Privacy Policy STT Global Data Centres India Private Limited (“STT GDC India”/ “We”/ “us”) is committed to protecting and securing the personal data we have with us. We advise you to carefully read our Privacy Policy so that you are aware of how we collect, share and use your personal data, and how you can exercise your privacy rights. Personal Data Personal Data means any information, either directly or in combination with other information, that enables us to identify you and which is related to an identified or identifiable natural person (also known as a ‘data subject’), such as a name, address, an identification number, location data, an online identifier to one or more factors specific to the identity of that natural person. Personal Data we collect when you visit our website The personal data that we may collect about you when you visit our website broadly falls into the following categories: Information that you provide voluntarily We collect personal data, including sensitive personal data or special categories of personal data that you provide voluntarily through our website, for example, when completing online forms to contact us or registering for events that we/our group companies are organising (together ‘information’). The information we collect about you may include some or all of the following: Name Designation or Job Title Age Gender Company or organization Contact information, including e-mail address and telephone number(s) Demographic information such as postcode, preferences, and interests Other information relevant to client surveys or similar research Information pertinent to fulfilling our services to you; and Any other personal data that you voluntarily choose to provide to us The information we collect about you may include the following types of sensitive personal data or special categories of personal data: If we ask you to provide any other personal data not described above, the personal data that you are asked to provide, and the reasons why you are asked to provide it, will be made clear to you at the point that you are asked to provide your personal data. Information that we collect automatically When you visit our website, we may collect certain personal data automatically from your device. Specifically, the information we collect automatically may include information like your IP address, device type, unique device identification number, browser type, broad geographic location and other technical information. We may also collect information about how your device has interacted with our website, including the pages accessed and links clicked. Collecting this information enables us to better understand the visitors who come to our website, where they come from, and what content on our website is of interest to them. We use this information for our internal analytics purposes and to improve the quality and relevance of our website to our visitors. Some of this information may be collected using cookies and similar tracking technology, as explained below. Use of Cookies Cookies are files with a small amount of data that is commonly used as an anonymous unique identifier. These are sent to your browser from the website that you visit and are stored on your computer's hard drive. Our website uses these cookies to collect information and to improve our service. Some of our web pages utilise cookies and other tracking technologies. STT GDC India’s website uses cookies to track user traffic patterns. We do this to determine the usefulness of information on the website to our users and to see how effective our navigational structure is in helping users reach that information. Our use of cookies and other tracking technologies allows us to improve our website and your online experience. We may also analyse information that does not contain personal data for trends and statistics. STT GDC India does not correlate this information with personal data about individual users, nor does it share this information or sell it to any third party. You may modify/update browser settings to notify you if you receive a cookie or you may choose to block cookies within your browser. As part of providing our services to Customers When Customers engages with us to provide our services, we collect and use personal data which is necessary for the performance of those services or is of our legitimate interest. When representatives or other personnel or end customers of our Customers visit/inspect our premises, we may collect and use personal data such as name, phone number and ID proof, as necessary, for identification purposes. STT GDC India and its personnel don’t have access to the customer data stored in our GDCs. As part of obtaining services from Vendors When we engage with vendors to get their services or sub-processing of our data, we collect and use personal data which is necessary for the performance of those services and administrative tasks or is our legitimate interest. As part of our recruitment process We collect information from and about candidates in connection with available employment opportunities at STT GDC India. This information may include CVs, academic records, work history, employment, identification documents and references. STT GDC India uses candidates’ personal data to match their skills, experience, and education with the specific roles offered by the firm. This information is passed to the relevant hiring managers and persons involved in the recruitment process to decide whether to invite you for an interview. STT GDC India collects further information from you if you are invited for an interview (or equivalent) stage and onwards. In connection with the recruitment activities, STT GDC India may also collect special categories of personal data from candidates where we have an employment law obligation to do so. This information is collected for the future provision of employment benefits, or with the individual's explicit consent. STT GDC India may collect personal data about candidates from the following sources: Directly from the candidates – for example, information that you have provided when applying for a position directly through our ‘Careers’ page on the website; From recruitment agencies – for example, when a recruitment agency contacts us to identify you as a potential candidate; Through publicly available sources online – for example, where you have a professional profile posted online (e.g. on your current employer’s website, or on a professional networking site like LinkedIn); and By reference or word of mouth – for example, through a referral from a former employee/employer or from a referee you have identified. Lawful Basis for Processing Personal Data Our legal basis for collecting and using the personal data described above will depend on the personal data concerned and the specific context in which we collect it. However, we normally collect personal data from you only where we need the personal data to perform a contract with you (for example, when providing our services), comply with a legal requirement or to perform a contract with you or where the processing is in our legitimate interests and not overridden by your data protection interests or fundamental rights and freedoms. In some