Purpose of This Policy

The following information explains the commitments of Sodexo (Thailand) Co., Ltd., Sodexo Security Guard Facility Services (Thailand) Co., Ltd., Sodexo Security Guard Services (Thailand) Ltd., Sodexo Amata Security Guard Services Co., Ltd., and Sodexo Amarit (Thailand) Co., Ltd. (collectively referred to as "Sodexo Thailand") regarding the processing and protection of Personal Data.

Sodexo Thailand is committed to building strong and lasting relationships with its customers, partners, and consumers based on mutual trust. Protecting the security and confidentiality of Personal Data is an essential priority.

Sodexo Thailand is committed to complying with all applicable laws and regulations governing Personal Data protection, including the Personal Data Protection Act B.E. 2562 (2019).

Sodexo Thailand maintains a strict privacy policy to protect the Personal Data of individuals who use its websites, portals, applications, and platforms, as well as individuals with whom the company interacts.

Our commitments include:

• Ensuring that Users remain in control of their Personal Data and that such data is processed transparently, confidentially, and securely.
• Maintaining ongoing efforts to protect Personal Data in accordance with the Personal Data Protection Act B.E. 2562 (2019).
• Providing access to a Data Protection Officer (DPO) who can respond to questions and concerns regarding Personal Data protection.

Please read this policy carefully to understand the categories of Personal Data collected and processed, how this information is used, and with whom it may be shared.

This policy also explains your rights and how you can contact us to exercise those rights or raise questions regarding the protection of your Personal Data.

This policy may be amended, supplemented, or updated to reflect changes in legal requirements, regulations, case law, or technology. Your Personal Data will continue to be processed in accordance with the policy in effect at the time of collection, unless applicable law requires otherwise.

Identity and Contact Details of the Controller

The following entities may act as Data Controllers:

1. Sodexo (Thailand) Co., Ltd

Address: 129 JLK Tower Building, Units 1403-1405, 14th Floor, Sukhumvit Road, Khlong Toei Nuea, Watthana, Bangkok 10110

Entity Registration Number: 0105548159029

Telephone: +66 2481 5478

Legal Representative: Arnaud Bialecki

Data Protection Officer Email: dpo.th@sodexo.com

2. Sodexo Security Guard Facility Services (Thailand) Co., Ltd

Address: 129 JLK Tower Building, Units 1403-1405, 14th Floor, Sukhumvit Road, Khlong Toei Nuea, Watthana, Bangkok 10110

Entity Registration Number: 0105547065896

Telephone: +66 2481 5478

Legal Representative: Arnaud Bialecki

Data Protection Officer Email: dpo.th@sodexo.com

3. Sodexo Security Guard Services (Thailand) Co,. Ltd

Address: 129 JLK Tower Building, Units 1403-1405, 14th Floor, Sukhumvit Road, Khlong Toei Nuea, Watthana, Bangkok 10110

Entity Registration Number: 0105547065900

Telephone: +66 2481 5478

Legal Representative: Arnaud Bialecki

Data Protection Officer Email: dpo.th@sodexo.com

4. Sodexo Amata Security Guard Services Co., Ltd

Address: 129 JLK Tower Building, Units 1403-1405, 14th Floor, Sukhumvit Road, Khlong Toei Nuea, Watthana, Bangkok 10110

Entity Registration Number: 0105558112602

Telephone: +66 2481 5478

Legal Representative: Arnaud Bialecki

Data Protection Officer Email: dpo.th@sodexo.com

5. Sodexo Amarit (Thailand) - Head Office

Address: 129 JLK Tower Building, Units 1403-1405, 14th Floor, Sukhumvit Road, Khlong Toei Nuea, Watthana, Bangkok 10110

Entity Registration Number: 0105540067681

Telephone: +66 2481 5478

Legal Representative: Arnaud Bialecki

Data Protection Officer Email: dpo.th@sodexo.com

Definitions

Controller: Sodexo Thailand entities that determine the purposes and means of processing Personal Data on the website.

Personal Data: Any information relating to an identified or identifiable natural person, whether identified directly or indirectly through an identification number or other information specific to that individual.

Processing: Any operation performed on Personal Data, whether automated or otherwise, including collection, recording, organization, storage, modification, retrieval, consultation, use, disclosure, transmission, restriction, erasure, or destruction.

Processor: Any natural or legal person, public authority, agency, or other organization that processes Personal Data on behalf of the Controller.

Us, We, or Our: The relevant Sodexo Thailand entities acting as Data Controllers.

You or Users: Any individual who visits or uses the website or benefits from the services provided by Sodexo Thailand.

How Will Your Personal Data Be Collected? Is Providing Personal Data Mandatory?

We may collect your Personal Data through the following methods:

Direct Collection: Personal Data provided directly by you, such as when completing forms on our websites or using our services.

