laws of Thailand, be it requested or recommended to comply.
2.6 For management and internal management of Mrs. CBD, such as supervision, improvement or the audit of Mrs. CBD’s internal operations.
2.7 For the management of various risks such as
(1) Preventing, dealing with or reducing risks that may arise from illegal actions which may happen to you, a Mrs. CBD customer, personnel of the Mrs. CBD and Mrs. CBD by using it in considering the improvement of the security system related to the use of various channels, operations and security systems for the Mrs. CBD’s information technology operations.
(2) Security, such as recording images of visitors through CCTV and those entering the building for security purposes.
2.10 To provide and offer you products, services and service options, including offering services or products from Mrs. CBD’s business partners.
2.11 For verification of contractual obligations or to check commitments according to you or your contractual party.
2.12 For the management of services and complaints such as checking transactions from clubs and restaurants, venues and in-house services that deal with financial transactions and checking wrong financial transactions or the transmission of information within Mrs. CBD or between Mrs. CBD and other people or our business partners to support complaints. Or to be used as supplementary data for adjusting work processes related to such matters.
2.13 For statistical analysis or research related to the Mrs. CBD’s business operations or for companies in the Mrs. CBD, including affiliates and business partners.
2.14 For strategic adjustments for the benefit of evaluating Mrs. CBD’s performance or services.
2.15 For evaluation, development and improvement of products or services or take action to enforce Mrs. CBD’s rights, which may provide information derived from such analysis to Mrs. CBD for financial forecasting or updating services within the group’s companies and affiliates.
2.16 For organising promotional projects or activities, meetings, seminars, recreation and on-site visits.
2.17 For cloud storage and other systems that Mrs. CBD uses to store information.
2.18 For the performance of duties in accordance with the conditions that Mrs. CBD and its business partners are a party to or to enforce legal or contractual rights binding Mrs. CBD.
2.19 To connect or facilitate your access to the website, employment applications and goods or services offered by Mrs. CBD or its business partners.
The collection, use or disclosure of your personal information, such as sending or transferring your personal information to Mrs. CBD’s business partners in accordance with the rules set out in this statement.
- Persons or entities who may have disclosed your personal information from Mrs. CBD.
Mrs. CBD may be required to disclose your personal information to other persons or entities located in Thailand or abroad in order to achieve the objectives stated in this letter, namely.
3.1 Business partners of Mrs. CBD such as business alliances in finance, accounting services, shareholders, marketing, transportation, telecommunication, health centres, insurance or life insurance companies, or any person(s) that are involved in the promotion of the Mrs. CBD or their affiliates, data analysis Platform contributors or a person whose name or logo appears in any contracts, websites or other service channels of Mrs. CBD.
3.2 Persons involved in Mrs. CBD’s services For example, those who act as intermediaries in various Mrs. CBD transactions or payment system providers. Mrs. CBD’s service partners outsource service providers, operators or sellers of goods or services to Mrs. CBD. Or Mrs. CBD representatives both domestically and internationally to which Mrs. CBD is a contractual party, such as an infrastructure development service provider, internet network service provider, telecommunication and Communication Service Providers, technical infrastructure provider, Electronic system development or information technology service provider, Logistics and Warehousing Service Providers, Cloud service provider, for doing research, data analytics provider. Communication service provider, Survey service provider, Organisers of events and activities, Verification and authentication system provider, Service provider for checking and reading data with electronic devices, Verification and verification service providers, credit rating agency, courier service, recording service providers and service providers regarding security or fraud prevention.
3.3 Individuals or agencies as required by law Mrs. CBD may be required to disclose your personal information to comply with laws, rules, regulations and regulations or orders of government agencies, government agency regulators or in cases where the Mrs. CBD believes that such action is necessary to comply with the law to protect the rights of Mrs. CBD or other persons for the safety of others or to prevent, investigate or deal with fraud, security or safety issues in various fields.
3.4 Consultants in various fields of Mrs. CBD such as financial, legal, technical, website and auditor experts.
or accepting the transfer of the Mrs. CBD’s claim This includes those involved in corporate restructuring, business transfers, investments, mergers and acquisitions. The purchase or sale of assets or businesses by persons involved in such operations.
3.5 Consultants in various fields of Mrs. CBD such as financial, legal, technical, website and auditor experts.
3.6 Associations, organisations, clubs and agencies Such as employment agencies.
3.7 Various websites and social media Such as Facebook, Google or Instagram.
- Retention of your personal information and the retention period of your personal data.
4.1 Retention of your personal data.
Mrs. CBD has established measures for the security of personal information, both in document format and electronic form to prevent the loss, access, use, change, alteration or disclosure of personal information without right or unlawful.
4.2 Period of retention of your personal data.
Mrs. CBD will collect your personal information for the purposes stated by Mrs. CBD in this statement. As required by law and up to 10 years from the date you terminate your relationship with Mrs. CBD, unless Mrs. CBD has other necessities as required by law or such personal data is information that cannot be deleted or destroyed due to technical limitations.
- Sending your personal information abroad.
In the event that the Mrs. CBD has a necessity to send or transfer your personal information to persons residing in foreign countries, such as your counterparty or representative, affiliates or organisation in a foreign country or destination recipient of such information where they may be insufficient standards for personal data protection as required by law, Mrs. CBD will provide an appropriate process so you can be sure that your personal information sent to the recipient will be safe - The website system that Mrs. CBD uses to collect information.