cases, we may also have a legal obligation to process personal data about you or may need to process personal data to exercise, establish or defend legal claims. If you have questions about or need further information concerning the legal basis on which we collect and use your personal data (including any legitimate interests relied upon), please send an e-mail to DPO@sttelemediagdc.in We use this information to establish and enhance our relationship with our users for the following purposes: Communication: We may use your information to administer and provide services you request or have expressed an interest in, to communicate with you in case of customer support, to process transactions, for sending newsletters, updates, and promotional materials, for seeking your opinion and feedback and personalise and/or tailor any communications that we may send you. Advertising: We may use your information to carry out advertising and market research based on behavioural metrics, geo-location data, demographic data, and marketing preferences we capture. We may permit certain third-party companies to help us tailor advertising based on use. Activity Tracking: We may use your information to track your activity on our digital platforms and personalise and improve your experience. This can be used to create an individual profile for you so that we can understand and respect your preferences or for profiling purposes to enable us to personalise and/or tailor any marketing communications that you may consent to receive from us. Optimization: We may use your information to operate, improve and maintain our site, to prevent fraud and abuse. Information Sharing: We may use and share your information with third parties with whom we have a contractual relationship. For example, we may provide you with a link where you may share your content with another person. Contracted services: We may collect your information for the purpose of providing contracted services to you. Recruitment: We may collect and use personal data to help assess your skills and your suitability for the relevant job position you apply for. We may also use such data to contact you if we believe a specific job position may interest you. Such information may include your name, e-mail address, CV, telephone number, profile photo, job history and other relevant information. Consequently, we may use your personal data in relation to the evaluation and selection of candidates, including but not limited to setting up and conducting interviews and tests, evaluating, and assessing the results thereto and as is otherwise needed in the recruitment processes, including the final recruitment. Employment-related purposes: We may collect and use your personal data for purposes relating to your employment, such as for payroll purposes, medical and insurance purposes, and such other purposes, as applicable, in accordance with STTGDCI’s Human Resource Data Protection Policy, and Privacy and Data Protection Manual, to the extent applicable. Disclosure of your personal data We share your personal data, in the following circumstances: With our group companies and/or affiliates for the purposes of providing you with our services as described in this Privacy Policy; With third parties, including certain service providers we have retained in connection with the services we provide, such as consultants, experts, evaluation services, couriers, or other necessary entities; On a confidential basis with third parties for the purposes of collecting your feedback on the firm’s service provision, to help us measure our performance and to improve and promote our services; With courts, law enforcement authorities, regulators, government officials or attorneys or other parties where it is reasonably necessary for the establishment, exercise or defence of a legal or equitable claim, or for the purposes of a confidential alternative dispute resolution process; With service providers who we engage within or outside of STT GDC India, domestically or abroad to process personal data for any of the purposes listed above on our behalf and in accordance with our instructions only; If we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets to whom we assign any of our rights and obligations. Security of your personal data We use appropriate technical and organisational measures to protect the personal data that we collect and process about you. The measures we use are designed to provide a level of security appropriate to the risk of processing your personal data and as required under applicable law. How Long Do We Keep Your Personal Data STT GDC India will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means and the applicable legal requirements. Privacy Rights We will respect your legal rights in relation to your personal data as per applicable laws and data protection rules. Below are the rights granted under privacy regulations and we are also committed towards the protection of the same in terms of this Privacy Policy to the extent we are notified of privacy laws applicability to you: Right to access copies of the information we hold about you at any time. If we provide you with access to the information we hold about you, we will not charge you for this, unless your request is "manifestly unfounded or excessive." Where we are legally permitted to do so, we may refuse your request. If we refuse your request, we will tell you the reasons why. Right to rectify your personal data if it is inaccurate or incomplete. Right to erasure by requesting that we delete or remove your personal data from our system. Right to restrict our use of your personal data, that is, the right to "block" us from using your personal data or limit the way in which we can use it. Right to data portability by requesting that we move, copy or transfer your personal data. Right to object to our use of your personal data including where we use it for our legitimate interests. Right to withdraw the consent if we rely on your consent (or explicit consent) as our legal basis for processing your personal data, you have the right to withdraw that consent at any time. Child Privacy Our Services do not address anyone under the age of 18. We do not knowingly collect personal identifiable information from children under 18. In the case we discover that a child under 18 has provided us with personal information, we immediately delete this from our servers. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us so that we will be able to do the necessary actions. If you choose to use our Services, you agree to the collection and use of information in relation to this policy. If you have provided any Sensitive Personal Data, we will only collect and process such Sensitive Personal Data basis the express consent provided by you. Changes to Privacy Policy We reserve the right to update or change this notice at any time, and we will provide you with the updated Notice when we make any substantial updates at the earliest, either through e-mail or by providing a prominent notice of the change on the website. You should check the Notice periodically. Contact Us If you have any questions or suggestions about our Privacy Policy, do not hesitate to contact us at DPO@sttelemediagdc.in