PRIVACY & DATA PROTECTION

Category of Data Subject 

Definition 

Associated Person 

Any persons relevant to the Customers, such as representatives, gift receivers, persons who may involve in the campaigns, events or workshops together with Customers. 

Customers 

Member Customer and Non-Member Customer, collectively. 

Member Customer 

A customer (a natural person) who has registered via our website i.e., https://shop.dior.co.th/, and/or LINE Official Account, and/or our counter stores, and/or our boutique store, or via other means, for personal use. 

A contact person or authorized representative of the customer entity has registered via our website i.e., https://shop.dior.co.th/, and/or LINE Official Account, and/or our counter stores, and/or our boutique store, or via other means. 

Non-Member Customer 

A natural person who has not registered a membership of the Company. 

Category of Personal Data 

Collection of your Personal Data 

Device information and access data 

Information on Internet connection (IP address), cookie information  

Identification and contact information 

Full name, prefix, mobile phone numbers, telephone number, address, email address, date of birth, age, gender, identification card number and data contained in the identification card, passport number and data contained in the passport, flight and travelling information, tax identification number, nationality, LINE ID, signature, username and password of client’s online account, purchase history, photographs, video records 

Finance information 

Your bank account number and bank account information 

Payment information 

Documentation or details that provide proof of payment for a transaction 

Work information 

Your company telephone number, company name and address, position, occupation 

Personal Data of Associated Persons 

Full name, address, contact number, photographs, video records 

Sensitive Personal Data 

We may process your health-related data e.g., symptoms, disease, allergies, photos of allergy reactions, medical certificate, medical treatment, etc. 

Your Sensitive Personal Data may appear on the copy of your identification card, i.e., your religious belief and/or blood type data. However, we do not have an intention to process such Sensitive Personal Data; therefore, we will require you to blind, cross out or omit the information about religious belief and/or blood type before providing a copy of your identification card to us.  

In the case where such Sensitive Personal Data still appears on a copy of identification card, we may, at any time, blind or cross out such Sensitive Personal Data in order to comply with the PDPA (which requires us to collect personal data to the extent that is necessary and relevant for our business operations). 

Purposes 

Type of Personal Data 

Legal Basis 

To enter into an agreement or establish a legal relationship with you or the legal entity of which you were authorized to represent, and to execute and perform the obligations under such agreement or legal relationship 

Your Personal Data is necessary for the following purposes: 

1. To create and register customer accounts;  

1. To proceed with purchase payment; 

1. To deliver the purchase order to you or the Associated Person; and 

1. To send greeting card to gift receiver;  

• Identification and contact information 
• Payment information 
• Work information 
• Personal Data of Associated Persons 

Remark: If you do not provide any Personal Data that is necessary for creation and registration of  customer’s account in our systems, payment completion, and order delivery, we may not be able to enter into an agreement with you, nor  to execute or perform our obligations as specified under the said agreement or legal relationship (either in whole or in part), nor to proceed with your order and the payment. 

• Legitimate interest (for corporate Customers, for the processing of the Associated Person’s Personal Data to deliver the purchase order and greeting card) 
• Contractual Obligation (for individual Customers) 

To furnish you with our beauty services, new products, sampling, gift or rewards redemption  

Your Personal Data is necessary: 

1. For receiving new products, sampling, and gifts or rewards redemption from us  

1. For reservation and receiving of our beauty services (such as make up and beauty treatment)  

• Identification and contact information 
• Personal Data of Associated Persons 
• Sensitive Personal Data, i.e., your religious belief and/or blood type that appeared in the identification card (if required) 

Remark: If you do not provide any Personal Data that is necessary for receiving new products and sampling to you, gift/rewards redemption, and reservation and receiving of our beauty services, we may not be able to serve you or to perform our obligations under the agreement between you and us, either in whole or in part. 

• Legitimate interest (For the processing of the Associated Person’s Personal Data for gifts or rewards redemption from us) 
• Consent (For Non-Member Customer to contact by the Company for receiving new products, sampling) 
• Contractual Obligation (For Member Customer for receiving new products, sampling, and gifts or rewards redemption, reservation and receiving of our beauty services, and for Non-Member Customer for reservation and receiving of our beauty services) 
• Explicit consent (for the processing of Sensitive Personal Data for gifts or rewards redemption) 

To participate in the campaigns, attend events or workshops, arranged by the Company  

Your Personal Data is necessary: 

1. To invite Customers to participate in the campaign, or attend events or workshops. 

1. To enable Customers and persons who may involve in the campaigns, events or workshops together with Customers to register or participate in the campaigns, or attend events or workshops. 

1. To contact and communicate with the Customers regarding the campaigns, events or workshops for example, to send a confirmation on the registration, etc. 

1. While you are participating in the campaign, or attending the events or workshops, your images and/or videos may be recorded and used for our internal purpose – for example, for our record or evidence that the activities were held, etc.  

1. While you are participating in the campaign, or attending the events or workshops, your images and/or videos may be recorded and used for our marketing, promotion and/or advertisement purposes, and may also be published or posted on social media platforms. 

• Identification and contact information 
• Personal Data of Associated Persons 

Remark: If you do not provide any Personal Data that is necessary to invite you to participate in the campaign, or attend events or workshops, or to enable you to register or participate in the campaigns, or attend events or workshops, or to contact and communicate with you regarding the campaigns, events or workshops, we may not be able to allow you to participate in the campaign or attend the events or workshops, or may not be able to perform our obligations under the agreement between you and us, either in whole or in part. 

