Privacy Notice
for Vendors and Suppliers
Kingfisher Holdings Limited (hereinafter the “Company”) attaches importance and is committed to the protection of personal data of data subjects (hereinafter “Vendors and Suppliers”) who have been recruited and selected as vendors and suppliers for both raw material products including equipment, tools, appliances, machinery, engines, and office supplies. The Company therefore has implemented appropriate measures to protect the security of personal data, in particular, the collection, processing, use, and/or disclosure of personal data of Vendors and Suppliers as well as the guidelines for compliance with the Personal Data Protection Act 2019 (B.E. 2562) and laws related to personal data. This is to inform Vendors and Suppliers for their acknowledgement and understanding of the protection of Vendors and Suppliers’ personal data. Vendors and Suppliers are requested to read this Privacy Notice to acknowledge and understand its content as follows:
Personal data collected by the company
The Company receives Vendors and Suppliers’ personal data and has collected and processed it in accordance with this letter of consent to the collection, processing, use and/or disclosure of personal data. The Company has collected and processed personal data as necessary for the purpose of collecting, processing, using, and/or disclosing personal data of the Company. In this regard, the types of personal data are classified as follows.
|
Types of personal data |
Details |
|
Basic personal data |
Such as title, first name, surname, nickname, photograph, signature, ID card number, current address, e-mail, phone number, date, month and year of birth, age, marital status, credit information, video. |
|
Data of other persons |
Such as spouses, family members, customers, partners. |
|
Technical data for applicants applying through the Company’s website |
Such as data about websites and systems accesses, computer traffic information, contact information and communication between data subjects and other users, logging data such as device identifiers, computer IP address, identity number, device, device type, mobile network data, connection data, geolocation data, browser type, logs of various systems or websites accessed before and after, system log data, office time in and out log data, system access log data, transaction log data, data usage behavior, login statistics, visit times collected through cookies or other similar technologies. |
|
Financial information |
Such as bank account numbers and tax information, electronic card numbers. |
|
Personal property identification information |
Such as vehicle registration number, copy of land title deeds. |
|
Documentation information related to operations |
Such as work history, professional certificate, diplomas, education information, employment information |
Data Collection
1. Personal data received directly from Vendors and Suppliers
· Personal data, financial information, information on products and services provided by the Vendors and Suppliers to customers that can be disclosed. The mentioned information is given to the Company when Vendors and Suppliers apply to become the Company’s Vendors and Suppliers. In addition, it may include supporting documents and various communication information such as a copy of ID card, house registration, complaints that Vendors and Suppliers have lodged to the Company, a representative company (if any) or the Company’s officer in the form of a letter or electronic means.
· Personal data provided by Vendors and Suppliers in electronic communications or at product exhibitions, domestic and international exhibition activities, Vendors and Suppliers meeting activities, Vendors and Suppliers appreciation activities.
2. Personal data received from a third party or other sources
· Publicly available information or information from various agencies.
· Information obtained from affiliates, activities, or from business partners.
· Personal data obtained from procurement, distributor, beneficiary, heir, purchaser of goods or services or related persons who carry out transactions with the Company, such as claims from various complaints.
Data Processing Bases and Objectives
The Company will process Vendors and Suppliers’ personal data with a scope, purposes, and using methods that are legal, transparent, and fair under the following processing bases.
1. For the fulfillment of the contract for the purchase of products and services from the Vendors and Suppliers or to be used to process requests prior to becoming the Company’s Vendors and Suppliers.
3. To collect information as a company database or statistical information about the number of visitors to the website.
The Company will process Vendors and Suppliers’ personal data as necessary to assess the suitability of the Customer to verify the accuracy of the information provided to the Vendors and Suppliers.
