Sodexo (Suisse) SA attaches great importance to the protection of your data and your privacy. In this statement, we would therefore like to inform you about the collection and use of individual data concerning personal or factual circumstances of an identified or identifiable natural person ("personal data").
This data privacy policy applies to the domain https://ch.sodexo.com/home.html and all its subdomains.
Changes to this data privacy policy will apply from the date of their publication on our website. The processing of personal data collected under an older data privacy policy will be carried out in accordance with this data privacy policy. We reserve the right to amend this data privacy policy at any time and to inform customers, partners and users of the changes in an appropriate manner.
Responsible
The data controller in respect of any personal data you send to us via the website is:
Sodexo (Suisse) SA
Sägereistrasse 10, 8152 Glattbrugg
hr.ch@sodexo.com please state "data protection" in the subject line
Please do not hesitate to contact us if you have any questions or communications concerning your personal data.
Processing of personal data
We only process your personal data within the framework of the data processing principles and if there is a legal basis. Where it serves to initiate and process a contract, this legal basis applies. Furthermore, we have an interest in continuously improving our offers and adapting them to your needs. This is necessary to further develop our offers, for statistical purposes and to ensure the security of our offers. We assume that our interests prevail.
In the course of a website visit, we also collect the following necessary data:
- All information that you explicitly provide in the context of an enquiry in the contact form/application or an e-mail (name, address, age, gender, contact details, texts, photos, images, etc.);
- IP address and referrer URL (the previously visited page);
- Browser version and browser type used;
- Date & time of the visit or request;
- Operating system;
- Provider.
Cookies that we use on our website can be found in our Cookie Policy.
We do not engage in profiling on our website in the sense of automated processing of personal data, which consists of using this data to evaluate certain aspects of your personality (e.g. on religious, political or ideological views, state of health, etc.) in exceptional cases and in this case limited to contractual or legal obligations.
Disclosure to third parties
Your data will not be passed on to third parties without your express consent. Exceptions to this are our service partners that we need to process the contractual relationship (e.g. financial institutions to process payments, the postal service, courier or freight services to ship material, cloud services to provide and guarantee the digital infrastructure, etc.). In these cases, we strictly observe the requirements of the applicable data protection laws. The scope of the data transfer is limited to a minimum.
We only consider the use of service partners in countries other than Switzerland or the member states of the European Economic Area if the country in question either has an equivalent level of data protection according to the Federal Council's list of countries or we can contractually ensure the equivalence of the level of protection (e.g. through contracts or the conclusion of so-called standard contractual clauses).
Company pages on social media
Media used
We, Sodexo (Suisse) SA, do not currently maintain a company page or profile on any social media where we publish information and interact with other platform users. Should company profile(s) be created on social media in the future, the following section comes into force.
Data processing on company pages
We process personal data in accordance with the principles of this data privacy policy. Personal data may be processed if you interact with us via our company pages on the relevant social media.
When visiting a company website, the respective platform operator collects information that enables it to recognise users and to comprehensively analyse user behaviour. Based on the data collected in this way, the platform operator can also create user profiles. If you are logged in with your corresponding user account when visiting a company page, the respective provider can also assign this visit to your account. The respective provider only supplies us with an anonymised statistical evaluation of the use of our company page based on the information obtained.
In principle, you can assert your rights under data protection law with regard to data processing by our company pages both against us and against the respective operator of a platform. However, we would like to point out that these can be asserted most effectively with the respective operator, as only this operator has access to the users' data and can take appropriate measures and provide information directly.
Messages, notifications and updates
Communication for advertising purposes: If there is a corresponding basis under data protection law (use of a paid service or corresponding consent), we use your contact data to inform you about similar offers by e-mail, as well as for marketing and optimisation purposes, which enable us to improve service offerings and customer care, for statistical purposes and to further optimise our offers (newsletter).
You can opt out of receiving the newsletter at any time. This can be done by sending an e-mail to communication.ch@sodexo.com or by using the link at the end of the newsletter.
When sending newsletters, we use established tools from recognised providers. Compliance with data protection requirements is ensured through order processing contracts.
Communications for informational and other purposes: We send you communications that are required or necessary for all customers, notices that contain important information, and other communications that you request from us. You cannot unsubscribe from these communications. However, you may be able to customise the media and format through which you receive the notifications.
Transmission of personal data
Unless expressly agreed otherwise, electronic communication shall take place via non-encrypted e-mails. The use of e-mails is not technically secure; it may happen that e-mails are not delivered. When e-mails are transmitted, they may leave national borders, even if the sender and recipient are within the country. The confidentiality of e-mails cannot be guaranteed if encryption is missing or is insufficient.
Even when using forms available on our website, only the transmission of your message from your computer to the web server is encrypted.
By using the forms or sending an e-mail, you consent to communication via e-mail with knowledge of the risks described. The use of encrypted or otherwise secured communication channels must be agreed with us in advance.
Retention of your personal data
Server locations
Our website is hosted directly by Sodexo.
Your personal data collected as part of the activities on the website is hosted on Sodexo's servers in the European Economic Area. The servers are protected as much as possible against unauthorised access by third parties. Backups are made regularly to prevent data loss as much as possible.
Retention period
We only keep your data for as long as legally necessary or in accordance with the purpose of the processing. In the case of analyses, we store your data until the analysis is completed. If we store data on the basis of a contractual relationship with you, this data will remain stored at least as long as the contractual relationship exists and at the longest as long as limitation periods for possible claims by us run or legal or contractual retention obligations exist. As a rule, the retention period does not exceed 10 years (calculated from the end of the contractual or factual relationship with you).
Your rights
General
In principle, you have the rights to information, correction, deletion, restriction, transfer, revocation and objection, as well as the right to lodge a complaint, if applicable.
Information, correction, transfer
You have the right to information free of charge about your stored data and the right to correction at any time. Please contact us for this purpose. You can find our contact details under section one of this data protection declaration.
You also have the right to request the transfer of your personal data held electronically to another data controller free of charge. Please note, however, that we cannot adapt your data to any special format requirements of another controller and will not transfer your business history or passwords under any circumstances.
Revocation and deletion
You can revoke your consent to the processing of your data by us in accordance with data protection law at any time and request the deletion of your personal data. Please contact us for this purpose. You can find our contact details under section one of this data privacy policy.
In the event of a deletion request, we will disable and block your profile. Please note, however, that we are obliged under commercial and tax law, for example, to keep accounting vouchers for at least 10 fiscal years. We can therefore neither delete nor process the personal data contained in these vouchers. Your revocation or deletion request therefore applies to this extent only for future processing and only for personal data which we do not process on the basis of a legal justification, but exclusively on the basis of your consent.
If a contractual relationship is still pending at the time of receipt of your revocation and deletion request, your personal data will continue to be processed until the contract has been fully processed. Your revocation under data protection law expressly has no influence on the processing of existing contractual relationships and is not considered an extraordinary reason for termination.
Complaint to a supervisory authority
With the entry into force of the revised FADP on September 1, 2023, you have the right of appeal to the competent supervisory authority at the registered office of the controller if you believe that we have breached a provision of the FADP.
The Federal Data Protection and Information Commissioner (www.edoeb.admin.ch) is responsible for complaints from data subjects.
Status of the data protection declaration: August 2023