Privacy Policy
The One Enterprise Public Company Limited Group

The One Enterprise Public Company Limited Group (“Group of Companies”) consists of The One Enterprise Public Company Limited and its subsidiaries, which are One 31 Company Limited, Exact Scenario Company Limited, Acts Studio Company Limited, GMM Channel Holding Company Limited, GMMTV Company Limited, Change2561 Company Limited, GMM Media Public Company Limited, A – Time Media Company Limited, GMM Studios International Company Limited, One Sanook Company Limited, Good things Happen Company Limited, PARBDEE TAWESUK Company Limited, TIFA Studios Company Limited, GINGERX Company Limited, Neo One Sustainment Company Limited. Hereinafter, each such company shall be referred to as an "Affiliate Company". This includes major shareholders such as GMM Grammy Public Company Limited ("Major Shareholders").

The Group of Companies, Affiliate Companies and/or Major Shareholders provides services on websites and applications as well as online official pages on social media platforms available on desktops, mobile devices, tablets, and other devices which will be available later in the future (“Platforms”). The Group of Companies, Affiliate Companies and/or Major Shareholders publishes this Policy for the assurance that your rights as Data Subject will be protected under Thailand’s Personal Data Protection Act B.E. 2562 (“PDPA”) with our personal data processing guidelines and personal data security measures.

This Privacy Policy will be explaining our data processing guidelines on your personal data which The Group of Companies, Affiliate Companies and/or Major Shareholders have been collected when you are directly and/or indirectly visited our Platforms.

The Group of Companies, Affiliate Companies and/or Major Shareholders may review the Privacy Policy from time to time, should there be any material revision of this Policy, The Group of Companies, Affiliate Companies and/or Major Shareholders may notify you in order to improve and request your consent to the revised Policy.

1. Personal Data

• 1.1 Definition
  “Personal Data” means any information relating to an identified or identifiable natural person.
• 1.2 Personal data that The Group of Companies, Affiliate Companies and/or Major Shareholders collects
  The Group of Companies, Affiliate Companies and/or Major Shareholders collects your personal data through various forms such as registrations, surveys, or inquiries via websites, social medias, our Platforms or other means, and cookies or similar technologies.
  The collected Personal Data information includes names, surnames, nicknames, photos, age, addresses, e-mail addresses, gender, birthdays, telephone numbers, marital status, education, occupations, personal/family income, social media accounts, IP addresses, browsing/viewing history, website/application logs, browser programs, and other related statistics.

2. Grounds for processing

Before or while collecting your personal data, purposes of processing of such data will be provided and your permission will be requested either by electronics or other means unless it is expressly allowed by law or requires your personal data to be given without your consent, which of the following processing type as follows:

• 2.1. It is necessary for the performance of a contract to which you is a party, or in order to take steps at your request prior to entering into a contract.
• 2.2. It is for the achievement of the purpose relating to the preparation of the historical documents or the archives for public interest, or for the purpose relating to research or statistics.
• 2.3. It is for preventing or suppressing a danger to a Person’s life, body or health.
• 2.4. It is necessary for the performance of a task carried out in the public interest by The Group of Companies, Affiliate Companies and/or Major Shareholders, or it is necessary for the exercising of official authority vested in The Group of Companies, Affiliate Companies and/or Major Shareholders.
• 2.5. It is necessary for legitimate interests of The Group of Companies, Affiliate Companies and/or Major Shareholders or any other Persons or juristic persons other than The Group of Companies, Affiliate Companies and/or Major Shareholders, except where such interests are overridden by your fundamental rights.
• 2.6. It is necessary for compliance with a law to which The Group of Companies, Affiliate Companies and/or Major Shareholders is subjected.

Please noted that The Group of Companies, Affiliate Companies and/or Major Shareholders have no intention to collect personal data from minor (individual under 20 years of age). The Group of Companies, Affiliate Companies and/or Major Shareholders will begin the deleting process as soon as possible if found out that The Group of Companies, Affiliate Companies and/or Major Shareholders has been collected minor’s personal data without permission from the holder of parental responsibility over the minor.

3. Purposes of processing

The Group of Companies, Affiliate Companies and/or Major Shareholders may process your approval or consented personal data for the following circumstances

• 3.1 To provide services on our Platforms.
• 3.2 To archive databases and services providing history.
• 3.3. To gain better access to the customers on our Platforms.
• 3.4. To provide tailored contents suitable to the audiences.
• 3.5. To introduce The Group of Companies, Affiliate Companies and/or Major Shareholders news and contents and provide promotional items or activities suitable to customers.
• 3.6. To analyses and research for promotional items or activities purposes and to introduce products and services from The Group of Companies, Affiliate Companies and/or Major Shareholders, our partners, and other relevant parties via any devices or other equipments.
• 3.7. To improve customer satisfaction through our contents.
• 3.8. To contact customers who join our activities or events in games holds by The Group of Companies, Affiliate Companies and/or Major Shareholders.
• 3.9. To manage the registered customers’ accounts and survey to improve our services to provide a better customer experience or create new services on our Platforms.
• 3.10. To be compliance with a legal obligation to which The Group of Companies, Affiliate Companies and/or Major Shareholders is subject.

