Privacy Notice

1. Introduction

Siam Meland Company Limited (“Siam Meland”, “we”, “us”, or “our”) is committed to meet and uphold all obligations under the Personal Data Protection Act, B.E. 2562 (2019) and its sub-regulations issued thereunder (the “Personal Data Protection Laws”). We have adopted this Privacy Notice (the “Privacy Notice”) to help you understand how we collect, use, disclosure, and process (collectively referred to as  “process” or “processing”) your Personal Data (as defined hereinunder) and explain your rights in connection with such Personal Data under the Personal Data Protection Laws.

This Privacy Notice applies to the data subjects involved with us, which may include the external parties: (i) who visit our website at https://meland.co.th/, (ii) who contact us by face-to-face interaction or through any other channels, such as email, telephone, post, website, and social media accounts, (iii) who book tickets or use our services and activities, (iv) who provide goods or services to us, and (v) any individuals related to our activities (collectively referred to as “you” or “your”).

It is necessary for you to read and comprehend this Privacy Notice in order to understand how we process your Personal Data and know the data subject’s rights you have.

• What Personal Data We Collect

For the purpose of this Privacy Notice, “Personal Data” means any information relating to an identifiable living individual who can be identified from that data or from that data and other data. In addition to Personal Data, there are special categories of Personal Data called “Sensitive Data”, which includes any Personal Data revealing racial, ethnic origin, political opinions, cult, religious or philosophical beliefs, sexual behavior, criminal records, health data, disability, trade union information, genetic data, biometric data of a person, and any data which may affect the data subject in the same manner, as prescribed by the Personal Data Protection Committee.

• Personal Data

We may collect your Personal Data, including but not limited to the following categories:

1. basic data, such as full name, nickname, signature, title, position, photograph, date of birth, place of birth, age, gender, nationality, copy of national ID card, copy of passport, or similar identifiers;
2. contact details, such as address, work address, telephone number, email address, social media account; 
3. financial data, such as payment information;
4. marketing and communication data, such as communication preferences or marketing opt-ins;
5. event data, such as attendance list;
6. usage data, such as IP address, log file, WiFi, or similar electronic services;
7. audio and video recording, such as audio recordings, video recording, or other information obtained through electronic means; or
8. other data as necessary, or relevant to the provision of our services and related activities.
   1. Sensitive Data

In some circumstances, we may collect your Sensitive Data, including but not limited to the following categories:

1. religious beliefs and blood group included in a copy of national ID card;
2. religious beliefs, such as religious requirements;
3. biometric data, such as face recognition;
4. disability data, such as special physical needs; or
5. other health data, such as data related to COVID-19 pandemic, medical history, allergy.
6. How We Collect Your Personal Data

In general, we may directly collect your Personal Data and/or Sensitive Data through the following processes:

1. when you contact us, whether in written or oral communications, and whether by face-to-face interaction or any other channels, such as email, telephone, post, website, social media, or other presences;
2. when you book tickets, register for events, programs, or activities;
3. when you use our facilities or services;
4. when you enter into a contract with us and perform the contractual obligations; or
5. when you provide goods or services to us.

However, we may indirectly collect your Personal Data and/or Sensitive Data through the following processes:

1. when it is publicly available sources, such as social media where you have set as public; or
2. when we collect it through the third parties, such as your parents and guardians (if you are a child), contact persons, reference persons, outsourcing persons, service providers, advisors, business partners, and  agencies.
3. How We Process Your Personal Data

We may process your Personal Data and/or Sensitive Data for the specified Scope and Purposes (“Scope and Purposes”) as follow:

1. making contact with you;
   1. providing services and activities;
   1. taking care of children;
   1. ensuring the safety and security through CCTV monitoring;
   1. entering into contracts and/or making business deals;
   1. interacting with government or regulatory agencies or other authorities;
   1. notifying you of our new activities, programs, newsletters, updates and invitations to events, and other relevant services;
   1. marketing and promoting our services using images, videos, or other materials;
   1. encouraging and enhancing business and service development, including arranging activities and events;
   1. improving customer experience through analysis of visitor behavior, feedback, and satisfaction surveys;
   1. complying with applicable laws and regulations;
   1. managing and collecting payments, fees and charges, refunds, reimbursements; or
   1. making other activities related to you.

To process your Personal Data and/or Sensitive Data in accordance with the Scope and Purposes lawfully, we rely on the legal bases under the Personal Data Protection Laws. However, we may process your Personal Data and/or Sensitive Data for more than one legal basis depending on the specific Scope and Purpose for which we are using your Personal Data and/or Sensitive Data. The legal bases that we rely on include:

(1) Contractual Basis

We are obligated to process your Personal Data to carry out the contractual obligations committed to you. These required Personal Data make up most of the data stated in Clause 2. If you withhold any of your Personal Data for the specified Scope and Purposes, we may not be able to fulfill our contractual obligations under the contracts made with you. 

(2) Legitimate Interests

In specific situations, we may require your Personal Data to achieve our or any third parties’ legitimate interests, provided that such legitimate interests do not override your interests and fundamental rights and freedoms.

