We would like to inform you here about the processing of your personal data when you use our websites and its apps, share your data with us during business contacts and about your rights under data protection law.
Who is responsible for processing the data and who is the Data Protection Officer?
Controller for the data processing is:
ERGO Technology & Services Private Limited
Unit No. 201, 2nd Floor, Kensington, “A” Wing Building,
Festus Properties Pvt. Ltd.- SEZ,
Powai, Mumbai, Maharashtra- 400076
India
(hereinafter referred to as: „ET&S Private Limited”)
You can contact our Data Protection Office by writing to the email address: sm-etsin-Data-Protection@ergo.com or by writing to the above ET&S Private Limited postal address and adding "For the attention of the Data Protection Office".
What categories of data do we use and where do they come from?
As a matter of principle you can use our website anonymously. We do not save any personal data or data which can be related to a person using the website (such as IP addresses). When visiting our website we collect data (the date, time, pages visited, navigation, and software used) in an anonymised form so that the usage pattern can be analysed, also anonymously, by an external service provider. The data is anonymised before it is saved by the service provider. You will find further information about our website in Point 6.
ET&S Private Limited may receive personal data directly from the contractors or representatives of the contractors (e.g. via e-mail correspondence, electronic contact forms, phone call, during business meetings, conferences) or from other persons or entities cooperating with ET&S Private Limited for the purposes of business contacts, including in order to conclude and perform agreements with ET&S Private Limited.
In the case of the contractors the data includes mainly information connected with their business activities, and in particular full name, company name, business address, mailing address, phone number.
In the case of the representatives of the contractors the data include mainly contact details necessary to communicate with them for business purposes, and in particular: full name, e-mail address, phone number, and whenever justified, professional qualifications, personal ID number (PESEL), and ID Card number (for identification purposes).
What are the purposes for which data is processed?
If you provide us with your personal data in specific circumstances we treat this data in accordance with the provisions of the data protection legislation applicable as per local legal and regulatory requirements.
If you send us an email or complete an online form on our website and send it to us we process the personal data indicated in the form (e.g. your name or email address) only for the purposes of our correspondence with you so we can send you the documents or information you requested, or for any other purposes you may have indicated on the form in question. We will process those data until the answer is given and the correspondence is completed, but in certain cases we may keep them until the period in which claims may be asserted against us expires.
In case of contractors and representatives of the contractors we also process provided personal data in order to:
- sign and perform the agreement concluded between ET&S Private Limited and the contractor (hereinafter referred to as: the Agreement), i.e. to perform the obligations of the parties under the Agreement and to make settlements after its termination - for the duration of the Agreement and settlements after its termination,
- to verify professional qualifications of the representatives of the contractor in connection with the business negotiations held when deciding to cooperate or during the performance of the Agreement - for the duration of the negotiations or for the duration of the Agreement and settlements after its completion,
- to establish and maintain business relations and direct marketing, including to send, using electronic means of communication or in any other form, marketing and promotional content, i.e. trade offers, information about promotional campaigns organised by the ET&S Private Limited and events related to its business activities - until the objection is submitted,
- perform the ET&S Private Limited internal administrative purposes, including in particular the creation of statistics, reporting, and service development planning - for the time necessary to achieve these goals however, no longer than for the duration of the Agreement and settlements after its completion,
- perform legal duties by the ET&S Private Limited, e.g. the storage of invoice and accounting documents, tax clearings - for the time specified by law,
- confirm the fulfilment of the obligations, establish, pursue or defend claims addressed against the ET&S Private Limited - for the period of limitation of claims arising from the provisions,
- fulfil by the ET&S Private Limited of its legal obligations under the provisions of law, i.e. if a specific request is made by government authorities, to the extent specified in the request - within the limits specified by the request and for the time specified in the regulations,
- monitor office spaces of the ET&S Private Limited, to ensure the safety of persons staying there, protect the property of the ET&S Private Limited, its employees and visitors, and to secure information which constitutes trade secrets of the ET&S Private Limited - no longer than 3 months.
We will inform you in advance if we want to process your personal data for a purpose which is not indicated.
On what legal basis is your personal data processed?
We process your personal data in compliance with applicable local laws, and all other relevant legislation on the processing of personal data if applicable.
The specific legal basis for processing the data depends on the context in which we receive the data and the purpose for which we receive it. In so far as is necessary, we will therefore inform you in the case of the relevant application.
