S Hotels and Resorts Public Company Limited
Last Updated : 7 July 2020
1. About Us
3. Purposes of Personal Data Collection, Use, or Disclosure
4. Cross Boarder Transfer of Personal Data
5.2. Managing Cookies
6. Disclosure of Personal Data
7. Your Rights
9. Security Measures for Personal Data
11. Contact Us
S Hotels and Resorts Public Company Limited (“SHR”) is a holding company that engages in the management of hotels and resorts and investments in international locations. SHR and its properties (“we”, “us”, “our”) greatly value the importance of personal data protection and treat your personal data with the utmost respect. We have a security system to protect your personal data and an international standard procedure to prevent any unauthorized access, disclosure, use, or alteration of personal data.
SHR reserves the right to change and update this privacy notice at any time. The details of the update will be posted on our website shotelsresorts.com.
In this Privacy Notice;
“Properties” means hotels, resorts, amenities, and retail spaces which we own and operate, including but not limited to;
“Personal Data” means any data relating to a person, which can be used to identify a specific person, whether by a direct or indirect means, but not including the data of the deceased persons or anonymized data.
“Cookies” means a small text file consisting of data parts from a download activity that may be stored in a web browser you use to access websites or applications. Cookies data may be saved on your computer devices or any communication tools that you use to access the web browser while you visit our websites and applications.
“Business Partners” means a commercial party that we have some form of alliance with.
This Privacy Notice applies to;
Personal Data Collections
We will collect your personal data as necessary for lawful purposes. We may receive personal data through both direct and indirect means in either digital format or physical documents, which can be from properties, social media, event profiles, properties Wi-Fi service, inquiries, government agencies, business partners, and/or other service providers such as open communication platforms or chat applications.
We may collect your personal data such as;
We collect, use, and disclose aggregated data, such as statistical and demographic information.
The aggregated data may derive from your personal data; however, such data is not considered as a personal data since it cannot be used to identify a specific individual. For example, we may use some of your data after the process of anonymization to create statistical information of people who access the website.
We are fully aware that the data used must not be able to revert to identifiable data. If the data is then able to be used to identify a specific individual, it will be considered as personal data and will be treated in accordance with this Privacy Notice.
Our websites or applications may lead you to a third-party website and/or application via a link; and other websites and/or application may be able to collect, use, or disclose your personal data without our involvements. These services, websites, and/or applications may operate independently from us and may have their own privacy notices and policies. We cannot be held accountable for any collection, use, or disclosure of personal data occurred on other websites and/or applications. Hence, it is encouraged that you read the privacy notices of every websites and/or applications you have visited.
Purposes of Personal Data Collection, Use, or Disclosure
In order to conduct business operations, activities, transactions according to your request and/or to achieve our objectives, we may collect and use your personal data, including but not limited to; the following objectives;
Cross Boarder Transfer of Personal Data
We aim to provide you with the best level of services and experiences from us; thus, your personal data may be transferred to hotels and resorts under our portfolio, our service providers, or other third parties which may be located in countries outside of your own.
Your data may be transferred, as part of the reservation process, to The Kingdom of Thailand, The Republic of Maldives, The Republic of Fiji, The Republic of Mauritius, and The United Kingdom,
For other cross boarder transfer, either for service providers or for business partners, even though the destination country data protection laws may differ from Thailand, we will ensure before transfer that the personal data is protected with equal and appropriate security measures which meet the personal data protection legal requirements and standard. Cross boarder transfer of personal data will be in accordance with lawful ground such as contractual basis, legitimate interest, public tasks, and as you have given your consent for.
We use various types of cookies categorized as follows;
Strictly Necessary Cookies
Cookies necessary for website functionality which cannot be switched off. These cookies do not store any personal data and are usually only set in response to actions such as your privacy preferences setting, or actions of logging in or filling in forms. You can set your browser to block these cookies; however, if this category of cookies is switched off some parts of the site will not function.
These cookies allow us to count numbers of visits and traffic, in order to measure and improve websites performance. These cookies data is on aggregate level and thus is not personal data. If you switch off these cookies, we will not know the time of your website visit and will not be able to monitor websites’ performance.
These cookies allow the website to provide enhanced functionality and personalization. The setting may be made by us and/or by third party providers. If you switch off these cookies, then some or all website's services may not function properly.
These cookies setting may be made by us or our advertising partners. They may be used by those companies to build a profile data of your interests, in order to show you relevant adverts on other sites. If you switch off these cookies, you will experience less targeted advertising.
Social Media Cookies
These cookies are set by a range of social media services that we added to the site to allow you to share our content with your friends and communities. These cookies are able to track your browser across other sites and build up a profile of your interests and may impact the content and messages you see on other websites you visit. If you switch off these cookies you may not be able to use or see sharing tools.
If you want to remove or block Cookies from your device, you can update your browser settings (go to your browser's "help" menu to learn how to remove or block Cookies); and we are not responsible for your browser settings. Please keep in mind that if you switch off Cookies, it may affect your ability to perform certain transactions on the website, and our ability to recognize your browser for your next visit.
If you are based in Thailand or Europe, you can also adjust your Cookies preferences through the Cookies Settings on Cookies Consent Manager function.
Disclosure of Personal Data
We will keep your personal data confidential and does not have policy to sell your personal data to third party. If there is legal necessity to disclose your personal data, we will only disclose your personal data to authorized person or party as necessary. However, we may disclose and transfer personal data to person or party as listed below;
You can submit a request to exercise your legal rights through our contact channel provided under "Section 11. Contact Us." We will then process your request as soon as possible; however, it also depends on the volume and complexity of the request.
To submit a Data Subject Access Rights (DSAR) Request, please proceed by clicking on this link to complete the DSAR Request form
If you wish to cancel or request not to receive marketing materials or newsletters from us or our business partners, you can proceed to submit your request through our contact channel provided under “Section 11. Contact Us.” However, this cancellation will not affect your ability to receive products or services as addressed in the contract or term and condition in which you have accepted.
Security Measures for Personal Data
We understand the importance of data security treat your personal data with respect and in accordance with legal requirements. Your personal data is classified as confidential and we have taken appropriate measure to ensure physical protection and organizational and technical measurements on all organization levels and throughout all the properties (for detailed definition, please refer to section “Section 1. About Us”), to prevent your personal data from loss, misuse, or unauthorized access, disclose, change, and deletion.
In the event that we assign external party for system, website, and application development and maintenance, resources allocation, or any other services, we may set for confidentiality and/or data processing agreement in accordance with this Privacy Notice to be made; for the benefit of securing your personal data.
We have set the process to manage the personal data breach incident and will notify you in accordance with the law. Nonetheless, even though there is strict security measure for personal data, there is a security limitation when it comes to transmission of data on the internet. Hence, we are unable to guarantee the security of your personal data disclosed on online platform.
Personal Data Retention
We will retain your personal data as part of customers profile information (including contact, identity, financial, and transactions data) for 10 years from the booking date. With other categories of personal data, we will retain it for as long as necessary to achieve the purposes we have stated in this Privacy Notice and your personal data will be retained in accordance with our Policy and strict legal requirements.
In the event of a Data Breach (a security incident that has affected the confidentiality, integrity or availability of your personal data), please contact us directly by email.
If you have any questions about this Privacy Notice or how we process your personal data, or if you wish to either provide a compliment or a complaint, please contact us via the following channels:
S Hotels and Resorts Public Company Limited
Address: 123 Sun Towers Building B, 10th Floor, Vibhavadi-Rangsit Road, Chom Phon, Chatuchak, Bangkok 10900, Thailand
Phone: +66 (0) 2058 9888