Indirect Collection: Personal Data collected during your navigation of our websites or through our service providers and technologies.

Certain Personal Data may be mandatory when required by applicable laws or necessary for the provision of our services.

If mandatory Personal Data is not provided, we may be unable to manage your access to our websites or provide the requested services.

For Which Purposes and on Which Legal Basis Will Your Personal Data Be Collected and Processed?

What Personal Data Does Sodexo Thailand Hold?

We may collect, process, use, and disclose Personal Data for various purposes, including but not limited to those described below.

Personal Data may be collected and processed when necessary to:

• Provide access to our websites, applications, platforms, and services.
• Comply with applicable legal and regulatory obligations.
• Support the legitimate interests of Sodexo Thailand, provided that these interests are not overridden by your fundamental rights, freedoms, or interests.

Where legitimate interests cannot serve as a lawful basis for processing under applicable data protection laws, we will obtain prior explicit consent when required by law.

To whom will your Personal data be disclosed?

Sodexo (Thailand) Co., Ltd., Sodexo Security Guard Facility Services (Thailand) Co., Ltd., Sodexo Security Guard Services (Thailand) Ltd., Sodexo Amata Security Guard Services Co., Ltd., and Sodexo Amarit (Thailand) Co., Ltd., is a part of an international group (“Sodexo Group”) under the brand Sodexo.

There is a possibility that your Personal data will be transferred within or outside of the Sodexo Group.

•  Within Sodexo

The security and confidentiality of your Personal data is of great importance to us. This is why we restrict access to your Personal data only to members of our staff only, to the extent it is strictly necessary to process your Personal data or to provide the services necessary for the site. We ensure that the persons authorized to process the Personal data have committed themselves to abide by confidentiality agreements or are under an appropriate statutory obligation of confidentiality.

We have also implemented appropriate safeguards to ensure an adequate level of protection of your Personal data, even if the Personal data is processed by another Sodexo entity that did not collect your Personal data originally.

Sodexo has implemented the Sodexo’s Binding Corporate Rules (BCRs) within Sodexo Group. Therefore, even if the third countries in which Sodexo entities operate are located outside of the European Economic Area, your Personal data is protected in the same way that they would have been by any entity located within the European Economic Area.

• Outside Sodexo

We will not disclose your Personal data to any unauthorized third party. We may, however, share your Personal data with authorized service providers (for example, technical service providers (hosting, maintenance), consultants, etc.) whom we may call upon for the purposes listed above in compliance with the applicable data protection laws.

All third-party service providers to whom we have disclosed and transferred your Personal data have been engaged under a binding confidentiality and data processing agreement with Sodexo (Thailand) Co., Ltd., Sodexo Security Guard Facility Services (Thailand) Co., Ltd., Sodexo Security Guard Services (Thailand) Ltd., Sodexo Amata Security Guard Services Co., Ltd., and Sodexo Amarit (Thailand) Co., Ltd. or the Sodexo Group’s entities, whereby said third party may act only upon the instruction of Sodexo (Thailand) Co., Ltd., Sodexo Security Guard Facility Services (Thailand) Co., Ltd., Sodexo Security Guard Services (Thailand) Ltd., Sodexo Amata Security Guard Services Co., Ltd., and Sodexo Amarit (Thailand) Co., Ltd. or Sodexo Group’s entities.

This third-party service provider and/or other contractors, as the case may be, may be located in countries where data protection laws may not provide a level of protection equivalent to your country. If Sodexo (Thailand) Co., Ltd., Sodexo Security Guard Facility Services (Thailand) Co., Ltd., Sodexo Security Guard Services (Thailand) Ltd., Sodexo Amata Security Guard Services Co., Ltd., and Sodexo Amarit (Thailand) Co., Ltd. or Sodexo group’s entities disclose your Personal data to such recipients, we will establish and/or confirm that, prior to receiving any of your Personal data, they will provide an adequate level of protection for your Personal data, including appropriate technical and organizational security measures. In particular, if the recipients concerned are located in a country that does not provide an adequate level of protection, Sodexo (Thailand) Co., Ltd., Sodexo Security Guard Facility Services (Thailand) Co., Ltd., Sodexo Security Guard Services (Thailand) Ltd., Sodexo Amata Security Guard Services Co., Ltd., and Sodexo Amarit (Thailand) Co., Ltd. or Sodexo group’s entities will also implement other appropriate measures, such as standard contractual clauses, to secure such transfer in compliance with applicable law. If you want to access a copy of the relevant documentation, please send an email to dpo.th@sodexo.com. 

Furthermore, we may share your Personal data (i) if the law or a legal procedure requires us to do so, (ii) in response to a request by public authorities or other officials, or (iii) if we are of the opinion that transferring this data is necessary or appropriate to prevent any physical harm or financial loss, or in respect of an investigation concerning a suspected or proven unlawful activity.

