Notice of collection, use, and disclosure of personal data
In order to provide service and comply with the terms and conditions of the BIG POINT services (“BIG POINT Services”) as detailed in Clause 1 below. Big C Supercenter Public Company Limited (the “Company”), as the personal data controller, collects, uses and retains your data. As your data is personal data protected under the Personal Data Protection Act B.E. 2562 (the “Act”), in order to process such personal data in accordance with the requirements of the Act, the Company has prepared this document to allow you to acknowledge and understand your rights under the law, including the Company’s reason for collection, use and /or disclosure of your personal data. Please thoroughly read and understand the details for the benefit of exercising your rights.
1. Categories of Personal Data, Period of Retention and Purpose of Collecting and Using Such Personal Data by the Company
In order for you to get the most benefits from BIG POINT Services and to allow the Company to efficiently provide BIG POINT Services to you, the Company collects, uses and retains your personal data as follows:
1.1 Collected Data
Name-Surname, sex, age, date of birth, nationality, ID card / passport / state welfare card number, address, phone number, e-mail, Line MID, photo, purchase information, details and payment methods for goods/services, contact information between you and the Company in paper- information between you and the Company in paper-format, picture message, electronic files (images and/or audio or any other type of display output), information about application usage - Cookies as needed.
• Purpose of Collection and Use of Personal Data
1. To contact and provide BIG POINT Services to customers, including notification of various benefits.
2. To identify and verify benefits and/or request to use benefits of customer.
3. To analyse data and study customer behavior, including contact customers for opinions about Company services and products, to research, to do marketing activities, promote, develop and improve the efficiency of products and services of the Company.
4. To exercise legal rights and other necessarily legal proceedings related to goods and services.
5. To ensure safety of using services and to monitor and prevent fraud and crime or abuse of services.
• Legal Basis for the Collection and Use of Personal Data
To perform obligations under the contract and as necessary for the legitimate interests of the Company
• Period of Data Retention
During the BIG POINT membership period in part of member profile
2calendar years for purchase data
Current point collection round
1.2 Collected Data
Name-Surname, BIG POINT number, sex, date of birth, phone number, address, details and method of payment for products/services and sale and purchase information/history.
• Purpose of Collection and Use of Personal Data
To analyze and process results in order to offer opportunities and options to select and purchase various types of Company’s products and/or services.
• Legal Basis for the Collection and Use of Personal Data
To perform obligations under the contract and through consent of customers
• Period of Data Retention
During the BIG POINT membership period in part of member profile
2calendar years for purchase data
Current point collection round
1.3 Collected Data
Information of interest and/or your personal preferences, market research data and your opinion as a consumer that you disclose to the Company about your experience of using the Company’s products and services and/or any other website access, applications, and/or other communication channels that the Company receives from you or our third-party data processor.
• Purpose of Collection and Use of Personal Data
a. To analyze and process results relating to the Company’s services and products as well
as to research, do marketing activities, promote, develop and improve the efficiency of Company’s products and services.
b. To offer products and services that meet customer’s needs and preference.
• Legal Basis for the Collection and Use of Personal Data
Consent; to perform obligations under the contract; and as necessary for the
• Period of Data Retention
During the BIG POINT membership period in part of member profile
2calendar years for purchase data
Current point collection round
1.4 Collected Data
Name-Surname, Nickname, date of birth, sex, relationship
- Purpose of Collection and Use of Personal Data
1.To ensure safety of using special services in Big C area.
2.To analyze and process results in order to offer opportunities and options to select and purchase various types of Company’s products and/or services.
- Legal Basis for the Collection and Use of Personal Data
To perform obligations under the contract and as necessary for the legitimate interests of the Company and through consent of customers.
During the Big Point membership period in part of member profile.
2. Categories of Personal Data that will be Disclosed, the Necessity for Disclosure and the Categories of Persons Whom Personal Data will be Disclosed to.
In order for you to get the most benefits from BIG POINT Services and to allow the Company to efficiently provide BIG POINT Services to you, the Company may disclose your personal data as follows:
2.1 Personal Data to be Disclosed
Name-Surname, nationality, ID card/passport number, Laser ID, date of birth and phone number.
