Privacy Policy
This Privacy Policy applies to our website dedicated to our brand Heineken in Thailand, available at https://www.heineken.com/th/en/home (the "Website") where we, Thai Asia Pacific Brewery (123 Thai Life Insurance Building 1, 23rd Floor Ratchadapisek Rd., Dindang, Bangkok 10400) collect certain personal data. Thai Asia Pacific Brewery (‘we’ or ‘us’) is the controller of the Personal Data collected and processed. We are part of the HEINEKEN Group. However, where processing is undertaken for the purpose of globally strategic reporting & insights and marketing activations, HEINEKEN International B.V. is considered to be a separate data controller of your Personal Data.
Please read this Privacy Policy carefully as it contains important information to help you understand our practices regarding any personal information that you give to us or that we collect otherwise in the context of the Website (“Personal Data”).
You can use the majority of our Website without being required to provide any Personal Data to us. For certain services or activities you will need to provide Personal Data for us to be able to provide you the requested service or product or for you to participate in the activity. Requested information on the Website marked with an asterisk is mandatory. If you do not provide the requested information, we will not be able to deliver the service or product to you or you cannot participate in the activity. In addition to information you are required to provide to us in order to participate in activities/campaigns, we collect certain information when you visit our Website.
If you visit our Website and have a question or other remark, you can submit our Contact Form. You will be asked to provide your name and email address and obviously information about your request. We will only use this information to respond to your question. We will register your requests, questions and our responses and other actions to handle your request. We will retain all information for 6 months after your question or complaint has been solved or the inquiry was closed.
We collect certain information when you visit our Website, such as your IP address, which web pages you visit, device category, browser, and type of internet browser, clicks and views. The information about your use of our Website and services enables us to build segments, which are groups of website visitors or customers with a number of common characteristics such as age group, gender or region. We will likely add you to one of our segments. Segments are used by us to customize the Website and to e.g. change the order of search results or where we place certain offers so you are more likely to see these. We may also use segments to show online advertisements that we think are relevant for you and to send you commercial messages.
We use this Personal Data as it is necessary in our legitimate interests to do so to promote our products and services to our consumers and website visitors, to enable us to attract more website visitors, to improve the sale of our products and services. We will retain the Personal Data for a maximum of 14 months.
Information about your online searches and social media activity (such as Twitter, LinkedIn, Google, Facebook & Instagram) (clicks and views), your settings on our Website, your customer service requests and contact history can be combined by us. This information enables us to build a profile of your interests and to match this with your other online information (for example by using Facebook or Google Custom audience services or look-a-like services to the extent allowed under applicable law) in order for us to use different channels for relationship management and marketing of our products and services to you via e-mail, direct mail, social media, telephone or online advertising which may include personalising website marketing content and offers, in particular when we use data management platforms, so these are tailored to your preferences.
You can always opt-out of receiving our newsletter and object to our use of your Personal Data for direct marketing purposes.
We use this Personal Data as it is necessary in our legitimate interests to be able to promote our products and services to our customers and website visitors, to maintain the relevance of our brands and reputation and to grow business by serving consumers with advertising relating to our brands and to finance our Website (via online advertisements). We will ask for prior consent, when we are legally required (for example when we use data for ‘direct marketing’).
We will retain the Personal Data as specified under the relevant purposes for which the Personal Data has been collected (e.g. newsletters, account information, processing orders and payments). The Personal Data shall generally be deleted or anonymised 24 months years after your last relevant activity on our Website, except where we are legally required to retain the Personal Data or where it is kept for any of the other purposes.
Your Personal Data will also be used for maintenance and analysis of our Website to solve performance issues, including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data, to improve the availability and user experience of the Website and to secure the Website against fraud. We log all use of our Website.
Our use of your Personal Data for these purposes is necessary in our legitimate interests and the information will be retained for a maximum period of 14 months. The logs of the use of our Website will be deleted within 14 months after creation.
We may request you to participate in research activities such as: surveys, pilots, panels, focus groups, and other research activities. Depending on the research activity, we will collect different sets of Personal Data. You will always be informed prior to the research activity what Personal Data we will collect and for what purpose we will collect this Personal data.
Our use of your Personal Data for research activities is necessary in our legitimate interest to ensure we offer a good quality service and products and to further improve or based on your prior specific consent, depending on the type of research activity and which Personal Data we will collect from you. The Personal Data will be retained for a maximum period of 24 months.
The Personal Data collected by us is accessed and used by Heineken International B.V. to create aggregated strategic reports with insights which are used to identify opportunities globally and to improve our global brands, products and services.
