Privacy
Notice
For
Red Bull Sport
This Privacy Notice (“Notice”) informs you
of the principles and methods by which the Company collects, uses, and
discloses your personal data in connection with Red Bull Sport, a platform for
athlete development and competitions across Southeast Asia. For your benefit,
the Company recommends that you read and understand this Notice before
providing your personal data to the Company. You may also read the Company’s
full Privacy Notice at https://www.tcp.com/th/privacy-policy.
If you provide personal data of any third party to the Company, you represent
and warrant that you have the lawful right to disclose such personal data to
the Company and that you have informed the relevant data subject of the details
set out in this Notice. The Company may organize projects under Red Bull Sport
in collaboration with other partners, as specified in the terms and conditions
of each project for which you apply. If you have any questions regarding the
processing of personal data by such partners, please refer to the relevant
partner’s website.
If you have any questions or would like to request
further information regarding this Notice or the Company’s personal data
protection policy, please contact the Company’s Data Protection Officer (“DPO”)
at:
Contact: Data Protection
Officer
Telephone: (+66)94-981-1044
E-mail: DPO@tcp.com
For the purposes of this Notice, “Company”
means T.C. Pharmaceutical Industries Co., Ltd.
The Company, as a data controller, respects and
places importance on the protection of your personal data. The Company will
collect, use, and disclose your personal data in a transparent and fair manner
and in accordance with the requirements of personal data protection laws and
other applicable laws.
Clause 1. Personal Data Collected by the Company
The personal data that the Company may collect
includes the following categories:
1.1 Information
received from activity participants: This includes information provided by
activity participants through forms, telephone, websites, applications, or
other channels prepared by the Company, such as name and surname, address, telephone
number, email address, age, gender, nationality, language used for
communication, social media accounts, sports skills, sports profile or
portfolio, payment information, and emergency contact name and contact number.
1.2 Information
collected during participation in activities: This includes information
collected during your participation in activities, such as competitor
identification number, competition results, signature, photographs, videos, audio
recordings, and feedback or comments regarding the activity.
1.3 Information
collected through automated systems: This includes information such as IP
address, browser type, location data transmitted from your device, device
information, such as application version, operating system, account settings,
and other similar information.
The Company may use automated technologies to
collect information relating to your use of the website or application, which
may include cookies and other similar tracking technologies.
Clause 2. Purposes for Which the Company Collects,
Uses, and Discloses Your Personal Data
2.1 To operate and manage Redbullsport.com, which
is operated by the Company and used as a channel for organizing online
activities for consumers or end users under various projects in which you
participate, such as Red Bull Power Race, Red Bull Next Generation, and other
projects. This includes registration for participation, payment processing, and
user data administration.
2.2 To prepare and publish the Company’s
advertising and public relations materials by using your photographs and videos
through the Company’s various channels, both online and offline.
2.3 To manage activities under the projects in
which you participate, such as event registration, competitor identification,
measurement and assessment during activities, prize awarding, participant
selection, training, and preparation of relevant agreements.
2.4 To summarize the results of activities
internally within the organization.
2.5 To improve and develop the Company’s website
services.
2.6 To comply with legal requirements relating to
the retention of computer traffic data.
2.7 To maintain records of the Company’s business
operations.
Clause 3. Legal Bases for Processing Personal Data
For the processing of personal data in connection
with these activities, the Company primarily relies on the legal bases of
contractual performance and legitimate interests. In addition, the Company is
required to comply with legal obligations relating to the retention of computer
traffic data and may rely on your consent in certain cases.
The Company will request your consent through a
consent form that is separate from this Notice where it is necessary for the
Company to collect, use, or disclose your personal data for any purpose for
which no other lawful basis is available. If you are a child not exceeding 10
years of age, an incompetent person, or a quasi-incompetent person under the
law, consent for the collection, use, or disclosure of your personal data must
be given by your father, mother, person with parental authority, guardian, or
curator, as the case may be.
