- Privacy Policy
- 1. About us
- 2. Introduction
- 3. From who does the Company collect the Personal Data
- 4. How does the Company collects the Personal Data
- 5. What Personal Data does the Company collect
- 6. What are Purposes of the Company’s collection and process of your Personal Data
- 7. To whom does the Company disclose your Personal Data
- 8. Personal Data Retention Period
- 9. Minor’s Personal Data
- 10. Rights of Data Subject
- 11. Contact us
- 12. Amendments
Privacy Policy
King Power Group[1] (the “Company”) values and strictly adheres to the customer’s personal data protections. The Company announces this Privacy Policy (the “Policy”) to comply with Personal Data Protection Act 2019 as well as its amendments and relevant subordinate regulations (collectively “Personal Data Protection Laws”)
[1] King Power Group means any and all company/companies as follows:
- King Power Tax Free Co.,Ltd.
- King Power International Co.,Ltd.
- King Power Duty Free Co.,Ltd.
- King Power Development Co.,Ltd.
- King Power Marketing and Management Co.,Ltd.
- King Power Click Co.,Ltd.
- King Power Hotel and Management Co.,Ltd.
- King Power Entertainment Co.,Ltd.
- King Power Suvarnabhumi Co.,Ltd.
- King Power Aviation Co.,Ltd.
- King Power Mahanakhon Co.,Ltd.
- Multiply by Eight Co.,Ltd.
- V&A Holdings Co.,Ltd..
- King Power Corporation Co.,Ltd..
1. About us
The Company originally engages in retail and duty free businesses. Its downtown and airport duty free outlets offer tax free and duty free goods to customers. These include outlets at King Power Rangnum, King Power Mahanakhon, King Power Pattaya, King Power Srivaree, King Power Phuket and international airports. The Company’s businesses have expanded to advertising screen within domestic and international passenger terminals at Suvarnabhumi, Don Mueang, Phuket, Chiang Mai and U-Tapao (Rayong-Pattaya) International Airports, hotels, tourism-related activities, corporate social responsibility activities, sports, King Power Aksra Theatre, food outlets and restaurants (collectively the “Businesses”)
2. Introduction
This Policy explains how the Company manages data that directly or indirectly identifies or may identify you as required by the Personal Data Protection Laws (the “Personal Data”) including process, collection, use and disclosure of such Personal Data (“Process/Processing”) and informs you of the purposes of the Personal Data Processing, the Personal Data Retention Period and your rights as Data Subject. For your complete awareness of the Personal Data Protection Laws please thoroughly read and understand the provisions of this Policy.
3. From who does the Company collect the Personal Data
This Policy governs the Personal Data collection and processing from the Company’s customers namely persons who buy or may buy products and/or services from any Businesses, website service users and/or visitors, application service users, service users at King Power Aksra Theater, customers at the Company’s food outlets and restaurants, activities participants, persons contacting the Company for queries, information or services and other persons associating with the Company in the similar manner. In case such person is a legal person, it shall include individual persons associating with or representing it.
4. How does the Company collects the Personal Data
The Company may collect your Personal Data in the following ways:
| 4.1 | You directly give your Personal Data to the Company | when you apply for membership to buy products or use services from any Businesses by filling such data in application forms whether in paper or through website, application, online social media or other channels. |
| when you order or purchase products from the Company. | ||
| when you reserve or use services from the Company. | ||
| when you send documents containing your Personal Data to the Company. | ||
| when you contact, request for information or give opinions or comments to the Company through available channels such as website, application, online social media and call centre. | ||
| when you apply or participate in events, marketing activities or other activities held by or in the name of the Company. | ||
| when you accept news release or public relations materials from the Company. | ||
| 4.2 | The Company receives your Personal Data from Third Party | when the Company’s affiliates and/or business alliance or counterparties forward your Personal Data to the Company for the purpose of offer and/or provision of services to you and related activities. |
| when service providers engaged by the Company in providing service to you forward your Personal Data to the Company as. | ||
| in certain cases the Company may collect your Personal Data from public domain or commercial data sources whether you personally disclose or consent for disclosure of your Personal Data such as corporate or government agencies’ websites, data available on internet or online social media. | ||
| 4.3 | The Company automatically collects your Personal Data | when you visit and/or use website, application or online platforms using cookie or similar technologies to collect technical data on your use. Please read the Company’s Cookie Policy. |
| when you use services or contact the Company on its premises under CCTV surveillance with camera recording in slide and video. |
In collection of your Personal Data you will be informed of details of this Policy including purposes and legal basis for processing the Personal Data or if required by the Personal Data Protection Laws, the Company will seek your consent prior to processing your Personal Data.
