Privacy Policy
SPRINGFIELD SUITES PROPERTY GROUP PRIVACY POLICY
Effective Date: 11 November 2021
Contents
A. About This Policy
B. Amendments to This Policy
C. What Personal Data We Collect
D. How We Collect Personal Data
E. Purposes for Collection, Use or Disclosure of Your Personal Data
F. Disclosure of Personal Data
G. Transfer of Personal Data to Other Countries
H. Security and Retention of Personal Data
I. Your Rights
J. Contact Us
A. About This Policy
1. This Policy has been adopted by Springfield Suites Property Limited (” Springfield Suites “), and other organizations related to Springfield Suites (including its subsidiaries)(collectively the ” Springfield Suites Property Group “), including the hospitality and commercial businesses and properties owned and operated globally by the Springfield Suites Property Group.
2. In this Policy, “we”, “us” or “our” refers to Springfield Suites, or any organization within the Springfield Suites Property Group, as appropriate. Although this Policy is in common use by the Springfield Suites Property Group, except where applicable laws provide otherwise, each organization is only responsible to you in relation to its own collection and use of your personal data, and its own actions.
3. We are committed to safeguarding your personal data. This Policy describes how we collect, use, disclose and process your personal data, and applies to personal data we collect about you.
4. This Policy supplements but does not supersede or replace any other consents you may have provided to us, or any other agreements or arrangements that you may have with us, in respect of your personal data.
B. Amendments to This Policy
5. We review and may amend this Policy from time to time to reflect changes in applicable laws or the way we handle personal data. The updated Policy will supersede earlier versions and will apply to personal data provided to us previously. You are encouraged to re-visit our Policy from time to time to keep yourself updated on these changes. A copy of our current Policy is available on request, or can also be found at https://www.springfield suitesbh.com/privacy-policy.
C. What Personal Data We Collect
6. What is personal data. “Personal data” is data that can be used to identify a natural person. Examples of personal data include name, address, contact details, identification numbers, financial information, IP address, transactional information based on your activities on our website and applications, telephone numbers, email address, images, and any other information of a personal nature.
7. Voluntary provision of personal data. We collect personal data that you voluntarily provide to us. What personal data we collect depends on the purposes for which the personal data is collected and what you have decided to provide.
You can choose not to provide us with personal data. If you have provided consent, you also have the right to withdraw your consent by contacting us in accordance with paragraph 29. However, if you do so, it may not be possible for us to fulfill the purposes for which we require the personal data, including processing your transactions or providing you with the products and services that you require.
8. Providing personal data belonging to others. If you provide the personal data of anyone other than yourself (eg your family members), you are responsible for informing him/her of the specific purposes for which we are collecting his/her personal data and to ensure that he/she has provided valid consent for your provision of his/her personal data to us.
9. Accuracy and completeness or personal data. It is important that the personal data we hold about you is accurate and up to date. It is your responsibility to ensure that all personal data that you provide is accurate and complete, and to inform us of relevant changes to your personal data.
10. Minors. If you are a minor under 16 years of age, please obtain consent from your parent or guardian before you submit any personal data to us. If you are a parent or guardian of a minor and you have reason to believe your child or ward has provided us with their personal data without your prior consent, please contact us to request for erasure of their personal data or for the minor to be unsubscribed from our mailing lists.
D. How We Collect Personal Data
11. Personal data you provide. We collect personal data that is relevant to our relationship with you. Your personal data may be collected by us, directly or indirectly, for instance:
• when you make a reservation or stay at the hospitality properties that we own or manage;
• when you visit or make transactions at the retail and commercial establishments that we own or manage;
• when you apply to be a member of any of our customer loyalty programs, or respond to our promotions, or subscribe to our mailing lists;
• when you participate in competitions, contests or games organized by us;
• when you attend events or functions organised by us, or conducted at our establishments, for example, property launches and sales events, promotional and marketing events and other social events;
• when your images are captured by us via CCTV cameras while you are within the properties that we own or manage, or when photographs or videos of you are taken when you attend events or functions organised by us;
• when you use our services or enter into transactions with us (or express an interest in doing so) including services and transactions in respect of properties that we develop or manage;
• when you communicate with us by telephone, email, via our website or through other communication channels, for example, through social media platforms;
• when you visit our websites, download or use our mobile applications, or register a user account with our websites or mobile applications;
• when we seek information about you and receive your personal data in connection with your relationship with us, for example, if you are an investor or shareholder of organizations within the Springfield Suites Property Group;
• when you submit an employment, internship or secondment application to us or when you provide documents or information including your resume/CVs in connection with such applications; and/or
• when you submit your personal data to us for any other reason.
