Pre-Registration Privacy Notice

SF Corporate Public Company Limited (the “Company”) as the host of event that you are joining (the “Event”) would like to inform you that for the purpose of the registration and confirmation of your rights to participate in the Event, the Company would need to collect, compile and use your personal data as follows: full name, contact information (i.e. telephone number and email). In this regard, the Company commits to protect the information security of the personal data that you have provided to us during the Event registration and we will not disclose your personal data to any person, except to the third party service providers whom the Company has engaged to perform certain services relating to the Event for your benefit. In addition, the Company undertakes to delete or de-identify your personal data by the end of each calendar year following the completion of the Event after the completion of the corporate assessment, audit and reporting requirements. In case you have any query or intend to exercise any of your rights relating to the personal data, please feel free to contact us at: SF Call Center 1349. Event Photoshoot Privacy Notice SF Corporation Public Company Limited (the “Company”) would like to inform the participant in the event hosted by the Company (the “Event”) that during the Event session, the Company would need to take the photos in the event, either a portrait or video of the participants, and those photos will be used for the preparation of the marketing and advertisement materials in various communication of the Company or other affiliated media channels. Those photos would need to be stored for so long as the Company may deem appropriate and necessary for the Company’s business operation; provided that the Company commit not to excessively violate your rights as the data subject. In case the participant doe not want your photo taken, please feel free to let us know by notifying our staff at the registration desk or expressing your interest to our photographer. Also, in case you would like to exercise your rights relating to your personal data (in particular your photo) processed by the Company, please feel free to contact us as SF Call Center 1349.

On-site Registration and Photoshoot Privacy Notice

SF Corporation Public Company Limited (the “Company”) as the host of the event that you are participating (the “Event”) would like to inform you that for the purpose of the registration and confirmation of your rights to participate in the Event, the Company would need to collect, compile and use your personal data as follows: full name, contact information (i.e. telephone number and email). In addition, during the Event session, the Company would need to take the photos in the event, either a portrait or video of the participants, and those photos will be used for the preparation of the marketing and advertisement materials in various communication of the Company or other affiliated media channels for the period of time that the Company may deem appropriate for their business operation. The Company hereby commits to protect the information security of the personal data that you have provided to us during the Event registration and we will not disclose your personal data to any person, except to the third party service providers whom the Company has engaged to perform certain services relating to the Event for your benefit. In addition, the Company undertakes to delete or de-identify your personal data by the end of each calendar year following the completion of the Event after the completion of the corporate assessment, audit and reporting requirements. In case the participant doe not want your photo taken, please feel free to let us know by notifying our staff at the registration desk or expressing your interest to our photographer. Also, in case you would like to exercise your rights relating to your personal data (in particular your photo) processed by the Company or In case you have any query or intend to exercise any of your rights relating to the personal data, please feel free to contact us at: SF Call Center 1349.

Close-up / Interview Shot

SF Corporation Public Company Limited would like to request for your kind assistance in taking the close-up shots or video shots as the marketing materials of the Company to be displayed to the general public and used in various communication channel of the Company; provided that we will process your personal data pursuant to the Privacy Notice that we have announced for this event.

Campaign Privacy Notice

SF Corporation Public Company Limited (the “Company”) would like to inform the participant to this campaign that the Company is hosting (the “Campaign”) that the Company would need to collect, compile and use the personal data of the participant including the full name and contact information as well as any other personal data that you may be required to provide as defined in the Campaign conditions (i.e. your selfie or portrait photos). Your personal data would need to be processed in order to contact or coordinate with you during the Campaign period and to assess your qualifications to confirm if you win the Campaign. In case you win the Campaign, the Company would need to collect your identification card information for the issuance of the tax invoice and for the tax and accounting purpose of the Company. Also, the Company would reserve the right to use the photo of you as the Campaign participant or winner in the marketing and advertisement materials to be displayed in various communication of the Company or other affiliated media channels for the period of time that the Company may deem appropriate for their business operation. The Company hereby commits to protect the information security of the personal data that you have provided to us and we will not disclose your personal data to any person, except to the third party service providers whom the Company has engaged to perform certain services relating to the Campaign for your benefit. In case you have any query or intend to exercise any of your rights relating to the personal data, please feel free to contact us at: SF Call Center 1349.

