GOALPRIZE DATA POLICY (“GDP”)
Most recent update: March 26, 2024
FastUsers Company Limited (the “Company”) respects and recognizes the importance of protecting your Personal Data. This Goalprize Data Policy (“GDP”) hereby informs you of the Company's policy regarding the collection, use, and disclosure of your Personal Data in connection with the Company’s services, including the Goalprize.com website (“Website”), the “Goalprize” mobile applications (“Mobile Application”), and any related products and services (collectively, “Services”). This GDP applies to both customers and businesses registered with the Company, who contact and disclose their personal data to us.
For clarity, “personal data” refers to any information that can be used to identify you or from which you are identifiable. This includes, but is not limited to, your name, nationality, telephone number, bank details, personal interests, email address, government-issued identification or identification numbers, biometric data, race, date of birth, marital status, religion, health information, vehicle and insurance information, employment information, and financial information.
The Company commits to collects, uses, discloses, or may otherwise process (collectively “process”) your Personal Data in accordance with this GDP, based on your consent or as required by applicable laws.
How We Process Your Personal Data
(1) Source of Personal Data: The Company may obtain your personal data from various sources as follows:
(a) Directly from You: Through communications with you, including but not limited to, interactions with the Company's services or during the account registration process.
(b) Indirectly from Third Parties: Via referrals from third parties to whom you have given consent to disclose your personal data to the Company.
(c) Automatically Collected Data: By our systems when you access the Company's website, use the Company's applications, or engage with the Company's services.
(2) Types of Personal Data Processed by the Company: The Company processes several types of personal data, which include:
(a) For Users of the Goalprize Application (used by restaurant customers to participate in Goalprize campaigns), hereby referred to as “customers”:
-Account Registration: Customers will provide, and the Company will collect, their name, date of birth or age (or an indication that they are old enough to agree to a legal contract), contact details, and email address.
- Service Use and Participation: For the use of the Company’s Services and participation in activities within these Services, customers will provide, and the Company will collect, their email address, history of point transactions, leaderboard rankings, digital gift cards received, and credit transactions from digital gift cards, including dates, amounts, and the restaurants hosting Goalprize campaigns.
(b) Users of the Goalprize-Business Application (used by restaurants hosting a Goalprize campaign), hereby referred to as “business”:
-For Account Registration: The business owner or the account owner will provide, and the Company will collect, their name, date of birth, contact details, and email address.
-For Business Verification (to host a Goalprize campaign): The business will provide, and the Company will collect, comprehensive information for verification purposes. This includes: The business owner's email, full name, personal mobile phone number, and government-issued ID or passport details (number, photo of the front, address, religion, date of birth, nationality, place of birth, sex, height, and issue and expiry dates).
Business-specific information: registered business name, business registration number, registered business address, actual restaurant location address, photos provided by the restaurant owner or manager, restaurant contact details, website and/or social media account URLs, type of food offered, restaurant specials, operational days and hours, staff names, staff emails, and any related or representative information in cases where the contact is made on behalf of a juristic person. This may also include an identity information document.
-For Contact Purposes: The business owner using the Goalprize Business app will need to provide contact information such as a telephone number, email, or social media account information. Customers using the Goalprize app (for Customers) are required to provide only their email, with the option to add other information.
(c) Business Owners using the Goalprize Business application need to provide contact information such as a telephone number, email address, or social media account details.
Customers using the Goalprize app are required to provide only their email address. The addition of other information is optional.
(d) The Company collects personal data from correspondences between users and the Company. This includes personal or business data provided during communications, such as inquiry details, interests, or any other personally identifiable information shared directly through various channels.
(e) By using the Services, the Company will collect technical information, such as your IP address and cookies, along with details about your usage and browsing behavior.
Purpose of Processing Personal Data by the Company
The Company is committed to processing your Personal Data in strict adherence to the Personal Data Protection Act B.E. 2562 (2019), ensuring that processing is necessary for contract performance, legal compliance, the pursuit of legitimate interests by the Company, third parties, stakeholders, and safeguarding public interests as well as the vital interests of individuals. The specific purposes for processing your Personal Data are outlined as follows:
(1) Communication Management: The Company processes Personal Data for effective communication with you, including answering inquiries, providing necessary information upon request, handling complaints, and responding to your direct communications through various channels. This facilitates continuous coordination, execution of service agreements, and fulfillment of mutually agreed rights and obligations.
(2) Legal Compliance: Personal Data is processed to fulfill legal obligations, encompassing duties like preparing accounting records and tax documents related to the services the Company provides to you.
(3) Business Relationship Enhancement: The Company aims to improve and maintain business relationships. This involves using your Personal Data for service quality control, management analysis, issue resolution, employee training, and planning for future service enhancements for your benefit.
