01
“Personal Data” means information that can identify you or may be able to identify you, whether directly or indirectly, such as your name, email address, company name, job position, and company address, and the Company may collect your additional personal data, such as date of birth, home address, telephone number, online user identity (such as social media accounts), marital status, and family details.
02
2.1 The collection of personal data must be done within the purpose and scope of lawful and fair methods to collect and store information. The collection and storage of personal data shall be limited to the extent necessary to provide services or services by any other electronic means under the Company's objectives only. The Company must ensure that the data owner acknowledges and gives consent in writing or through electronic means unless, in the circumstances, unable to provide such consent.
The Company may collect your personal data related to your interests and services that you use as follows.
- your LINE ID
- your Facebook Account
- your message
- first name - last name
- address
- e-mail address
- mobile phone number
This includes filling out any online forms, such as registration or any contacts through the Company's social media channels, with any information related to your identity and contact information or any other information that is useful in providing services. The Company may collect your personal data through questionnaires (SURVEY). Your personal data includes the following information such as first and last name, telephone number, date of birth, gender, etc.
For the above operations, the Company shall ask for your consent before collecting, except:
- 2.1.1 It is necessary for compliance with relevant laws;
- 2.1.2 It is necessary for the benefit of the investigation of the investigating officer or the court's adjudication;
- 2.1.3 It is necessary for your benefit and consent cannot be obtained at that time;
- 2.1.4 It is necessary for the legitimate interests of the Company, people, or other legal entities other than the Company;
- 2.1.5 It is for preventing or suppressing a danger to a person’s life, body, or health;
- 2.1.6 It is necessary for the performance of a contract to which the data subject is a party, or in order to take steps at the request of the data subject prior to entering in a contract;
- 2.1.7 It is for the achievement of the purposes relating to the preparation of the historical documents or the archives for public interest, or for the purpose relating to research or statistics, in which the suitable safeguard measures are put in place.
2.2 If a minor (individuals under 20 years of age) intends for the Company to collect personal data of the minor, the consideration shall be made as follows.
- 2.2.1 Where the minor is below ten years of age, the Company must obtain consent from the legal representative, holder of parental responsibility, or a guardian with authority to act on behalf of the minor together with the consent of the minor;
- 2.2.2 If the minor is over ten years of age but less than twenty years of age, the Company must obtain consent from the minor, together with the consent from the legal representative, holder of parental responsibility, or a guardian with authority to act on behalf of the minor.
03
3.1 The Company is aware of the importance of maintaining your personal data security. Therefore, the Company has established measures to maintain the appropriate security of personal data and in accordance with personal dataconfidentiality to prevent the loss, access, destruction, use, transformation, modification, or disclosure of personal data without right or unlawfully, as well as the use of personal information without permission.
3.2 The Company has received your personal data, such as your first and last name, date of birth, address, telephone number, etc., that can identify you as a person. This personal data is accurate and current. It will be used only in accordance with the Company's operational objectives, and the Company will take appropriate measures to protect the rights of personal data owners.
04
In collecting your personal data, the Company may collect, use, disseminate, process, transfer, or disclose your personal data for the following purposes:
4.1 For researching, processing, and analyzing customer data for product improvement and modification, product development and presentation,and/ornew services to suit the needs of customers;
4.2 For preparing a database and history of receiving the Company's services;
4.3 To be a contact channel for receiving feedback or suggestions from viewers to improve the content of the Company's programs to meet the needs of the viewers;
4.4 To be a channel for contacting viewers who participated in quiz competitions to win souvenirs from the Company;
4.5 To provide sales and product delivery services of the Company according to your order by delivering the product to your address;
4.6 To check and send your financial transaction information for product payment confirmation;
4.7 To update the status of shipping information;
4.8 For analysis, processing, marketing promotion activities, research and sales, products and services publicity, whether of the Company, affiliated companies, business partners, business alliances, or of other persons through notifications in various forms, such as through the screen of a mobile device, via SMS, or via social media, etc;
4.9 To manage your user account registered in the Company's system to develop and improve the use of the Company's website for an easier and more efficient experience;
4.10 To prove your identity when receiving services from the Company as you are the viewer of content;
4.11To publicize the content, which is information from the Company sent to you, including creating promotional programs related to the said content to suit you;
4.12 For database preparation and history of employees;
4.13 To prove one's identity, check educational and work history of employees
4.14 To provide employee welfare, and life insurance.
4.15 For the benefit of using employees' tax deduction rights.
4.16 To contact, evaluate and manage the Company's relationship with employees.
4.17 To disclose employees' personal data to affiliated companies, any persons who subrogate legal rights from the Company, and other persons such as commercial banks regarding the benefits of employees in requesting services or products of commercial banks, benefits according to life insurance policy, welfareand/orproviding certification or confirmation regarding employee status, work and educational history including disclosure to government agencies and other government agencies;
4.18 To control and manage any relevant risks;
4.19 To comply with laws and regulations, as well as guidelines or requirements of agencies that regulate the Company's operations;
