Personal information shall not be collected by AGTSPL unless either of the following is fulfilled:
AGTSPL only collects, uses and processes Personal information for purposes that are reasonable and legitimate. Such personal information shall be processed in a manner compatible with the agreed purposes, unless the data subjects have consented to it being processed for a different purpose or the use for a different purpose is permitted by applicable law.
In the event AGTSPL decides to disclose the personal information of the data subjects to a third party, it shall inform the data subject either by way of privacy notice or through contract agreement the purpose and need for such disclosure. Personal information of data subject may be disclosed to a third party only for the reasons consistent with the purposes mentioned above and ensure that the consent of the data subject has be duly received. Moreover, AGTSPL shall ensure that the third party sign an NDA (non-disclosure agreement) before sharing the personal information of the data subject with the third party.
AGTSPL shall establish a mechanism to enable and facilitate exercise of data subject’s rights of access, blockage, erasure, opposition, rectification, and, where appropriate or required by applicable law. The data subject shall be entitled to make the above the request to obtain details about their personal information and AGTSPL shall provide its response within 72 hours of receipt of such written request.
AGTSPL shall not retain the personal information of data subject for longer than is required for the purposes for which the information may lawfully be used or is otherwise required under any other law for the time being in force.
AGTSPL shall take reasonable security measures to protect Personal Data against loss, misuse, unauthorized or accidental access, disclosure, alteration and destruction. AGTSPL shall implement policies and maintains appropriate technical, physical, and organizational measures and follow industry practices and standards in adopting procedures and implementing systems designed for securing and protecting Personal Data
Any questions, discrepancies, and grievances of data subject with respect to collection and processing of Personal Data may be made to the Grievance Officer at Rakesh Nayak, CTO at email@example.com. The Grievance Officer shall redress the grievances of the data subject expeditiously and in any event within the period prescribed under law.