Sensitive Information

We request that you do not send or share with us any sensitive personal information. There may be limited situations where we do request strictly necessary sensitive personal information from you, for example when we are undertaking due diligence, Background verification and compliance checks. We will only process sensitive personal information where we have a lawful basis to do so and in accordance with this privacy policy.

‍Use of your personal information

We may collect, store and use your personal information for the purposes to operate, manage, develop and promote our business and our relationship with the organisation you represent (if any) and related transactions.

Disclosure and international transfer of your personal information

We may disclose your personal information, where reasonably necessary for the various purposes set out above:

• to other members of Altimetrik group of companies;
• to your colleagues within the organisation or customers (in case of Subcon/consultant) that you work with;
• to service providers who host our web services or other information technology systems or otherwise hold or process your information on our behalf, under conditions of confidentiality;
• to business partners, channel partners, service partners, agents, suppliers and sub-contractors for the performance of any contract we enter into with them;
• to our professional advisors (including but not limited to accountants, lawyers or auditors);
• to a person who takes over our business and assets, or relevant parts of them; or
• where we are required by law to disclose.

‍

‍Our data security and retention policies

The security, integrity and confidentiality of your personal information is extremely important to us. We have implemented technical, administrative, and physical security measures that are designed to protect your personal information from unauthorized access, disclosure, use and modification.

We will delete your personal information when we no longer need such personal information, for instance where it is no longer necessary for us to retain your personal information to fulfil the purposes for which we had collected it,  we believe that your personal information that we hold is inaccurate; or in certain cases where you have informed us that you no longer consent to our processing of your personal information.

However there are legal or regulatory requirements which may require us to retain your personal information for a specified period, and in such cases we will retain your personal information for such specified period;

Your rights

‍You have the following rights (subject to applicable local laws) in relation to the personal information that we hold about you:

• Right to access and information: to access your personal information, and some related information, under relevant data protection law;
• Right to rectification: to require any inaccurate personal information to be corrected or deleted;
• Right to object: to object to our use of your personal information for direct marketing purposes at any time and you may have the right to object to our processing of some or all of your personal information;
• Right to erasure: to require us to delete your personal information in certain circumstances;
• Right to restrict: to require us to restrict the processing of your personal information in certain circumstances (when processing is restricted, we can still store your personal information, but may not use it further);
• Right to portability: to obtain from us your personal information, in a structured, commonly used and machine-readable format in certain circumstances;
• Right to withdraw consent: where we are processing your personal information based on your consent to such processing, to withdraw your consent at any time; and
• Right to lodge a complaint: lodge a complaint to your local supervisory authority in your country.

‍

If you wish to exercise any of these rights (subject to applicable local laws), or ask any questions or share any concerns related to this privacy policy or Altimetrik’ s privacy practices, please write us at legal@altimetrik.com/dpo@altimetrik.com.

Contact us

If you have any questions, requests or complaints about our processing of your personal information, please contact us at legal@altimetrik.com/dpo@altimetrik.com.

Changes to this policy

This privacy policy is valid from the time of its publication on the Altimetrik websites, and all previous versions of this privacy policy become invalid as of such time. Any changes we make to this privacy policy in the future will be posted to our website and also available if you contact us by using the details in the section above. Please check back frequently to see any changes.

Country specific terms

In addition to the above global privacy policy, the following country specific terms will also apply if you are located in one of the following countries (regardless of whether the processing takes place in such countries or not).

USA and Canada

Our processing of your personal data is governing by applicable State data protection laws in the USA including California Consumer Privacy Act (CCPA) or Personal Information Protection and Electronic Documents Act (PIPEDA) in Canada, depending on your location.

Your data will be processed based on legal obligations, legal compliance, and legitimate interests for processing your data.

We retain your data for the period required by applicable law. We implement technical and organizational measures to protect your data. We will respond to your request within 10 days to 90 days from the date of request in accordance with applicable data protection laws.

India

We are responsible for complying with all applicable data protection laws, including but not limited to, Digital Personal Data Protection Act 2023, Information Technology Act 2000 and any rules thereunder.

The information shared by you including your personal information can be shared without obtaining your prior consent, with Government agencies mandated under the law to obtain personal information including personal information for the purpose of verification of identity, or for prevention, detection, investigation including cyber incidents, prosecution and punishment of offences.

Transfer of personal information:

We may transfer your personal information to any other body corporate or a person located in India or outside India, that ensures the same level of data protection that is adhered to by them as provided under the local law and regulations.

Such transfer may only take place if it is necessary for the performance of the lawful contract between the body corporate or any person on its behalf and provider of information or where you have consented to such transfer.

Provided, that we shall not be responsible for the authenticity of the personal information provided by you.

Your duty as provider of information:

• You shall comply with all applicable laws for the time being in force while exercising rights under the provisions of local laws or this privacy policy.
• You shall ensure not to impersonate another person while providing personal information including sensitive personal information for a specified purpose.
• You shall not suppress any material information while providing personal information including sensitive personal information for any document, unique identifier, proof of identity or proof of address.
• You shall only furnish such information as is verifiably authentic while exercising the right to correction or erasure.