|
Data collection objectives |
Details |
|
1. For processing |
For processing, administering, processing Vendors and Suppliers application (products, raw materials used in the production of the Company’s products including various office supplies) or various transactions that Vendors and Suppliers have submitted to the Company. Other processing includes the consideration to receive benefits in return for the operation and provision of services relating to the compensation plan, collection of fees, and other liabilities (if any), review, analysis, processing, payment of the compensation plan including renewal, change, amendment, termination of status, and filing of claims relating to the purchasing, delivery, and procurement of goods and services to the Company. |
|
2. To use the data for analysis |
To use the data to analyze, offer, use, and improve the quality of the raw materials, products, and services that Vendors and Suppliers provides to the Company. |
|
3. To comply with regulations |
To comply with regulations or other legal requirements to carry out reviews and verification of personal data of Vendors and Suppliers obtained from agencies or organizations such as hospitals, the Royal Thai Police or other agencies. |
|
4. To provide information about the service |
To provide information about the after-sales management to the customers of Vendors and Suppliers, including the provision of follow-up services, coordination, and problem solving to customers as appropriate such as product-related services or responding to customer inquiries recorded by the procurement. |
The Company will collect, use, and disclose personal data of Vendors and Suppliers with the consent of the Vendors and Suppliers in the event that consent is required by law. Except in cases where the Personal Data Protection Act 2019 (B.E. 2562) give the right to collect personal data without the consent of the Vendors and Suppliers, for example for the legitimate interests of the Company or another person or juristic person or the Company’s compliancy with the law.
In the event that personal data processed by the Company for the above purposes is information necessary for the performance of a contract or compliance with various applicable laws and the customer does not provide such necessary personal data, it may be a violation of the law and the Company may not be able to administer or manage the contract or facilitate it.
Restrictions on the use or disclosure of personal data
2. The Company will not disclose or display information or make appear any other part of personal data that is inconsistent with the objectives and the extent of the consent of Vendors and Suppliers. The Company will maintain the confidentiality of Vendors and Suppliers data except as required by law.
3. The Company may share the customer’s personal data with Kingfisher Holdings Co., Ltd. and its affiliated group companies for business purposes.
Data Subject’s Rights
The rights of Vendors and Suppliers as data subjects under the Personal Data Protection Act 2019 (B.E. 2562) are as follows:
6. The right to request the Company to suspend the use of personal data.
The Company will retain the customer’s personal data for as long as it is necessary for the purpose of collecting, using, and disclosing personal data set forth in this notice. The criteria used to determine the retention period include the duration of the relationship of the Vendors and Suppliers with the Company as the Company’s Vendors and Suppliers and the Company may continue to retain for the period necessary for the fulfillment of a law or legal term, for the establishment of a statutory claim, a legal performance or exercise of a statutory claim, or raise against legal claims, or for other reasons according to the policies and internal requirements of the Company.
Security Maintenance
The Company requires reasonable and strict measures to maintain security to prevent loss, access, destruction, use, conversion, modification of personal data or to prevent the use of personal data without rights or illegally. The Company has limited the right to access, use, or disclose the customer’s personal data to specific relevant entities and individuals within the Company only.
Revocation of Consent
Vendors and Suppliers, as data subjects, may withdraw their consent for the Company to collect, use, or disclose the above-mentioned personal data by notifying the Company and the Company may request for the reason of such request. The revocation of the personal data subject’s consent will not affect the collection, use, or disclosure of personal data that the personal data subject has previously consented to. The data subject acknowledges that the revocation may result in the Company not being able to provide services under the purchasing contract or other contracts effectively.
Company Contacts
Vendors and Suppliers may contact the Company’s Procurement officers with questions and suggestions based on their consent for the collection, processing, use, and/or disclosure of the data or to request the exercise of the data subject’s rights at:
Kingfisher Holdings Limited No. 1, Moo 4, Banplaiklongkhru Road, Nadee Subdistrict, Mueang District, Samut Sakhon 74000; Tel: 034 419 888
Southeast Asian Packaging and Canning Limited; No. 1, Moo 4, Banplaiklongkhru Road, Nadee Subdistrict, Mueang District, Samut Sakhon 74000; Tel: 034 419 888
KF Foods Limited No. 1, Moo 4, Banplaiklongkhru Road, Nadee Subdistrict, Mueang District, Samut Sakhon 74000; Tel: 034 417 444
Company’s Data Protection Officer (DPO)
No. 1, Moo 4, Banplaiklongkhru Road, Nadee Subdistrict, Mueang District, Samut Sakhon 74000; Tel: 034 419 888 ext. 202
The Company will periodically review this announcement in order to comply with relevant practices and laws. If there is any amendment, the Company will announce by disseminating it through the Company’s appropriate notice.
Announced as of May 1, 2022
Kingfisher Holdings Limited and affiliated companies
