Last update: 20th June 2022
Sodexo is committed to handling Personal Data in compliance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 and any other applicable law and aims to deal promptly and efficiently with any queries relating to Sodexo’s processing of Personal Data.
In some cases, Sodexo entities may act as a Processor on behalf of a Client. In this instance the Client is responsible for handling Data subject Requests relating to compliance with applicable legislation and the Data subject’s Personal Data.
This policy applies to Sodexo BRS entities in India (hereinafter designated as “Sodexo”) for all dimensions and activities, in all geographies where we operate, This policy applies to the Processing of Personal Data collected by Sodexo, directly or indirectly, from all individuals including, but not limited to Sodexo’s current, past or prospective job applicants, employees, clients, consumers, children, suppliers/vendors, contractors/subcontractors, shareholders or any third parties, with “Personal Data” as defined above.
In this policy, “you” and “your” means any covered individual. “We”, “us”, “our” and “Sodexo” means the organization of Sodexo BRS entities in India.
Where Sodexo processes your Personal Data for its own purposes, please consult the Section “Your Rights” of our Indian Data Protection Policy.
Where Sodexo processes Personal Data on behalf of a Client, Sodexo will notify the Client of any Data subject’s Request received. Sodexo will cooperate and provide the Client with assistance in relation to the Request, to the extent legally permitted.
Our approach is to engage positively and resolve your Request in a satisfactory manner without you having to file a complaint to the local Court or the relevant Local Data Protection Single Point of Contact.
If you have any queries with the Processing of your Personal Data, you should not hesitate to raise your query to Sodexo. To help us to deal with your Request, please provide a full written explanation of your query by completing the Request form as provided hereinbelow.
Sodexo shall inform its Client acting as Controller of any Request made by a Data subject as soon as possible. The Client will be in charge of handling such Request and Sodexo will assist the Client in responding to Data subject Requests. Sodexo will directly handle Requests only when it is agreed with the Client or if the Client disappeared or cease to exist in law or became insolvent. In all other cases, Sodexo will assist the Client in responding to Data subject Requests.
At the time of drafting your Request and to allow Sodexo to deal promptly with your Request in the most efficient manner, you are invited to follow these steps:
STEP 1: Complete and submit the Request form by email to the generic email address as indicated in the information notices and/or the privacy policies provided to you at the time of the collection of your Personal Data.
STEP 2: Your Request will be treated confidentially and fully investigated where necessary. During this process, you may receive additional communication from Sodexo’s Local Data Protection Single Point of Contact and/or Sodexo’s Global Data Protection Office to investigate your concern. If you have not provided sufficient information in your Request, we will let you know what further information is needed to process your Request.
STEP 3: Once the information related to your Request is complete, we will contact you within thirty (30) days to provide you with an answer. This deadline may be extended in certain circumstances, depending on the nature of the Request.
STEP 4: Please note that you can choose to lodge a complaint with appropriate authority in the country of your habitual residence, place of work or place of the alleged infringement, regardless of whether you have suffered damages.
You have also the right to lodge your Complaint before the courts where the Sodexo entity has an establishment or where you have your habitual residence.
[To be sent by email to the generic email address as indicated in the information notices and/or the privacy policies provided to you at the time of the collection of your Personal Data and/or to the Local Data Protection Point of Contact at the following address dpo.brs.in@sodexo.com]
Contact Information:
(Name (Last, First))…………………………………………………………………………………………………………..
(Telephone number)………………………………………………………………………………………………………….
(Email address)……………………………………………………………………………………………………………….
(Postal address)………………………………………………………………………………………………………………
Please indicate your preferred method of contact by ticking the box to the right.
If your preferred method of contact is the postal address, please indicate where you would like our response to be sent:
Home Address or Business Address
If business address, please provide company name: ……………………………………………………………….
……………………………………………………………………………………………………………………………………
……………………………………………………………………………………………………………………………………
In order to help us identify systems that may contain information about you, please check the boxes below that describe your relationship with Sodexo:
Job applicant
Former employee or contractor
Current employee of Sodexo
Employee family member, dependent, beneficiary or emergency contact
Employee of Sodexo Client or business partner
Employee of a Sodexo supplier or vendor
Individual – Consumer
Other – please describe
……………………………………………………………………………………………………………………………………
……………………………………………………………………………………………………………………………………
If your information may be under another name, please provide that name and reason for the change:
……………………………………………………………………………………………………………………………………
……………………………………………………………………………………………………………………………………
……………………………………………………………………………………………………………………………………
……………………………………………………………………………………………………………………………………
……………………………………………………………………………………………………………………………………
We may request from you a certified copy of a valid official identification documentation to allow us to verify your name and address (e.g. valid passport or identity card).
If you request to access your Personal Data or request data portability, please specify the Personal Data which is subject to the request and confirm that they may be sent by email to the address above or, if technically feasible, to the address of a new Controller as set out below, for the data portability request:
……………………………………………………………………………………………………………………………………
……………………………………………………………………………………………………………………………………
If you request rectification of your Personal Data, please specify below the data to be rectified, and provide the justification for such request:
……………………………………………………………………………………………………………………………………
……………………………………………………………………………………………………………………………………
If you request that the Processing of your Personal Data is restricted please specify the processing in issue, and provide the justification for such request:
……………………………………………………………………………………………………………………………………
……………………………………………………………………………………………………………………………………
If you request the erasure of your Personal Data, please specify below the Personal Data to be deleted and provide the justification for such request:
……………………………………………………………………………………………………………………………………
……………………………………………………………………………………………………………………………………
If you object to the processing of your Personal Data, please specify below the Personal Data you object to us processing and provide the justification for such objection:
……………………………………………………………………………………………………………………………………
……………………………………………………………………………………………………………………………………
If you believe that your data protection rights may have been breached, you have the right to lodge a complaint with the appropriate authority , or to seek a remedy through the courts. You can also contact us if you have any queries or concerns. In such a case you can detail your query or concern here:
……………………………………………………………………………………………………………………………………
……………………………………………………………………………………………………………………………………
The information collected in this form is intended to enable the relevant Local Data Protection Point of Contact to respond to your Request. This information will be archived after the Request has been treated for (05) five years and then deleted. For any question related to this Request Form, please send your Request at the following email address dpo.brs.in@sodexo,com.