Privacy Notice

TCP Group is comprised of T.C. Pharmaceutical Industries Co., Ltd., Red Bull Beverage Co., Ltd., Durbell Co., Ltd., Hi-Gear Co., Ltd., T.G Vending and Showcase Industries Co., Ltd., and its affiliates (hereinafter referred to as “TCP”), as the data controller, has the power and duty to decide on the collection, use, disclosure and processing of your personal data when you have submitted your personal data to TCP in all channels.

This privacy policy will apply to your personal data in possession or control of TCP, whether the collection, use, and disclosure of personal data is performed by TCP or personnel or other juristic persons acting on behalf of or according to the TCP instruction.

This privacy policy applies to the services of TCP and the direct uses of various websites, social media and applications of TCP only. If you have clicked a link to other websites (even through the TCP’s website), you must study and comply with the privacy policy appeared on those websites separately from this policy.

For your own benefit, before submitting your personal data to TCP or starting to use websites, social media and applications of TCP, please read and try to understand this policy thoroughly to be aware of the methods that TCP treats your personal data , namely the collection, use, disclosure and transferring of personal data, including various rights that you are entitled according to the determination of the Personal Data Protection Law.

This privacy policy informs you the information as follows.

Source, type of personal data, purpose and legal basis for the processing of your personal data
Disclosure of your personal data to third parties
Retention period for the collection of your personal data
Deletion and Destruction of Personal data
Rights under the Personal Data Protection Law
Automatic data processing (Profiling)
Maintaing of Security of your personal data
Sending or transferring of your personal data to overseas
Change of privacy policy and TCP’s contact channel

Source, type of personal data, purpose and legal basis for the processing of your personal data

TCP will directly collect the personal data from the Data Subject in electronic data and other data formats that are not electronic data. TCP will process your personal data as necessary and lawful only. TCP will process the collected personal data on the legal basis for the processing of personal data as follows.

Contractual basis – when TCP needs to process your personal data to comply with the contract in which you are a contracting party or to comply with your request before entering into the contract.
Legal obligation basis – that is when TCP needs to process your personal data to comply with what prescribed by law.
Legitimate interests basis – that is when TCP needs to process your personal data for TCP’s legitimate interests. Nevertheless, TCP will not conduct any action that infringes your fundamental rights.
Consent basis – that is when you expressly give a consent the TCP to process your personal data.

