PRIVACY POLICY ‐ Effective date: 11 December 2018 ‐ Last updated: 01 December 2020
Respecting your privacy is our engagement. This Privacy Charter explains how we use any personal information we collect about you when you use this mobile app.
What is personal data?
Personal data relates to a living individual who can be identified from that data. Identification can be by the information alone or in conjunction with any other information in the data controller’s possession or likely to come into such possession.
Who is responsible for the processing of your personal data?
XSYSYS Technologies Pvt Ltd
How do we process your personal data?
Privacy is a fundamental right. The CARE platform is designed to minimize the collection and use of your data and provide transparency and control over your information. The CARE platform complies with its obligation under The EU General Data Protection Regulation (GDPR).
- By keeping personal data up to date
- By storing and destroying it securely
- By not collecting or retaining data that is not absolutely necessary
- By protecting personal data from loss, misuse, unauthorized access and disclosure
- By ensuring that appropriate technical measures are in place to protect the personal data at all times
What information do we collect about you?
The app collects only personal information that is necessary for the working of CARE.
- Data related to identification like name, email, phone number and password
- Data linked to the registration of observations
- Audio-visual data captured via the app to support an observation
- Data that is linked to a quiz you took in the quiz module
- Data linked to videos you watched in the learn module
- Data linked to the sending of notifications
- Data linked to the sending of the download URL and activation code
- Data linked to the device name while logging information related to the devices used in case of data synchronisation errors
When do we collect your personal data?
- When you are added as a user
- When you login into the mobile app
- When you register an observation
- When you take a quiz
- When you watch a video in the learn module
- When you give us your consent to store your personal data when sending the completed Contact us form.
For what purpose do we process your personal data?
We do this for:
- The management of the observation registered by you
- The visualization of the data captured in the mobile app in reports
- The sending of notifications
- The creation of graphs for presentations
- Knowing which video is most shown in the learn module
- Being able to reward your quiz score
- To communicate with you about our products and services
How do we protect your personal data?
We have put in place robust measures regarding the security of information we collect and store about you and will use our reasonable endeavours to protect your personal data from unauthorised access to or unauthorised alterations, disclosures and destructions. In particular:
- We use commercially reasonable security measures as encryption, hashing, salting, firewalls and Secure Socket Layer Software (SSL) or Hypertext Transfer Protocol Secure (HTTPS) to protect personal data
- We review our information collection, storage and processing practises, including physical security measures, to guard against unauthorised access to systems
- We restrict access to personal information to our employees who are subject to strict contractual confidentiality obligations and may be disciplined or terminated if they fail to meet these obligations
- We have multiple authentication and access control measures to ensure data is only accessed by authorised personnel
Privacy Rights specific to European Union Residents
The processing of personal data is governed by The EU General Data Protection Regulation (GDPR).
If you are a resident in the European Economic Area, you may have the following rights:
- The right to be informed. You are entitled to be informed of the use of your personal data. This privacy policy provides such information to you
- The right of access. You have the right to request a copy of your personal data which we hold about you
- The right of correction. You have the right to request correction or changes of your personal data if it is found to be inaccurate or out of date
- The right to be forgotten. You have the right to request us, at any time, to delete your personal data from our servers and to erase your personal data when it is no longer necessary for us to retain such data
- The right to object (opt-out). You have the right to opt-out of certain uses of your personal data at any time
- The right to data portability. You have the right to a ‘portable’ copy of your personal data that you have submitted to us. Generally, this means your right to request that we move, copy or transmit your personal data stored on our servers / IT environment to another service provider’s servers / IT environment
- The right to refuse to be subjected to automated decision making, including profiling. You have the right not to be subject to a decision and insist on human intervention if the decision is based on automated processing and produces a legal effect or a similarly significant effect on you
- The right to lodge a complaint with a supervisory authority.
If you need further assistance regarding your rights, contact us using the contact information below. For your protection, we may need to verify your identity before responding to your request. We may respond to your request by letter, email, telephone or any other suitable method.
Direct Marketing
- We do not sell your data to third parties for marketing purposes
- We are not analysing your click behaviour for marketing purposes
Automated Decision Making
The CARE platform does not use Automated Decision Making
What is the legal basis for processing your personal data?
The CARE platform will process your personal data only in the following cases:
- When we have asked for your consent and you have provided us your consent
- When the processing is necessary for the execution of a contract or to take steps to enter into a contract
- When we are legally obliged
To whom do we pass on your personal data?
Your personal data is treated as strictly confidential and will not be shared with third parties.
- We do not sell your data to third parties
- The people who work on the CARE platform have only access to your personal data when it is absolutely necessary for operational and service purposes within the executing of their task and after having obtained your consent first
- All testing and production activities are happening on anonymised and pseudonymised data.
Access to your information and correction
You have the following rights with respect to your personal data:
- The right to request a copy of your personal data we hold about you
- The right to request that XSYSYS Technologies Pvt Ltd corrects any personal data if it’s found to inaccurate or out of date
- The right to request your personal data is erased where it is no longer necessary for XSYSYS Technologies Pvt Ltd to retain such data
- The right, where there is a dispute in relation to the accuracy or the processing of your personal data, to request a restriction is placed on further processing
- The right to lodge a complaint with the Information Commissioners Office
We want to make sure that your personal information is accurate and up to date. You may ask us to correct or remove information you think is inaccurate. We will change, modify or complete your personal data if this data is incorrect, incomplete or irrelevant. This can be asked in writing with to XSYSYS Technologies Pvt Ltd.
Cookies
Cookies are text files placed on your computer to collect standard internet log information and visitors behavior information. This information is used to track visitor use of the website and to complete statistical reports on website activities.
We are not using cookies on the website that allows you to download iXnap.
How long are your personal data saved?
We keep your personal data for no longer than reasonably necessary.
Personal data used or collected on the device while registering an observation will never be stored longer than necessary for processing it and synchronizing it with the CARE platform.
Your personal data that is stored on the CARE platform will be stored as long as it is required for the intended purpose.
What if there are modifications to this charter?
We keep the privacy charter under regular review and we will place and indicate any updates on this menu page.
Any update to this privacy charter will be updated at the next login into the mobile app. In that way, you will always have the latest privacy charter on your device.
Contact
Please contact us if you have any question about this privacy charter or information we hold about you.
By email: info@xsysys.com
Or write to us at:
XSYSYS Technologies Pvt LtdThe CARE Team
#144, 10th Road, KIADB IT Park
Arebinnamangala, Jala Hobli
Bangalore 562149
Karnataka
India