Ticket and Merchandise Shop Privacy Notice

SF Corporation Public Company Limited (the “Company”) intends to inform this Ticket and Merchandise Shop Privacy Notice to the client that purchase products (including without limitation movie ticket and other merchandises) from the Company at the shop, counter or other offline channels (the “Client”). Once the Client agreed to purchase the Company’s products and submit the personal data of the relevant Client to the Company for the purpose of such purchasing, the Company shall deem that the Client accepts and acknowledge this Privacy Notice. In case the Client do not agree to this Privacy Notice, the Company would like to reserve the right to refuse to process the Client’s purchase request since the processing of the personal data of the relevant Client as defined under this Privacy Notice is critical and necessary for the performance of the Company’s obligations to the Client. The Company may adjust and amend this Privacy Notice from time to time to be in consistent with the relevant laws and regulations and to reflect the actual services performed by the Company to the Client. The Company will notify the Client of any change or amendment made through various communication channel of the Company.

Personal Data being Processed
The Company would need to process the following personal data of the Client: (1) contact information of the Client that may be submitted for the pre-order or the pre-sale products (i.e. full name and contact information) and/or (2) payment information (i.e. credit card information) or the payment transaction information collected from POS system; and/or (3) identification card of the relevant Client that requests for tax invoice.

Objectives for the Personal Data processing
The Company will only process the Client’s personal data for the following purposes:
1. To confirm the purchase transaction made, in particular the payment information, and to deliver the pre-order product that the Client has made order to purchase;
2. To perform any legal obligations that the Company may have, in particular for the tax and accounting legal obligations; and
3. With prior consent given by the Client, to contact the Client to present any advertisement or marketing materials that the Client may be of any interest upon the receipt of the consent from the Client.

The Company would need to process and retain the Client’s personal data for the defined purposes throughout the period of time that the Company would need to process the purchase transaction for the relevant Client or the timeline that the relevant laws define; provided that in case any personal data is being processed based on consent, the Company would retain such information until the Client withdraws their consent.

Disclosure of the Personal Data
Generally, the Client’s personal data shall be kept confidential by the Company; provided that in these circumstances the Company may need to disclose and share the Client’s personal data with these following persons: (i) the third party service providers whom the Company has engaged to perform any specific service or obligations to the relevant Clients; and (ii) the governmental authorities that the Company may be subject to the legal obligations to disclose the Client’s personal data to. The Company commits to only disclose and share the Client’s personal data on the necessary and need-to-know basis. Company’s Representations to keep the Information Security of the Personal Data The Company represents to implement the appropriate information security of the Client’s personal data to prevent unauthorized access, use, amendment or disclosure of those personal data and the Company commits to review the information security measures from time to time in order to ensure the compliance with the best industry practice and relevant laws. Client’s Rights over their Personal Data The Company respect the Client’s statutory rights as the data subject under the relevant laws over the relevant Client’s personal data, including in particular the following rights: (1) the right to request for access or copy of their personal data as well as the right to revise or rectify the personal data; (2) the right to request for data portability; (3) the right to object to any process of their personal data; (4) the right to request for deletion or de-identification of the Client’s personal data once there is no further necessity; (5) the right to request for the suspension of the Client’s personal data processing; or (6) the right to withdraw consent. In case the Client would like to exercise any of these rights, please feel free to contact the Company as the defined contact channel and the Company will consider and get back to the relevant Client’s request within 30 days after the receipt of the Client’s due request.

