Privacy Policy

Grazia Gelato & Coffee, under ASSA Group, (referred as “we” or “us” in this Privacy Policy) is committed to protecting your privacy in respect of Personal Data that you share with us.

We take our responsibilities under the Thailand Personal Data Protection Act 2019 (PDPA), including any amendments (“the Act”) seriously. We also recognize the importance of the Personal Data you have entrusted to us and believe that it is our responsibility to properly manage, protect and process your Personal Data.

This Privacy Policy will apply to all Personal Data that is collected, used, disclosed, processed, and retained by us, including Personal Data that we collect online through or in connection with this website [www.graziagelateria.com] (this “Website”) and data we collect offline such as through customer service call centers, marketing and promotion programs and events, and through postal mail.

In this policy, “Personal Data” means any data about an individual who can be identified from that data, or from that data in combination with other information to which the organization may have access and includes the meaning otherwise as defined in the Act as amended from time to time.

Information we collect

We may collect and process Personal Data about you such as:

Personal and business contact information, such as name, mailing address, phone number, and e-mail address that you provide through filling out forms or submit on this Website, our service centers, and customer surveys
Internet Protocol address of the computer you are using
Details of products and services which you purchase from us or which you have inquired about, such as model, serial number, and dealer name
Details of your visits to our Website, the activities you engage in when using the services made available via the Website and the resources that you access on or via the Website.
Personal background information reasonably required for recruitment and administration of employees

How we use your information

We may use information held about you for the following purposes:

To process, manage and administer your account for Grazia Gelato & Coffee membership and other services including online services
To communicate with you about Grazia Gelato & Coffee products, services, and promotional offers that may be of interest to you, upon your consent
To administer your participation in contests, promotions, and surveys
To process and respond to your requests, questions and complaints
To consider you for employment if you submit a job application, and to administer our employees
To analyze and utilize information on your online interactions with us (e.g. IP address) to customize the Website content in the most suitable manner for you
To conduct research, analysis and development activities (including, but not limited to data analytics, surveys and/or profiling) to improve our Website and services
To store, host and/or back up (whether for disaster recovery or otherwise) your Personal Data, whether within or outside Thailand
To responding to legal process, pursuing legal rights and remedies, defending litigation and managing any complaints or claims
To respond to requests for information from public and governmental/regulatory authorities, statutory boards, related companies and for audit, compliance, investigation and inspection purposes
To comply with any applicable law, regulation, legal process or government request.

Disclosure of your information

Your Personal Data may be used, disclosed, maintained, accessed, processed and/or transferred to the following third parties, whether sited in Thailand or outside of Thailand, for the purposes set out above:

Our headquarters, subsidiaries and group companies.
Third party service providers which require the processing of your data, for example, third party service providers which have been engaged by us to : (i) to provide and maintain any IT equipment used to store and access your Personal Data; (ii) to host and maintain this Website; or (iii) otherwise in connection with the provision of certain services provided to you on or via this Website.
Our auditors and legal advisors.
Public and governmental / regulatory authorities, statutory boards, industry associations.
Courts and other alternative dispute forums.

Any third party in connection with (i) the sale of any of our business or assets, in which case we may disclose your Personal Data to the prospective buyer of such business or assets; or (ii) the acquisition of us or substantially all of our assets by a third party, in which case Personal Data held by us about you and our other customers will be one of the transferred assets.

When it is necessary, we will enter or enter into contractual undertakings to ensure that the Personal Data which we collect from you and transfer to our service providers (whether or not located in Thailand) is adequately protected to a standard comparable to the protection under the Act.

We will take reasonable steps to ensure that the third parties maintain appropriate physical, technical and administrative security to help prevent loss, misuse, unauthorized access, disclosure or modification of your Personal Data.

In certain circumstances we may provide third parties (whether or not located in Thailand) with aggregate information about this Website's users. This may include information about your computer, including where available your IP address, operating system and browser type, for system administration and to report aggregate information to our advertisers. This is anonymized statistical data about our users' browsing actions and patterns and does not identify any individual.

We will not use or disclose your information for any other purposes without your consent, unless we are under a duty to disclose or share your Personal Data in order to comply with any legal obligation, or to protect the rights, property, or safety of any person (including for example for the purposes of fraud detection and prevention).

Please rest assured that we never sell or rent your Personal Data.

Your rights

You may withdraw your consent for us to collect, use, disclose, process and/or retain your Personal Data for some or all of the purposes listed in this Privacy Policy.

We will inform you (when collecting your data) and obtain your consent if we intend to use your Personal Data for purposes other than what we have informed you. You may withdraw your consent at a later date by contacting us at info@graziagelateria.com

Changes to this Privacy Policy

We reserve the right to amend the terms of this Privacy Policy at our discretion. Any changes we may make to our Privacy Policy or privacy statement will be posted on this page. A written hard copy will also be available upon request to the address below.

Further information about protection of Personal Data and the Act

If you want to contact us with specific queries or concerns in relation to this Privacy Policy, or if you have any questions or complaints as to how your Personal Data is collected, used, disclosed and/or processed by us, please contact us at info@graziagelateria.com