PRIVACY NOTICE

I. Definitions

‘Data Principal’ means the individual to whom the personal data relates; and where such individual is (i) a child, includes the parents or lawful guardian of such child; (ii) a person with disability, includes her lawful guardian, acting on her behalf;

'Data Processor' an organisation which processes Personal Data on behalf of another organisation but does not include an employee of that other organisation;

'Organisation' in relation to the Processing of Personal Data, includes any Indian entity that engages in the Processing of Personal Data, as well as any foreign entity that offers goods and services to Data Principals located within the territory of India and Processes Personal Data in connection with such activities.

'Personal Data' means data, whether true or not, about an individual who can be identified from that data; or from that data and other information to which the organisation has or is likely to have access;

'Processing' in relation to Personal Data, means the carrying out of any wholly or partly automated operation or set of operations performed on digital personal data, which includes operations such as collection, recording, organisation, structuring, storage, adaptation, retrieval, use, alignment or combination, indexing, sharing, disclosure by transmission, dissemination or otherwise making available, restriction, erasure or destruction.

II. General Information

1. The Data Fiduciary

WEVO Chemical India Private Limited
Unit No. 812, 8th Floor · Emaar Capital Tower 1 · MG Road, Sikanderpur, Sector 26 · Gurugram – 122002 · Haryana, India

2. Contact details of the Group Data Protection Officer

OBSECOM GmbH
Königstr. 40
70173 Stuttgart
Germany
Telephone: +49 711 / 4605025-40
Telefax: +49 711 / 4605025-49
E-Mail: privacy@obsecom.de
Webseite: https://www.obsecom.eu

3. Legal bases

We process Personal Data for a lawful purpose such as:

• Data Principals have given consent to the processing of their Personal Data for one or more specific purposes;
• The processing of Personal Data is necessary for the purpose of entering into or performing a contract with us;
• Processing is necessary for compliance with a legal obligation to which we are subject;
• Processing is in the legitimate interests of our organisation or another person and the legitimate interests of our organisation or other person outweigh any adverse effect on the individual.

In this privacy policy we refer to the respective legal basis of the individual data processing operations.

4. Onward transfer of Personal Data

We forward Personal Data to recipients (Data Processor or other third parties) only to the extent required and only if one of the subsequent conditions are met:

• the individual has consented to the data transfer;
• the onward transfer is required to fulfil a contractual obligation or pre-contractual measure on the request of the individual;
• we are obliged by law to make such a transfer;
• The onward transfer is made on the basis of our legitimate interest or those of a third party.

5. Third countries

To process enquiries from Data Principals, it may be necessary to transfer Personal Data to recipients, such as other group members and the WEVO head office, which are located outside India. The transfer takes place based on your voluntary given consent. The transfer of Personal Data to the WEVO head office in Germany is protected by the legal guarantees under the EU General Data Protection Regulation (GDPR). WEVO Germany have implemented adequate technical and organisational security measures to ensure appropriate security, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage. To the extent your Personal Data are transferred to countries that do not provide sufficient legal guarantees, WEVO will base the respective transfer on appropriate contractual safeguards, for example the EU Standard Contractual Clauses.

6. Rights of Data Principals

You have the following rights regarding your Personal Data:

• Under Section 11DPDPA you have the right to obtain from the Data Fiduciary, to whom you have previously given consent for the processing of your Personal Data, a summary of the Personal Data which is being processed by the Data Fiduciary and details of the processing activities undertaken by that Data Fiduciary with respect to your personal data; the identities of all other Data Fiduciaries and Data Processors with whom the Personal Data has been shared by the Data Fiduciary, along with a description of the Personal Data so shared; and any other information related to your Personal Data and its processing, as may be prescribed;
• Under Section 12 DPDPA you have the right to request the correction, completion and updating of your Personal Data, for the processing of which you have previously given consent. You have also the right to request the deletion of this data, subject to legal retention requirements;
• You have the right to withdraw consent for processing of your Personal Data at any time after you have provided such consent to the Data Fiduciary;
• Under Section 13 DPDPA, you have the right to request that the Data Fiduciary provide you with a readily available means of redressing grievances in relation to any act or omission by the Data Fiduciary or Consent Manager concerning the fulfilment of their obligations with regard to your Personal Data or the exercise of your rights under the provisions of the Act.
• Under Section 14 DPDPA you have the right to nominate another individual to exercise your rights under this Act in the event of your death or incapacity.

If you wish to assert the rights mentioned above, you can contact us or our Group Data Protection Officer at any time using the contact details above.

