Thailand
Personal Data Protection Notice for External Parties
GENERAL
1. Objective
In the course of your dealings with BASF entities in Thailand (“BASF”), we have collected and/or will collect your personal data to enable BASF to enter into, manage commercial transactions with you and other activities as specified in Annex A. BASF views and treats your personal data seriously at all times. BASF has therefore developed this notice that describes how BASF uses your personal data. Kindly read this Notice and understand your rights on the matter.
2. Scope
This Personal Data Protection Notice (“Notice”) is issued to, including but not limited to, all our existing and prospective business partners, distributors, dealers, sub-dealers, customers (including end-customers), vendors, suppliers, service providers, individuals who are the personnel of the foregoing, and other persons whose personal data are collected by BASF (e.g. our office, factory or website visitors, guests and event participants), pursuant to the requirements of the Personal Data Protection Act B.E. 2562 (2019) (the “Act”).
PERSONAL DATA PROTECTION NOTICE
3. Collection and Use of Personal Data
During the course of your transactions and dealings with BASF, you may be requested to furnish your personal data from time to time. In addition to the personal data you provide to BASF directly, BASF may also collect your personal data from a variety of sources and combine it with information which you have given us to provide and improve BASF’s products and services and/or for any other purposes related to BASF’s business. BASF may collect your personal data from yourself or through our customers, business partners, distributors, dealers and sub-dealers via various channels (e.g. customer registration forms, surveys, and business partner due diligence forms, cookies, websites, applications, campaigns, social media and our marketing activities (e.g. trainings, loyalty programs and prize programs)).
However, if you do not provide your personal data, BASF may not, amongst others, be able to (i) communicate with you; (ii) provide you the products or services you require; or (iii) fulfil our contractual obligations to you.
Please note that notwithstanding the withdrawal of your consent, BASF may still proceed to process your personal data in circumstances recognized and permitted by law.
4. Nature of Personal Data
Personal data is information that relates to you, who is identified or identifiable from that information or from that and other information.
In particular, the personal data we collect about you are:
(a) name;
(b) national registration identity card number (e.g. ID or passport no.);
(c) gender;
(d) contact information (e.g. address, location, phone no., email address, social media account details;
(e) identification documents (e.g. copies of your ID card or passport);
(f) information related to our relationship and transaction (e.g. credit card or bank account information, name of your facility or
facilities and your agricultural land, historical information with regard to our transaction);
(g) photograph;
(h) CCTV records; and
(i) IT-related information (e.g. IP address).
The list of personal data stated above is not exhaustive and may include other data defined under the Act.
If BASF collects any of your personal data that are not mentioned in the above list, BASF will notify you about it before or at the time of collection.
5. Processing of Personal Data
Your personal data will be collected, used and processed by BASF for the purposes listed in Annex A of this Notice.
6. Impact resulting from failure to supply information
If you do not provide, or withdraw your consent for BASF to use, your personal data, BASF may not be able to process your personal data for the purposes described in Annex A, and this may affect the ability of BASF, amongst others, be able to (i) communicate with you; (ii) provide you the products or services you require; or (iii) fulfil our contractual obligations to you.
If you withdraw your consent above, BASF may still process your personal data insofar as it is necessary in the course of fulfilling our contractual obligations or as may be required by law.
7. Disclosure of Personal Data
Disclosure to Third Parties
Your personal data may be transferred, accessed, or disclosed to third parties for the purposes described in Annex A of this Notice. Further, BASF may provide access or disclose your personal data to third party service providers that provide services on behalf of BASF such as information processing, extending credit, fulfilling customer orders, delivering products to you, managing, and enhancing customer data, providing customer service, assessing your interest in BASF’s products and services, and conducting customer research or satisfaction surveys.
Your personal data may also be shared in connection with a corporate transaction such as a sale of a subsidiary or a division, merger, consolidation, asset sale or in the unlikely event of a winding-up.
Cookies
We collect information about your use of our websites from cookies. Cookies are packets of information stored in your computer which assist your website navigation by customizing site information tailored to your needs. Cookies in themselves do not identify the individual user, just the computer used. You are not obliged to accept cookies. If you are concerned, you can set your computer either to accept all cookies, to notify you when a cookie is issued, or not to receive cookies at any time. However, rejection of cookies may affect your use of our websites as we will be unable to personalize aspects of your use of the website.
Links to Third Party Websites
Please be informed that this Notice applies solely to BASF and does not apply to any third-party websites you may access from our websites. To determine how they deal with your personal data, you should ensure that you read their respective privacy policies.
8. Protection of Personal Data
BASF shall endeavor to implement reasonable security safeguards, and if BASF has disclosed your personal data to third parties or other companies within the BASF Group, the same shall be covered by an outsourcing or data sharing agreement, as may be applicable and, it shall require such parties to implement similar security arrangements, to safeguard your personal data against loss, theft, misuse and unauthorized access, disclosure, usage, alteration or destruction.
9. Transfer and Storage of Personal Data
Your personal data may be transferred to, stored, used and processed in a jurisdiction other than Thailand and/or where BASF’s servers are located outside Thailand, under conditions of confidentiality and similar levels of security safeguards. There are security policies and procedures in place which restrict access to your personal data to authorized personnel only, which include, among others, personnel from the information technology, human resource, administration, finance, sales and/or customer service departments, management and/or other employees of BASF. In any case, only personnel who have the “need to know” are permitted access.
