top of page

Privacy Policy

​

Last updated: 17 Nov 2023

​

Personal Data Protection Policy for TICKETIER Platform User GMM Music Co., Ltd.

GMM Music Co., Ltd. (the “Company”) is the service provider the TICKETIER APPLICATION and www.ticketier.com as the center for buying and selling concert tickets in Thailand including buying and selling other products or services that the Company may provide services in the future and is the personal data controller of the user of platform TICKETIER. The Company is aware of the importance of privacy and security protection of the personal data of the user of the GMM Music platform, who is a buyer, seller, registrant to attend the concert, concertgoer, or in any others such as a partner, business partner (hereinafter called “You/you”) using services via a mobile phone, computer equipment, and/or other devices that can access to the internet.

Therefore, the Company issue the Personal Data Protection Policy for the users of the TICKETIER platform to explain to you the Company's practices regarding the personal data: How does the Company collect your personal data? What data does the Company collect? What is the Company’s purpose in using or processing data? How does the Company disclose your data? This policy also includes other rights as you are the data subject to be protected as prescribed in the Personal Data Protection Act B.E. 2562 (A.D.2019)

To use the Company's platform services or to visit the platform and/or to access the services, you acknowledge and agree that you accept the practices, terms and/or policies set forth in this Personal Data Protection Policy and you consent to the Company collecting, using, disclosing and/or processing your personal data as specified in this privacy policy. If you do not consent to the Company processing your personal data as specified in this Personal Data Protection Policy, please do not use the services or access the platform.

Child's Personal Data

In the event that the personal data of child under 20 years of age is disclosed to the Company, the Company deems that you consent to the Company to process the child’s personal data, and you accept and agree to be bound by this Personal Data Protection Policy and be responsible for the child's actions.

The Company is not responsible for the use of platform service without permission which is used by you, any user who uses on your behalf or any unauthorized user. You must be responsible for your decisions to use the platform services and you must take any action to prevent inappropriate use of the platform services.

​

1. Who Does this Policy Apply to?

This Personal Data Protection Policy applies to the personal data that GMM Music Co., Ltd. (the “Company”) collects, uses, or discloses your personal data as the data controller of your personal data, as you are the user of the company's platform, whether you create a user account as a buyer, or seller who is the natural person or juristic person including your contact with the Company's platform or the customer service representatives via APPLICATION, WEBSITE and/or other contact channels such as telephone 02-669-88xx, Line Official @xxx Facebook page: xxxx.

​

2. Definition

Personal Datameans any information relating to a person, (but not including the information of the deceased person in particular) whether or not it is recorded in material object and whether it is true or false. This enables the identification of such person, whether directly or indirectly or from that information and any other information that the Company is able to access or may access to it.

Sensitive Personal Datameans the certain types of personal data that are sensitive and at risk of being used for unfair discrimination, including racial, ethnic origin, political opinions, cult, religious or philosophical beliefs, sexual behavior, criminal records, health data, disability, trade union information, genetic data, biometric data, or of any data which may affect the data subject in the same manner, as prescribed by the Personal Data Protection Committee.

A Platform usermeans the user who creates the user account as the buyer, seller, or person who registers to attend a concert or others such as business partner, business alliance, etc., whether natural person or juristic person.

​

3. The Personal Data Collected by the Company

The Company collects your personal data as necessary and in accordance with the purpose of using the information, the Company will inform you later in the procedure. The personal data that the Company collects from you in the process of registering for the membership account on the Company's platform, including buying and selling concert tickets, pre-register to attend the concert as well as to register to receive Email news and special offers are as follows:

(1) The information identifies the person and profile which may include your first name and surname, username and password, telephone number, Email, interest, photos/videos/voice recordings from attending the concert and any personal data in any type of images or video or voice that you have uploaded to the Company's platform.

  • In the case that you are the juristic person, the Company will collect the company name, address, date of registration and other information related to the business (such as company registration number, business license, tax information, directors’ and shareholders’ information).

(2) Account information and accounting transaction may include credit card details, bank account number, bank statement, address to deliver your concert ticket /invoice, payment and purchase order.

(3) Usage information such as information of the method and time in which you use the platform, information to view the products and services or any messages on the platform, including information of websites that you have viewed before you accessed to the platform and any other statistical data being similar to the above information.

(4) Marketing and communication information may include your interest, survey on your interest to receive marketing information from the Company, your satisfaction of communication, your interest in the particular product or service, including your comments or suggestions (feedback) in the form of Email, message, or conversation, etc.