Source (Channel) of Personal Data Collection	Type of Personal Data	Purpose that TCP Collects and Uses of Personal Data	Legal basis for the processing og Personal Data
Through various websites, applications and social networks of TCP by using cookies, web beacons or other technologies for tracking when you visit the TCPwebsite.	Name, surname, address, gender, phone number, email address, IP address or Facebook, Twitter or Google+ account in case you logged into various websites or applications or social networks of TCP.	For the benefits of maintaining the security of the Information technology sytem and improving various websites, applications and social networks of TCP in response to your future use. For the benefits of advertising, public relations and marketing. For the benefits of your registration and membership application on various websites, applications and social networks of TCP.	Contractual basis Legal obligation basis Consent basis Legitimate interests basis
Sending of personal data for purchasing goods or receiving services from TCP.	Name, surname, address, phone number, identification card number, email address, including information relevant to your payment, namely your credit card and bank account number.	For the benefits of communication, shipping of goods or providing services, issuing of invoice, receipts and tax invoice for you. For the benefits of confirmation of your payment of goods and services.	Contractual basis Legal obligation basis Legitimate interests basis
Participation in promotion activities, lucky draw, win a prize or other sales or marketing promotion activities of TCP whether performed through any channels (Online-Offline channels).	TCP will keep your personal data, namely name, surname, address, phone number, identification card number, email address, still images, motion pictures, IP address, Facebook, Twitter or Google+ account and Line ID for the benefit of your identity verification in the participation of activities. And you are the lucky winner and receive the prize, TCP may use your still images and motion pictures that were recorded from the participation in various activities organized by TCP.	For the benefit of your identity verification, if you are the lucky winner and receive the prize. And TCP may use your still images and motion pictures that were recorded from the participation in various activities organized by TCP. For the benefit of advertising, public relations, and marketing. For issuing of withholding tax certificate in case you are the lucky winner and receive the prize. To send data to government agencies having duty to monitor the lucky draw activities.	Legal obligation basis Legitimate interests basis Consent basis
Participation in various social or charity activities organized by TCP or foundation under supervision of TCP such as social volunteer activities, awarding of scholarships, things or money donations.	Namely, name, surname, address, phone number, identification card number, age, gender, date of birth, email address, still images, motion pictures (in doing activities), interviews including name, surname and phone number of contact person when you are in an emergency event.	For the benefit of your identity verification and your qualification in the participation of activities. For the benefit of protection of you from danger to your life, body or health. For the benefit of management of database of activity participants. For advertising and public relations of activities organized by TCP or foundation under supervision of TCP.	Legitimate interests basis Consent basis
Visiting the companies, factories, museums or places of TCP.	Namely, your name, surname, address, gender, phone number, identification card number, email address, still images and motion pictures.	For the benefit of advertising, public relations and marketing, improvement of image and places of TCP. For maintaining security and collecting statistics for the visits of places.	Legitimate interests basis Consent basis
Closed-circuit television (CCTV) in and surrounding areas of the companies, factories, museums or places of TCP.	Namely still images, motion pictures, audio and personal identity.	For the benefit of maintaining security of your life, body and properties and TC’s employees including third parties who contact with TCP.	Legal obligation basis Legitimate interests basis
Product research and development	Namely name, surname, gender, age, occupation, address, phone number, email address and personal preferences.	For the benefit of the improvement of products and services.	Legitimate interests basis Consent basis
Submission of complaints relevant to products manufactured or distributed by TCP.	Namely name, surname, address, phone number, email address and voice recorded via phone or other voice recording devices.	For the benefit of providing services and resolving complaints and development of products and services.	Legitimate interests basis
Job application and working for TCP.	Namely name, surname, address, phone number, email address, gender, age, racial, nationality, religion, a copy of identification card, a copy of house registration, educational background, work history, training history, health history, criminal record, financial information, biological data, name of references, personal preferences data and photograph.	For the benefit of consideration of work acceptance, suitability of work position, wages, time attendance record and payment of wages. For the benefit of work performance evaluation and position change. For the benefit of data management of job applicants and TCP’s employees.	Contractual basis Legal obligation basis Legitimate interests basis Consent basis
Acceptance of work or provision of services for TCP.	Name, surname, address, phone number, email address, identification card, a copy of house registration.	For the benefit of consideration of the selection of contractors or service providers. For the benefit of issuing of tax invoice and withholding tax certificate.	Contractual basis Legal obligation basis Legitimate interests basis
Third parties. Anyhow, the mentioned third parties must have legal rights or have received your consent to process your personal data.	Name, surname, age, gender, occupation, address, phone number, email address, educational history, work history, training history and personal preferences.	For the benefit of research and development of products and services, and marketing. For the benefit of allowing you to work or enter the areas of TCP, namely staff of service providers, housekeepers and security guards. For the consideration of the suitability in various work positions and calling you for an interview.	Contractual basis Legitimate interests basis
Business acquisitions or mergers or organizational structure changes.	Namely name, surname, address, phone number, email address, gender, age, racial, nationality, religion, identification card, a copy of house registration, educational history, work history, health history, criminal record, financial information, biometric data, references and personal preferences data.	For the benefit of proceeding with the mergers or acquisitions of business or changes of organizational structure of TCP.	Contractual basis Legal obligation basis Legitimate interests basis Consent basis
The Data subject’s voluntary provision of the personal data to TCP by oneself.	Name, surname, address, phone number, email address, name card, a copy of identification card, a copy of house registration and others as provided by the Data subject.	For the benefit of communication with TCP and the benefit of the Data subjects. For the benefit of answering questions or resolving problems encountered by Data subject.	Legitimate interests basis Consent basis

1.1 For Children’s personal data, TCP will not collect personal data of children under 10 years old. In case TCP found that we have unintentionally collected the personal data of children under 10 years old, TCP will delete the children’s personal data from the data storage system immediately. Nevertheless, TCP may directly collect personal data of children under 10 years old from father or mother or holder of parental responsibility or when we receive an express consent from the mentioned persons before collecting the data.

1.2 For Personal data in the possession of TCP before June 1, 2022, TCP will continue to use them according to the original purposes. Nevertheless, if you wish to terminate the use of the mentioned personal data, you have the right to inform TCP to terminate the use of your personal data by contacting TCP according to the contact channels specified in Article 10. of this privacy policy, unless TCP has the rights to process the mentioned data under the law or contract entered into between you and TCP.

Disclosure of your personal data to third parties

TCP will disclose your personal data to persons or organization or external agencies as follows.

2.1 Affiliates of TCP

2.2 Companies of contractors or service providers or subcontractors or agents who work on behalf of TCP that provides goods or services for TCP.

2.3 Agencies that check the financial background or other histories on behalf of TCP, namely credit bureau companies and criminal record checking agencies.

2.4 Educational institutions, namely universities and colleges to verify the data you provided to TCP.

2.5 The lawyer’s office and consultancy office for debt collection according to the extent permitted by law or to collect outstanding debts according to invoices.

2.6 Accounting office and audit office that specifically relevant to internal accounting and auditing.

2.7 Third parties who need to use your personal data for legal purposes or mergers or acquisitions or internal restructuring of TCP.

2.8 Other government agencies that enforce the law.

2.9 References that you have referred in contacting with TCP, namely references in your job application or activity participation application.

