Updated 8 July, 2022
We, Riverside Auction House Co., Ltd., (collectively referred to as “the Company”), as a data controller, respect your privacy rights and recognize the importance of protecting your personal data (“Personal Data”) through the use of website: www.rcbauctions.com Therefore, the Company has provided this Announcement to explain to you the Company’s practices and objectives in relation to your personal data in accordance with the Personal Data Protection Act B.E. 2562 (2019) (PDPA) and the EU General Data Protection Regulation (GDPR).
1. The purposes of the Company for collecting, using, or disclosing of your Personal Data are as follows:
1.1 To verify your identity in case you request for participating in activities of the Company.
1.2 For contracting purposes to use the service of the Company such as Bidding and Selling the auction product.
1.3 For marketing, where you give us consent:
– To communicate with you about sales promotional and marketing activities relating to products and services of the Company including to advertise such activities, promotions, products, and services through any communication channel of the Company, as well as to provide appropriate recommendation for your highest benefits and in respond to your requirements.
– To study, research, collect statistics, develop, and improve products and services of the Company for your highest benefits.
– To share your Personal Data with our company’s group, business partners, business consultants and social network providers for the purpose of marketing communication and research.
– To process your Personal Data that are collected via cookies or similar tracking technologies for marketing purposes.
1.4 To responding to your demands, questions or complaints or contact you upon your request.
1.5 To proceed your orders and payments within our e-commerce website.
1.6 To process your Personal Data to operate your membership account.
1.7 To process your Personal Data that are collected via cookies or similar tracking technologies for the regular operation and setting of our online service and website
2. Collection, Use, and Disclosure of the Personal Data
The Company will collect, use, and disclose such Personal Data only as deemed necessary within the scope of purposes stated in this Announcement and/or upon obtaining your consent if it is required by laws.
Your consent to the Company to collect, use, and disclose your Personal Data is not a condition for accessing the Company’s services or communication channel, however, if any of the Company’s service, performance, or obligation under any contract require your Personal Data and you decline to give your consent or later withdraw your consent, this might lead to a limitation of service, access to communication channel, or performance to fulfill the contractual obligations.
Other than the purposes specified above, the Company may collect, use, and disclose your Personal Data without your consent in the following cases:
2.1 it is for preventing or suppressing a danger to a person’s life, body, or health.
2.2 it is necessary for the performance of a contract to which you are a party, or to take steps at your request prior to entering the contract.
2.3 it is necessary for the performance of a task carried out in the public interest by the Company, or it is necessary for the exercising of official authority vested in the data controller.
2.4 it is necessary for legitimate interests of the Company or any other persons or juristic persons, except where such interests are overridden by the fundamental rights of your Personal Data.
2.5 it is necessary for compliance with any laws.
2.6 it is for the achievement of the purpose relating to the preparation of the historical documents or the archives for public interest, or for the purpose relating to research or statistics, in which the suitable measures to safeguard your rights and freedoms are put in place and in accordance with the notification as prescribed by the Personal Data Protection Committee. (This Sub-clause will not be applicable for whom protected under GDPR)
What are cookies?
Cookies are text files which are stored on a user’s computer and/or communication devices that you use, such as tablets and smartphones, via a web browser while you enter the Company’s website. Cookies will not cause harm to your computer equipment and/or communication devices. They used to store detailed log data, internet usage or your website visit behavior. You can learn more about cookies from https://www.allaboutcookies.org
To study the behavior of your website usage and to develop company websites to be able to use easily, quickly and more efficient.
To protect you from fraud and improve security.
To analyze products and services, and offers of the Company products that may be relevant to you
To improve the marketing that you see on social media, applications and other websites.
You can refuse the collection of information via cookies through your browser settings, which may reduce the optimum performance of the website and application.
4. Period for Collecting and Retaining the Personal Data
The Company will collect your personal data as long as it is needed for the purpose of data processing stated in this Announcement.
5. Disclosure of the Personal Data
The Company mainly process your Personal Data within Thailand and EU. The Company may, with your consent if it is required by laws, disclose the Personal Data to any third party assigned to be a data processor by the Company and/or any governmental and/or private agencies to be in accordance with the purposed stated in this Announcement and the laws.
If you are protected under the EU General Data Protection Regulation (GDPR), in case we need to transfer your data to countries outside of the EU or EEA, we will ensure that such transferring or processing is under the Standard Contractual Clauses to protect your Personal Data.
6. The Data Subject’s Rights
You, as the data subject, have the rights as follows:
6.1 The Right to Withdraw your consent regarding the collection, use, and disclosure of your Personal Data.
6.2 The Right to Access or receive a copy of your Personal Data or request the Company to disclose the acquisition of your Personal Data obtained without your consent.
6.3 The Right to Request the Company to receive, send or transfer your Personal Data in the Company’s possession to other data controllers.
6.4 The Right to Object the collection, use, or disclosure of your Personal Data.
6.5 The Right to Request the Company to Erase or Destroy your Personal Data or anonymize your Personal Data to become the anonymous data which cannot identify the data subject.
6.6 The Right to Request the Company to Restrict the use of your Personal Data.
6.7 The Right to Request the Company to ensure that your Personal Data remains accurate, up-to-date, complete, and not misleading. If the Company does not take action regarding your request, the Company shall record such request together with reasons for examination.
6.8 The Right to Complain regarding any action violating the Personal Data Protection laws.
However, the abovementioned shall be subject to the Personal Data Protection Act (PDPA) and the EU General Data Protection Regulation (GDPR).
If you wish to exercise your rights as mentioned above, please contact the person as specified in clause 10 (The Company’s Privacy Office Contact).
7. Security Measures
The Company has set up a system to protect your Personal Data from being accessed, changed, and destroyed without authorization. The Company agrees to use the system with adequate standard to protect your Personal Data and agrees to perform in accordance with the rights and obligations under the Personal Data Protection laws regarding the collection, use, and/or disclosure of your Personal Data, whether in whole or in part.
8. Accessible Person to the Personal Data
Only the Company’s officers or the persons who are assigned by the Company, to have duties or responsibilities in relation to the purposes of using the Personal Data or to act in accordance with the laws, will have the right to access your Personal Data. The Company will control that only the persons can access your Personal Data.
9. A Change to this Announcement
The Company may revise this Announcement to be consistent with the guidelines and related laws or regulations. However, if there is any change to this Announcement, the Company will announce such change via the Company’s website or other communication channel of the Company.
10. The Company’s Privacy Office Contact
If you have any queries regarding this Announcement, or would like to opt out of marketing activities or wish to exercise the right as a data subject specified in clause 6 (The Data Subject’s Rights), you can contact the Company’s personal data protection sector as detailed below:
23 Trol Rongnamkhaeng, Si Phaya Pier
Yota Road, Sampantawong, Bangkok, Thailand 10100