5. What Personal Data does the Company collect
In operating the Businesses and subject to this Policy the Company may collect your Personal Data received directly from you or third party or automatically collected by the Company as follows:
| 5.1 | Personal Identity Information | such as name, date of birth, age, gender, nationality, religion, occupation, work title, photo, identity card number, passport number, signature and office address etc. |
| 5.2 | Contact Details | such as mobile number, home telephone number, office telephone number, home facsimile number, office facsimile number, email address, online social media account, identity card address, household register address, office address, product delivery address, invoice delivery address and contact person details etc. |
| 5.3 | Membership Usage | such as information given by you at the time of membership application and use of services of the Company (including King Power Membership Card), Account ID, Password, history of change in user account details, product and/or service purchase behaviour and tendency, records on system log in and log out, system visit period, searched information and comment on products and/or services etc. |
| 5.4 | Purchase and Service Transactions | such as purchase details (including wanted products, type, size, volume, price and quality), service details (including date to use services, number of service users, required services, restricted or allergic food) and details of complain on products and/or services (including date of product purchase and/or service use, type of product, relevant branches and encountered problems) etc. |
| 5.5 | Finance | such as bank account number, credit card or debit card number, payment terms, incomes, source of incomes, personal data on invoice, tax invoice, receipt and other payment details or information etc. |
| 5.6 | Transactional Evidence | such as personal data on copy of National ID Card, passport, government officer card, state-owned enterprise officer card, household register, certificate of name/surname change, power of attorney, corporate certification document (in case of legal person), medical certificate, delivery note and sale contracts or other related contracts etc. |
| 5.7 | Travel | such as flight code, flight date and time, airlines and other travel details and information etc. |
| 5.8 | Technical Information | such as computer traffic information (log) and information collected by the Company through cookie or other similar technologies including log in information on website, application and other systems of the Company, device identity, IP address number, location, browser and using behaviours etc. |
| 5.9 | Others | such as telephone voice records, CCTV video and voice recording and body temperature etc. |
In certain cases the Company may collect your sensitive Personal Data including health data on allergic food to warn the customers using guest lounge the food menu with allergic ingredients and health data as appeared in the medical certificate as a basis to claim compensation from insurers. The Company may process the sensitive Personal Data upon your consent or as required by the Personal Data Protection Laws. In case the Company collects your Personal Data prior to the effective date of the Personal Data Protection Laws, the Company will continually collect and use your Personal Data for its original purposes. However from 1st June 2021 onwards if you do not wish the Company to retain and use such Personal Data, you may contact the Company to revoke your consent at contact details in paragraph 11 of this Policy. The Company reserves the right to review your request and proceed with such consent revocation in accordance with the Personal Data Protection Laws.
6. What are Purposes of the Company’s collection and process of your Personal Data
6.1 The Company may process your Personal Data for the following purposes under the Personal Data Protection Laws (collectively the “Purposes”):
- (a) for the Businesses operations and provision of service to you including without limitation duty free outlets to sell tax free and duty free products, advertising screen within domestic and international passenger terminals, theatre and restaurants.
- (b) for offer, sale, provision and handling of products and/or services to you on the Company’s premises, website, application or other channels whether managed by the Company or through a third party.
- (c) for membership registration in the Company’s system and service provision to you through its website, application or service channels including amendment of details on your user account and related facilities.
- (d) for processing your purchase order and/or service request including product sale and/or service provision by the Company and/or through a third party service provider.
- (e) for execution of sale contract, service contract and other contract in relation to products and/or services of the Company and other process in relation to such contract execution such as examination of supporting documents, qualifications and personal identity etc.
- (f) for your payment of products and/or service and related handling including without limitation payment sum confirmation, product price or service fee collection, invoice, direct debit from bank account, data transfer to the bank or provider of credit or debit cards and receipt delivery etc.