Contact Channel
SF Call Center 1349

Online Sale Privacy Notice

SF Corporation Public Company Limited (the “Company”) intends to inform this Online Sale Privacy Notice to the client that purchase products (including without limitation movie ticket and other merchandises) from the Company via the online channel (the “Client”). Once the Client agreed to purchase the Company’s products and submit the personal data of the relevant Client to the Company via those online channels for the purpose of such purchasing, the Company shall deem that the Client accepts and acknowledge this Privacy Notice. In case the Client do not agree to this Privacy Notice, the Company would like to reserve the right to refuse to process the Client’s purchase request since the processing of the personal data of the relevant Client as defined under this Privacy Notice is critical and necessary for the performance of the Company’s obligations to the Client. The Company may adjust and amend this Privacy Notice from time to time to be in consistent with the relevant laws and regulations and to reflect the actual services performed by the Company to the Client. The Company will notify the Client of any change or amendment made through various communication channel of the Company.

Personal Data being Processed
The Client’s personal data that the Company would need to process in the performance of the sale transaction for the benefit of the Client include the following data:
1. General information relating to the relevant Client and the information needed for the delivery including full name, telephone number, address or other contact information;
2. Client’s purchase transaction details, including transaction logs, details of the relevant Client’s purchase order and payment information made by the Client to the Company (i.e. bank account or credit card information used for the payment of purchased products);
3. Client’s technical identifier information, including IP Address, browser setting and configuration information and cookies that have been used to track the Client’s behavior on our online platform; and
4. Any other personal data that the Client may submit to the Company with consent granted.

Objectives for the Personal Data processing
The Company will only process the Client’s personal data for the following purposes:
1. To confirm the purchase order, payment evidence and to contact for the delivery of products to the relevant Client;
2. To build and improve the business relationship that the Company may have with the Client, including to facilitate the next purchase by the Client and to request for the Client’s feedback and satisfaction; provided that the Company will only process the personal data to the extent that will not cause excessive impact on the Client’s right as the data subject;
3. To manage the communication and contact made by the Client to the Company (for instance, in the queries and responses as well as the feedback or complaint management process);
4. To perform any legal obligations that the Company may have, in particular for the tax and accounting legal obligations; and
5. With prior consent given by the Client, to contact the Client to present any advertisement or marketing materials that the Client may be of any interest upon the receipt of the consent from the Client.

The Company would need to process and retain the Client’s personal data for the defined purposes throughout the period of time that the Company would need to process the purchase transaction for the relevant Client or the timeline that the relevant laws define; provided that in case any personal data is being processed based on consent, the Company would retain such information until the Client withdraws their consent.

Disclosure of the Personal Data
Generally, the Client’s personal data shall be kept confidential by the Company; provided that in these circumstances the Company may need to disclose and share the Client’s personal data with these following persons: (i) the third party service providers whom the Company has engaged to perform any specific service or obligations to the relevant Clients; and (ii) the governmental authorities that the Company may be subject to the legal obligations to disclose the Client’s personal data to. The Company commits to only disclose and share the Client’s personal data on the necessary and need-to-know basis. Company’s Representations to keep the Information Security of the Personal Data The Company represents to implement the appropriate information security of the Client’s personal data to prevent unauthorized access, use, amendment or disclosure of those personal data and the Company commits to review the information security measures from time to time in order to ensure the compliance with the best industry practice and relevant laws. Client’s Rights over their Personal Data The Company respect the Client’s statutory rights as the data subject under the relevant laws over the relevant Client’s personal data, including in particular the following rights: (1) the right to request for access or copy of their personal data as well as the right to revise or rectify the personal data; (2) the right to request for data portability; (3) the right to object to any process of their personal data; (4) the right to request for deletion or de-identification of the Client’s personal data once there is no further necessity; (5) the right to request for the suspension of the Client’s personal data processing; or (6) the right to withdraw consent. In case the Client would like to exercise any of these rights, please feel free to contact the Company as the defined contact channel and the Company will consider and get back to the relevant Client’s request within 30 days after the receipt of the Client’s due request.

