Customers’ Data Protection Policy : Retail Career (Evoxel Career Management Private Limited)
Valid Since July01, 2024
1. Introduction
At Retail Career, we prioritize the trustworthiness of our data handling practices, ensuring cautious and transparent treatment of your personal information while respecting your privacy. When handling your personal data, we adhere closely to the Digital Personal Data Protection Regulations (DPDP) in India and other data protection laws. Our goal is to consistently follow best practices in data protection. This data protection statement outlines the methods by which we gather, handle, and safeguard the personal information of our B2B clients.
The data protection statement may be revised, such as in the case of modifications to our privacy policy or relevant legislation.
2. Data controller’s contact information:
Data Protection Unit B2B: info@retailcareer.org
Purpose of processing
Processing of contacts
Direct marketing
Personalised marketing
Statistical analysis
Conducting research and surveys
Customer relationship management
Assignment management and invoicing
Legal basis
Legitimate interest in processing the received contact
Legitimate interest in establishing and promoting customer relationships
Consent, legitimate interest in establishing and promoting customer relationships
Consent, contract
Consent
Legitimate interest in maintaining and promoting customer relationships
Legitimate interest in processing the data of the organisation’s contact persons for the contractual relationship
Types of personal data
Name, e-mail address, personal data in the message
Name, company, title, e-mail address, telephone number, customer relationship data
Name, company, title, e-mail address, telephone number, customer relationship data
Name, e-mail address, title
Name, e-mail address, title
Name, company, title, e-mail address, telephone number, communication
Name, e-mail address, title, company
Retention times
3 years from the contact
3 years from last contact, update or other event
3 years from last contact, update or other event
3 years from last contact, update or other event
3 years from data collection
3 years from last contact, update or other event
For the duration of the customer relationship, for the period required by the legislation on accounting with regard to invoicing-related information
Origins of personal data
We directly gather personal data from individuals, such as through contacts. We may also get personal information from public registries or obtain it as disclosures from other data controllers, for instance.
3. Recipients of personal data (Individuals/ Entities)
We employ third-party service providers, such as system providers, to handle the data processing. The service providers act as data processors on behalf of Retail Career or Evoxel, handling personal data. We employ contractual and technical methods to guarantee that the service providers we utilize handle your data in compliance with legislation and sound data protection standards.
We employ third-party processors to handle personal data for the following objectives
- Contact processing
- Newsletter distribution
- Customer relationship management
- Task management and invoicing
Companies within the Evoxel Career Management Private Limited may have access to personal data.
4. International Data Transfer:
Occasionally, the service providers we use may handle personal data in locations outside of India, such as the United States, EU/ETA, and MENA. Personal data will be sent outside of India only if it meets the requirements set by data protection legislation. The service providers we employ are legally obligated to guarantee a sufficient level of data protection in all personal data processing activities.
Ensuring the protection of your personal data
5. Protection of your personal data
We employ suitable technical and organizational measures to safeguard personal data from loss, unauthorized access, and other forms of misuse. Some examples of these precautions include the implementation of firewalls, encryption technology, data backups, and safe computer rooms. Internal restrictions are in place to control access to your personal data, both electronically and physically. Additionally, procedures are implemented to manage and monitor access to various systems. Only workers with authorized access rights within the scope of their responsibilities are allowed to access personal data. We utilize the server services provided by Godaddy to securely store, retrieve, and safeguard your data. The data protection policies of Godaddy also apply when you provide your permission to the data protection policies of Retail Career and/or Evoxel.
6. Data subjects' entitlements
Data subjects possess numerous rights that they can exercise to exert influence on the processing of their personal data. To exercise the rights mentioned here, please send a request regarding the problem by e-mail to info@retailcareer.org.
| Right to be informed |
The data subjects have a right to be informed about what personal data regarding them we process and receive a copy of the data in question. As requested, the data controller delivers a copy of the personal data being processed or information on not processing the registered person’s data. |
| |
| Right to access |
Data subjects have the right to request rectification or correction of their data, in which case we will complete inaccurate or incorrect data. |
| |
| Right to rectification |
The data subjects have the right to have all their personal data erased, that is, to be forgotten. This right may be limited, for example, by a legal obligation to retain the personal data in question. |
| |
| Right to erasure (“right to be forgotten”) |
The data subjects have the right to have all their personal data erased, that is, to be forgotten. This right may be limited, for example, by a legal obligation to retain the personal data in question |
| |
| Right to restrict processing |
The data subjects have the right to request the restriction of processing personal data. The restriction of processing means that the data will be retained, but they will be processed in other ways only based on permission, for legal request, for protecting the rights of another person, or for an important reason related the common interests of the EU or a Member State. The restriction of processing is applicable in case, for example, the legality of processing has been disputed. Then, the processing of data is limited until its legality has been ensured. |
| |
| Right to data portability |
Data subjects have the right to request the transfer of personal data from one system to another. This right is applicable when the personal data has been collected directly from the data subject and the processing is based on a contract or consent. |
| |
| Right to object |
The data subjects have the right to object to the processing of personal data with reference to a personal reason if the ground for processing is legitimate interest, public interest or exercise of official authority. The processing of the data is stopped unless the processing is necessary for some other justified reason. |
| |
| Rights relating to automated decision-making |
The data subject has the right not to be subject to decision-making based solely on automated processing and which results in legal effects or other significant effects. The data subject has the right to request that a person reviews decisions based on automated decision-making.
We do not make decisions based solely on automated processing of personal data that would have legal or other significant effects.
|
| |
| Right to withdraw consent |
If the processing of personal data is based on your consent, the data subject has the right to withdraw the consent at any time without conditions. However, this does not affect the lawfulness of any processing based on consent that took place before the withdrawal of consent. |
| |
| Right to lodge a complaint with the supervisory authority |
The data subject has the right to lodge a complaint on processing personal data with the competent supervisory authority. In Finland, the data protection authority is the Office of the Data Protection Ombudsman. |