• Necessity for Disclosure
To verify and identify the customer.
• Legal Basis for the Disclosure of Personal Data
Necessary for the legitimate interests of the Company and to perform obligations under the contract
• Categories of Persons Whom Personal Data will be Disclosed To
Department of Provincial Administration
2.2 Personal Data to be Disclosed
Phone number and ID card number
• Necessity for Disclosure
To contact and provide customers with BIG POINT Services such as point redemption and verification and/or other benefits and to do marketing activities, promote and contact customers to notify of various benefits.
• Legal Basis for the Disclosure of Personal Data
Necessary to perform the obligat6ions under the contract (Terms and Conditions of BIG POINT Services) and for the legitimate interests of the Company.
• Categories of Persons Whom Personal Data will be Disclosed To
USSD Service Company and SMS Service Provider.
2.3 Personal Data to be Disclosed
Name-Surname, phone number, address and email.
• Necessity for Disclosure
To contact and provide BIG POINT Services to customers via Call Center system.
• Legal Basis for the Disclosure of Personal Data
Necessary to perform the obligations under contract (Terms and Conditions of BIG POINT Services).
• Categories of Persons Whom Personal Data will be Disclosed To
Company that provides call center systems.
2.4 Personal Data to be Disclosed
Name-Surname , phone number and email.
• Necessity for Disclosure
To contact customers for asking opinions about the Company’s services and products, for the development of the Company's products and services
• Legal Basis for the Disclosure of Personal Data
Necessary for the legitimate interests of the Company (product and service development)
• Categories of Persons Whom Personal Data will be Disclosed To
Company that processes data from survey service providers
2.5 Personal Data to be Disclosed
BIG POINT number, date of birth, sex and sale and purchase information/ history.
• Necessity for Disclosure
To analyze information and to study customer behavior
• Legal Basis for the Disclosure of Personal Data
Necessary to perform the contract (Terms and Conditions of BIG POINT Services) and for the legitimate interests of the Company.
• Categories of Persons Whom Personal Data will be Disclosed To
A data processing company that provides consumer behavior analysis services.
2.6 Personal Data to be Disclosed
Name-Surname, BIG POINT number, telephone number, address and ID card number
• Necessity for Disclosure
To use information to organize promotional activities and lucky draws as well as contact customers to notify of benefits and rewards/other benefits.
• Legal Basis for the Disclosure of Personal Data
Necessary to perform the contract (Terms and Conditions of BIG POINT Services) and for the legitimate interests of the Company.
• Categories of Persons Whom Personal Data will be Disclosed To
Data processing companies and marketing service providing companies.
2.7 Personal Data to be Disclosed
Name-surname, BIG POINT number, sex, date of birth, phone number, address, format and method of payment for products/services and purchase information.
• Necessity for Disclosure
To offer opportunities and options to purchase products and/or various types of goods.
• Legal Basis for the Disclosure of Personal Data
Customer’s consent
• Categories of Persons Whom Personal Data will be Disclosed To
Affiliated companies, non-life insurance companies, life insurance companies, non-life insurance brokers, life insurance brokers, financial institutions, non-bank financial service companies, payment system companies, payment service companies and the Company’s business partners
2.8 Personal Data to be Disclosed
Name-surname, BIG POINT number, sex, date of birth, phone number, e-mail, address, products payment’s method , Purchased informations, Interested Informations and/or your personal preferences, marketing research data and your opinion as a consumer that you disclose to the Company about your experience of using the Company’s products and services and/or any other website access, applications, and/or other communication channels that the Company receives from you or our third-party data processor.
• Necessity for Disclosure
To analyze information and study customer behavior including contact customers for asking opinions about the services and products to make a marketing research to develop services and products for offers a privileges and special promotions, advertisement including news and/or products and services that appropriated for customers
• Legal Basis for the Disclosure of Personal Data
Customer’s consent
• Categories of Persons Whom Personal Data will be Disclosed To
Affiliated company, Research service company, Survey service providers which is processing data company and Manufacturing that selling consumer products and/or business partners
3. The right of the personal data owner
Please note that an owner of personal data is protected under the Act as described in Attachment 1.
