Business Partner Privacy Policy

Siam Takashimaya (Thailand) Company Limited, (the "Company", "we", "us", or "our") respects the importance of the protection of any information relating to an identified or identifiable natural person ("Personal Data") in our businesses. This Business Partner Privacy Policy ("Privacy Policy"") describes how we collect, use, disclose, and/or transfer outside of Thailand Personal Data of employees, personnel, authorized persons, directors, shareholders and other contact persons ("you" or "your") of our business partners (e.g. tenants, suppliers, vendors, service providers and outsourcers) (each a "Business Partner"), and tells you about data protection rights.

Your Personal Data is collected, used, disclosed, and/or transferred outside of Thailand by us because we have an existing or potential business relationship with you or the Business Partner you work for, act for or represent. For example, our Business Partner provides products or services to us, or work together with us to provide our customers products or services, or otherwise communicates with us in relation to any business.

1. What Personal Data we collect

We may collect your Personal Data directly from you or your company or indirectly from other sources and through our affiliates, other companies or other business partners, or from publicly available sources. The specific type of data collected will depend on communication and interaction between you and us, and within Siam Piwat Group. The following are example of Personal Data that may be collected:

1) Personal Details: such as, title, full name, gender, age, nationality, marital status, photograph, work-related information (e.g., position, type of products and services, company you work for, employed at or holds shares of), information on government-issued documents (e.g., national identification card, passport, work permit, house registration), signature, name card, CCTV records, vehicle details (e.g., copy of vehicle registration book, license plate number, brand, and color), financial details (e.g., bank account name and number) and other identifiers.
2) Contact Details: such as, telephone number, fax number, postal address, workplace, e-mail address, Line ID and other similar information.
3) Sensitive Data: such as, religion and health data.
4) Other information collected, used and/or disclosed in connection with the relationship between us and the Business Partner, such as, information you give us in contracts, forms or surveys.

If you provide Personal Data of any third party to us, e.g., their name and telephone number for emergency contact, please provide this Privacy Policy for their acknowledgement and/or obtaining consents where applicable.

2. Why we collect, use and/or disclose your Personal Data

2.1. The purpose of which you have given your consent:

1) Sensitive Data: To the collection, use, disclosure, and/or transfer of your sensitive Personal Data for the purposes where consent is required by law.

2.2. The purposes we may rely on and other legal grounds to collect, use and/or disclose your Personal Data

Depending on the nature of our relationship with you, we collect, use and/or disclose your Personal Data for the following purposes, on the legal basis of legitimate interests, entering into or performance of contract, legal compliance, consent, or any other basis as permitted by applicable laws, as the case may be:

1) Business Partner selection: such as, to evaluate suitability and qualifications of you and the Business Partner; to issue request for quotation; to execute contract with you and the Business Partner;
2) Business purposes: such as, to manage the contractual relationship with the Business Partner; to communicate with you and the Business Partner about products, services and projects between us; to proceed with the transaction made by Business Partner (e.g., delivery, exchange and return of products, invoice and receipt issuance); to perform any obligations and/or request made by Business Partners;
3) Relationship management: such as, to create a vendor code; to register in lists/directories of Business Partner; to provide support services and keep tracks and records; to allow you to borrow and return tools and equipment; to grant you building access card and parking card; to invite the Business Partner to participate in events/activities;
4) Registration and Authentication: such as, to register, verify, identify, and authenticate you or your identity;
5) Marketing purposes: such as, to inform you of information relating to marketing communication, activities, sales, services, public relation, notices, news, promotions, special offers, product display, procurement and support, special activities, and direct marketing (collectively called "Marketing Activities")
6) Complying with reasonable business requirements, including but not limited to internal management, training, survey, service quality, auditing, reporting, submissions or filings, data processing, or other related or similar activities;
7) Security monitoring: such as, to monitor access control system, devices and internet; to ensure security, risk prevention and solving crimes, to record and handling on offences, and disputes; to proceed on crime or fraud prevention;
8) Compliance with internal policies and applicable laws, regulations, directives and regulatory guidelines; to handle tax payment, VAT refund and other fees;
9) Liaising and interacting with and responding to government authorities or courts or tribunals;
10) To prevent or suppress a danger to a person’s life, body, or health.

Where we need to collect your Personal Data as required by law, or for entering into or performing the contract we have with you or Business Partner and you fail to provide that data when requested, we may not be able to fulfill the relevant purposes as listed above.

We will only collect, use, and/or disclose sensitive data on the basis of your explicit consent or where permitted by law.

3. To whom we may disclose or transfer your Personal Data

We may have to disclose or transfer your Personal Data to the following third parties who process Personal Data in accordance with the purpose under this Privacy Policy. These third parties may be located in Thailand and areas outside Thailand. You can visit their privacy policy to learn more details on how they process your Personal Data.

3.1. Siam Piwat Group

As Siam Takashimaya (Thailand) Company Limited, is part of Siam Piwat Group which all collaborate and partially share Business Partner services and systems including website-related services and systems, we may need to transfer your Personal Data to, or otherwise allow access to such Personal Data by other companies within Siam Piwat Group for the purposes set out above. This will allow other companies within Siam Piwat Group to rely on consent obtained by Siam Takashimaya (Thailand) Company Limited.

3.2. Our service providers

We may use other companies, agents or contractors to perform services on behalf of or to assist with the business relationship with you. We may share Personal Data including, but not limited to (1) banks and financial institutions; (2) logistic and courier service providers; (3) auditors; (4) telecommunications and communication service providers; (5) outsourced administrative service providers; (6) data storage and cloud service providers; (7) insurance company; (8) risk management service provider; (9) travel agencies, and/or (10) internet, software, digital media, IT system service providers and IT support company.

