1. About Personal Information Protection Policy

AWC Group Company Limited, hereinafter referred to as “The Company” is a company that operates a medical facility business under the name “AWC Wellness Clinic” and sells health products and beauty innovations online such as website, LINE application and Facebook. of the company, etc., and offline channels such as clinics, Thai massage parlors, and spas, etc., are aware of and pay attention to the protection of personal data of personal data owners who wish to be customers and/or contractors and/or related to conducting business with the Company and may be customers and/or contractual parties and/or those involved in conducting business with the Company in the future Which has consented to provide personal information to the company, therefore, this privacy policy is prepared to clarify details. and provide the data subject with an understanding of the Company's preliminary policy on personal data protection, such as the collection, use or disclosure of personal data, as well as the rights of the data subject, etc.

 

2. Definition

In this Privacy Policy The following words mean

• means the personal data protection policy of AWC Group Co., Ltd.

• means AWC Group Co., Ltd.

• Means information about an individual that enables that individual to be identified, such as name, surname, address, date of birth, gender, personal telephone number. ID card number Work permit number, email address, name and bank account number. credit/debit card number, etc. This shall include information about a person that can identify that person either directly or indirectly.

• means a natural person who owns personal data "data owner" for example

• Customers are the purchasers of products and/or service users. Candidates for membership  Participants in activities and/or projects Other  Participants in seminars with the Company (if any) as well as any other person who contacts the Company in order to inquire and/or obtain information about products and/or services. Advertising Promotion of company products, etc.

• contract parties and/or persons related to the business operations of the Company Including  Partner, Buyer, Product Seller Distributor Supplier_cc781905-95cf5cf5c-31. Provide service, service recipient, employer, contractor , consultant , including , any other person who contacts, coordinates, to carry out the Related to such  etc.

​​

3. Collection of Personal Information

1. Collection of Personal Information will do so within the framework of the company's legitimate objectives and collect personal data only as necessary to use personal data  or disclose for the benefit of the company's objectives such as such as

   • To provide information about the products and/or services of the Company and/or its subsidiaries for the information owner to make decisions and choose the products and/or services of the Company according to the wishes of the information owner.

   • To be used to process the request and/or take any other related actions at the request of the data subject before purchasing the product and/or receiving the service. Apply for membership or participate in activities and/or projects various seminars other  with the Company (if any), including entering into contracts and/or those involved in the Company's business operations.

   • for registration of the purchase of products and/or services; Membership  Participation in activities and/or projects various seminars with the company

   • In order for the owner of the information to be aware of offers, privileges and/or privileges such as discounts, free gifts, various promotions, as well as advice and information, advertising, promoting products and/or services of the Company (if any).

   • To be used as information to analyze, offer, provide, use and/or improve products and services. Sales promotion of various products and/or services, including development and promotion of products and/or services with standard quality. Keep up with the modern era and get better to meet the needs of customers exactly.

   • to maintain customer relations Including providing information about after-sales service to the data owner, such as following up, answering inquiries and/or evaluating the sale of products and/or services. Doing a satisfaction survey Doing a questionnaire Handling complaints, solving various problems regarding products and/or services. If there is a conversation via telephone (Call Center), the company may record the conversation  etc.

   • for storing as a customer/benefactor database

   • For contacting, coordinating, answering questions, various questions about products and/or services.

   • for the preparation of contract documents and/or memorandum of agreement Any other documents related to contracts with the company

   • To carry out management of the Company's products and/or services.

   • for receiving and sending parcels related to products and/or services Receive and send documents and other evidence

   • To prepare documents related to payment and/or receipt of payment such as invoices, receipts, tax invoices and/or other documents related to such operations.

   • To provide personal information to departments related to Human Resources. Sales and Marketing Department, Purchasing Department and Accounting and Finance Department of the company. including  , the distributor of its products and/or services,   and/or the company. or private entities involved in the transportation of the company's products

   • in order to consider examining the qualifications, knowledge, abilities, expertise, experience and suitability of partners, buyers, product sellers Distributor Supplier service provider, service recipient, employer, contractor, consultant. Bidding and/or bidding (if any) to enter into contracts with the Company, including those who will participate in activities and/or projects; various seminars Other  of the company (if any).

   • In order to be able to perform duties and obligations according to the agreements and/or contracts made.

   • To comply with regulations, rules or other legal requirements.

   • for use in any other activities related to the aforementioned under the objectives of the company

2. Collection of personal information Company Will ask for consent from the data subject before or during the collection of personal data. It will inform the purpose and details of the collection of personal data as specified by the company. including   notice of legal or contractual compliance. or the necessity to provide personal data to enter into a contract with the Company and the impact that may occur in the case of not providing personal data to the Company  to the data subject at the same time except the data subject already know of such details  where such consent will be obtained explicitly in accordance with the methods and/or forms specified by the Company. except   in cases where the personal data protection law requires no consent from the data subject, such as

   • In order to achieve the objectives related to research or statistics for which appropriate preventive measures have been established. This is in accordance with the personal data protection law.