Contact Channel
SF Call Center 1349

Cookies Privacy Notice

SF Corporation Public Company Limited (the “Company”) would like to inform you as the user of the Company’s website (the “Website”) that the Company would need to use cookies in the functionality of the Website in order to guarantee the smooth service to be provided on the Website and in order to ensure your convenience of accessing and using the Website. Various types of Cookies, text files being stored in the User’s browser, that the Company is using to store information relating to the User’s behavior and the internet usage of the User. For the performance of the Platform, the Company is using 2 types of Cookies as follows:
1. Strictly Necessary Cookies, cookies that are critical for the operation of the Platform and the secure service provisions to the User;
2. Other Cookies: including (i) Functionality Cookies, cookies wit the function of recording the Platform preference and setting that the User made (i.e. user account information, language, font and display functions) that would assist the Company in customizing the Platform display that match for each individual User as previously set; (ii) Performance Cookies, cookies with the function of assessing the performance of the Platform in each component; provided that it should be noted that these cookies may be operated by the third party service provider; and (iii) Advertising Cookies, cookies with the function of recording the User’s behavior on the Platform for the purpose of recommending the products and services that may be of the User’s interests; provided that it should be noted that these cookies may be operated by the third party service provider.
For the Strictly Necessary Cookies, the Company would need to inform you that the Company would need to use this type Cookies in order to provide the services and functionality of the Website in full efficiency. Without this type cookies, the Company would not be able to provide service to you; and then for other types of Cookies. Upon the obtainment of your consent, the Company would need those cookies for the specific purposes or functionality of each type of cookies. Despite the usefulness of the cookies on the Platform operation and the service provision to the User, the User can consider clearing the stored cookies on their own browser at their discretion. It should be remarked that the deletion of the stored cookies, however, may affect the Platform efficiency to some extent. The Company acknowledges and respects your right as the data subject rights of your personal information, in particular the cookies used by the Company. You can exercise your rights as defined under the relevant laws by contacting the Company. In particular, you can customize your cookies settings at your own discretion, including without limitation, especially you can exercise the right to withdraw consent to use Functionality Cookies / Performance Cookies or Advertising Cookies that you may have previously provided to us. Should there be any particular issues or should you intend to exercise any rights please contact us at: SF Call Center 1349

SF+ Membership Privacy Notice

SF Corporation Public Company Limited (the “Company”) would like to inform you as the SF+ member that have registered with the Company (the “Member”). Upon your enrollment as the SF+ member (with the adds-on package (if any)) that the Member may have purchased, the Company shall deem that the Member have already accepted the terms and conditions defined under this Privacy Notice. In case the Member do not agree with the terms of this Privacy Notice, the Company reserve the right to reject your membership enrollment or reject to provide certain privilege or benefits of the relevant Member defined pursuant to the Member terms and conditions that the Company may define since the process of these personal data as defined hereunder are critical and necessary for the provision of the Member’s benefit and privileges to the Member. This Privacy Notice shall only be applicable to the process of personal data of SF+ Member by the Company only without being applicable to other services; the sale of products or merchandises; or any other services to be performed by the Company to the Member. In addition, this Privacy Notice shall not be applicable for the process of the Member’s personal data by other third party that the Company do not have any control over. For those process for other purpose or by other person, the Member would be recommended and required to study the separate privacy notice prepared and announced for those purposes or by those third party data controller. The Company may adjust or make amendment to this Privacy Notice any time in order to assure the compliance with the best industry and practice as well as to reflect the adjusted benefits and privileges of the Member that the Company may make; provided that the Company will notify the Member of those amended privacy notice through various communication channels that the Company may have with the relevant Member.