10. Your Rights of Access and Correction
You are responsible for ensuring that your personal data you provide to BASF is accurate, complete and up to date. Subject to the provision of the Act, we shall, at your request, provide you access to your personal data which are in the possession or under the control of BASF for the purpose of updating or correcting the same, and the way in which the personal data was used or disclosed.
In addition to the above, note that you also have the right to withdraw your consent at any time (although your withdrawal in such case will not have any retroactive effect on the processing activities that we have done prior to such withdrawal), the right to object our use of your personal data, the right to request the erasure or suspension of use of your personal data, and the right to request for transfer of your personal data to another party in a commonly used and machine-readable format. However, please note that we may refuse to comply with your request to exercise such rights if there are reasons permitted under applicable law.
BASF may charge a reasonable administration fee to be borne by you for processing your request.
The person to whom all requests under the Act or any inquiry in relation to your personal data, including requests for access to, correction, rectification, erasure and/or blocking of your personal data or for information regarding the collection, use and disclosure of your personal data handled by BASF is:
Supin Saetae
Human Resources
BASF (Thai) Limited
No. 622 Room 1-6 Emporium Tower, 23rd Floor, Sukhumvit 24 Road, Klongton Sub District, Klongtoey District, Bangkok Thailand
Phone: +66 2624 1856
Mobile: +668 9493 5553
Email: supin.saetae@basf.com
Busabong Piboolchayagas
Human Resources
BASF Chemcat (Thailand) Limited
300/146 Moo 1 ESIE, T. Tasit, A. Pluakdaeng, Rayong Thailand
Phone: +66 3368 4811
Mobile : + 668 1591 2755
Email: busabong.b.piboolchayagas@basf.com
If you are concerned that your request has not been addressed by the Data Protection Officer, you may contact Chulaporn Sam-Arng, Compliance Officer of BASF from Monday through Friday from 9:00am to 6:00pm.
If you believe that the way we handle your personal data is inappropriate, you can launch your complaint to the appropriate supervisory authority at any time. The supervisory authority responsible for us is:
Name of authority: The Office of Personal Data Protection Committee
Address: 120 Moo 3, 7 Floor, Government Complex, Building B, Chaeng Wattana Road, Thung Song Hong, Lak Si, Bangkok 10210
Email address: pdpc@mdes.go.th
11. Retention of Personal Data
BASF will retain your personal data for the period necessary to fulfill the purposes outlined in this Notice unless a longer retention period is permitted or required by law. In general, we will keep your personal data for 10 years after the date your contractual relationship with BASF is terminated.
12. Amendments to the Notice
BASF reserves the right to revise this Notice periodically in line with changes to the Act and guidelines issued by the Personal Data Protection Committee. Should there be any substantial amendment of this Notice necessitating notice, it shall be published to the website of BASF.
Annex A
The collected personal data will be used and processed by BASF for various purposes, including but not limited to the followings:
| No. | Purpose | Relevant Collected Personal data | Processing Basis |
1. |
To communicate with you and to meet your request if possible |
|
|
2. |
To respond to questions and comments from you |
|
|
3. |
For internal administrative purposes including our internal account, our procedure of entering a contract, our internal records, auditing, data analysis, and research to improve our products and services |
|
|
4. |
To send you important notices by way of emails, letters, or SMS, about purchases and changes to BASF’s terms, conditions, and policies |
|
|
5. |
To send you materials and updates on BASF’s latest product announcements and upcoming events
(If you do not wish to be on our mailing list, please let us know in writing) |
|
|
6. |
To enable entry into the Company’s premises for - our internal record keeping; - security and safety purposes including safety training; and as permitted by applicable law |
|
|
7. |
For registration and for arranging activities with respect to our products which you have registered (e.g. marketing event, trainings, lucky draw campaign, rebate campaign), including disclosing your personal data to third parties such as event organizers and our prize management service providers that are appointed to assist BASF in running and managing the activities |
|
|
8. |
To use the photographs/film taken of you (along with other participants) when you participate in our events |
|
|
9. |
For registration, setting up an account and Login authentication to our applications or websites or e-commerce or online platforms for our product and service details and/or purchase, after-sale technical service and other assistance |
|
|
10. |
To enable us to inform you the information of the nearest retailers upon your request |
|
|
11. |
To arrange our loyalty program which you have registered |
|
|
12. |
To conducting surveys for customer feedback and satisfaction |
|
|
13. |
To use, when you visit our website, your IP address and the other data that your browser transmits automatically to our server in order to:
|
|
|
14. |
For registration, setting up vendor accounts or login authentication to our applications or websites or online platforms for vendors and suppliers and for purchase of products and services from such vendors or suppliers |
|
|
15. |
To comply with any applicable rules, laws, regulations, codes of practice or guidelines issued by any legal or regulatory bodies which are binding on BASF |
|
|
16. |
To exercise legal rights or for any legal purpose, including but not limited to. establishing claim or defense, dispute resolution and requesting for legal advice |
|
|