(4) Legal Rights Protection: In the event of disputes, your Personal Data may be processed to protect and defend the Company’s legal interests.
(5) Consent-Based Processing: With your explicit consent, the Company may use your Personal Data for marketing, newsletters, and other purposes as clearly defined in the consent provided.
Retention Period of Personal Data, in order to perform in accordance with the purposes described above, it is necessary for the Company to collect, compile, store and process your personal data according to the following period:
(1) Service Provision and Agreement Fulfillment: The Company will collect, store, compile, and process your personal data for as long as it remains obligated to provide services to you. This includes the duration necessary for the execution of agreements and the performance of rights and obligations under such agreements.
(2) Legal Compliance: For processing personal data in fulfillment of legal duties, the Company will retain your personal data for periods specified by applicable laws, ensuring compliance with legal obligations.
(3) Business Relationship and Service Improvement: The Company reserves the right to retain personal data necessary for building and enhancing business relationships and/or service improvement. This retention will be carried out in a manner that does not unreasonably infringe upon the rights of the data subject.
(4) Protection of Company's Legitimate Rights: To safeguard and defend the legitimate rights of the Company, personal data will be retained in accordance with durations defined by relevant laws.
(5) Consent-Based Processing: When you provide consent for the Company to process your personal data for specific purposes, such processing will continue until you withdraw your consent.
Disclosure of the personal data, generally, your personal data will not be disclosed, except for the circumstance that the Company would need to disclose to the following person:
(1) Third Parties or Other Organizations or Companies: The Company may disclose or transfer your personal data to third parties for the purpose of providing support and services to you, fulfilling the contract the Company has with you, or achieving other purposes outlined in this GDP. This includes disclosing your personal data to the Company's consultants. Such disclosure to third parties will be conducted to the extent that it is appropriate and in compliance with applicable laws, orders, or regulations issued by regulatory bodies, government agencies, or other relevant organizations.
In the event that such disclosure or transfer is made to third parties outside of Thailand, the Company will verify whether the destination country maintains adequate personal data protection standards in compliance with the guidelines set forth by the Personal Data Protection Act B.E. 2562 (2019). Furthermore, the Company will take the necessary steps to ensure that your personal data is disclosed, transferred, or sent only to the extent necessary.
(2) Government and Legal Requirements: The Company may need to disclose personal data to comply with orders, laws, or judgments from government, regulatory authorities, or courts.
Data Security Measure
The Company is dedicated to implementing and maintaining robust personal data security measures to safeguard against unauthorized or unlawful access, alteration, or disclosure. These measures are regularly reviewed to ensure they remain effective and compliant with current standards and legal requirements.
Your Rights to Personal Data
The Company acknowledges and supports your rights regarding your personal data, under applicable legislation. You may exercise the following rights:
(1) Withdrawal of Consent: You can withdraw consent for data processing at any time, except where legal obligations or ongoing beneficial contracts with the Company prevail.
(2) Access and Disclosure: You have the right to access your personal data and to be informed of its source.
(3) Correction: You can request correction or completion of your personal data.
(4) Objection and Restriction: You may object to or request restrictions on the processing of your personal data.
(5) Data Portability: If applicable, you can request the transfer of your personal data in a readable format to another controller.
(6) Deletion or De-identification: You can request the deletion or de-identification of your personal data when it is no longer needed for processing.
(7) Objection to Use: You may object to the use of your personal data under certain circumstances.
(8) Filing Complaints: You have the right to lodge complaints regarding data processing practices.
Notwithstanding your rights under applicable law, there may be circumstances where you are unable to exercise these rights, or doing so may involve costs, specifically in situations where:
-The request contradicts or does not align with the rights outlined in the Personal Data Protection Act B.E. 2562 (2019), other relevant laws, or official notifications.
-The action is in opposition to a legal provision, law, or court order.
-It infringes upon the rights and freedoms of others.
-The exercise of the right is deemed to be in bad faith, unnecessary, or unreasonable.
-It interferes with ongoing investigations, judicial processes, or the execution of legal rights, including court proceedings and decisions.
Please be aware, exercising your rights in the above contexts may impact the Company’s ability to provide services to you, potentially affecting the benefits you may receive from the Company's applications, software, or services.
The Company highly prioritizes your privacy and the accuracy of your personal data. Should there be any changes to your personal information or if you intend to exercise your rights as a data subject, we encourage you to contact the Company without delay using the information provided below.
Company contact information
FASTUSERS COMPANY LIMITED, 7 Summer Point Building, Level 2, Soi Sukhumvit 69, Phra Khanong Nuea, Wattana, Bangkok 10110 Thailand
Email: OfficeManager@FastUsers.com (English or Thai)
Phone: 02-114-3124 Thailand (English)
Most recent update: March 26, 2024