HOD will handle Personal Data as per the following principles. HOD ensures that its business partners and vendors comply with the principles of this Policy and comply with the regulatory standards through appropriate contractual agreements.· Lawfulness of Processing
HOD collects, stores, processes, uses, transfers, analyzes, or otherwise handles Data as per applicable legal requirements for legitimate business or compliance purposes or if individuals have provided consent to the Processing.· Transparency
By the applicable legal requirements, HOD will provide information to individuals that explain the scope and purpose of Processing, and whom to contact to seek clarifications about privacy or data protection.· Security and Confidentiality
HOD aims to protect the security and confidentiality of individuals’ Personal Data and implement physical, technical, and organizational measures against accidental, unlawful, or unauthorized destruction, loss, alteration, disclosure, or access. HOD ensures measures are appropriate to the risks represented by the Processing it carries out and the nature of those Personal Data.
Under the applicable legal requirements, HOD ensures its compliance to deploy all required measures to help data subjects exercise their rights granted.
HOD observes retention policies and procedures so that it deletes Personal Data after a reasonable time and the purposes are met. There is an exception in the context of those purposes, it is necessary to keep the Data indefinitely, or the law requires the Data to be kept for a particular time.
HOD has set up a global Privacy Function, which is headed by the Head - Global Privacy Office of HOD. It is tasked with overseeing and implementing privacy and applicable data protection requirements.
HOD may update this Policy from time to time and without prior notice in law or privacy practices.