• Legitimate interest (for the processing of Customers and Associated Person’s Personal Data for Activity No. 1-3 and for Activity No. 4-5 in certain cases)  
• Contractual Obligation (for the processing of Member Customer’s Personal Data for Activity No. 1-3 for the particular campaigns, attend events or workshops for the Member Customer according to the terms and conditions or agreements (as the case may be)  
• Consent (for the processing of Customers and Associated Person’s Personal Data for Activity No. 4-5 in certain cases) 

To handle your request and/or complaints via online and offline channels 

Your Personal Data is necessary: 

1. To handle Customers’ issues and complaints in respect to product allergies  

1. To handle customer requests for a product change/return/refund (non-allergy)  

1. To handle other Customers’ requests such as refund in case of false payment, update of customer’s information, chat with customers, or respond to customers’ inquiries  

• Identification and contact information 
• Finance information 
• Payment information 
• Work information 
• Sensitive Personal Data, i.e., health-related data (e.g., symptoms, disease, allergies, photos of allergy reactions, medical certificate, medical treatment) for handling complaints in respect to product allergies and your religious belief and/or blood type that appeared in the identification card (if required) for updating of customer’s information 

Remark: If you do not provide any Personal Data that is necessary for us to handle your request and/or complaints in respect to product allergies, we may not be able to solve your concerns and requests and we may be unable to comply with the laws which may result us in violation of the law applicable to us. Moreover, if you do not provide any Personal Data that is necessary for handle customer requests for a product change/return/refund, refund in case of false payment, we may not be able to serve you or to perform our obligations under the agreement between you and us, either in whole or in part. 

• Legitimate interest (for handling other requests such as to update of customer’s information, chat with customers, or respond to customers’ inquiries) 
• Legal Obligation (for handling product allergy requests including the processing of Sensitive Personal Data i.e. symptoms, disease and allergies, etc. according to the law related to adverse event from using cosmetics) 
• Contractual Obligation (for false payment and product change/return/refund) 
• Explicit consent (for the processing Sensitive Personal Data i.e., photos of allergy reactions, medical certificate, medical treatment) 

To record your purchase history and our daily sales 

• Identification and contact information 

Legitimate interest 

To conduct data analysis, and for sending marketing material/information for example, promotional message, marketing campaign  

• Device information and access data 
• Identification and contact information 

• Legitimate interest (For customer who has never been asked to provide consent to conduct data analysis and for sending marketing material/information for example, promotional message, marketing campaign whereby the Company will provide an opt-out channel for such customer) 
• Consent (To conduct data analysis, and for sending marketing material/information for example, promotional message, marketing campaign) 

To comply with applicable laws 

We may be required to process your Personal Data for complying with laws, regulations, orders, notifications, or other rules issued by authorities.  

1. Proceed or submit any required information and documents, or arrange to comply with our tax obligations and to submit the required documents to the Revenue Department including but not limited to processing with VAT refund and issuing of invoice; and 

1. Comply with other laws, e.g., law related to adverse event from using cosmetics under the supervision of the Ministry of Public Health (for example, the Cosmetics Act B.E.2558), the PDPA by fulfilling your requests to exercise rights in respect to your Personal Data. 

• Device information and access data 
• Identification and contact information 
• Personal Data of Associated Persons 
• Finance information 
• Payment information 
• Work information 
• Sensitive Personal Data, i.e., health-related data (e.g., symptoms, disease, allergies, photos of allergy reactions, medical certificate, medical treatment in respect to product allergies) 
• Any information as required by law 

The type of the Personal Data being processed for this purpose would depend on a case-by-case basis, as required by applicable laws. 

Remark: If you do not provide any Personal Data that is necessary for compliance with the law, which is applicable to us, we and/or you may be unable to comply with the laws, and that may affect the necessary processing of your Personal Data as well as may result in the violation of applicable law. 

• Legal obligation (For activity No.1 and 2 and for the processing of Sensitive Personal Data to comply with the law related to adverse event from using cosmetics such as symptoms, disease, allergies) 
• Explicit consent (for the processing of Sensitive Personal Data to comply with the law related to adverse event from using cosmetics such as photos of allergy reactions, medical certificate, medical treatment) 

To establish, exercise, comply or defend legal claims  

Your Personal Data may be processed as part of the establishment, exercising, compliance or defense of legal claims. 

• Device information and access data 
• Identification and contact information 
• Finance information 
• Payment information 
• Work information 
• Personal Data of Associated Persons 
• Sensitive Personal Data (if any) 
• Legal claim related information 

The type of the Personal Data being processed for this purpose would depend on a case-by-case basis. 

• Legitimate interest 
• Establishment of legal claims (for Sensitive Personal Data) 

Cookies 

Your Personal Data may be processed in order to enhance your experience of visiting and using our website, to make the visit of our website more attractive, and to enable the use of certain functions, we use so-called “Cookies” on various pages.  

For more information of the Cookies we use, please refer to section 6. Cookies below.  

• Device information and access data 

• Legitimate interest (for Required Cookies) 
• Consent (for Functional Cookies and Personalization and Advertising Cookies) 

Remark: You can adjust and set the using of cookies as per your preference on our website.