- (g) for delivery of products purchased by you at downtown duty free outlets, through website, application or e-commerce platform whether from the Company or third party seller at airport pick-up counter or other places. The Company may forward your Personal Data to a third party for such product delivery to you.
- (h) for your information on product delivery, tax invoice and receipt including warranty and after sale services in relation to the purchased products and/or services.
- (i) for granting discount, coupon, points, rewards, promotions and/or other benefits to you.
- (j) for review of your complain and suggestion in relation to products and/or services of the Company to improve the Company’s product and service quality.
- (k) for in-depth analysis and marketing research on product and/or service purchase behaviours, website and/or application usage, understanding in usage manner that you may be interested in to develop the Company’s product and service quality and marketing purposes.
- (l) For take survey about products and/or services of the Company or interested in your lifestyle in order to develop quality of the Company’s product and service and marketing purpose.
- (m) for liaison with insurance companies in case of your bodily injury or death and/or loss to your property.
- (n) for liaison with you on product purchase, service provision and/or participation in activities of the Company, response to your requests, enquiries and/or suggestions including to deliver news release and public relations materials in which you may be interested or which may be to your benefits.
- (o) for compliance with laws governing the Company’s Businesses including the Personal Data Protection Laws, tax laws, customs laws, consumer protection laws, anti-money laundering laws and computer crime laws etc.
- (p) for compliance with lawful orders of the competent government agencies and officers.
- (q) for establishment of legal claims, legal enforcement and claim exercise or defence of claim by or against the Company.
- (r) for examination and control of public order, safety and security, management and protection of IT infrastructure and safety of the Company’s personnel and third parties on the Company’s premises including property and data of the Company.
- (s) for necessary actions in the Businesses operation to your benefit or directly relating to the above purposes.
- (t) other purposes as informed to you by the Company.
The Company will process your Personal Data in accordance with the aforesaid purposes and on the following legal basis:
- (a) necessity to perform contract to which you are a party or your request prior to the contract execution.
- (b) necessity of the Company to comply with laws.
- (c) necessity to protect legitimate benefits of the Company or person or legal person other than the Company.
- (d) necessity to perform by the Company duty for public interest or to exercise the state power entrusted upon the Company.
- (e) protection or prevention of danger to life, body and health of person.
- (f) educational, research or statistic purposes which provides suitable protective measures for your rights and freedom.
- (g) your consent granted to the Company in case there is no such exemption or legal basis mentioned above.
For further details on purposes and legal basis in respect of your Personal Data processing, you may contact the Company at contact details in paragraph 11 of this Policy.
7. To whom does the Company disclose your Personal Data
7.1 The Company may disclose your Personal Data subject to the purposes of this Policy and requirements by laws to persons and agencies as follows:
- (a) King Power Group including its executives, directors, officers, employees and/or personnel within its organisation to the relevant extent and as necessary for processing your Personal Data.
- (b) the Company’s consultants such as auditor, legal counsel, lawyers or other experts both within and outside King Power Group.
- (c) business alliance, counterparties, service providers and processor of the Personal Data engaged or hired by the Company in managing and/or processing the Personal Data for the Company’s Businesses operations including payment services, mail and parcel delivery services, printing, IT services, website services, data storage services, data analysis services, research, marketing, travelling or other services which may benefit you or relate to the Company’s Businesses operation.
- (d) government agencies in charge of enforcement of the applicable laws or ordering a disclosure of the Personal Data by virtue of applicable laws or related legal process or permitted by the relevant laws including Customs Department, Revenue Department, Department of Airports, Bank of Thailand, Civil Aviation Authority of Thailand, Office of Trade Competition Commission, Office of Personal Data Protection, Royal Thai Police, Office of The Attorney General and courts etc.
- (e) webpage, application and/or online social media of the Company.
- (f) persons or other agencies to which you consent for disclosure of your Personal Data.
7.2 In disclosing your Personal Data to other person the Company shall provide suitable measures to protect the disclosed Personal Data and comply with standards and duties to protect the Personal Data as required by the Personal Data Protection Laws. If the Company transmits or transfers your Personal Data to overseas recipient, the Company shall ensure that the country of destination, international organisation or overseas recipients have personal data protection standards as sufficiently meeting or comparable to requirements under the Personal Data Protection Laws. In certain cases the Company may seek your consent for transmission or transfer of your Personal Data to overseas recipient.