   • To prevent danger to life, body or health of a person

   • It is necessary for the performance of a contract to which the data subject is a party. or in order to perform the request of the data subject before entering into that contract

   • It is in accordance with the law of the company.

3. Collection of personal information Company Will not collect from sources other than the data owner directly. Except in some cases, for example, the company has notified the data subject of the collection of personal data from other sources without delay. But must not exceed the period specified by the Personal Data Protection Laws and obtain the consent of the data subject as the collection of Personal Data that is exempt from the need for consent as specified by the Personal Data Protection Law, etc.

4. In the event that the collection of personal data is related to race, ethnicity, political opinions, ideological beliefs religion or philosophy sexual behavior Criminal record Health information Disability union information Genetic data, biometric data such as facial dummy , iris dummy , or fingerprint dummy. Or any other information that affects the data subject similarly as required by the personal data protection law. The company will request explicit consent from the data subject, except in cases where the personal data protection law requires that consent from the data subject is not required, for example:

   • To prevent or suppress the danger to the life, body or health of the data subject that the data subject is unable to give consent for any reason.

   • It is information publicly available with the explicit consent of the owner of the information.

   • It is necessary to comply with the law in order to achieve the objectives concerning medical diagnosis  health or social services Medical treatment  Health management for standardization or quality control of drugs  Pharmaceutical_cc781905-95cde-34cde- -bb3b-136bad5cf58d_ or a medical device which has established appropriate and specific measures to protect the rights and freedoms of data subjects, especially the confidentiality of personal data according to their duties or professional ethics_cc781905-5cde-3194 -bb3b-136bad5cf58d_ etc.

   • Where the collection of personal information about criminal records is done under the supervision of an agency with legal authority. or as the Company will provide personal data protection measures according to the criteria announced by the Data Protection Committee

5. In the event that the data subject is a minor who is not yet of legal age obtaining consent to collection      _cc781905-5cde-3194-bb3b-58d_user's consent, use, or request disclosure of personal data bad_f58d. parental authority with the power to act on behalf of minors However,   as required by the personal data protection law.

 

4. Collected Information

The company will collect the personal information of the data subject. such as information and/or registration forms for the purchase of products, services, subscriptions Participating in activities and/or projects Participating in various seminars with the company (if any) Receiving information and news Advertising and public relations Promotion of the Company's products and/or services (if applicable).

• contact information Coordinate the owner of the information provided to the company, such as name , last name , address, email address , line ID_cc781905. -5cde-3194-bb3b-136bad5cf58d_ personal phone number, etc.

• Copy of ID card or copy  PASSPORT or WORK PERMIT or VISA  (in case of foreigners)

• Copy of house registration

• A copy of the front page of the bank account book or details about the account name and bank account number Credit/debit card number

• Contract documents and/or memorandum Any other documents related to contracts with the company

• Documents Evidence related to payment and/or receipt of payment

• questionnaire, evaluation form, survey form, request form, complaint form

• Record telephone conversations (Call Center) (if available)

• Photographs, photographs and/or animations of participation in activities and/or projects. Various seminars  organized by the company (if any).

• professional license /licenses/certificates

​

5. Use or disclosure of personal information

1. The use or disclosure of data will be subject to the prior consent of the data owner. or while using or disclosing personal information and will use or disclose personal data within the framework of the objectives that have been informed to the data subject, unless the new purpose of collection, use or disclosure has been informed to the data subject and consent has been obtained before the use or disclosure of that personal data_cc781905- 5cde-3194-bb3b-136bad5cf58d_ is personal information that can be collected without consent. In accordance with the personal data protection law as specified in the example in clause 3.  (2) or (4)

   • for personal information that can be collected without the consent of the data subject The Company will record the use or disclosure of personal information that is exempt from the need for such consent in writing. or electronic system according to the methods and/or forms and details required by the Personal Data Protection Law and the Company, for example, details about the personal data collected  the purpose of collect personal information of each category  information about the company Period of collection of personal data Rights and methods of access to personal data, etc.

2. In the event that the Company sends or transfers personal information to foreign countries Destination country or international organization receiving personal information There must be an adequate personal data protection standard, in accordance with the personal data protection criteria announced by the Personal Data Protection Committee. or if there is a personal data protection policy for sending or transferring personal data to companies abroad destination country or international organization and are affiliated with the same business or business group For joint operations or business, such policies must be reviewed and certified by the Office of the Personal Data Protection Commission. However,   is in accordance with the announcement of the Personal Data Protection Committee.

 

6. Period of collection of personal data

The company will collect personal information. For a reasonable period of time necessary for retention for the above-mentioned purposes according to each type of personal data collected. or according to the period prescribed by law to be kept, as the case may be

 

7. Rights of data subjects

1. The data subject can withdraw their consent to the collection, use or disclosure of their personal data, unless there is a legal restriction on the right to withdraw consent. or a contract that is beneficial to the data owner However,   withdrawing consent will not affect the collection, use or disclosure of personal data that the data subject has given their rightful consent. In the event that the subject of personal data wishes to withdraw the consent, it shall be made in a memorandum of agreement by both parties. According to the methods and/or forms specified by the company.