Retention period for your personal data

Your personal data will be collected throughout the period necessary to use the data according to the purposes specified in this privacy policy or according to the duration specified in the contract or the duration determined by law. In case of data without specific storage duration, TCP will collect your personal data for not longer than 10 years from the date of legal relationship between you and TCP is terminated, except otherwise determined by law or until the expiration of the prescription period legal claims in case of litigation and proceedings, appeal or appeal to Supreme court or until the period of legal execution is terminated.

Deletion of Personal data

TCP will delete your personal data immediately upon the completion of the retention period for the collection of your personal or making your personal data to be the data that can no longer identify yourself.

Your legal rights

You as the owner of the personal data have the rights to be informed of the details of your personal data processing including the rights as determined by law as follows.

5.1 Rights to access and request a copy of personal data.

5.2 Rights to request for rectification of personal data when there is a change. TCP will trust that the data you provided is accurate, genuine, complete and up to date.

5.3 Rights to request to delete or destroy personal data or make the mentioned personal data no longer identify the owner of the personal data.

5.4 Rights to request to suspend the data processing as determined by law.

5.5 Rights to request to transfer the personal data when you wish TCP to transfer your data to other data controllers.

5.6 Rights to object the processing of personal data. You can object the personal data processing of TCP.

5.7 Rights to request for withdrawal of consent when you have consented to TCP in processing your personal data. You can withdraw the mentioned consent at any time unless there is a restriction of such rights for withdrawal of consent by law or mutual contract.

However, by not giving your consent or by withdrawal of your consent may impact your use of various websites, social media sites and applications of TCP or may result in you not receive certain services, namely you may not receive benefits to participate in various activities or promotions or not receive products or services that match with your needs or not receive useful information for you.

In case you wish to exercise the rights under the Article 5 above, please contact TCP according to the contact channels specified in Article 9. of this privacy policy. However, you must fill in the request form to exercise the rights of the Data Subject (Data Subject request form) to confirm that you are the Data subject of the personal data and details of the request that you wish TCP to process. ,Thus, TCP will process your request within the period determined by law. In any case, you can access the mentioned Data Subject request form on the TCP website or this link (https://www.tcp.com/rules-cookie/).

Automatic data processing (Profiling)

6.1 TCP will process your personal data for learning and getting acquaintance with you with the purposes of offering goods or services that match your needs when received a consent from you (if necessary and TCP will use your personal data to

Analyze your preferences and purchasing behavior of goods and services.
Predict the needs from the analysis of details of your personal data (Profile).
Improve our websites and applications to match your needs.
Improve the content on our websites and applications to be suitable for you and your devices.
Provide advertisements of goods and services according to your interests.

7. Maintenance of Security of your personal data

7.1 TCP has implemented suitable technical measures and data management methods to maintain the security of your personal data. This is to keep your personal data as confidential, prevention of loss, accessibility, destruction, use, changes, modification or disclosure of your personal data without rights or unlawful.

7.2 In case certain transactions on the websites or applications or social networks require a password to log-in, you are responsible to keep the mentioned password as confidential. TCP will not be responsible in case your personal data is leaked or infringed from you providing you password to other people.

7.3 If you use a sharing computer or mobile phone with other people or use public computer, TCP suggests you that you must not select the computer to remember user account name and password automatically and you must log-out from the system every time when you stop using the mentioned computer or mobile phone. And the use of websites or applications or social networks of TCP, you should set your privacy setting to be suitable for yourself.

Transferring of your personal data to overseas

8.1 TCP has collected you personal data in the cloud storage system (cloud storage), which is the storage of data on servers of overseas service providers, which has good and international security measures. This includes of having personal data protection standards that are equivalent to the Personal Data Protection Law of Thailand.

8.2 TCP may send or transfer your personal data to affiliates of TCP or trading partners of TCP, which have the offices located overseas in according with the purposes as specified in this privacy policy. However, TCP has determined the affiliates of TCP or trading partners of TCP to provide sufficient prevention and protection measures of your personal data.

Change of privacy policy and TCP contact channel

9.1 This privacy policy was updated on May 18, 2022. However, TCP may revise this privacy policy from time to time to be consistent with the business and operation of TCP, including there is a change of the Personal Data Protection Law.

9.2 TCP will notify you regarding the changes of this policy on TCP’s website.

9.3 If you wish to receive additional information regarding policies and practices of personal data protection of TCP including the request to exercise the rights of the Data subject.

You can contact the Data protection officer of TCP at

T.C. Pharmaceutical Industries Co., Ltd.
No. 288 Ekkachai Road, Khlong Bang Phran
Sub-district, Bang Bon District, Bangkok 10150

Phone number 0 2415 1000-3

Email Address: DPO@tcp.com

Website https://www.tcp.com