EASTERN POLYMER GROUP PUBLIC COMPANY LIMITED
PRIVACY NOTICE
( FOR CUSTOMER )
Eastern Polymer Group Public Company Limited, hereinafter referred to as the “Company”, respects the privacy rights of its customers. We are aware of the importance of personal data and the protection of personal data that must be adequately provided. To prevent infringement of the privacy rights of the personal data subject, which is our responsibility, therefore; the Company hereby prescribes and notifies the privacy for processing personal data to the personal data owner for their acknowledgement regarding the details related to the collection, use or disclosure of personal data as follows:
1. The purpose for collecting, using or disclosing personal information
The Company will collect, use, or disclose personal information as necessary for doing business under the Company’s objectives and for the benefit of customers participating in the Company’s activities as follows:
1.1 To be used in executing a customer request for the purchase of goods and/or services including participating in activities with the Company.
1.2 For the purchaser’s benefit, registration process trading contract and/or goods payment, etc.
1.3 For the benefit of the Company’s internal management, management, development, facilitating the purchase of goods and delivery and any other actions in order to be able to run a business such as managing the trading and/or developing goods and services.
1.4 Verify identity and validate received information, analysis, and create a database about history, contact, news release, and public relations. Provision of facilities, information security, creating a buyer account, identification for accessing the system and access to information systems, security and safety, investigating and handling complaints and investigations, including fraud prevention.
1.5 For the benefit of protection and security of both people and property.
1.6 For the Company’s communication and public relations activities such as meetings, seminars, recreational activities, social assistance activities, booths, social media activities, etc.
1.7 For the benefit of preventing the spread of communicable diseases or health, both self and public
1.8 To comply with the provisions of the law, rules, and orders of the legal authority.
2. Personal Data Processing Basis
The Company will process personal data based on lawful data processing basis as follows:
2.1 Processing based on a contract basis
2.2 Processing based on a legal basis
2.3 Processing based on the Company’s legitimate benefits basis
2.4 Processing based on the consent of the owner of personal data basis
2.5 Processing on other lawful basis
3. Personal information that is collected, used, or disclosed includes:
3.1 Information and documents related to communications with the Company including contact information on business cards, first name, last name, job title, workplace, address, telephone number, e-mail address or social media information.
3.2 Information about the purchase of any products and/or services of the Company, such as the type of products purchased, purchase history, delivery information, etc.
3.3 Visitor’s record for permission to enter and exit the Company’s premises in case of visitation, buy and/or pick up products in person within the Company.
3.4 Personal identification information such as first name, last name, number, and information on the ID card, driver’s license, or passport copy as the case maybe.
3.5 Financial Information payment for goods and/or credit, etc.
3.6 Information on health history screening during infectious disease outbreaks and food allergies for participating in activities the Company has organized for customers, etc.
3.7 In the case of attending an event, meeting, seminar, or visiting any place of the Company both within the Company area and outside the Company area, personal information collected are, such as information on the registration to participate in activities such as name, surname, age, address, telephone number, e-mail address, social media data, workplace, position, and still photographs and motion photograph while participating in activities, award information, etc.
3.8 Information on online visits and/or purchases and access to information systems, computers, work systems, applications, network systems, electronic devices, e-mail systems, and websites, including the use of cookies to store information to improve and develop the website and to comply with the Company’s information technology policy and related laws.
3.9 Information was collected from company activities such as participation in events, survey responses, and assessment responses.
3.10 Selected information will be shared and disclosed through the Company’s systems, applications, tools, questionnaires, assessments, and documents.
3.11 Other information is necessary for the performance of various legal compliance contracts.
3.12 Other personal data for lawful purposes which is the information made available to the public with express consent.
4. Storage Period of Information
4.1 The Company will keep personal data for the necessary period to achieve the specified objectives by considering the necessity of each type of data practice and after the expiration of such period. The Company will further destroy or delete personal data by appropriate means as determined by the Company.
4.2 The Company will retain the client’s personal data throughout the period of trading and when there are no more trading activities than five years to achieve the client’s privacy objectives.
4.3 The Company will provide an audit system for deletion or destruction of data after the expiration of the retention period, or which is unrelated to or beyond the necessity to collect that data.
5. Disclosure of Personal Information to Third Parties
5.1 The Company may disclose personal information of customers with its affiliates and third parties, such as dealing with other personal data to collect and process personal data to achieve this Privacy Notice’s objectives.
5.2 The Company will assign the recipient to take appropriate measures to protect the applicant’s information and process personal data as necessary, and take steps to prevent the disclosure of information or unlawfully disclosing information.
6. Customer Rights
The customer will still have the right to personal information that the Company collected, including:
6.1 Right to be informed of the details before collecting the customer’s personal data.
6.2 Right to request a copy or transfer their personal data to a third party data controller.
6.3 Right to object to data collection without consent.
6.4 Right to request for suspension of the use of information.
6.5 Right to request for the removal and destruction of the information that no longer required to be stored.
6.6 Right to request to keep the customer’s personal data up to date.
6.7 Right to withdraw consent for information collected based on consent.
6.8 Right to complain if the Company uses the customer’s personal information unlawfully.
However, the refusal to provide information or withdraw consent is required for the aforementioned necessity and purposes. This may prevent the operation from operating entirely, and the withdrawal of consent will not affect the collection, use or disclosure of information for which consent has been given.
7. Measurement to maintain the Security of Personal Data
To maintain security and prevent the loss, access, use, alteration, correction, or disclosure of personal data without authority or wrongdoing. The Company has provided a system for collecting personal information. There is an access control mechanism, security measures are in place, and the Company will arrange for regular reviews of measurement to be effective in maintaining physical, administrative and technical security.
8. Ways to contact the Company and the Personal Data Protection Officer
If you have any questions about this Privacy Notice for Customers or want to exercise the specified rights, please use the contact form on the Company website. https://epg.co.th/ or contact via Personal Data Controller or Personal Data Protection Officer, Eastern Polymer Group Public Company Limited, as follows:
8.1 Personal Data Controller: Eastern Polymer Group Public Company Limited: Sale & Maketing Department
- No. 770 Thepharak Road, Thepharak Subdistrict, Mueang District, Samut Prakan Province 10270
- Tel. 02 383 6599
8.2 Personal Data Protection Officer:
- No. 770 Thepharak Road, Thepharak Subdistrict, Mueang District, Samut Prakan Province 10270
- Email: dpooffice@EPG.co.th
- Tel. 02 383 6599
This announcement is to be effective from November 1, 2021, onwards.
It was announced on October 29, 2021.
