Last update: December 30th, 2021

PREAMBLE引言

Sodexo is committed to handling Personal Data in compliance with the Data Protection Law and any other applicable laws and aims to deal promptly and efficiently with any queries relating to the Sodexo entities’ processing of Personal Data.

索迪斯致力根據《數據保障條例》及任何其他適用法律處理個人資料,迅速及高效地應對與索迪斯處理個人資料有關的任何查詢。

In some cases, Sodexo entities may act as a Data Processor on behalf of a Client. In this instances the Client is responsible for handling Data subject Requests relating to compliance with the Data Protection Law and the Data subject’s Personal Data.

在某些情況下,索迪斯實體可代表客戶充當資料處理者。就此,客戶須依據《數據保障條例》負責處理有關的資料當事人的要求以及資料當事人的個人資料。

 

DEFINITIONS 定義

 

SCOPE適用範圍

This policy applies to all Sodexo entities in Hong Kong.

本政策對所有在香港的索迪斯實體適用。

This policy applies to the Processing of Personal Data collected by Sodexo, directly or indirectly, from all individuals including, but not limited to Sodexo’s current, past or prospective job applicants, employees, clients, consumers, children, suppliers/vendors, contractors/subcontractors, shareholders or any third parties, with “Personal Data” being defined as any data-(a) relating directly or indirectly to a living individual; (b) from which it is practicable for the identity of the individual to be directly or indirectly ascertained; and (c) in a form in which access to or processing of the data is practicable.

本政策適用於索迪斯關於從所有人士直接或間接收集的個人資料的處理,包括但不限於索迪斯目前、過去或未來的求職者、員工、客戶、消費者、兒童、供應商/供貨商、承包商/分包商、股東或任何第三方,個人資料被定義為(a)直接或間接與一名在世的個人有關的;(b)從該資料直接或間接地確定有關的個人的身份是切實可行的;及(c)該資料的存在形式令予以查閱及處理均是切實可行的。

In this policy, “you” and “your” means any covered individual. “We”, “us”, “our” and “Sodexo” means Sodexo entities in Hong Kong.

在本政策中,「您」及「您的」指的是任何在適用範圍內的人士。「我們」、「我們的」及「索迪斯」是指在香港的索迪斯實體。

 

YOUR RIGHTS UNDER DATA PROTECTION LAW

您在《數據保障條例》下的權利

Where Sodexo processes your Personal Data for its own purposes, please consult the Section “Your Rights” of our Sodexo Data Protection Policy (Hong Kong S.A.R.).

如索迪斯出於自己的目的處理您的個人資料,請參考我們的《索迪斯數據保障政策(中國香港地區)》中「您的權利」一節。

Where Sodexo processes Personal Data on behalf of a Client, Sodexo will notify the Client of any Data subject’s Request received. Sodexo will cooperate and provide the Client with assistance in relation to the Request, to the extent legally permitted.

如索迪斯代表客戶處理個人資料,索迪斯將通知客戶所收到的任何資料當事人的要求。索迪斯將在法律允許的最大範圍內與客戶合作並向客戶提供與該要求有關的協助。

 WHAT OUR TEAMS WILL DO IF THEY RECEIVE A REQUEST?我們收到有關要求後的行動

Our approach is to engage positively and resolve your Request in a satisfactory manner without you having to file a complaint to the local court or the Commissioner. 我們的做法是積極參與,以令人滿意的方式解決您的要求,而不必向當地法院或專員作出投訴。

If you have any queries with the Processing of your Personal Data, you should not hesitate to raise your query to Sodexo. To help us to deal with your Request, please provide a full written explanation of your query by completing the Request Form below or by completing the Request webform.

如您對個人資料的處理有任何疑問,請隨時向索迪斯提出您的疑問。為了幫助我們處理您的要求,請填寫下面的申請表格或完成網絡表單,對您的問題提供完整的書面說明。

Sodexo shall inform its Client acting as Data User of any Request made by a Data Subject as soon as possible. The Client will be in charge of handling such Request and Sodexo will assist the Client in responding to Data Subject Requests. Sodexo will directly handle Requests only when it is agreed with the Client or if the Client disappeared or cease to exist in law or became insolvent. In all other cases, Sodexo will assist the Client in responding to Data Subject Requests.

索迪斯應盡快將資料當事人提出的任何要求通知其作為資料使用者的客戶。客戶將負責處理此類要求,索迪斯將協助客戶回應資料當事人的要求。索迪斯只有在客戶同意或如果客戶失踪或在法律上不再存在或破產的情況下才會直接處理請求。在所有其他情況下,索迪斯將協助客戶回應資料當事人的要求。

 

 HANDLING REQUESTS 處理要求

At the time of drafting your Request and to allow Sodexo to deal promptly with your Request in the most efficient manner, you are invited to follow these steps:

在撰寫您的要求時,為了讓索迪斯能夠以最有效的方式迅速處理您的要求,請您遵循以下步驟:

STEP 1: Complete and submit the Request webform or the Request Form by email to the generic email address as indicated in the information notices and/or the privacy policies provided to you at the time of the collection of your Personal Data.

第一步:填寫並提交網絡表單或以電郵將提出要求申請表格發送至收集您的個人資料時向您提供的收集資料通知及/或私隱政策中註明的通用電郵地址。

STEP 2: Your Request will be treated confidentially and fully investigated where necessary. During this process, you may receive additional communication from the relevant Sodexo’s Local Single Data Protection Point of Contact to investigate your concern. If you have not provided sufficient information in your Request, we will let you know what further information is needed to process your Request.

第二步:我們會對您的要求進行保密處理,並在必要時展開全面調查。在此過程中,您可能會收到有關索迪斯當地數據保障聯絡人的額外通知,以就您關注的事宜進行調查。如您並無在申請中提供足夠的資料,我們會告知您需要哪些額外資料才可處理您的要求。

STEP 3: Once the information related to your Request is complete, we will contact you within forty (40) calendar days to provide you with an answer. In case we cannot respond to your request in a timely manner or where there are valid grounds for refusal in accordance with the Data Protection Law, we will notify you in writing of the reasons for the delay.

第三步:一旦收到與您的要求相關的完整資料,我們將在四十(40)個曆日內與您聯絡,為您提供答覆。假如我們未能及時回應您的請求,或者根據《數據保障條例》有合理的拒絕理由,我們將以書面形式通知您延遲回復的原因。

STEP 4: Please note that you can choose to lodge a complaint with the Commissioner in accordance with the Data Protection Law.

第四步:請注意,您可選擇根據《數據保障條例》向專員投訴。

You have also the right to lodge your Complaint before the courts where Sodexo has an establishment or where you have your habitual residence.

您也有權向索迪斯實體所在地或您所居住地的法院作出投訴。

 

REQUEST FORM提出要求申請表格