M. Water Company Limited (the “Company”) recognizes the importance of the protection of your Personal Data which has already been provided or will be provided to the Company in the future. The protection is our responsibility for our customers
and business partners by complying with laws and regulations relating to the protection of the Personal Data. Therefore, the
Company has prepared this Privacy Policy for your understanding of the procedures of the Company in relation to the collection,
use, and disclosure of your Personal Data subject to the Personal Data Protection Act B.E. 2562 (2019).
1.Definitions
- “Company” means M. Water Company Limited;
- “Affiliates” means Better choices Company Limited;
- “Company’s Website” means websites of the Company and Affiliates, including but not limited to, www.sprinkle-th.com;
- “Data Subject” means an individual whose Personal Data is collected, use, and disclosed by the Company, including but not limited to, customers, business partners, and interested parties of the Company;
- “Personal Data” means any information relating to a person enabling the identification of such person, whether directly or indirectly, but not including the information of the deceased person in particular subject to the Personal Data Protection Act B.E. 2562 (2019) and its amendments as well as related laws;
- “Data Controller” means an individual or a legal entity having the power and duties to make decision regarding the collection, use, or disclosure of the Personal Data;
- “Data Processor” means an individual or a legal entity operating in relation to the collection, use, or disclosure of the Personal Data pursuant to the orders given by or on behalf of a Data Controller;
- “Cookie” means small files which the Company’s Website will place on your computer devices and/or communication devices, e.g., tablets, smartphones when connected to the internet through web browser during the access to or use of the Company’s Website, for the purpose of collecting the Personal Data;
- “Applicable Law” means the Personal Data Protection Act B.E. 2562 (2019) and its amendments as well as related laws.
2.Collection, Use, and Disclosure of Personal Data
The Company collects your Personal Data as follows:
- Collecting by the Company when you access and use the Company’s Website;
- Collecting by the Company when you apply for a membership to purchase goods and services of the Company;
- Receiving the Personal Data from the Affiliates;
- Receiving the Personal Data from a third party, including but not limited to, business partners of the Company
The Company will collect, use, and disclose the Personal Data as necessary subject to the purposes stated in this Privacy Policy in the event that:
- You give Company a consent subject to the Applicable Law;
- It is necessary for the performance of the contract to which you are a party, or in order to take any actions at your request prior to entering into such contract;
- It is for preventing or suppressing a danger to a person’s life, body, or health;
- It is necessary for the legitimate interests of the Company or any individual or legal entity other than the Company, except where such legitimate interests are overridden by your fundamental rights of your Personal Data;
- It is necessary for the performance of a task carried out in the public interest by the Company, or it is necessary for the exercising of official authority vested in the Company;
- Acting in compliance with laws;
- It is for the achievement of the purpose relating to the preparation of the historical documents or the archives for public interest, or for the purpose relating to research or statistics, where the Company will provide suitable measures to safeguard your rights and freedoms.
3.Personal Data to be Collected
During your access to or use of the Company’s Website as well as purchasing goods and services from the Company, the Company may be required to collect or receive your Personal Data as follows:
- Individual Information, including but not limited to, titles, name-surname, gender, identification number;
- Contact Information, including but not limited to, telephone number, e-mail address, billing address and delivery address;
- Membership Information, including but not limited to, membership number;
- Purchase of Goods and Services Information, including but not limited to, number, date, and time of purchase orders, amount, date, and time of payment, date and time of goods receipt;
- Financial Information, including but not limited to, number, type, issuance date, expiration date, and cardholder name or the debit and/or credit card as well as bank account number;
- Behavioral Information relating to Purchase of Goods and Services, including but not limited to, behavioral information relating to purchase of goods and services from the Company and/or Affiliates, and Cookie.
4.Purposes of Collection, Use, and Disclosure of Personal Data
The Company collects your Personal Data for the use and disclosure subject to the purposes as follows:
- For sales and deliveries of current goods and services and those in the future;
- For communications and fostering good relationship between you and the Company;
- For offering benefits and advices relating to goods and services of the Company;
- For processes and analyses for the purpose of improving goods and services deemed appropriate to your needs;
- For market research and analyses, surveys, analyses of statistics and trends in relation to goods and services of the Company;
- For inspections and preventions of any acts which violate or may violate laws, and remedy of damages which may occur;
- For compliances with government agencies’ orders and Applicable Law;
- For protection of businesses of the Company as well as your and any person’s rights subject to laws.
5.Period and Place for Retaining Personal Data
The Company will retain the Personal Data as long as it is necessary in accordance with the purposes stated in this Privacy Policy as well as laws and statute of limitation, except where such Personal Data is during the legal procedure or process of
government agencies.
The Company will retain the Personal Data in the place suitable for forms and types of the Personal Data having security and safety measures subject to the Applicable Law.
6.Disclosure of Personal Data to Third Parties
The Company may disclose the Personal Data to third parties as follows:
- To the Affiliates for marketing purpose;
- To the business partners of the Company for deliveries of goods and services;
- To government agencies and officials for compliance with related laws and orders.
