GDPR Privacy Notice for Client Representatives
Introduction
Source of Your Personal Data
Data Processing Overview
Recipients of Your Personal Data
Data Security
Your Rights Relating to Personal Data
Automated Decision Making
Changes to the Notice
Contact
Introduction

Aissel Technologies Private Limited (Office No. Lower Ground Floor-01, Next to International Airport, Gokul Road, Hubballi - 580030. India) ("we" or “Aissel”) is the controller in relation to the processing of our clients’ representative's personal data for purposes stated in this Privacy Notice (“Notice”). We aim to explain the details of processing and make sure that your personal data is handled appropriately, in a manner that respects your privacy and meets applicable legal standards. Providing your data is not obligatory but necessary for execution and performance of the agreement concluded between Aissel and the organization you represent.

The terms "controller", "personal data", "data subject", "processing", and any other terms use in this policy are expressly defined in Article 4 of the General Data Protection Regulation (EU) 2016/679 ("GDPR").


Source of Your Personal Data

We collect your personal data from different sources. Depending on the case, your personal data may be: (1) provided to us directly by you, (2) provided to us by your employer or other relevant party with which you are associated, (3) obtained by us from publicly available sources (e.g. national registers or website of your employer or other relevant party with which you are associated).


Data Processing Overview

Below you can find purposes for which we process your personal data. We have connected them with applicable personal data categories, legal basis and retention period.

Purpose Categories Legal Basis Retention
Executing contracts with organization you represent and responding to requests or inquiries.
1.Identity data: e.g. name, title. 2.Contact details: e.g. telephone number, email address. 3.Data necessary to conclude a contract: e.g. signature, personal identity number. 4.Authorization details: e.g. power of attorney. 5.Engagement-related data: e.g. audio and video recordings. 6.Information you provide when communicating with us.
Contractual necessity Article 6(1)(b) in case you are individual client acting as a party, Legitimate interest (GDPR Article 6(1)(f)), where the legitimate interest of Aissel is to start the business relationship with a company you represent or modify the actual contractual arrangements. Your personal data will be kept during the duration of the business relationship with organization you represent and later for archiving purposes for 8 years from the date of completion of the engagement.
Managing and maintaining the business relationship with organization you represent.
1.Identity data: e.g. name, title. 2.Contact details: e.g. telephone number, email address. 3.Information you provide when communicating with us. 4.Engagement-related data: e.g. audio and video recordings.
Legitimate interest (GDPR Article 6(1)(f)) where the legitimate interest of Aissel is to maintain business contacts with a company you represent. Your personal data will be kept for the duration of the business relationship and later for 8 years from the date of completion of the engagement.
Safeguarding the rights of Aissel. Depending on the content of the case - full name, contact details, data necessary to establish, exercise or defending legal claims of Aissel. Legitimate interest (GDPR Article 6(1)(f)), where the legitimate interest of Aissel is establishing, exercising and defending legal claims. Your personal data will be kept as reasonably necessary for these purposes for a period of 8 years.

Recipients of Your Personal Data

Aissel will share your personal data with:

1. Service Providers – Vendors providing IT-related services such as: Amazon AWS or Microsoft.

2. Regulatory and Governmental Authorities – We will share your personal data with regulatory and governmental authorities when required to do so by law. Any such request will be assessed for its validity and legality prior to the transfer of any personal data.


Data Security

Aissel is concerned about the security of your personal data. To protect your privacy and to safeguard against unauthorized access, disclosure, alteration, loss, misuse, or destruction of your information, we implemented appropriate physical, electronic, and organizational measures. Whenever your personal data will be transferred outside the EU/EEA, we ensure an adequate level of data protection in accordance with the requirements of EU data protection legislation, including as required, standard contractual clauses adopted by the European Commission. Details of these security measures can be provided by contacting us as per the “Contact” section below.


Your Rights Relating to Personal Data

Under the GDPR, you have certain rights in relation to the processing of your personal data. You have a right to:

  1. Request access to your personal data – this enables you to get a copy of the personal data that we hold about you;
  2. Request an update to your personal data – this enables you to update inaccurate or incomplete personal data we hold about you;
  3. Request the deletion of your personal data – under certain circumstances described in Article 17 of the GDPR, this enables you to delete personal data we hold about you;
  4. Object to the processing of your personal data – under certain circumstances described in Article 21 of the GDPR, whenever the processing is based on legitimate interest, you can object to the processing of your personal data;
  5. Request restriction of processing your personal data – under certain circumstances described in Article 18 of the GDPR, this enables you to ask us to suspend the processing of your personal data;
  6. Request the transfer of your personal data – this enables you to request that some of your personal data be provided to you, or to another data controller in a structured, commonly used and machine-readable format;
  7. Lodge a complaint with a supervisory authority – you have the right to lodge a complaint with the applicable supervisory authority. You can find necessary contact details here:
https://www.edpb.europa.eu/about-edpb/about-edpb/members_en

Automated Decision Making

Personal data covered by this Notice will not be used in the context of taking any automated decisions, including profiling.


Changes to the Notice

We may update this Notice from time to time to reflect any changes to the way in which we process your personal data or changing legal requirements. Although we may request our clients to inform you about that update, we may not be able to personally notify you.


Contact

If you have any questions regarding the processing of your personal data, need further information on personal data protection, or you want to exercise your rights relating to personal data, please do not hesitate to contact us. See below for contact details:

Data Privacy Officer Email :