Personal Data being Processed
The Member’s personal data that the Company would need to process in the assessment of the Member qualification and the provision of the Member’s benefits and privileges to the relevant Member include the following data:
1. Direct personal data of the Member, including without limitation name on the identification card (i.e. full name, address) and other information that the Member is providing on the membership application form; provided that it should be noted that these personal data are important and necessary to assess the Member’s qualification as defined in the Company’s terms and conditions;
2. Contact information, including telephone number and email;
3. Membership fee evidence and the transaction information of all the purchase order made by the Member (i.e. payment evidence, for instance, bank account or credit card information); provided that it is understood that those transaction information will be used in the point calculation and the provision of special discount to the relevant Member pursuant to the terms and conditions defined by the Company from time to time; and
4. Other personal data that the Member may submit to the Company’s processing.

Objectives for the Personal Data processing
The Company will only process the Member’s personal data for the following purposes:
1. To assess and verify the Member’s qualification as submitted during the enrollment process pursuant to the terms and conditions defined by the Company from time to time;
2. To verify the Member’s qualification for the exercise of any Member’s benefit and privileges that include (1) point collection from the ticket and merchandise purchase or point redemption; (2) discounted benefits or the participation in the special event hosted by the Company; and (3) notification and newsletter dissemination relating to the privileges and events hosted specifically for the Member that the Company will communicate to the Member through the selected and preferred channel and the Company commits to only process the Member’s personal data strictly to provide relevant benefits and privileges to the Member pursuant to the terms and conditions defined;
3. To build and improve the business relationship that the Company may have with the Client, including to facilitate the next purchase by the Client and to request for the Member’s feedback and satisfaction; provided that the Company will only process the personal data to the extent that will not cause excessive impact on the Member’s right as the data subject;
4. To manage the communication and contact made by the Client to the Company (for instance, in the queries and responses as well as the feedback or complaint management process);
5. To perform any legal obligations that the Company may have, in particular for the tax and accounting legal obligations; and
6. With the relevant Member’s specific consent given, to perform any other process.

The Company would need to process and retain the Member’s personal data for the defined purposes throughout the membership terms of each Member and in order to facilitate the Member in case of any early termination of the membership, the Company reserve the right to store the Member’s personal data for another 1 calendar year after the termination in case the Member and in case that the Company would be obliged to process any personal data pursuant to any relevant laws, the Company would need to store the Member’s personal data for the period of time as prescribed under those laws.
Disclosure of the Personal Data
Generally, the Member’s personal data shall be kept confidential by the Company; provided that in these circumstances the Company may need to disclose and share the Member’s personal data with these following persons: (i) the third party service providers whom the Company has engaged to perform any specific service or obligations to the relevant Member; and (ii) the governmental authorities that the Company may be subject to the legal obligations to disclose the Member’s personal data to. The Company commits to only disclose and share the Member’s personal data on the necessary and need-to-know basis. Company’s Representations to keep the Information Security of the Personal Data The Company represents to implement the appropriate information security of the Client’s personal data to prevent unauthorized access, use, amendment or disclosure of those personal data and the Company commits to review the information security measures from time to time in order to ensure the compliance with the best industry practice and relevant laws. Client’s Rights over their Personal Data The Company respect the Client’s statutory rights as the data subject under the relevant laws over the relevant Client’s personal data, including in particular the following rights: (1) the right to request for access or copy of their personal data as well as the right to revise or rectify the personal data; (2) the right to request for data portability; (3) the right to object to any process of their personal data; (4) the right to request for deletion or de-identification of the Client’s personal data once there is no further necessity; (5) the right to request for the suspension of the Client’s personal data processing; or (6) the right to withdraw consent. In case the Client would like to exercise any of these rights, please feel free to contact the Company as the defined contact channel and the Company will consider and get back to the relevant Client’s request within 30 days after the receipt of the Client’s due request.