How long will your Personal data be held?

We will store your Personal data only for as long as necessary to fulfil the purposes for which it was collected and processed, as described below. This period may be extended, if applicable, for any amount of time prescribed by any legal or regulatory provisions that may apply.

Finally, please note that we may anonymize your Personal data in such a way that you can no longer be identified and continue to use it for statistical purposes. Data used for statistical purposes is no longer classified as Personal data once it has been duly anonymized.

Sensitive Personal data

As a general rule, we do not collect sensitive Personal data via our site or to provide our services.

“Sensitive Personal data” refers to any information concerning a person’s racial or ethnic origins, political opinions, religious or philosophical beliefs, union membership, health data, or data relating to the sexual life or the sexual orientation of a natural person as well as biometric data (namely, personal data resulting from technical processing relating to the physical, physiological or behavioural characteristics of a person). This definition also includes Personal data relating to criminal convictions and offenses.

In the event that it would be strictly necessary to collect such data to achieve the purpose for which the Processing is performed, we will do so in accordance with local legal requirements for the protection of Personal data and, in particular, with your prior explicit consent.

Personal Information and Children

Our sites and services are provided for adults who have the capacity to conclude a contract under the applicable legislation of the country in which they are located. For the provision of the services, we might process Personal data of children, but it is always done with the consent of their legal guardian.

Your Privacy Rights

It is important that the Personal data we hold about you is accurate and up to date. Where applicable, please keep us informed of your Personal data changes by updating your account on the site.

Sodexo (Thailand) Co., Ltd., Sodexo Security Guard Facility Services (Thailand) Co., Ltd., Sodexo Security Guard Services (Thailand) Ltd., Sodexo Amata Security Guard Services Co., Ltd., and Sodexo Amarit (Thailand) Co., Ltd. is committed to ensuring protection of your privacy rights under applicable laws. You will find below a table summarizing your privacy rights under the applicable data protection law, which applies to all Personal data processed on the site.

To exercise these rights, you can:

• You can raise queries or complaints with the Group Data Protection Officer, by email to dpo.th@sodexo.com or by post to 129 JLK Tower Building, Unit 1403-1405, 14th Floor, Sukhumvit Road, Khlong Toei Nue, Wattana, Bangkok 10110

No fee usually required:

You will not have to pay a fee to access your Personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request for access is clearly unfounded or excessive. Alternatively, we may refuse to comply with the request in such circumstances.

What we may need from you

We may need to request specific information from you to help us confirm your identity and ensure your right to access the information (or to exercise any of your other rights). This is another appropriate security measure to ensure that Personal data is not disclosed to any person who has no right to receive it.

For more details, please consult the Data Protection Rights Management Policy (Thailand).

Third party beneficiary rights

If applicable in your country, you can enforce the third-party beneficiary rights afforded to you by the Sodexo BCRs.

How will my Personal data be protected?

We implement all possible technical and organizational security measures to ensure security and confidentiality in Processing your Personal data.

To this end, we take all necessary precautions, given the nature of the Personal data and the risks related to its Processing, in order to maintain data security and, in particular, to prevent distortion, damage, or unauthorized third-party access (physical protection of the premises, authentication procedures with personal, secured access via identifiers and confidential passwords, a connection log, encryption of certain data, etc.).

In addition, if we contract with Processors for all or part of the Processing of your Personal data, we require a contractual agreement from our service providers to guarantee the security and confidentiality of the Personal data that we transmit to them or that they collect on our behalf, in accordance with the applicable regulations on the protection of Personal data.

We regularly conduct audits to verify the proper operational application of the rules relating to the security of your Personal data.

Nevertheless, you also have a responsibility to ensure the security and confidentiality of your Personal data so we invite you to remain vigilant, especially when using an open system such as the Internet.

Links to other sites/platforms

Occasionally, we provide links to other platforms for practical and informative purposes. These platforms operate independently from our sites and are not under our control. These platforms have their own privacy policies or terms of use, which we strongly advise you to read. We do not accept any liability with regards to the content on these platforms, for the products and services that may be offered there, or for any other use thereof.

Unsubscribing

If you have unsubscribed to certain services via our site and you no longer want to receive emails, please consult the “unsubscribe” page corresponding to the Service you are subscribed to.

How will you be notified if the uses of your Personal data change?

We may update or amend this policy as and when needed. In this case, amendments will only become applicable after a period of 30 business days from the date of the amendment. Please consult this page from time to time if you want to be informed of any possible changes.

If you have any questions or comments with regard to this policy, please do not hesitate to contact us at the following address: dpo.th@sodexo.com.

Latest update: 21^st October 2026