The legal basis will be:
- in order to conduct the communication, sign and perform the agreement as regards representatives of contractor, verify professional qualifications of representatives of contractor, establish and maintain business relations, conduct direct marketing, perform internal administrative purposes, confirm the fulfilment of obligations, establish, pursue or defend claims addressed against the ET&S Private Limited, or conduct video monitoring of office space.
To carry out marketing activities via electronic means of communication (SMS, phone, e-mail) it may be necessary to additionally express consents under the applicable local laws
- necessity of data processing for compliance with a legal obligation to which the ET&S Private Limited is subject in the case of performance of legal duties by the ET&S Private Limited, e.g. the storage of invoice and accounting documents, tax clearings or fulfilment of its legal obligations under the provisions of law, i.e. responding to the requests made by government authorities.
- necessity of data processing for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract in case of sign and perform the Agreement as regards contractors.
Who will obtain your data?
Within the controller (ET&S Private Limited), the only persons and departments to receive the relevant data are the persons and departments responsible for the process in question; in this respect there is a clear allocation of duties and a clear authorisation concept. The data may also be passed to service-providers for the purposes specified above. The involvement of service providers is necessary, for example, as part of the administration and maintenance of IT systems, as well as for the purposes of providing courier, postal, marketing, archiving, auditing and legal services.
Personal data can also be sent to other recipients in so far as this is necessary for the performance of contractual or statutory obligations (e.g. sent to supervisory authorities).
This data can also be forwarded to Group companies e.g. as part of Group communications or Group management.
Is your data sent to a third country?
If personal data is sent to a service provider or Group company outside the European Economic Area (EEA), it is only sent if the EU Commission has confirmed that the country has an adequate level of data protection or if other adequate data protection guarantees (e.g. the agreement of EU standard contractual clauses) are in place. You can also request the information from the places or persons specified as contacts at the beginning of this section.
What measures do we take to protect your data?
We take appropriate and state of the art technical and organisational security precautions to protect data against accidental or intentional manipulation, loss, destruction or against access by unauthorised persons. In the case of the dialogue forms available on our website, we use TLS (Transport Layer Security) encryption to protect your details. This TLS connection protects your data against scrutiny by unauthorised persons. For the sake of your own security, please always use these dialogue forms. If you send data to us in unencrypted form as normal non-secure emails, it is possible for these emails to be viewed or amended by unauthorised persons during transmission.
What data protection rights do you have as a Data Subject?
You can request information from the above address about your personal data which has been saved. Under certain conditions you can also require that your data is corrected or deleted. You also have a right to restrict the processing of your data and a right to the disclosure in a structured, customary and machine-readable format of the data you supplied.
Right to object
If we process your data to protect our legitimate interests you may object to this processing for reasons which arise from your particular situation. We will then cease processing your personal data unless we can demonstrate compelling reasons worthy of protection for the processing which override your interests, rights and freedoms or if the processing is for the assertion, exercise or defence of legal claims.
You can object to processing for direct marketing purposes at any time.
If we process your data by reason of consent you have given, you may revoke this consent at any time with effect for the future.
Where can you file complaints?
You can file complaints either with the Data Protection Officer detailed above or with a data protection supervisory authority.
The data protection supervisory authority responsible for ET&S's head office in India is: Personal Data Protection Office, D-301, 3rd Floor, Eastern Business District (Magnet Mall), Lal Bahadur Shastri Rd, Bhandup (W), Mumbai, Maharashtra 400078
For how long is your data saved?
We delete your personal data as soon as it is no longer required for the purposes stated above, but in certain cases we may keep them for the retention period required by law or until the period in which claims may be asserted against us expires. This is done regularly as a result of statutory obligations to provide proof and also retention obligations which are legally defined.
Individual retention periods are specified for each of the processing purposes in the section above “What are the purposes for which data is processed?
Are you obliged to provide your data?
If you are just using our website you are under no obligation to provide personal data. However, there are some services for which we need your personal data e.g. to send you the information you request, for example newsletters or to include you in an application procedure. We cannot provide the services you request without this information. In each case we only collect the data we actually need.
Providing your personal data may be necessary to establish and maintain business relationships with ET&S Private Limited as well as to conclude and perform the agreements with ET&S Private Limited.
To what extent are decisions on particular cases or profiling activities automated?
If we use purely automatic processing method, including profiling, in a specific case to arrive at a decision, we will inform you as part of the procedure.
Amendment of this Privacy Statement
Enhancement of our website and changes in technology sometimes lead to changes in our Privacy Statement. When visiting our website please take note of the latest version of our Privacy Statement.