Your additional rights:

• You have the right to grievance redressal in relation to your complaint about our performance of obligations under this privacy policy.
• You have the right to nominate any other individual, who shall exercise the rights given under this privacy policy on your behalf in the event of death or incapacity.
• You have the right to obtain a summary of personal information which is being processed and the processing activities undertaken with respect to such personal data.
• You have the right to know the details of recipients with whom your personal information has been shared.

Singapore

Our processing of your personal data is governing by Personal Data Protection Act (PDPA).

Accuracy of Personal Data:

We will take reasonable steps to ensure that the personal information we collect about you is accurate, complete and kept up to date. It is important that you update us of any changes to your personal information.

Withdrawal of Consent

If you wish to withdraw consent, you should give us reasonable advance notice.

Exercising Your Rights

You may write to us to know how we are using or disclosing your personal information. We will respond to your request as soon as possible, or within 30 days from the date we receive your request. If we are unable to do so within the 30 days, we will let you know and give you an estimate of how much longer we require. If you find that the personal information we hold about you is inaccurate, incomplete or not up-to-date you may ask us to correct such information. Where we are satisfied on reasonable grounds that a correction should be made, we will correct such information as soon as possible, or within 30 days from the date we receive your request.

‍EU and UK

Altimetrik is committed to protecting your personal data and this policy outlines how we collect, use, store, and share your data under GDPR/UK GDPR.

Lawful basis for processing

We will only process your personal information as necessary so that we can pursue the purposes described in this privacy policy and where we have a legal basis for such processing. Where our lawful basis for processing is that such processing is necessary to pursue our legitimate interests, we will only process your personal information where we have concluded that our processing does not prejudice you or your privacy in a way that would override our legitimate interest. In exceptional circumstances we may also be required by law to disclose or otherwise process your personal information.

For certain processing, if we rely on your consent, such consent will be clear, freely given, genuine and you will be able to withdraw your consent at any time.

Data Transfers

If you are dealing with us within the European Economic Area or the UK, you should be aware that this may include transfers to countries outside the European Economic Area and the UK, which have not been determined by the European Commission or the UK to have an adequate level of data protection. In those cases, where we transfer your personal information to other members of Altimetrik group, our service providers or partners, we will ensure that our arrangements with them are governed by relevant legal mechanisms and safeguards including data transfer agreements, designed to ensure that your personal information is protected and in compliance with applicable law.

Withdrawal of Consent

Where our processing of your personal data is based on your consent, you have the right to withdraw that consent at any time. Please note that withdrawal of consent does not affect the lawfulness of processing carried out prior to your withdrawal. To withdraw your consent, please contact us with reasonable advance notice.

Your Rights Under the GDPR

Under the GDPR, you have the following rights regarding your personal data:

• Right of Access: You have the right to request access to the personal data we hold about you and to obtain information on how it is being processed.
• Right to Rectification: If you believe that the personal data we hold about you is inaccurate or incomplete, you may request that we correct or update it.
• Right to Erasure: In certain circumstances, you may request that we delete your personal data.
• Right to Restrict Processing: You may request that we restrict the processing of your personal data in certain situations.
• Right to Data Portability: Where applicable, you may request a copy of your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: You may object to the processing of your personal data where we rely on legitimate interests as our legal basis.

We will respond to your request without undue delay and in any case within one month of receipt. If we are unable to meet this timeframe, we will inform you of the reason and the expected timeframe for our response.

Mexico / Uruguay

Our processing of your personal data is governing by the Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP) in Mexico and Unidad Reguladora y de Control de Datos Personales (URCDP) in Uruguay, depending on your location.

Your data is processed based on contractual necessity, or legal obligations, legal compliance, and legitimate interests for processing your data.

If we process the data based on your consent, you may withdraw your consent at any time by contacting legal@altimetrik.com.

Your data will also be retained for the duration of the contractual relationship and for the period required by applicable law thereafter. We apply technical, administrative, and physical safeguards to ensure the confidentiality, integrity, and availability of your data.

You have the right to, access your personal data, rectify inaccurate or outdated information, cancel your data when no longer needed or unlawfully held and object to the processing of your data for specific purposes. We will respond to your request within 5 business days/20 business days depends upon your location.

Switzerland 

Our processing of your personal data is governed by the Swiss Federal Act on Data Protection (FADP) and its implementing ordinances, as amended from time to time.

Your personal data is processed where necessary for the performance of a contract, compliance with legal obligations, the pursuit of our legitimate interests, or, where required under applicable law, based on your consent.

Where processing is based on your consent, you may withdraw your consent at any time by contacting legal@altimetrik.com. The withdrawal of consent shall not affect the lawfulness of processing carried out prior to such withdrawal.

Your personal data will be retained for the duration of the contractual relationship and thereafter for such periods as required or permitted by applicable law. We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, alteration, disclosure, or destruction.

Subject to the conditions and limitations set out under the FADP, you have the right to request access to your personal data, request correction of inaccurate personal data, request information regarding the processing of your personal data, and, where applicable, object to or request the restriction of certain processing activities. You may also request the deletion of your personal data where retention is no longer required by law or for legitimate business purposes.

Requests concerning your personal data may be submitted to legal@altimetrik.com. We will respond to your request within the timeframes required under applicable Swiss data protection laws.