To access Mrs. CBD’s website system, Mrs. CBD automatically collects certain information from your use for the purposes set out in this statement. For example, Mrs. CBD may use the information that cookies and similar technologies have recorded or collected to be used in statistical analysis or in other activities of the website system, or Mrs. CBD businesses to help Mrs. CBD provide you with a good experience whilst using the website as well as to improve the efficiency and quality of Mrs. CBD’s website system services. - Rights of personal data subject
You, the owner of the personal data, have the following rights:
7.1 Right to request access and obtain a copy of personal data.
You have the right to request access and obtain a copy of personal information about you, which is under Mrs. CBD’s responsibility or request Mrs. CBD to disclose the acquisition of such personal data that you did not give consent.
You have the right to obtain personal data about yourself that you have provided to Mrs. CBD based on your consent or necessity under this statement or as announced by the Personal Data Protection Committee. In the event that Mrs. CBD has made such Personal Data in a form readable or generally usable by means of an automated tool or device and that the Personal Data can be used or disclosed by any means, including having the right to (1) request that Mrs. CBD transmits or transfer personal data in such form to other personal data controllers whenever possible by automated means; and (2) request personal data that Mrs. CBD sends or transfers in such form to other personal data controllers directly except by technical conditions if it is not possible.
7.2 Right to object.
You have the right to object to the collection, use or disclosure of your personal information by Mrs. CBD in the event that: (1) Mrs. CBD collects your personal information due to the necessity of performing its business or group businesses for Mrs. CBD’s public interest; or the exercise of government rights or for Mrs. CBD’s legitimate interests or other person or juristic person; (2) Mrs. CBD collects, uses or discloses your personal information for marketing purposes; or (3) Mrs. CBD collects, uses or discloses your personal information for the purposes of research studies or statistics.
7.3 Right to request the deletion or destruction of personal data.
You have the right to ask Mrs. CBD to delete or destroy or make your personal information non-identifiable in the event that:
(1)Your personal information is no longer necessary for Mrs. CBD to keep for the purpose; or (2) You withdraw your consent, and Mrs. CBD does not have statutory authority to continue using or disclosing that personal information; or (3) You object to the collection, use or disclosure of your personal information collected by Mrs. CBD due to the necessity of carrying out its mission for the interest of Mrs. CBD or the exercise of government rights or for the Mrs. CBD’s legitimate interests or other person or juristic person and Mrs. CBD cannot refuse such objection; or (4) You object to the collection, use or disclosure of personal information for direct marketing purposes; or (5) Your personal information has been collected, used or disclosed without legality unless Mrs. CBD is obliged to collect your personal information for legal compliance, Establishment of legal claims or the use or defence of any Mrs. CBD’s claim(s).
7.4 Right to request to suspend the use of personal data.
You have the right to suspend the use of your personal information in the event that (1) Mrs. CBD is in the process of reviewing the request to exercise the right to correct the personal information to be current; (2) Mrs. CBD collects, uses or discloses your personal information unlawfully (3) Mrs. CBD is not obliged to collect, use or disclose that information for one purpose but you require Mrs. CBD to collect your personal data for your benefit by law; or (4) you wish Mrs. CBD to suspend the use of your personal data because it is in the process of proving or verifying objection(s) to your personal data.
7.5 Right to request to correct personal data.
You have the right to ask Mrs. CBD to correct your personal data to be accurate, current, complete and not misleading.
7.6 Right to withdraw consent.
You have the right to withdraw your consent to Mrs. CBD from which you consent to Mrs. CBD collecting, using and disclosing your personal information at any time. You have the right to notify the revocation of consent for personal data Mrs. CBD collected before the Personal Data Protection Act B.E. or collected via an employment agency used by Mrs. CBD.
7.7 Rights of complaint.
You have the right to complain to an agency or legal authority. In the case of Mrs. CBD or personal data processors, including employees or contractors of Mrs. CBD who violate or fail to comply with the law on personal data protection.
In the event that you wish to exercise any rights under Clauses 7.1 to 7.7 above. You can make a request to Mrs. CBD through Mrs. CBD or any other channels as specified by your manager. When Mrs. CBD has received your request, Mrs. CBD will consider your request in accordance with the rules and conditions prescribed by law and will complete your request and notify you of the result of consideration and action within 30 days from the date Mrs. CBD has received the request and complete supporting documents.
In the event that you exercise the rights of the subject of such personal data, this may prevent you from receiving certain services from Mrs. CBD whilst Mrs. CBD considers or processes your request.
Mrs. CBD will not charge a fee from you as a result of any request for the exercise of rights unless Mrs. CBD deems that the request for the exercise of your rights is excessive or without any other reasonable cause. In this case, Mrs. CBD may charge a fee for processing your request but will inform you of the rates should this become applicable. You can request to exercise the rights of the personal data subject from the date the Personal Data Protection Act B.E. 2562 came into force.
- Changes to this Personal Data Protection Notice.
Mrs. CBD may change this Personal Data Protection Notice from time to time as it deems appropriate, and Mrs. CBD will notify you through its websites and applications. Mrs. CBD recommends that you read and review the details in the Personal Data Protection Notice whenever such amendments are made.
Contact
If you wish to contact or would like to know more information or explanations about the collection, use and disclosure of your personal information, including the request to exercise the rights of the personal data subject under this statement, you can contact Mrs. CBD
Mrs. CBD
Address: 1 Soi Sukhumvit 22, Klongton,
Khlong Toei, Bangkok 10110
+66 63 082 8420
info@mrs-cbd.com