Clause 4. Retention Period for Your Personal Data
The Company will retain your personal data for a
period of two year from the date on which the relevant activity ends. Upon
expiry of the retention period above, the Company will delete, destroy, or
anonymize such personal data so that it can no longer identify you.
Clause 5. Disclosure, Transmission, and Transfer of
Your Personal Data to Third Parties
The Company may need to disclose, transmit, or
transfer your personal data, for the purposes notified to you and in accordance
with the requirements of personal data protection laws, to agencies,
organizations, or third parties, which may include the following categories:
- companies
within the TCP Group, whether in Thailand or overseas, including
associated companies, joint venture companies, or business partners;
- external
service providers acting as data processors, such as service providers for
information technology, event organization, marketing, communications,
development and maintenance, advertising, or payment processing;
- partners
who co-organize activities or act as judges for competitions or
activities;
- professional
advisers, such as legal advisers, financial advisers, auditors, or other
professional service providers;
- government
authorities or regulatory authorities, as required by law or pursuant to a
lawful order;
- other
data controllers to whom the data subject has consented to the
transmission or transfer of personal data; and
- visitors
of Redbullsport.com or the Company’s social media channels, for public
relations purposes in accordance with the objectives of the relevant
campaign.
The disclosure of personal data will be carried out
only to the extent necessary for the specified purposes or as permitted by law.
Where consent is required by law, the Company will obtain your consent before
proceeding.
Clause 6. Cross-Border Transfer of Personal Data
For certain projects, the Company may collaborate
with overseas partners to organize international activities. As a result, the
Company may need to transfer participants’ personal data to such partners for
the purposes of jointly judging the activities and maintaining evidence between
the parties, as specified in the terms and conditions of each project.
Such partners may be located in Thailand, Malaysia,
Indonesia, Myanmar, Austria, or other countries in Southeast Asia. These
countries may have personal data protection standards that differ from those of
Thailand.
The Company will carry out such transfer in
accordance with the criteria prescribed by personal data protection laws.
Clause 7. Your Rights under Personal Data
Protection Laws
You have the following rights under personal data
protection laws:
7.1 Right to be informed of details relating to the
collection, use, or disclosure of your personal data as required by law.
7.2 Right of access and request a copy of your
personal data retained by the Company.
7.3 Right to request that your personal data be
corrected and kept accurate.
7.4 Right to request the transfer of your personal
data.
7.5 Right to request the deletion of your personal
data.
7.6 Right to request the suspension or restriction
of the use of your personal data.
7.7 Right to object to the
processing of your personal data.
7.8 Right to withdraw consent
If you wish to exercise any of the rights under
Clauses 7.1 to 7.8 above, please contact the Company’s Data Protection Officer
or submit a request through the Company’s Data Subject Rights Request Form at:
https://privacy.tcp.com/dsr?id=1f0deb2d-1261-43a7-8b61-90acb9905665
If you believe that the Company has failed to
comply with personal data protection laws or has failed to proceed with your
data subject rights request without reasonable grounds, you have the right to
lodge a complaint with the Office of the Personal Data Protection Committee (“PDPC”).
Clause 8. Security of Your Personal Data
8.1 The Company has implemented appropriate
technical and organizational measures to maintain the security and
confidentiality of your personal data and to prevent unauthorized or unlawful
loss, access, destruction, use, alteration, modification, or disclosure of your
personal data.
8.2 Where certain transactions on the website or
application require a password for login, you must keep such password
confidential. The Company will not be responsible for any leakage or breach of
your personal data resulting from your disclosure of your password to any other
person, if applicable.
Clause 9. Application and Amendment of this Privacy
Notice
The Company may update this Notice from time to
time to ensure that its contents remain appropriate, up to date, and in
compliance with personal data protection laws and other applicable laws. If the Company amends or updates this Notice, the Company will
publish the latest version on the Company’s website.
