Privacy Policies
JAS Mall Privacy Notice
JAS Asset Public Company Limited (the “Company”) would like to inform the Customer who purchase any goods or services or visit JAS Shopping Mall (the “Customer”) of the terms and conditions for the process of their Personal Data as defined under this JAS Mall Privacy Notice (the “Privacy Notice”); provided that once the Customer visited the shopping mall, participated in any event that the Company may host within the shopping mall and submitted your Personal Data to the Company, the Company shall deem that the Customer accepted and agreed to this Privacy Notice already. In case that the Customer does not agree in permitting the Company to this Privacy Notice, the Company reserves the right to refuse to provide services or not permit the Customer to participate in certain activities since the process of the Personal Data defined under this Privacy Notice is important to the performance of the obligations that the Company may have with the relevant Customer.
The Company may adjust and amend this Privacy Notice from time to time to be in consistent with the relevant laws and regulations and to reflect the actual services performed by the Company to the Customer. The Company will notify the Customer of any change or amendment made through various communication channel of the Company.
The Personal Data of the Customer that the Company would need to process under this Privacy Notice include:
- Customer’s facial image being collected from: (1) the CCTV system installed and functioned in the shopping mall; and (2) photo taken from the Customer’s participation in the event hosted by the Company in shopping mall area, including the live broadcast or the video or portrait taken; (3) the photo taken to create evidence and records of the supporting services performed by the Company to the relevant Customer; provided that, however, in case of any photo taken from the participation in the event or the photo taken as the records of the supporting services, please feel free to let us know if you do not want us to take your photo or please avoid entering such area;
- Contact information of the Customer, including full name, address and telephone number that would need to be filled in the form requesting for supporting services and facilities in the shopping mall or filling in the event registration form; and
- Other Personal Data that the Customer may submit to the Company as required and defined under the relevant terms and conditions for the participation in the event or the use of any services that the Company may defined, such as a copy of the identification card submitted to the Company in case that the Customer is entitled to receive the reward or gift from the Company; or the identification card of the Customer for the use of any facilities of the shopping mall (i.e. wheelchair).
All the Personal Data of the Customer that the Company collected shall be processed in order to serve the following objectives:
- CCTV footage shall be processed in order to ensure security within the shopping mall and assure security of others visiting the shopping mall and such footage shall be retained for 45 days, except in case where the Company may need to process those footage in order to further protect the Company’s legitimate interest against the relevant Customer and the footage shall be retained for a longer period of time;
- Photo taken from the Customer’s participation in the event hosted within the shopping mall or the photo taken as a record and evidence of the customer supports provided by the Company to the Customer will be recorded and processed in the production of the Company’s marketing or advertisement materials that will be displayed or communicated via various media channels of the Company and others; therefore your photo may be used, processed and retained for the period of time that may be necessary for the business operation of the Company but the Company commits not process such photo in the manner that would cause excessive impact on the Customer as the data subject;
- Contact information and in some circumstances include the identification card of the Customer that requests for special supports and facilities shall be processed in order to perform the services as requested and the Company reserves the right to retain such information for the period of time that is necessary to provide such services and reserves the right to keep statistic information of all services provided for one calendar year;
- Other contact information or other Personal Data of the Customer that the relevant Customer may submit to the Company for the event participation will be collected and processed for the purpose of contacting and coordinating with the Customer who win the contest or the campaign and in case any gift will be rewarded, the Company would need to retain the Personal Data, in particular the identification card information of the Customer, for the withholding tax and tax accounting purposes;
- Other Personal Data that the Customer may fill in the relevant form, in particular the grievance redress or complaint form or satisfaction feedback questionnaire shall be collected and processed for the purpose of: (i) designing and planning the future service improvement within the shopping mall; and (ii) the improvement of the business relationship between the Company and the Customer in the employee training or management of complaints or address any grievances;
- In case explicit consent granted by the Customer for specific purposes, the Company may process the Customer’s Personal Data for those consented objectives, for instance, for the marketing purposes and in such circumstance, the Company reserves the right to retain the Personal Data for so long until the consent will be withdrawn.
Generally, the Customer’s Personal Data shall be kept confidential by the Company; provided that in these circumstances the Company may need to disclose and share the Customer’s Personal Data with these following persons: (i) the third party service providers whom the Company has engaged to perform any specific service or obligations to the relevant Customers; and (ii) the governmental authorities that the Company may be subject to the legal obligations to disclose the Customer’s Personal Data to. The Company commits to only disclose and share the Customer’s Personal Data on the necessary and need-to-know basis.
The Company represents to implement the appropriate information security of the Customer’s Personal Data to prevent unauthorized access, use, amendment or disclosure of those Personal Data and the Company commits to review the information security measures from time to time in order to ensure the compliance with the best industry practice and relevant laws.
The Company respect the Customer’s statutory rights as the data subject under the relevant laws over the relevant Customer’s Personal Data, including in particular the following rights: (1) the right to request for access or copy of their Personal Data as well as the right to revise or rectify the Personal Data; (2) the right to request for data portability; (3) the right to object to any process of their Personal Data; (4) the right to request for deletion or de-identification of the Customer’s Personal Data once there is no further necessity; (5) the right to request for the suspension of the Customer’s Personal Data processing; or (6) the right to withdraw consent. In case the Customer would like to exercise any of these rights, please feel free to contact the Company as the defined contact channel and the Company will consider and get back to the relevant Customer’s request within reasonable period of time after the receipt of the Customer’s due request.
Contact Channel
Data Protection Officer
Email : dpo-jas@jasasset.co.th
Mobile : 064-248-9291