The Company may collect personal data from you, the third parties (including but not limited to agents, trade partners, contractors, partners, and any other persons who provide the services to the Company to collect your data and /or perform services on behalf of the Company or with individuals who the Company works with, including but not limited to payment service providers, government resources, financial service providers, credit bureaus, delivery, marketing, and other partners’ services), affiliated companies or such data may be collected automatically when you use the platform or services. While you use the Company's platform and services, you agree to give your consent (whether consent is given to the Company, third parties, or affiliated companies) to transfer your personal data from third parties and/or affiliated companies to the Company for the purposes specified in this policy or other requirements.

In the case that you register as the user on the Company's platform using your social media user account or connecting your user account to a social media user account or using the Company's other social media systems, the Company may access the personal data about you that you voluntarily provide to your social media service provider in accordance with the policy of the said service provider and the Company will manage your personal data in accordance with this this Personal Data Protection Policy.

 

4. Source of the Personal Data

During the use of the platform, the Company may receive personal data from you in the following cases.
(1) When you browse, access, and use the Company's platform services no matter what any devices that can access the internet.
(2) When you register to create the user account with the Company's platform, both as a buyer, or seller.
(3) When you submit the form including but not limited to application form or other forms related to the Company's products and services either online or in paper form.
(4) In the case that you are the seller, when you specify to sell concert tickets on the platform and carry out transactions with the buyers related to the purchasing and selling of concert tickets.
(5) When you apply to use or to request any other services on the Company's platform.
(6) When you apply to use or to request any payment services related to functions provided on the platform or provided by the Company's third party service providers.
(7) When you pre-register to attend the concert.
(8) When you register to receive public relations media or marketing media of the Company via SMS, an Email, or others.
(9) When you are participating in a competition, sales promotion, opinion surveys or campaign activities on the platform.
(10) When you contact the Company, such as via telephones (which shall be recorded) letters, faxes, face-to-face meetings, social media platforms and Emails, including when you contact a customer service.
(11) When you log in to your user account on the Company's platform or communicate with the Company in any other way through external services or other applications such as Facebook or Google.
(12) When a third-party file a complaint against you or any content is posted by you on the Company's platform.
(13) When you interact with the Company besides the internet system, this also includes when you interact with customer service provided by a third party of the Company.
(14) When you send your personal data to the Company no matter what the reason is.

​

5. Purpose to Collect, Use or Disclose Your Personal Data

Provided that in some specific cases where your consent is needed to the Company, the Company collects, uses or discloses your personal data with the following grounds:
(1) to perform the duties under the contract: to enter into the contract or to perform the duties under the contract with you;
(2) to abide by the laws: the Company must perform the duties as required by the laws;
(3) for the legitimate interests of the Company and a third party: such interests are necessary as equal as your benefit and the fundamental rights of the personal data protection;
(4) to prevent or suppress a danger to a person’s life, body or health;
(5) for the public interest: to carry out the activities in relation to public interest or to perform the duties in the exercise of state power and/or
(6) establish, compliance or exercise of legal claims, or defense of legal claims;

1. Purposes of the operation of the Company with other law grounds:

The Company may collect, use, and disclose your personal data for the following purposes.
1.To perform the duties under the contract: to provide the services as you request, such as registering for membership to use the Company's platform as a buyer or seller concert tickets, answering the questions about concerts, the use of platform.
1.1) to manage a buyer account, seller account that you may have registered and to display your account name and profile on the platform.
1.2) to identify the identity of the user using the platform.
1.3) to facilitate the use of the service or access the platform.
1.4) to answer your opinions, demands, or arguments. either directly or through the Company's third-party service providers.
1.5) to process your purchase order for the products (whether sold by the Company or the seller who is an individual/ a third party)
1.5.1) to process your purchase order which you submit through the platform.
1.5.2) to deliver the products which you order through the platform, the Company may send your personal data to a third party (such as shipping company that is a Company's business partner) for the delivery of the products to you.
1.5.3) to deliver the products which you order through the platform, the Company may send your personal data to a third party (such as shipping company that is a Company's business partner) for the delivery of the products to you.
1.5.4)to provide customer care services regarding orders, such as returning products purchased through the platform.
1.5.5) to verify and process payment transactions including credit card payment, bank account transfer, non-internet payment, money transfer or e-wallet transaction involving any payments concerning with you, promotional projects participated and/or services used by you. This is to verify and to process your payment transactions, the Company must transfer payment information. This may include personal data to a third party such as the Company's payment service provider.
1.5.6) to issue a receipt/tax invoice.
1.6) to facilitate you to pre- register to attend the concert.