4. Disclosing of personal data

The Group of Companies, Affiliate Companies and/or Major Shareholders may disclose your personal data to the following:

• 4.1. The Group of Companies, Affiliate Companies and/or Major Shareholders’ subsidiaries and affiliates.
• 4.2. Individuals and/or juristic persons who involve in our process to bring you satisfaction our services i.e. banking and financial service providers, logistic service providers, technology service providers, and program and IT support service providers.

The Group of Companies, Affiliate Companies and/or Major Shareholders will notify these service providers to have suitable and specific measures to safeguard your personal data and only process such personal data as much as necessary.

5. Transferring of personal data to other country

The Group of Companies, Affiliate Companies and/or Major Shareholders may transfer your personal data to our subsidiaries, affiliates, individuals and/or juristic persons, which located or live in other countries, whose is essential to carry out the services The Group of Companies, Affiliate Companies and/or Major Shareholders is providing. In such case The Group of Companies, Affiliate Companies and/or Major Shareholders ensures that destination countries that receives such personal data shall have adequate data protection standard except in the following circumstances:

• 5.1 Where it is for compliance with the law.
• 5.2 Where your consent has been obtained, provided that you has been informed of the inadequate personal data protection standards of the destination country.
• 5.3. Where it is necessary for the performance of a contract to which you is a party, or in order to take steps at your request prior to entering into a contract.
• 5.4. Where it is for compliance with a contract between The Group of Companies, Affiliate Companies and/or Major Shareholders, and other persons or juristic persons for your interests.
• 5.5. Where it is to prevent or suppress a danger to your life, body, or health or other persons, when you are incapable of giving the consent at such time.
• 5.6. Where it is necessary for carrying out the activities in relation to substantial public interest.

6. Personal data security measures

The security of your personal data is utmost important to us. The Group of Companies, Affiliate Companies and/or Major Shareholders implements appropriate technical and administrative measures to protect your personal data from unauthorised access, misuse, disclosure, alteration, destruction, and losing by providing minimum security measures as required by law to prevent unauthorised access, misuse, disclosure, alteration, and destruction to personal data from those who do not have rights or duties related to that personal data. The Group of Companies, Affiliate Companies and/or Major Shareholders will review the above – mentioned measures when necessary or when the technology changes to ensure effective security.

7. Retention period

The Group of Companies, Affiliate Companies and/or Major Shareholders will retain your personal data for the necessary timing to meet the processing purposes unless the law requires longer retention periods; when the retention period expires or when it becomes irrelevant or unnecessary for the purposes of collecting that personal data The Group of Companies, Affiliate Companies and/or Major Shareholders will delete, destroy, or make your personal data unidentifiable.
However, should there be any dispute regarding such personal data The Group of Companies, Affiliate Companies and/or Major Shareholders reserved the right to retain that personal data further until there is a court’s final order or judgment on that dispute.

8. Your rights as data subject

• 8.1 You have the right to withdraw your consent at any time.
• 8.2. You have the right to request access to and obtain a copy of your Personal Data, which is under the responsibility of The Group of Companies, Affiliate Companies and/or Major Shareholders, or to request the disclosure of the acquisition of your Personal Data obtained without your consent.
• 8.3. You have the right to receive your Personal Data from The Group of Companies, Affiliate Companies and/or Major Shareholders in the format which is readable or commonly used by ways of automatic tools or equipment, and can be used or disclosed by automated means; request The Group of Companies, Affiliate Companies and/or Major Shareholders to send or transfer your Personal Data in such formats to other Data Controllers if it can be done by the automatic means; request to directly obtain your Personal Data in such formats that The Group of Companies, Affiliate Companies and/or Major Shareholders sends or transfers to other Data Controllers, unless it is impossible to do so because of the technical circumstances.
• 8.4. You have the right to object to the collection, use, or disclosure of your Personal Data.
• 8.5. You have the right to request The Group of Companies, Affiliate Companies and/or Major Shareholders to erase or destroy your Personal Data.
• 8.6. You have the right to request The Group of Companies, Affiliate Companies and/or Major Shareholders to restrict the use of your Personal Data.
• 8.7. You have the right to have your Personal Data accurate, up-to-date, complete, and not misleading.

9. Cookies

The Group of Companies, Affiliate Companies and/or Major Shareholders use cookies and other similar technologies to collect your personal data. For more details, please visit our Cookie Policy

10. Privacy Policy on other Platforms

This Privacy Policy applies to our Platforms only. When you visit our Platforms there may be links which lead to external sites operated by third parties. If you visit those sites, please learn their privacy policy apart from ours and The Group of Companies, Affiliate Companies and/or Major Shareholders will not be responsible for such claims or damages arising from those sites which are operated by third parties.

11. Contact Information

Should there be any questions or suggestions regarding personal data or if you wish to exercise your rights as data subject, please feel free contact us

• 11.1 Address: 50 GMM Grammy Place, Sukhumvit 21 Road (Asoke), Khlong Toei Nuea, Wattana, Bangkok, 10110.
  E-mail: dpo@onee.one
• 11.2. Data Protection Officer (DPO)
  E-mail: dpo@onee.one