12. Personal data provided by others. Depending on your relationship with us, we may also collect your personal data from third party sources, for example:
• from our business partners such as airlines, tour operators, travel agencies, reservation systems and third parties providing advertising, marketing and promotional services to us;
• from your referees, educational institutions or previous employers (if you have applied to us for a job);
• from your family members or friends who provide your personal data to us on your behalf; and/or
• from public agencies or other public sources.
E. Purposes for Collection, Use or Disclosure of Your Personal Data
13. General purposes. Generally, we collect, use, and disclose and process your personal data for purposes connected or relevant to our business, or to manage your relationship with us, such as:
• processing your transactions with us, or to provide products and services to you;
• administrative purposes, including finance, IT and HR purposes, quality assurance and staff training;
• security and safety purposes, in connection with the properties that we own or manage, or events organised by us or conducted at our properties;
• compliance with laws and regulations, internal policies and procedures, including audit, accounting, risk management and record keeping;
• carrying out research and statistical analysis, including development of new products and services or evaluation and improvement of our existing products and services;
• facilitating business asset transactions;
• assisting you with your requests, enquiries and feedback;
• enforcing legal obligations owed to us, or responding to complaints, litigation or investigations concerning us;
• such purposes that may be informed to you when your personal data is collected; and/or
• Any other reasonable purposes related to the aforesaid.
14. Marketing purposes. If you have given your consent, we may use your personal data for the purposes of marketing our products and services and those of our strategic partners and business associates for marketing and communication purposes. eg informing you of our latest activities, special offers and promotions. In order for us to market products and services which are of special interest and relevance to you, we may analyze and rely on your overall interaction with us (such as but not limited to your participation in promotions or events and your interactions with us).
15th. Legitimate interests and other legal basis for processing. In addition to collecting, using, disclosing and processing your personal data with your consent or for performance of a contract entered with you, we may also do so to support our legitimate business interests (provided that this does not override your interests or rights), for example:
• Guests at our properties: If you make a reservation or stay at the hospitality properties that we own or manage, we may (a) use and disclose your personal data to assist you in making arrangements that you request for, such as arranging for tours, airport transfers, restaurant reservations etc; (b) send you pre-stay communications, post-stay communications and satisfaction surveys; (c) invite you to join our customer loyalty programs or subscribe to our mailing lists; and (d) evaluate your preferences to improve and customize your experience for current and future reservations and stays at our hospitality properties.
• Loyalty programmes: If you are a member of any of our customer loyalty programs, we may send you (a) marketing and promotional information about the products and services; (b) information on events at our properties which may be of interest to you; and (c) newsletters and magazines associated with our customer loyalty programs.
• Job seeker/employee: If you are a job seeker, in addition to the specific position which you have applied for, we may disclose your personal data to companies within the Springfield Suites Property Group, for the purpose of offering additional employment opportunities.
• Investor/shareholder: If you are an investor or shareholder of organizations within the Springfield Suites Property Group, we may use your personal data to (a) send you information about them; (b) manage investor / shareholder relations; and (c) comply with regulatory requirements.
• Managing our business: We may disclose your personal data to third parties who provide services to us, including our service providers and data processors (providing services such as hosting and maintenance services, analysis services, e-mail messaging services, delivery services, handling of payment transactions, marketing, human resources, and professional services) and our consultants and professional advisors (such as accountants, lawyers, auditors).
16. Use permitted under applicable laws. We may also collect, use, disclose and process your personal data, without your knowledge or consent, where this is required or permitted by law.
17. Contacting you. When we contact or send you information for the purposes described at Part E above, we may do so by post, e-mail, SMS, telephone or such other means provided by you. If you do not wish to receive any communication or information from us, or wish to restrict the manner by which we may contact or send you information, you may contact us in accordance with paragraph 29.