Heineken International B.V. uses this information as it is in the legitimate interest of the HEINEKEN Group and all affiliates and subsidiaries to identify opportunities globally and to promote and improve our products and services to our customers and website visitors and to maintain the relevance of our brands and reputation. Your information will be retained for a maximum period of 6 years. We will ask for prior consent, when we are legally required (for example when we use data for ‘direct marketing’).
As member of a global business, we share Personal Data and information we have acquired via ‘cookies’ with Heineken International B.V. for reasons as strategic reporting and for creating insights and marketing activation as further described under 2. in this Policy. We will only share such Personal Data and cookie data when we are allowed to do so by law. This means that we will ask for prior consent, if this should be the lawful basis (for example when we share cookie data). When we are allowed to rely on our legitimate interest, we will do so. This is the case when we create aggregated marketing insights or segments.
We may need to share Personal Data with third parties to help us provide services and products to you and to run our Website. These third parties are:
These parties may be located in the European Union or other countries in the European Economic Area or elsewhere in the world. When Personal Data is stored by us outside the EEA we will ensure an adequate level of protection of the transferred Data. We require service providers to use appropriate measures to protect the confidentiality and security of the Personal Data.
We may also need to provide Personal Data to law enforcement bodies in order to comply with any legal obligation or court order.
We will take appropriate technical, physical and organizational measures to protect the Personal Data collected through the Website from misuse or accidental, unlawful or unauthorized destruction, loss, alteration, disclosure, acquisition or access, that are consistent with applicable privacy and data security laws and regulations. However, no internet-based site can be 100% secure and we cannot be held responsible for unauthorised or unintended access that is beyond our control.
Our Website may contain links to other websites. We are not responsible for the privacy practices, content or security used by such other websites, which shall not be governed by this Privacy Policy. We advise you to always carefully read the privacy policies on these other websites.
We will retain your Personal Data for as long as legally required or for as long as necessary to provide you with any requested services or for any of the other purposes listed in this Privacy Policy. The specific retention terms are listed in this Privacy Policy for each of the relevant purposes. We will take reasonable steps to destroy or de-identify Personal Data we hold if it is no longer needed for the purposes set out above or after the expiration of the defined retention term.
A major part of the information referred to in this Privacy Policy is collected via our use of cookies and similar techniques. Cookies are small text files containing small amounts of information which are downloaded and may be stored on your user device, e.g. your computer, smartphone or table. Techniques we use that may be similar to cookies are tracking pixels, Java scripts, tags and web beacons. These cookies and similar techniques are sometimes necessary to remember your account settings, language and country, but also enable us to measure and analyse your behaviour on our Website and for showing you personalised advertisements on our Website or on third party websites. Where required, you will be asked for consent to our use of cookies. To view more information on what cookies we use and how we use them please review our separate Cookie Policy, which is also available in the footer of this Website.
You may choose to share information on our Website via social media, such as [Facebook, Instagram, LinkedIn and YouTube]. This means that the information you share, with name and preferences, shall be visible to visitors of your personal pages. We advise you to carefully read the privacy policies of the social media parties as these are applicable to the processing of your Personal Data by these parties.
The Website is not intended for use by individuals under the age of 20. We do not knowingly collect Personal Data from individuals under the age of 20.
If your personal data is or has been subject to the European GDPR (General Data Protection Regulation) or to the extent applicable under your local law, you have the right to request access to and deletion of your personal data, to request restricted processing or to stop processing or using your personal data for profiling, to receive an overview of the personal data that you have provided to us in a structured, commonly used and machine-readable format. You also have the right to file a complaint with your local data protection authority. All your rights are subject to applicable data protection laws and other relevant laws and regulations, to the HEINEKEN Privacy Procedures and other HEINEKEN guidelines. However, you always have the right to object to our use of your Personal Data for direct marketing communications, and when you do so, we will accommodate your request. Where you have provided consent to our use of your Personal Data, you have the right to withdraw your consent without this effecting the lawfulness of our use of this Data before your withdrawal.
Please note that if you make use of (some of) your choices and rights, you may not be able to use, in whole or in part, our Website services anymore.
We will keep this Privacy Policy under review and make updates from time to time. Any changes to this Privacy Policy will be posted on our Website page and to the extent reasonably possible, will be communicated to you.
If you wish to exercise any of your rights listed above, if you have any other question or a complaint about this Privacy Policy or about our handling of your Personal Data, please contact us [Contactpoint of local OpCo: e-mail and/or phone number and/or webform].