Contact Channel
SF Call Center 1349

Recruitment Privacy Notice

In order for SF Corporation Public Company Limited (the “Company”) to be able to assess your resume and/or application form, please kindly study this Recruitment Privacy Notice that the Company has announced hereunder in detail. The Company commits to implement the best information security measure for the personal identifiable information (the “PII”) that you may submit to the Company in strict compliance with the relevant laws.

What are the PIIs that the Company is processing?
During the recruitment process, the Company may collect and receive the PIIs either (i) directly from you as you may have provided in the resume or you may give to the Company over the phone or interview; (ii) from the headhunter or other referrers that you may give consent to them to disclose your PIIs to the Company; and/or (iii) from any third party that you have identified and indicated as your referees for the Company to contact them regarding your job application. The PIIs being processed by the Company include full name, identification number and identification card, contact information, education background information, working experience information, your interest or skills as well as any other supporting document that you may submit to verify your identity and qualifications. In addition, upon receipt of your explicit consent, the PIIs to be collected may include the health information or criminal records; provided that it should be noted that the health and criminal information are critical for the recruitment process to be undertaken by the Company.

Why would the Company need to process your PII?
The Company would need to collect, compile and process your PIIs as defined above for the following purposes: (i) to verify your identity and to verify all of the qualifications and information that you have given the Company; (ii) to assess whether or not you would be qualified for the job; (iii) to contact and coordinate with you during the recruitment process; and (iv) in case you are not selected or employed, we would reserve the right to keep your PIIs for the future recruitment by the Company and/or the Company’s affiliates.
Who would be the persons that we may need to disclose your PII to?
Generally, we intend to keep your PII as confidential and not to disclose your PII with anyone, except in the following circumstances that are necessary for the recruitment process to be undertaken by the Company: (i) the Company may need to disclose your PII to the affiliates or the business partner who are looking for the candidate and the Company may consider that you may be qualified; (ii) the Company may need to share your PII to check your identity and history with the service providers or other sources that would assist the Company in the recruitment process; and (iii) to any persons that you may give the consent to the Company to disclose your PII to them.

How long would your PII be stored?
Except you have expressed the explicit intention that the Company shall delete or destroy the PIIs that the Company are processing immediately, the Company reserves the right to store your PII for so long as the Company may need for the recruitment purpose, which is for the period of 1 calendar year.

What are your statutory rights over your PII?
The Company respects your right as the data subject under the relevant laws, you shall be entitled to contact the company to exercise your statutory rights, including right to access, to request for copy, to revise, to object to the PII process, to delete or to data portability. You can contact the Company for any query or the exercise of any rights at: SF Call Center 1349

COVID-19 Privacy Notice

SF Corporation Public Company Limited (the “Company”), as the premise owner who is obliged under the Disease Control Act (the “Act”) to collect and notify the relevant government authorities in case that there is any person who is affected or suspected to get affected by the disease of COVID-19 entering into the Company’s premise, would like to inform the visitor entering into the Company’s premise (the “Visitor”) that the Company would need to collect the temperature and health information of the Visitor as well as any other relevant information (i.e. the past travel information) which are considered sensitive personal identifiable information (“PII”) for the performance of the Company’s legal obligations under the relevant Act; provided that the Company would need to store those PII for the period of time as instructed or guided by the relevant government authorities, in particular the disease control officers, or for any other period of time that the Company may considers necessary for the Company to perform the defined legal obligations in the most efficient manner; provided that the Company undertakes to implement the best practice in maintaining the information security of those PII under the legal framework of the relevant laws.

The Company undertakes not to disclose the PII to any person, except only in case that the Company is obliged by the relevant government authorities’ instruction to disclose the suspicious case to those government authorities.

In case of any query relating to this Privacy Notice or should the Visitor like to exercise any rights that the Visitor may have under the applicable laws, including right to get access, to request for copy, to revise your PII, to object to the process of your PII, to request for data portability and to request for the deletion of your PII when there is no further necessity to process the PII, please feel free contact us at: SF Call Center 1349