2. For the Legitimate Interests of the Company:
2.1) to understand the user's experiences with the services and platform.
2.2) to develop the design or content on the display page on the platform and to customize content to be unique to a user.
2.3) to analyze usage data, statistical data, usage trend data, to test and research, to examine, in order to develop the platform to be more effective.
2.4) To enforce and defend legal rights and claims of the Company such as to dispute resolution, to perform the contract and to establish and to exercise or to defend the right under the claim.
2.5) to record images/ video/sound of the atmosphere of the concert and concert visitors in order to create public relations media for the Company.

3. To comply with the obligation and duties under the laws and order of government authorities:
to proceed in accordance with the laws and/or cooperate with the courts, regulators, government authorities and law enforcement authorities, in the case where there is reason to believe that the Company must do such and to disclose your personal data is needed to apply to the laws, procedures, or state’s strict orders and it is necessary to disclose your personal data to tax authorities, financial law enforcement authorities and law enforcement authorities or other government authorities and to investigate or to prevent of crimes.

2. Purposes of the Company’s Operation Needed Your Consent.

  • To subscribe promotional news and special privileges:As you give your consent to subscribe to marketing promotional news, sales promotions, discount promotions, new concert information, including new products and services from the Company and affiliated companies and/or partners and alliances who are the third parties, the Company is not able to rely on any other legal basis.

​

6. How Does the Company Manage Your Personal Data?

The Company has the methods to collect your personal data as follows:

  • The Company will collect your data in the database system through the Company's system that has appropriate measures to protect the personal data and there is the access control to prevent illegal access and the encryption to protect data to be accessible or readable from unauthorized persons.

  • The Company will collect your personal data as a secret and will not disclose it to any person. The Company will disclose your personal data if it is necessary and in the appropriate case and required by the laws, such as to disclosure to the official departments, government authorities, service control agencies, or customer control agencies; including, in case where the data is requested to be disclosed by the virtue of laws; such as, being requested for suing or taking legal action, requested by private agencies, or a third party concerning law procedure including being reasonably necessary to enforce the Company's terms and conditions of use.

The Company may need to transfer your personal data to foreign authorities or international organizations only for the Company's business concerns while having appropriate security measures to protect the personal data. You can exercise the right of data subject including legal remedies that are better or equivalent to the Company's standards.

​

7. How Does the Company Collect Your Personal Data and How Long Does the Company Retain Your Personal Data?

The Company has methods to collect your personal data as follows.
1.Method of Personal Data Collection:
The Company will immediately collect the personal data in the Company's Database, which has a protection system to unauthorized access and having an appropriate data protection measure and encryption to prevent the data to be accessible or readable by an unauthorized person.
2. Place of Collection:
The database system has restricted access and appropriate security measures.
3. Period of Retention:
The Company retains your personal data for as long as it is necessary for which it was collected or within the period where the contract or legal relationship between you and the Company or within the period to exercise the legal claims of the contracting party. However, the Company may retain your personal data longer if it is necessary according to applicable law. If the period to retain the personal data initially specified has elapsed, or the Company does not have the right or is not able to claim the basis for processing your personal data, the Company will destroy your personal data by means of deletion or anonymization within 30 days from the end of the retaining and processing period.

​

8. Disclosure of your personal data

To conduct the business of the Company, the Company may need to use, process, disclose and/or transfer your personal data to the third parties who are service providers, agents and/or affiliated or related companies of the Company and/or third parties which may be located in or outside Thailand in order to process your personal data on behalf of the Company in accordance with the purposes specified in Clause 5 above for one or more purpose.

To carry out the purposes specified in this policy, your personal data may be disclosed or sent to various departments within the Company and outside persons or entities as follows:

1. Within the Company, Affiliated Companies, Partner Companies or Companies in the Group and Related Companies
Your personal data may be disclosed or sent to various departments within the Company, affiliated companies, companies in the group, related companies and alliances which are relevant and have roles and responsibilities only as necessary for the purpose. These individuals or teams of the Company will be allowed to access to your personal data as necessary and appropriate.

  • Relevant officials are limited to access to the data according to roles and responsibilities, such as the product delivery department, the accounting department, the information technology group, the marketing department, etc.

2. Outside the Company
Your personal data may be disclosed or sent to outside entities as follows:

  • The buyers, sellers, or shopswith whom you have transacted or contacted through the platform or to use the Company's services for the purposes as stated above.