4. Reservation of the consent
The customer has the right, at any time, to revoke his/her consent for the collection, use or disclose of personal data of which the Company has collected, used, or disclosed upon the grant of consent thereof as specified herein and the letter of consent. Please contact the Company at a convenient channel to inform your intention, as shown in Article 5 below. Should the revocation affects any matter, the personal data protection officer will advise accordingly. The personal data protection officer may request additional document or information in case the applicant proceed on behalf of the minor, the incapable or quasi-incapable.
5. Contact the Company
Please contact the Company to inform your wish to exercise the right to personal data ownership via the Company’ Call Centre at Tel. 1756.
Attachment 1
The right of the personal data owner
The personal data owner is protected under the Personal Data Protection Act B.E. 2562 as follows:
1. The right to revoke the consent
In the case where the Company has requested and received consent to collect, use or disclose for benefit thereof in accordance with the purpose mutually agreed by the data owner, the data owner has the right to revoke his/her consent on the use of such personal data at any time.
2. The right to access and receive a copy of personal data stored by the Company
The data owner has the right to access and receive a copy of his/her data stored by the Company under the criteria set forth by the Personal Data Protection Officer.
3. The right of request for disclosing the procurement of personal data from an alternative source.
In the case where the Company has received personal data from any source other than directly from the owner of the data, the Company will inform the owner within 30 days after the date receiving such personal information (unless it is required by law). In such a case, the data owner may inquire and request the Company for disclosure of the source of such personal data.
4. The right to receive and request the Company to transfer or forward the data to other personal data controller when the Company adjusts the format of the data storage for automated reading and transfer
The transfer or forward of personal data hereunder shall include the case when personal data is stored in electronic format. The transfer proceeds via an electronic device that can read electronic data only, not include the courier's data transfer, or deliver personal data in other formats.
5. The owner's right to object to the collection and use of personal data
The owner has the right to object to the collection and use of his/her data under the following circumstances:
(1) The collection of personal data can proceed without consent as permitted by the bylaws or other juristic person other than personal data controller (unless such benefit is below basic right of the data owner or;
(2) the collection, use, or disclosure of personal data is for direct marketing;
6. The right to request to destroy or turn personal data given to the Company into unanimous data.
The data owner may make a request to the Company for the elimination of his/her own personal data and/or turn his/her given data into unanimous data under the following circumstances:
(1) The personal data is no longer necessary for the storage of personal data according to the objectives.
(2) When the data owner revokes his/her consent in collecting, using, or disclosing personal data, the Company shall have no legal authority to collect, use, or disclose such data.
(3) When the data owner exercise his/her right to oppose the collection, use, or disclosure of personal data, the Company shall not reject such request or;
(4) When personal data is collected, used, or disclosed illegally,
7. The right of request to the Company for suspension of personal data
The data owner may inform the Company to suspend the use of his/her data immediately under the following circumstances:
(1) When the personal data controller is under the examination of accuracy, completeness, or update such data as per the data owner's request.
(2) When such personal data could be deleted or destroyed, the data owner may request to suspend such data instead of deletion or destruction.
(3) When such personal data is no longer necessary for storage under the purpose of data collection but the data owner requests to continue the storage for initiation of right permitted by law, compliance or exercise of a legal right or to raise as a right of a claim as permitted by law.
(4) When the Company is considering the exercise of data owner's right against the collection, use, or disclosure of personal data
8. The right to request the Company to correct, validate and update personal data
In case of any changes regarding personal data given to the Company or that the Company has collected, the data owner may request the Company for any correction or update at any time.
9. The right of claim in case it is found offensive against Personal Data Protection Act B.E. 2562
In case the data owner finds that the Company and/or employee of the Company conduct any action that violates or contravene the Personal Data Protection Act B.E. 2562, the data owner may report such violation to the Company and/or relevant authority as detailed in Article 4 of this document.
Please note that when the Company receives notice of the wish to exercise any rights from the data owner, the Company will consider such request to proceed with proper action within 30 days from the date of receipt. The Company reserves the right to reject such request from the data owner where it is contravene to the law or necessary and legal right to refuse.