F. Disclosure of Personal Data
18. Disclosure to Springfield Suites Property Group. We may disclose or share your personal data with organizations within the Springfield Suites Property Group for the purposes described at Part E above.
19. Other disclosure. We may also describe your personal data for the purposes at Part E above or as required or permitted by law, for example, to:
• Our third party vendors and service providers, who are engaged to provide business, support, operational and/or administrative functions such as auditing, legal, marketing, payment, fulfillment and delivery of orders.
• third parties that we conduct joint marketing and cross promotions with.
• regulatory authorities, statutory bodies or public agencies, including to support their investigations .
When disclosing personal data to third parties, we will (where appropriate and permissible) enter into contracts with these third parties to protect your personal data in a manner that is consistent with all applicable laws and/or ensure that they only process your personal data in according to our instructions.
G.Transfer of Personal Data to Other Countries
20. Transfers. The Springfield Suites Property Group operates in many different jurisdictions, including Singapore, Australia, China, Germany, Indonesia, the Philippines, Japan, Malaysia, the Netherlands, Spain, Thailand, United Kingdom and Vietnam. We may transfer your personal data for the purposes described at Part E above:
• amongst ourselves, from the jurisdiction where it is collected to any other jurisdictions that we operate in; and
• to third parties in other jurisdictions where necessary
21. Safeguards. We are committed to safeguarding your personal data when it across jurisdictions. We ensure that your personal data receives an adequate level of protection regardless of the jurisdiction to which it is transferred. For example, we may enter into contracts (or impose binding rules) with recipients to protect your personal data in a manner that is consistent with all applicable laws. You may obtain details of these safeguards by contacting us in accordance with paragraph 29.
H. Security and Retention of Personal Data
22. Unauthorized access. While precautions will be taken to ensure that the personal data you provide is protected against unauthorized or unintended access, we cannot be held responsible for unauthorized or unintended access that is beyond our control.
23. Vulnerabilities. We do not guarantee that our systems or applications are invulnerable to security breaches, nor do we make any warranty, guarantee, or representation that your use of our systems or applications is safe and protected from viruses, worms, Trojan horses, and other vulnerabilities. We also do not guarantee the security of data that you choose to send us electronically. Sending such data is entirely at your own risk.
24. Period of retention. We keep your personal data only for so long as we need the personal data to fulfill the purposes we collected it for, and to satisfy our business and/or legal purposes, including audit, accounting or reporting requirements.
How long we keep your personal data depends on the nature of the data, for example: we will keep personal data for at least the duration of the limitation period for bringing claims if the personal data may be required to commence or defend legal proceedings. Some information may be retained for longer, for example where we are required to do so by law. Typically, our data retention periods range from 3 to 15 years.
25. Anonymized data. In some circumstances we may anonymise your personal data so that it can no longer be associated with you, in which case we are entitled to retain and use such data without restriction.
I.Your Rights
26. Depending on the jurisdiction you are in or where we operate, you may enjoy certain rights at law in relation to our collection, use, disclosure and processing of your personal data. Such rights include:
• Access: you may ask us if we hold your personal data and, if we are, you can request access to your personal data. This enables you to receive a copy of and information on the personal data we hold about you.
• Correction: you may request that any incomplete or inaccurate personal data we hold about you is corrected.
• Erasure: you may ask us to delete or remove personal data that we hold about you in certain circumstances.
• Restriction: you may withdraw consent for our use of your personal data, or ask us to suspend the processing of certain of your personal data about you, for example if you want us to establish its accuracy.
• Portability: you may request the transfer of certain of your personal data to another party under certain conditions.
• Objection: where we are processing your personal data based on a legitimate interest (or those of a third party) you may object to processing on this ground.
If you wish to make exercise your rights, you may contact us in accordance with paragraph 29. We may require that you submit certain forms or provide certain information to process your request. Where permitted by law, we may also charge you a fee to process your request.
27. Limitations. We may be permitted under applicable laws to refuse a request, for example, we may refuse (a) a request for erasure where the personal data is required for in connection with any claims; or (b) an objection request and continue processing your personal data based on compelling legitimate grounds for the processing.
28. Complaints. If you are of the opinion that we have not complied with this Policy or we have infringed applicable data protection laws, you have a right to lodge a complaint with any data protection regulator or authority having jurisdiction over us.