  • The contractors, agents, service providers and other third partiessuch as logistics providers, payment system providers, banks, surveying and researching or analyzing service providers, advertising and marketing service provider, telecommunications service companies, information technology service companies and data center etc. If the Company uses services from outside service providers in accordance with the orders and objectives specified by the Company, the Company will prepare a data processing agreement to designate those service providers to maintain the confidentiality and to protect your personal data according to the standards set by Thailand's personal data protection laws and also to use your personal data only for the purposes that the Company has specified or has ordered external service providers to carry out and such external service providers are not allowed to use your personal data other than those purposes.

  • Government Authorities, Regulatory Authorities, or other Authorities as Specified by Laws such as the Revenue Department, Office of the Consumer Protection Board, Royal Thai Police Office, Office of the Court of Justice, Office of the Attorney General, or other organizations by virtue of the law.

​

9. Rights of the Data Subject

You have the rights to take any action with your personal data as follows:
1. Right to withdraw consent
When you give your consent to the Company for a specific purpose, you have the right to withdraw your consent at any time throughout the period that your personal data is with the Company, unless there is a restriction of the withdrawal of consent by law, or the contract which gives benefits to you. However, the withdrawal of your consent may affect you, in order to protect your benefit, therefore, you should study/inquire about the effects before your consent withdrawal.
2. Right to access
You are entitled to request access to your personal data and to request the Company to prepare a copy of your personal data for you, including a request for the Company to disclose the acquisition of personal data without your consent. For your privacy and safety, the Company will ask you to prove your identity before providing the data as requested by you.
3. Right to rectification
You have the right to request for the Company to rectify your personal data to be accurate, up-to-date, complete, and not misleading.
4. Right to erasure
You have the right to request the Company to erase or destroy your personal data or anonymize your personal data to become the anonymous data, if you believe that your personal data has been unlawfully collected, used, or disclosed or that the Company is not necessary to retain your personal data in relation to the purposes for this policy’s purposes or you exercise your right to withdraw the consent or to object the data processing.
5. Right to restriction of processing
You have the right to request the Company to temporarily restrict the use of your personal data, when the Company is pending the examination process of your request to exercise your right to amend or object to the processing of your personal data or when it is no longer necessary for the Company to retain your personal data or in the case that the Company must erase or destroy your personal data in accordance with related laws but you request the Company to restrict the use of your personal data instead.
6. Right to Transfer the Personal Data
You have the right to receive your personal data if the Company arranges your personal data to be in the format which is readable or commonly used by ways of automatic tools or equipment and can be used or disclosed by automated means including having the right to request the Company to send or transfer the personal data in such formats to other data controllers if it can be done by the automatic means and have the right to request to directly obtain the personal data which the Company directly sends or transfers the personal data in such formats to other data controllers, unless it is impossible to do so because of the technical circumstances. The Company may reserve the right to refuse the exercise of your right under this clause as the Company deems appropriate.
7. Right of Objection
You have the right to object to the processing of your personal data, if collecting, using, or disclosing your personal data made for the legitimate interests of the Company within the limits that you can reasonably expect, unless the Company is able to demonstrate that there is a compelling legitimate ground being necessary than your fundamental rights or to ensure to compliance or exercise of legal claims, or defense of legal claims as the case may be.

You can contact the Company's Personal Data Protection Officer in order to submit a request to proceed with the above rights, the details to contact the Data Protection Officer (DPO) are as follows:

Email:dpo@gmmgrammy.com
Contact Address:GMM Grammy Public Company Limited. 50 GMM Grammy PLACE, Sukhumvit 21 Road (Asoke),
Khlongtoeinuea Sub-district
Wattana District
Bangkok 10110

You can change the exercise of the rights of the data subject in the 2 following methods.
1. In the case of being an online member
You can change the data to exercise of your right at Menu: Consent Management

2. In the case of not being an online member
You can download a form to exercise the rights of data subject at the file below and submit the form along with documents to identify yourself as specified in the form to the DPO in order to submit a request to exercise the above rights.https://www.gmmgrammy.com/legalremoval/pdpaform/PDPA_FORM.pdfYou do not need to pay any expenses to exercise the rights above. The Company will consider and notify the result of your request to you within 30 days from the date the Company receives such request.