(3) Legal Obligation

We are obligated to process your Personal Data and/or Sensitive Data according to any legal obligations and requirements, including but not limited to providing your Personal Data and/or Sensitive Data to relevant government agencies, such as Department of Public Works and Town & Country Planning and Revenue Department. If you do not provide your Personal Data and/or Sensitive Data or withhold any of your Personal Data for the specified Scope and Purposes, there might be consequences to us and it may result us in violation of the applicable laws.

(4) Consent

In some circumstances, we may require your explicit consent to process your Personal Data and/or Sensitive Data. In requesting your consent, we will comply with the requirements of the Personal Data Protection Laws.

• Disclosure of Personal Data to Third Parties

We may disclose your Personal Data and/or Sensitive Data to external organisations or parties in accordance with the Scope and Purposes and the legal bases specified in Clause 4. These organisations and parties may include:

1. our customers;
2. our business partners;
3. our affiliated or related companies;
4. social media platforms;
5. service providers, such as information technology and cloud service providers, professional development organizers, and financial institutions;
6. counterparties and their legal representatives;
7. media and publication companies;
8. government agencies, such as the Department of Public Works and Town & Country Planning, or the Revenue Department;
9. hospitals, clinics or medical personnel; or
10. any persons or juristic persons who have a partnership relationship with us.

In the disclosure of Personal Data and/or Sensitive Data, we ensure that appropriate security measures, such as confidentiality arrangements, are put in place to protect your Personal Data and/or Sensitive Data as required by the Personal Data Protection Laws.

• Transfer of Personal Data to Foreign Countries

For the Scope and Purposes mentioned above in this Privacy Notice, we may transfer your Personal Data and/or Sensitive Data to third parties or servers in another country, which the data recipient country may not have the same data protection standards as Thailand. In addition, we ensure that the transfer complies with the Personal Data Protection Laws.

• Data Retention Period

We will retain your Personal Data and/or Sensitive Data for as long as it is necessary to (1) fulfill the Scope and Purposes set out in this Privacy Notice, (2) establish, exercise, or defend the legal claims, and (3) comply with the period under the applicable laws and regulations.

•  Your Personal Data Rights 

Subject to the Personal Data Protection Laws, your rights with respect to your Personal Data include:

1. Right to withdraw consent – where your consent has been obtained, you are entitled to withdraw such consent by submitting the consent withdrawal form to us;
2. Right of access – you may have the right to request access to and obtain a copy of all your Personal Data and/or Sensitive Data processed by us;
3. Right to data portability – you may have the right to receive a copy of  your Personal Data and/or Sensitive Data in a commonly used electronic format. You may also have the following rights:
   1. the right to transfer your Personal Data and/or Sensitive Data automatically to other organisations; and
   1. the right to receive a copy of your Personal Data and/or Sensitive Data that is automatically transferred to other organisations, except where it is technically unfeasible;
4. Right to object – you may have the right to object to any processing activities of your Personal Data and/or Sensitive Data in some circumstances;
5. Right to erasure – you may have the right to request for the deletion or anonymisation of the Personal Data and/or Sensitive Data that we process about you, in accordance with the following cases:
   1. the Personal Data and/or Sensitive Data is no longer necessary for the processing purposes;
   1. you have withdrawn your consent;
   1. you object to the unlawful processing of your Personal Data based on legitimate interests; and
   1. the processing activity is not in accordance with the law;
6. Right to restrict processing – you may have the rights to restrict any data processing activities in the following cases:
   1. during the verification process where you exercise your right to request for the rectification of your Personal Data and/or Sensitive Data or your right to object the processing of Personal Data and/or Sensitive Data;
   1. when the Personal Data and/or Sensitive Data is initially requested for erasure but is followed by an additional request to restrict the processing instead; and
   1. when you request to restrict the processing of Personal Data and/or Sensitive Data due to legal claims.
7. Right to rectification – you may have the right to have any inaccurate or incomplete Personal Data and/or Sensitive Data rectified; and
8. Right to lodge a complaint – you may have the right to lodge a complaint to the competent authorities in case we unlawfully process your Personal Data and/or Sensitive Data or do not comply with the Personal Data Protection Laws.

If you wish to exercise personal data protection rights, you can contact us by using contact details specified below. We will consider your request and proceed with your request within the period as prescribed by the Personal Data Protection Laws. However, please be informed that your rights mentioned above are subject to the relevant factors and whether we can rely on other lawful grounds to process your Personal Data and/or Sensitive Data.

Depending on our discretion, we may charge an administrative fee for processing your request.

1. Contact Us

If you have any questions or suggestions regarding this Privacy Notice or if you wish to exercise your rights in accordance with the Personal Data Protection Laws, you can contact us by using the contact details specified below:

Siam Meland Company Limited
991 Siam Paragon Shopping Center, Units 4A-ST01, 5A10, 501, 4A, 5A, and 5th Floors, Rama 1 Road, Pathumwan Sub-district, Pathumwan District, Bangkok.
[ phone number of Siam Meland Company Limited：+66 2 664 1775]

Data Protection Officer (DPO)：Huang YaQi
[ email address of the DPO: huangyaqi@ meland.com.cn]

1. Privacy Notice Revision

In order to improve efficiency in processing your Personal Data and/or Sensitive Data, we may amend this Privacy Notice as we deem appropriate by publishing its latest version on our websites.

This Privacy Notice is updated on [1-11-2025].