General Beverage Co., Ltd. (“the Company”, “we”, “us”, or “our”) recognizes the importance of protecting personal data of website visitors, customers, business partners, job applicants, and other individuals who contact or interact with the Company.

This Privacy Notice (“Notice”) explains how the Company collects, uses, discloses, retains, and protects your personal data when you access our website, submit online forms, subscribe to communications, apply for employment, or otherwise interact with the Company through digital channels.

1. Data Controller
General Beverage Co., Ltd. is the data controller responsible for the processing of your personal data under this Notice.

General Beverage Co., Ltd. (Room 2101, Floor 21)
Address: 989 Kingbridge Tower, Rama 3, Bangpongpang, Yannawa, Bangkok, Thailand 10120 Telephone: 02-683-2171-4
Email: [email protected]

Data Protection Officer (DPO)
Email: [email protected]
Telephone: 02-683-2171-4

2. Personal Data We Collect
The Company may collect personal data as necessary, depending on the purpose and channel through which you interact with us.

1. Identity and Contact Data
   Such as your name, job title, company or organization, telephone number, email address, address, and other information submitted through Company forms.
2. Enquiry and Communication Data
   Such as your questions, feedback, complaints, messages, supporting documents, and other information that you provide when contacting the Company.
3. Job Applicant Data
   Such as your personal profile, educational background, employment history, qualifications, professional experience, resume or curriculum vitae, interview records, assessment results, referee information, and other data relevant to your application.
4. Website Usage and Technical Data
   Such as IP address, device type, browser type, operating system, date and time of access, pages visited, referring website, Cookie ID, and other information concerning your use of our website.
5. Sensitive Personal Data
   The Company does not intend to collect sensitive personal data through the website unless it is necessary, permitted by applicable law, based on your explicit consent, or supported by another lawful basis.

Please avoid submitting sensitive personal data through general contact forms unless the Company specifically requests such information.

3. Sources of Personal Data
The Company may obtain your personal data from the following sources:

1. Directly from you when you submit a contact form, subscribe to communications, apply for employment, or otherwise provide information to the Company.
2. Through your use of websites, cookies, and similar technologies.
3. From affiliated companies, business partners, service providers, or third parties legally entitled to disclose such information to the Company.
4. From publicly available sources, including public websites and publicly available social media accounts.

4. Purposes and Legal Bases for Processing
The Company may process your personal data for the following purposes:

Purpose	Legal Basis
To receive, manage, and respond to enquiries, requests, feedback, and complaints	Legitimate interests of the Company or steps taken at your request prior to entering into a contract
To manage recruitment, assess applications, arrange interviews, and conduct related recruitment activities	Steps taken at your request prior to entering into a contract, legitimate interests, or consent where appropriate
To send news, activity updates, product information, service information, and marketing communications	Your consent or another lawful basis permitted by applicable law
To operate, maintain, secure, analyze, and improve the Company’s website	Legitimate interests of the Company and/or your consent for non-essential cookies
To comply with legal obligations, regulatory requirements, audits, risk management, fraud prevention, and legal claims	Legal obligation or legitimate interests of the Company

Where the Company relies on consent as the legal basis for processing, we will obtain your consent clearly and you may withdraw it at any time.

5. Consequences of Not Providing Personal Data
In certain cases, the Company requires personal data to comply with legal obligations, enter into a contract, or respond to your request. If you do not provide the necessary personal data, the Company may be unable to process your request, provide certain services, or communicate with you effectively.

6. Disclosure of Personal Data
The Company may disclose your personal data, only where necessary, to the following categories of recipients:

1. Affiliates and companies within the Company’s group.
2. Service providers, including website developers, cloud service providers, IT service providers, email service providers, analytics providers, and recruitment service providers.
3. Business partners, agents, contractors, or vendors supporting the Company’s business operations.
4. Auditors, legal advisors, business consultants, and other professional advisors. Government authorities, regulators, courts, or other people where disclosure is required by law.

The Company will require recipients of personal data to implement appropriate security measures and process personal data only as necessary for the purposes specified by the Company.

7. International Data Transfers
The Company may transfer or store personal data outside Thailand where necessary, for example, when using cloud platforms or technology service providers located in other countries.

Where such transfers occur, the Company will implement appropriate safeguards and protection measures in accordance with applicable personal data protection laws.

8. Data Retention
The Company will retain your personal data only for as long as necessary to fulfil the purposes described in this Notice or as required by applicable law.

The Company may apply specific retention periods based on the type of personal data, for example:

Type of Personal Data	Retention Period
Contact and enquiry data	2 years after closure of the matter]
Unsuccessful job applicant data	1 year after completion of the recruitment process]
Newsletter subscription data	Until you withdraw consent or unsubscribe
Cookie and website usage data	In accordance with the Company’s Cookie Policy or the applicable cookie settings

When personal data is no longer required, the Company will delete, destroy, or anonymize such data, unless further retention is required or permitted by law.

9. Security Measures
The Company implements appropriate administrative, technical, and physical security measures to prevent personal data from being lost, accessed, used, altered, disclosed, or destroyed without authorization or unlawfully.

Access to personal data is limited to personnel and service providers who have a legitimate need to access such data for authorized business purposes.

10. Your Rights
Subject to applicable laws and legal limitations, you may have the following rights in relation to your personal data:

1. The right to access and obtain a copy of your personal data.
2. The right to request correction of inaccurate, incomplete, or outdated personal data.
3. The right to request deletion, destruction, or anonymization of personal data.
4. The right to request restriction of the use of personal data
5. The right to object to the collection, use, or disclosure of personal data.
6. The right to data portability where required by law.
7. The right to withdraw consent where the Company relies on consent as the legal basis.

The right to lodge a complaint with the Personal Data Protection Committee or another competent authority.

The Company may request additional information to verify your identity before acting on a rights request.

11. Withdrawal of Consent
Where the Company relies on your consent to process personal data, you may withdraw your consent at any time through the channels specified by the Company.

Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal. However, withdrawal may affect the Company’s ability to provide certain services or process certain requests.

12. Cookies and Similar Technologies
The Company uses cookies and similar technologies to enable website functionality, remember user preferences, analyze website usage, and improve the user experience.

Strictly necessary cookies may be used without consent where they are required for the website to function properly. Analytics, marketing, and personalization cookies will be used based on your consent or preference settings, where applicable.

For further information, please refer to the Company’s Cookie Policy.

13. Third-Party Websites and Services
The Company’s website may contain links to third-party websites, applications, or services. Such third parties may have their own privacy policies and data protection practices.

The Company has no control over, and is not responsible for, the privacy practices, content, or security of third-party websites or services. You should review the relevant privacy policy before providing personal data to any third party.

14. Changes to This Privacy Notice
The Company may review and update this Notice from time to time to reflect changes in business operations, technologies, legal requirements, or relevant practices.

Where material changes are made, the Company will notify you through the Company’s website or other appropriate channels. The latest version of this Notice will take effect from the date stated at the beginning of this Notice.

15. Contact Us
For questions, concerns, or requests relating to this Notice or your personal data rights, please contact:

General Beverage Co., Ltd. (Room 2101, Floor 21)
Address: 989 Kingbridge Tower, Rama 3, Bangpongpang, Yannawa, Bangkok, Thailand 10120 Telephone: 02-683-2171-4
Email: [email protected]

Data Protection Officer (DPO)
Email: [email protected]