7.Sending or Transferring Personal Data Overseas
The Company may send or transfer the Personal Data overseas by which the Company will arrange the receiving organizations of the Personal Data to have the Personal Data protection standard which is sufficient and in compliance with the Applicable
Law.
8.Rights of Data Subject and Processing Period
In the event that the Company collects, use, and disclose your Personal Data subject to the purposes stated in the Privacy Policy, you may submit a request to exercise your rights subject to the Applicable Law and this Privacy Policy as follows:
- Right to withdraw the consent for the collection, use, and disclosure of your Personal Data by the Company throughout the period which your Personal Data has been retained by the Company, except where there are restrictions of withdrawal of consent subject to laws or contracts giving benefits to you (Processing Period is 7 days);
- Right to access and receive copies of the Personal Data concerning you which are under responsibilities of the Company, and to request the Company to disclose the way your Personal Data was collected without your consent (Processing Period is 30 days);
- Right to receive the Personal Data concerning you from the Company in case that the Company arranges such Personal Data to be in the format which is readable or commonly used by ways of automatic tools or equipment, and can be used or disclosed by automated means, including to request the Company to send or transfer the Personal Data in
such format to other Data Controllers if it can be done by the automated means, and to request to directly obtain the
Personal Data in such format that the Company sends or transfers to other Data Controllers unless it is impossible to do
so because of the technical circumstances (Processing Period is 30 days);
- Right to object the collection, use, or disclosure of the Personal Data concerning you at any time. Where the Personal
Data is collected, used, or disclosed for the legitimate interests of the Company or third parties which are not overridden
by your fundamental rights of your Personal Data, or the performance of a task carried out in the public interest by the Company, or the exercising of official authority vested in the Company, the Company will continue the collection,
use, and disclosure of your Personal Data if the Company can prove the legitimate interests overriding your fundamental
rights, or exercising of legal claims, or defense of legal claims (Processing Period is 30 days);
- Right to request the Company to erase, or destroy, or anonymize the Personal Data to become the anonymous data which cannot identify the Data Subject in the event you consider that the Personal Data is no longer necessary to be retained subject to the purposes by the Company, or you believe that your Personal Data was unlawfully collected,
used, and disclosed, or you have already requested to withdraw your consent or objected, and the Company cannot reject such request (Processing Period is 30 days);
- Right to request the Company to restrict the use of your Personal Data which is under the verification process subject to the right to request the Company to amend your Personal Data, or under your objection, or such Personal Data is no longer to be retained subject to the purposes by the Company and must be erased or destroyed subject to the Applicable Law, but you request the restriction of the use instead (Processing Period is 30 days);
- Right to request the Company to amend your Personal Data to be accurate, up-to-date, complete, and not misleading (Processing Period is 7 days).
You can exercise your aforementioned rights by fill in and submit the request form to the responsible person of the Company. The exercise of your rights may be restricted subject to the Applicable Law and may be rejected by the Company subject to the foregoing reasons or other reasons subject to the Applicable Law. You will be notified of the decision of the Company on
your request with supporting reasons where your request is rejected within the specified period.
9.Data Protection Officer
The Company has appointed the Data Protection Officer with working committee for investigations of the performance of the Company relating to the collection, use, and disclosure of the Personal Data subject to the Applicable Law, as well as giving related advices, including coordination and cooperation with the Office of the Personal Data Protection Committee for any
related matters, and to perform any duties subject to the Applicable Law.
10.Contact the Company and/or Data Protection Officer
If you have any questions, suggestions, or would like to exercise your rights in relation to the collection, use, and disclosure of your Personal Data, you can contact the Company and/or the Data Protection Officer via the following channels:
Water Co., Ltd. (Sales Office)
283/50 Home Place Office Building,
11/Flr. Soi Sukhumvit 55 (Thonglor 13),
Sukhumvit Road, Kwaeng Klongtonnua,
Khet Wattana, Bangkok 10110
Tel. 02-712-7272
E-mail: info@sprinkle-th.com
11.Complaint
If you believe that the Company does not comply with the Applicable Law or this Privacy Policy, you can complain to the Office of the Personal Data Protection Committee via the following channels:
Tel. 02-142-1033, 02-141-6996 (Administration Subdivision)
or 02-141-6668, 02-141-6771 (Legal Subdivision)
E-mail: pdpc@mdes .go.th
120 Moo 3, the Government Complex Commemorating
His Majesty the King’s 80th Birthday Anniversary,
Ratthaprasasanabhakti Building (Building B),
7th Floor, Chaengwattana Road,
Thung Song Hong Subdistrict, Laksi District, Bangkok 10210
12.Amendment of Privacy Policy
The Company reserves the rights to amend this Privacy Policy as deemed necessary and appropriate subject to the Applicable Law. Any amendment will be published on the Company’s Website.