7.3 Disclosure of your Personal Data to a third party will be made in accordance with the purposes of this Policy or permitted by laws. In case the laws require your specific consent, the Company will first seek such consent from you.
8. Personal Data Retention Period
8.1 The Company will retain your Personal Data for a period necessary to achieve the purposes for its processing. Personal Data retention period might be varied by the purposes for its processing and taking into the following factors:
- (a) period as required by the relevant laws (if any)
- (b) statute limitation for legal action arising from or in connection with the documents or Personal Data collected by the Company.
- (c) practice of the Company and business sector for the Personal Data in each classification.
The Company will retain your Personal Data for a period not exceeding 10 years from the date of transactions or legal obligations between you and the Company are fulfilled or terminated. However the Company may retain your Personal Data for a longer period if permitted by laws or such retention is necessary for establishment of legal claims of the Company.
8.2 After expiration of the above retention period the Company will delete, destroy or de-identify such Personal Data from its system and system of any other persons providing services to the Company (if any) save and except that the Company could continually retain such Personal Data as required by the Personal Data Protection Laws or other applicable laws. For further details on retention period of your Personal Data, you may contact the Company at contact details in paragraph 11 of this Policy.
9. Minor’s Personal Data
The Company may from time to time collect and process the Personal Data of a minor under sui juris age. The Company will comply with the Personal Data Protection Laws in relation to processing of the Personal Data of said person including to seek consent from his/her legal representative or guardian as required by the Personal Data Protection Laws.
10. Rights of Data Subject
As Data Subject you have the following rights in respect of your Personal Data subject to criteria, procedure and conditions stipulated in the Personal Data Protection Laws:
| 10.1 | Right to Access | You have the right to access to your Personal data and request the Company to extract a copy of such Personal Data to you subject to the Personal Data Protection Laws. |
| 10.2 | Right to Transfer | You have the right to obtain your Personal Data including to transmit or transfer your Personal Data to other Personal Data Controller or to you except that such request by nature is not possible and subject to the Personal Data Protection Laws. |
| 10.3 | Right to Object | You have the right to object the processing of your Personal Data as permitted by the Personal Data Protection Laws |
| 10.4 | Right to Delete | You may ask the Company to delete, destroy or de-identify your Personal Data as permitted by the Personal Data Protection Laws. |
| 10.5 | Right to Suspend | You have the right to ask the Company to suspend the processing of your Personal Data as permitted by the Personal Data Protection Laws. |
| 10.6 | Right to Correct | You have the right to correct your Personal Data if it is incorrect, not current, incomplete or causes confusion. |
| 10.7 | Right to Revoke Consent | In case the Company processes your Personal Data based on your consent, you have the right to revoke such consent granted to the Company. |
| 10.8 | Right to Complain | In case there is a ground to believe that the Company violates the Personal Data Protection Laws, you have the right to lodge a complaint with the expert committee appointed by the Personal Data Protection Commission in accordance with regulations and procedures set out by the Personal Data Protection Laws. |
From 1st June 2021 onwards if you wish to exercise the aforesaid rights, you may contact the Company at contact details in paragraph 11 of this Policy. The Company will exercise its best endeavours to the extent of the relevant system capacity to accommodate and respond to your request.
11. Contact us
You may contact the Company for enquiry about this Policy, management of your Personal Data, complaint and exercise of your rights under paragraph 9 above at:
King Power International Co Ltd
8 Rangnam Road, Phayathai, Ratchathewi, Bangkok
You may contact our Data Protection Officer at:
8 Rangnam Road, Phayathai, Ratchathewi, Bangkok
Email: dpo@kingpower.com
12. Amendments
The Company may from time to time amend this Policy to comply with any change in your Personal Data processing and the Personal Data Protection Laws or other applicable laws. The Company will inform you of significant change in this Policy through appropriate channels. The Company recommends you to from time to time check the updated and amended Policy.
This 1st edition Policy is effective on 20th June 2022.
Announced on 1st August 2022.