4.20 For compliance with the Company's and affiliated companies’ internal operating regulations;
4.21 To contact, follow up, inspect, and evaluate the Company's services and manage the Company's relationship with you.
05
5.1 The Company will collect, use, disseminate, process, transfer, or disclose your personal data according to your consent. It must be the use and disclosure of your personal data in accordance with the purpose of collection, use, dissemination, processing, transfer, or disclosure of personal data that has been informed and you have given your consent only. The Company will supervise employees, officers, or workers of the Company not to collect, use, disseminate, process, transfer, or disclose your personal data other thanfor the purpose of collecting, using, disseminating, processing, transferring, or disclosing personal data to third parties, except:
- 5.1.1 It is necessary for compliance with relevant laws;
- 5.1.2 It is necessary for the benefit of the investigation of the investigating officer or the court's adjudication;
- 5.1.3 It is necessary for your benefit and consent cannot be obtained at that time;
- 5.1.4 It is necessary for the legitimate interests of the Company, people, or other legal entities other than the Company;
- 5.1.5 It is for preventing or suppressing a danger to a person’s life, body, or health;
- 5.1.6 It is necessary for the performance of a contract to which the data subject is a party, or in order to take steps at the request of the data subject prior to entering in a contract;
- 5.1.7 It is for the achievement of the purposes relating to the preparation of the historical documents or the archives for public interest, or for the purpose relating to research or statistics, in which the suitable safeguard measures are put in place.
5.2 The Company may use the information services of third-party service providers to maintain personal data. The service provider must have security measures in place. Collecting, using, or disclosing personal data other than what the Company specifies is prohibited.
5.3 The Company may disclose personal data to third parties who are business partners, consultants, contractors, allies, and our affiliates. The Company may also disclose your information to third parties who work for the Company, provided that you consent in every case.
The Company requires such third parties to agree on the following matters:
- a. Process personal data only for limited and specific purposes consistent with your consent;
- b. Providethe same level of protection for your personal data as is required under the privacy principle as informed at the time of personal data collection.
The Company will not disclose the data you provide to third parties for marketing purposes unless you have affirmatively consented tosuch disclosure.
06
The Company will use reasonable and appropriate technological and physical protection measures to protect the personal data you provide to the Company from loss, misuse, unauthorized access, disclosure, alteration, and destruction, taking into account the risks associated with the processing and the nature of the personal data.
We follow generally accepted industry standards to protect the data you submit during delivery and after receiving the data from you to ensure that your data is protected. If you would like a copy of these terms, please send a request to dpo@gmmgrammy.com.
07
The Company will only store your personal data for the entire period of your status and relationships as shareholders, Company directors, employees, allies, partners, customers, contractors, members, fans, viewers, listeners, and participants in the Company's activities.
08
8.1 Right to give consent:You have the right to choose to provide any personal data requested by the Company and to consent to the Company collecting, using, and disclosing such personal data or not.
8.2 Right to access:You have the right to request access to the personal data that the Company stores and request a copy of that personal data or ask the Company to submit the personal data to the data subject or another personal data controller (if such information is in a format that allows such processing.)
8.3 Right to object:You have the right to object to the Company collecting, using, or disclosing your personal data if the Company is able to collect such personal data without your consent or if such data is collected, used, or disclosed for direct marketing or research purposes.
8.4 Right to data portability:You have the right to request your personal data if the Company prepares such personal data in a format that can be read or used by tools or devices that work automatically and can use or disclose personal data by automatic means. In addition, you have the right to request the Company to transmit or transfer personal data in such form to another data controller when this can be done by automated means. Also, you have the right to request personal data that the Company sends or transfers in such form directly to another data controller unless it is unable to proceed due to technical reasons.
8.5 Right to deletion, destruction, or suspension:You have the right to request that the Company delete, destroy, or suspend the use of your personal data that the Company maintains or that the Company make such data anonymous.
8.6 Right to rectification:You have the right to request that the Company correct your personal data, which the Company stores, to ensure that it is accurate, current, complete, and does not cause misunderstandings.
8.7Right to withdraw consent: You have the right to withdraw consent to the collection, use, and disclosure of your personal data. However, withdrawing your consent will not affect the collection, use, or disclosure of personal data to which you previously consented.
09
The Company abides by the Personal Data Protection Act B.E. 2562 (2019) by appointing a Data Protection Officer (DPO) to inspect the Company's operations related to the collection, use, and disclosure of personal data in accordance with the Personal Data Protection Act B.E. 2562 (2019) (as amended) and other laws related to personal data protection. In addition, the Company has prepared regulations and orders for those involved to proceed as specified and carry out operations according to the policy regarding personal data protection accurately and effectively.
Contact:
Email: dpo@gmmmusic.com
Address:
GMM Music Public Company Limited
No. 50, Sukhumvit 21 Road (Asoke), Khlongtoeinuea, Wattana, Bangkok 10110
10
The Company will provide a cookie policy to meet international standards for data security.
11
Please see the details in this Personal Data Protection Policy or send your request to withdraw your consent, rectify, and object to us at :
Data Protection Officer : DPO
email : dpo@gmmmusic.com
or contact us at our office: GMM Music Public Company Limited, No. 50, Sukhumvit 21 Road (Asoke), Khlongtoeinuea, Wattana, Bangkok 10110
In addition, the Company will regularly organize a review of the Personal Data Protection Policy to ensure it is consistent with the legal requirements, regulations, rules and guidelines as amended.