​

10. Details of the Personal Data Controller
Name: GMM Grammy Public Company Limited.
Contact Address: 50 GMM Grammy PLACE, Sukhumvit 21 Road (Asoke), Khlongtoeinuea Sub-district, Wattana District, Bangkok 10110
Contact Telephone: 02-669-8479

​

11. Details of Personal Fata Protection Officer
Email: dpo@gmmgrammy.com
สถานที่ติดต่อ:
บริษัท จีเอ็มเอ็ม แกรมมี่ จำกัด (มหาชน)
เลขที่ 50 ถนนสุขุมวิท 21 อโศก แขวงคลองเตยเหนือ เขตวัฒนา กรุงเทพมหานคร 10110

​

12. Details of Personal Fata Protection Officer
In the event that the Company or its employees or staffs violate or does not comply with the laws regarding personal data protection, you can make a complaint to regulatory authority as following details:

Name: Office of the Personal Data Protection Committee
Contact Address: Secretary of the Ministry of Digital Economy and Society
Contact Telephone: 02-142-1033
Email: pdpc@mdes.go.th
The period for contacting/complaining will be as prescribed by the law.

​

13. Cookies PolicyDuring your use of the Company's website, data related to your access to the website will be recorded in the form of cookies, this cookies policy explains the meaning of cookies, functions, and the purpose of cookies and how to delete cookies for your privacy. To access the Company's website, it is deemed that you give your permission to the Company to use cookies in accordance with the cookie policy as following details.

What are Cookies?
Cookies are the text files in your computer and/or communication devices such as tablet, smartphone via web browser which are present while you access to the Company’s website. Cookies do not cause any harm to your computer and/or communication devices. They are used to collect log details of your internet using or behavior to visit the website. You can study more details about cookies athttps://www.allaboutcookies.org

How does the Company use cookies?
The Company will collect the data on website visiting from every visitor through cookies or similar technologies and the Company will use cookies for the benefit of improving efficiency in accessing the Company's services via the internet, including improving efficiency of using the Company’s service via internet. The purpose of using are as follows:

1. Strictly Necessary Cookies

These types of cookies are essential for the website function which includes cookies that allow you to access the data and use the Company's website securely. The aims are as follows:

  • To study your website usage behavior in order to develop it so that it can be used easily and quickly and more efficient.

  • To allow you to sign in your account on the Company's website continuously.

  • To protect you from fraud and to improve security.

2. Marketing Cookies

This type of cookie will record your visit to websites and links; this type of cookie may include your personal data that is used to create the profile about you so that the Company is able to analyze and present content, products and/or services that you are interested in. The aims are as follows:

  • To analyze which products, services and offers of the Company being related to you.

  • To improve the marketing which you see on social medias, applications and other websites.

You can refuse the collection of cookies at your browser settings. If you reject the use of cookies, the Company will not collect cookies to present marketing products. However, the Company still must collect cookies that are strictly necessary because this type of cookie is necessary for the website function including application and registration for membership as well as the safety of using various services on the website, therefore it is not possible to disable the use of these types of cookies.

​

14. Collection and Use of Personal Data According to the Original Purpose

The Company will process the personal data in accordance with the currently applicable laws. For the personal data that has previously been collected by the Company before the effective date of the Personal Data Protection Act B.E. 2562 (2019), the Company is entitled to continue to collect and use such personal data for the original purposes. However, if you do not wish the Company to continue to collect and use the personal data after the Personal Data Protection Act, B.E. 2562 (2019) become effective, you can withdraw your consent according to the channels method for exercising the right to withdraw the consent as per this policy.

​

15. Personal Data Protection Policies of Other Websites

This Personal Data Protection Policy applies only to services provided through the Company's platform. If you click on the link to another website (even through channels on the Company's platform), you must study and comply with the personal data protection policy appearing on that website, which is separate from the Company's.

​

16.Changes to Personal Data Protection Policy

The Company may update this Personal Data Protection Policy from time to time in order to comply with related regulations, rule and laws. If the Company makes any changes in this Personal Data Protection Policy in the future, the Company will notify you by updating information on the Company website as soon as possible. However, if the permission is under the relevant laws, and you continue to use the service, to access to the platform including ordering concert tickets on the platform or expressing the consent after modifying, improving or amending this Personal Data Protection Policy (whether you have read the document or not), it is deemed that you understand and accept the change in this Personal Data Protection Policy, and you accept that it is your responsibility to regularly read and check whether there are any changes or updates to this Personal Data Protection Policy.

This Personal Data Protection Policy is reviewed and updated on_22 June 2023.

bottom of page