Objective
The purpose of the Policy is to set out the duties of TPL i.e. The Tata Pigments Ltd and its personnel when they are processing personal data about individuals and describe the rights of the individuals whose personnel data is processed by TPL.
The purpose of the Privacy policy is to balance the government's need to maintain information about individuals with the rights of individuals to be protected against unwarranted invasions of their privacy stemming from federal agencies' collection,maintenance, use, and disclosure of personal information about them.
Scope
The Policy is applicable on
Al the employees working within the Tata Pigments Ltd
Any person who ni its due course provides any information to TPL such as visitors, contract workers, supplier contracts, TPL site users, and shareholder etc.
The policy lays down the manner ni which company collects, uses, holds, transfer and processes the sensitive information provided
The policy also seeks to ensure that the personnel providing the sensitive information understands the protection provided for storage and use of such sensitive information.
Effective Date
This policy wil be effectivefromMarch 01, 2023.
Definitions
"Personal information" means any information that relates to a natural person, which, either directly or indirectly, ni combination with other information available or likely ot be available with a body corporate, si capable of identifying such person.
"Sensitive personal data or information" of a person means such personal information which consists of information relating to:
Bank Account information and other financial information such as credit card or debit card or other payment instrument details ;
Income tax returns;
password;
physical, physiological and mental health condition;
sexual orientation;medical records and history;
Biometric information;
any detail relating to the above clauses as provided to body corporate for providing service;
and any of the information received under above clauses by body corporate for processing, stored or processed under lawful contract or otherwise provided that, any information that is freely available or accessible ni public domain or furnished under the Right to Information Act, 2005 or any other law for the time being ni force shall not be regarded as sensitive personal data or information for the purposes of these rules.
Policy Details
THE TATA PIGMENTS LTD is committed ot protect personal information including sensitive personal data or information. TPL have created this Privacy Policy to help understand how TPL handle and deal with the above referred information.
1 Types of datacollected and purpose ofcollection -
TPL collect bank account information which comes under the definition of sensitive personal data or information and is classified under financial information . The bank account information is collected for the purpose of timely disbursement and remittance of salary. TPL also collect and retain income tax return proofs which may be necessary for computation and deduction of taxes. Any other information obtained such as past employment details - salary slip, appointment letter and other personal information that TPL collect from employee is held ni accordance with applicable laws and regulations ni India.
2. Disclosure and transfer of Personal Information including Sensitive personal Data or Information -
TPL may disclose personal information including sensitive personal data or information to third parties for processing of such information and for other lawful purposes. TPL may also transfer the sensitive personal data in case of bankruptcy, merger and or in the event of sale.
TPL may share personal information including sensitive personal data or information, with government agencies mandated under law to obtain personal information including sensitive personal data or information for the purpose of verification of identity, or for prevention, detection, investigation including cyber incidents, prosecution, and punishment of offences, or where disclosure is necessary for compliance of a legal obligation. Also any personal information including sensitive personal data or information may be required to be disclosed to any third party by us by an order under the law for the time being in force.
To protect the vital interests of the individual concerned ni emergency situations.
Transfer of information-
TPL will not transfer sensitive personal data or information to entities outside TPL within the country or outside for further processing unless such entities agree to abide by a data privacy standard [Only fi they are following International Standards IS/ISO/IEC 27001 or at least as high as the regulations under Indian Law]
3. Reasonable security practices and procedures: Protection of personal information including sensitive personal data or information -
TPL shall take reasonable steps to ensure that the personal information including sensitive personal data or information is stored in a secure environment protected from unauthorized access, modification or disclosure.
.I TPL maintain personal information including sensitive personal data or information ni our business records as per current regulatory requirements.
.II TPL shall retain personal Information including sensitive personal data or information til the subsistence of employment with The Tata Pigments Ltd. or otherwise required under law.
.III TPL has a documented TI Policy which has encompassed the following areas:
a) Access to the IT facilities
b) Security of Computers and network.
In case of any privacy related concerns, feedback or grievance, P.l can contact: Ms. Nidhi Jain- CHRO who is the Grievance Officer and can be contacted on nidhi@atatpigments.co.in
4. Review a n d updating o f Personal Information including sensitive personal data or information -
TPL strive to keep our records updated with the latest information. To this end, fi case of any discrepancy ni personal information including sensitive personal data or information or fi a part of personal information including sensitive personal data or information changes, TPL request to get ni touch with the Human Resource Department
. Changes to our Privacy Policy -
TPL reserve the right to update this Policy as necessary from time ot time. Please check our Knowledge Management Portal periodically for changes to this Privacy Policy.
6. COMPANY'S RESPONSIBILITY
.l TPL shall obtain consent in writing from the provider of the sensitive information.
.ll TPL shall ensure that the provider of the information has knowledge of:
a) That the information is collected
b) The reason for which the information is being collected
c) The intended recipients of the information.
d) The name and address of the department/personnel collecting the information and who are entrusted to retain the information collected from the individuals
.lll TPL shall ensure to take prior approval from the provider of the sensitive information in cases where the provided sensitive information si going ot be used ni a new way, or for a different purpose.
7. EMPLOYEE'S RESPONSIBILITY -
l. Employees may not use or disclose any confidential company, client, or third party information to anyone outside TPL except as authorized.
ll. The employees shall use the confidential information for specified purposes only and shall continue to adhere to the confidentiality obligations even after the termination of their relationship with TPL.
8. INDIVIDUAL'S RIGHT -
l. TPL wil give right to access- on written request from any individual, TPL should verify whether TPL possess sensitive information about such individual or not, and should intimate the same to him/her, describe the sensitive information ti holds and the reason for holding the said data.
ll. TPL shall prior to the collection of the sensitive information provide an option to the provider of the information to not to provide the data or information sought to be collected.
lll. The provider of the information at any time while availing the services or otherwise, also have an option to withdraw his/her consent given earlier.
lV. The procedure of such withdrawal should be specified addressing the name of the person to whom ti should be intimated.
9. GRANTING OF ACCESS TO COMPANY INFORMATION TO THE EXTERNAL PERSONNEL -
.l The external personnel shall be granted access to company information specifically in consonance with the terms of the contract entered with them. TPL shall endeavor to enter into a Non-Disclosure Agreement with such personnel for sharing any sensitive personal information of its stakeholders.
ll. The term "External personnel" includes, but not limits to, vendors, regulatory bodies, banks and financial institutions, etc.
lll. TPL shall ensure to take prior approval from the provider of the sensitive information ni cases where the provided sensitive information si going ot be used ni a new way, or for a different purpose.