7. Erasure and restriction of Personal Data

Unless otherwise provided for in this privacy notice, Personal Data will be deleted, if this data is no longer necessary in relation to the purposes for which they were collected or otherwise processed and the retention is no longer necessary for legal or business purposes. Personal Data will not be erased, if any such erasure is prohibited under statutory retention requirements. In this case we will restrict the processing of this data.

III. Individual processing activities when you visit our website

1. Hosting

In order to make our website available, we use services provided by hosting companies, such as: provision of web servers, disk space, database services, and security or maintenance services. Here we, or our Data Intermediaries, process Personal Data of website visitors based on our legitimate interests in providing efficient and secure access to our website.

2. Cookies

No cookies are used on our website.

3. Access data and log files

By visiting our website or its individual pages, your device’s internet browser automatically sends information to the server of our website. This information is stored in so-called log files by us or our hosting provider and will be deleted after 6 Months at the latest.

The following information is stored:

• IP address of the requesting computer;
• Date and time of access;
• Name and URL of the requested file;
• Website from which our site was accessed (Referrer-URL);
• The browser used and your computer’s operating system;
• Status codes and the transferred amount of data;
• Name of your access providers.

This data will be used for the following purposes:

• The provision of our website, including all of its features and contents;
• To ensure a smooth connection to our website;
• To ensure a more user-friendly experience on our website;
• To ensure system security and stability;
• For anonymised statistical evaluation of website access;
• To optimise our website;
• For disclosure to law enforcement authorities in the event of unlawful interference / attacks on our systems;
• For further administrative purposes.

The legal basis for data processing is our legitimate interest. Under no circumstances will we use the Personal Data collected for the purpose of drawing conclusions about an individual.

4. General means of contact

If you contact us using the contact details published on our website (for example, by e-mail) and in this context provide us with Personal Data, we will use this data to process your request, if related to the performance of a contract or is required to perform pre-contractual action. In all other cases, processing is based on your consent and / or our legitimate interest in the effective processing of requests addressed to us. We will store your Personal Data until you ask us for deletion, revoke your consent to the storage, or the data are no longer necessary for the purpose for which they were collected (for example, after completion of your request). Mandatory statutory provisions - especially retention periods - remain thereof unaffected.

5. Direct marketing to customers

If you are interested in our products or services or you are an existing customer and we have received your e-mail address in connection with the sale of goods or services, we may use your name, contact details and e-mail address for the direct marketing of our own similar goods or services. This applies if you have given your consent or you have not objected and we clearly and unequivocally have advised you of the possibility of objection at the time of collecting your Personal Data, and every time we use it thereafter. We will store the Personal Data until you opt-out from direct marketing.

6. Statistics and analytics with etracker

This website uses etracker. The provider is etracker GmbH, Erste Brunnenstraße 1, 20459 Hamburg, Germany (hereinafter 'etracker'). Etracker is our Data Processor and processes data about visits of our website on our behalf. This data is used to ensure that our website is designed to meet the needs of our users, to continuously optimise our website, measure the success of marketing activities and create statistical evaluations. The legal basis is our legitimate interests in the optimisation of our website. For more information on how we use cookies and their storage please refer to https://www.etracker.com/support/etracker-cookies-2/. Under no circumstances do we use the collected data for the purpose of drawing conclusions about a person. When storing visitor data, the IP addresses, device and domain data of visitors are anonymised and stored in such a way that it is impossible to draw conclusions about individual visitors.

If you do not want etracker to process data about your visit, you can prevent this by obtaining an opt-out cookie from etracker here: I disagree with the processing of my personal data with etracker on this website. This cookie ensures that no usage data from your browser will be processed by etracker in the future. Please note: If you delete your cookies, the opt-out cookie will also be deleted and you may have to reactivate it. For more information on how etracker handles Personal Data, please refer to etracker's privacy policy: https://www.etracker.com/en/data-privacy/.

7. Job applications

If you apply for a job, you will be asked to provide your name, contact information and further application documents so that we can contact you and process your application. The processing of Personal Data for the purpose of deciding on the establishment of an employment relationship is based on your voluntary consent. Application documents will be kept for a period of 6 months after completion of the application process and then deleted, unless storage is required for the documentation of other operations (for example, subsequent recruitment). If we reject your application but would like to keep the application documents in our pool of interested parties for a longer period of up to one year in order to consider you for future job advertisements, we will contact you in advance and ask for your consent. Personal Data will then only be stored with your prior express consent by e-mail or post.