In the course of managing our business relationship, the service providers may have access to your Personal Data. However, we will only provide our service providers with the information that is necessary for them to perform the services, and we ask them not to use your information for any other purposes. We will ensure that all the service providers we work with will keep your Personal Data secure.

3.3. Our Business Partner

We may transfer your Personal Data to our Business Partner to conduct business and services provided that the receiving Business Partner agrees to treat your Personal Data in a manner consistent with the Thai applicable laws on data protection which is in effect at that time.

3.4. Third party sites

We may use advertisements which may link to the other websites, mobile applications, social networking sites and online communication channels, such website, mobile application, social networking site, online communication channel may have its own term of use, measure, or policy related to the use of the service and privacy policy differ from the Company's Privacy Policy and Term of Use. We suggest that you should review such term of use, measure, or privacy policy of such website personally.

3.5 Third parties permitted by law

In certain circumstances, we may be required to disclose or share your Personal Data in order to comply with a legal or regulatory obligations. This includes any law enforcement agency, court, regulator, government authority or other third party where we believe this is necessary to comply with a legal or regulatory obligation, or otherwise to protect our rights, the rights of any third party or individuals’ personal safety, or to detect, prevent, or otherwise address fraud, security or safety issues.

3.6. Professional advisors

This includes lawyers, auditors and other consultants who assist in running our business and defending or bringing any legal claims.

3.7. Other third parties

We may disclose your Personal Data under the legal grounds as specified in this Privacy Policy to other third parties, such as customers or a person who requests to see the CCTV records, as the case may be.

3.8. Assignee of rights and/or obligations

Third parties as our assignee, in the event of any reorganization, merger, business transfer, whether in whole or in part, will comply with this Privacy Policy to respect your Personal Data.

4. International Transfers

We may disclose or transfer your Personal Data to third parties or servers located overseas, which the destination countries may or may not have the same data protection standards. We take steps and measures to ensure that your Personal Data is securely transferred and that the receiving parties have in place suitable data protection standards or other derogations as allowed by laws. We will request your consent where consent to cross-border transfer is required by law.

5. How long do we keep your Personal Data

We shall retain your Personal Data for as long as is reasonably necessary to fulfil purpose for which we obtained it, and to comply with our legal and regulatory obligations. However, we may have to retain your Personal Data for a longer duration, as required by applicable law.

6. Your rights as a data subject

Subject to applicable laws and exceptions thereof, you may have the following rights to:

1) Access: You may have the right to access or request a copy of the Personal Data we are processing about you. For your own privacy and security, we may require you to prove your identity before providing the requested information to you.
2) Rectification: You may have the right to have incomplete, inaccurate, misleading, or or not up to date Personal Data that we process about you rectified.
3) Data Portability: You may have the right to obtain Personal Data we hold about you, in a structured, electronic format, and to transmit such data to another data controller, where this is (a) personal information which you have provided to us, and (b) if we are processing that data on the basis of your consent or to perform a contract with you.
4) Objection: You may have the right to object to certain processing of your Personal Data such as objecting to direct marketing.
5) Restriction: You may have the right to restrict our processing of your Personal Data where you believe such data to be inaccurate, our processing is unlawful or that we no longer need to process such data for a particular purpose.
6) Withdraw Consent: For the purposes you have consented to our processing of your Personal Data, you have the right to withdraw your consent at any time.
7) Deletion: You may have the right to request that we delete or de-identity Personal Data that we process about you, except we are not obligated to do so if we need to retain such data in order to comply with a legal obligation or to establish, exercise or defend legal claims.
8) Lodge a complaint: You may have the right to lodge a complaint to the competent authority where you believe our processing of your Personal Data is unlawful or noncompliance with applicable data protection law.

7. Security Measures

We maintain appropriate security measures for Personal Data, which cover administrative, technical and physical safeguards in relation to access control to protect the confidentiality, integrity, and availability of Personal Data against any accidental loss or unlawful or unauthorized access, use, alteration, correction or disclosure of Personal Data, in compliance with the applicable laws.

We have implemented measures on controlling access and use of devices for storing and processing Personal Data which are secured and suitable for our collection, use and disclosure of Personal Data. We also have measures on restricting access to Personal Data and the use of storage and processing equipment by imposing users' access rights, users' permission rights to the authorized personnel, and users' duties and responsibilities to prevent unauthorized access, disclosure, perception or unlawful duplication of Personal Data, or theft of device used to store and process Personal Data. This includes measures on the re-examination in relation to access, alteration, erasure, or transfer of Personal Data which are in accordance with methods and channels used to collect, use or disclose Personal Data.

8. Changes to this Privacy Policy

We may amend this Privacy Policy from time to time as our data protection practices change, due to various reasons, such as technological change, change in law. The amendments to this Privacy Policy will be effective upon being published by us on https://www.siamtakashimaya.co.th/cookie-policy. If such amendment, however, substantially affects you as a data subject, we will give you a reasonable prior notice in a suitable manner before such amendment is effective.

9. Contact Us

If you wish to contact us to exercise the rights relating to your Personal Data or if you have any queries about your Personal Data under this Privacy Policy, please contact us or our Data Protection Officer at:

1) Company Name

Siam Takashimaya (Thailand) Company Limited,
299 ICONSIAM Shopping Center, B Floor - 4th Floor ,Charoen Nakhon Road, Khlong Ton Sai Subdistrict, Khlong San District, Bangkok 10600
02-011-7500

OPENING HOURS

EVERYDAY FROM 10:00 A.M. - 10:00 P.M.