2. Data subjects can request access to and obtain copies of personal data relating to them that are under the Company's responsibility. or request to disclose the acquisition of personal data for which he or she has not given consent

3. The data subject may obtain from the Company personal data concerning him  in the event that the Company has rendered such personal data in a form that is generally readable or usable by any device or device. that works automatically and can be used or disclose personal data by automatic methods as well as having the following rights:

   • ask the company to send or transfer personal data in such form to other data controller companies.

   • Obtain personal data sent by the company or transfer personal data in such form directly to the company who is the controller of other personal data  except where technical conditions are not possible.

   • However,   above personal data must be personal data that the data subject has given consent to collect, use or disclose personal data. Or it is personal data that is exempt from the need for consent in cases specified by the personal data protection law. or other personal data as required by the Personal Data Protection Laws and the exercise of the rights of the owner of the above information will apply to send or transfer the Company's personal information which is a duty for the public interest or unable to perform legal duties or the exercise of such rights must not violate the rights or liberties of other persons.

4. The data subject can object to the collection, use or disclosure of such personal data at any time, in accordance with the personal data protection law, such as the collection, use or disclosure of personal data for direct marketing purposes_cc781905-5cde. -3194-bb3b-136bad5cf58d_ For the purposes of scientific or statistical research, unless it is necessary for carrying out a mission in the public interest of the Company, etc.

5. Data subjects can ask the Company to delete or destroy them. or make that personal information unable to identify the owner of the information     as required by the personal data protection law. For example,   when personal data is no longer necessary for retention according to the purpose of collecting, using or disclosing personal data. When the data subject withdraws consent and the company has no legal power to collect, use or disclose that personal data further, etc.

6. The data subject may request the Company to suspend the use of personal data , provided that  as required by the Personal Data Protection Law . For example,   is personal data that must be deleted or destroyed in the event that such data is collected, used or disclosed unlawfully.

7. The owner of the personal data can request the Company to keep the personal data accurate and up-to-date. complete and not misleading

8. The data subject may complain to the Personal Data Protection Committee in the event that the Company or the relevant agency for the collection, use or disclosure of personal data in accordance with the instructions or on behalf of the Company. including employees or    Company contractor violating or failing to comply with personal data protection laws

9. However,   the exercise of the aforementioned rights of the data subject is subject to personal data protection laws and there are certain cases where the Company may refuse an objection or request and/or is unable to act in accordance with it. request to exercise such rights of the data subject For example,   must comply with the law or court order  for the public interest. In case of impact that may cause damage to the rights and liberties of other persons  whereby the Company will record the rejection of the objection with reasons listed and detailed according to the method and/ or forms according to the Personal Data Protection Law and the Company's requirements

 

8. Security measures of personal data

The company recognizes and gives importance to the protection of personal data of data subjects. Therefore, appropriate measures are in place to maintain the security of personal data. to keep it a secret Completeness and availability Including to prevent loss, access, use, change, correction, take any action that may cause personal data to be used. or disclosed without authority or wrongfully or cause damage to the owner of the data To comply with the Personal Data Protection Laws, including reviewing such measures when necessary or when technology and/or Personal Data Protection Laws change in order to have appropriate security effectiveness.

​

Cases in which the Company has to provide personal information to individuals or other juristic persons that are not companies The Company will take steps to prevent that person from using or disclosing personal information unauthorized or wrongfully.

​

Establishing a monitoring system to delete or destroy personal data after the expiration of the retention period. or that is not relevant or beyond the necessity of the purpose of collecting that personal data or as requested by the data owner or the data subject has withdrawn their consent, except for storage or use as required by Personal Data Protection Laws such as keeping it for the purpose of exercising freedom of expression. Retention for purposes as necessary to comply with laws in order to achieve public health objectives, such as for health protection from dangerous communicable diseases or epidemics that may be contagious or spread into Thailand, etc.

​

In the event of a personal data breach, the company will notify the Office of the Personal Data Protection Commission without delay. Within the period of time specified by the Personal Data Protection Law, unless such violation has no risk of affecting the rights and liberties of individuals. where the violation has a high risk of affecting the rights and liberties of individuals The company will notify the owner of the data violation without delay, along with remedies. Such notifications and exceptions will be in accordance with the rules and procedures prescribed by the Personal Data Protection Law. current, complete and not misleading

 

9. COMPANY CONTACT INFORMATION​

A W C Group Company Limited

No. 888, 2nd Floor, Room A205, The Coast Village Project, Bangna Tai Subdistrict, Bangna District, Bangkok 10260

Tel : 061-6412639

 

10. Changes, amendments, additions to the personal data protection policy

The company reserves the right to change, amend, add or exclude all statements. or part of the personal data protection policy as the Company deems appropriate To be consistent with changes and/or in the event of a new law being promulgated in order for the company to operate legally and efficiently.

 

Announced on January 1  2021