Efkon India

great-place-to-work-1

Privacy Policy

I. Name and Contact Details of the Data Fiduciary

The entity responsible for processing your personal data under the provisions of the Digital Personal Data Protection Act, 2023 (“DPDP Act”) is:

EFKON India Private Limited

1405–1408, ‘Supremus’, E – Wing,
I Think Techno Campus, Kanjur Marg (East),
Mumbai – 400042, Maharashtra, India

Phone: +91 22 4294 9494
Email: frontdesk@efkonindia.com
Website: https://efkonindia.com

For questions regarding the processing of your personal data or data protection in general, please contact our Grievance Officer (see Section XI).

II. General Information on Data Processing

1. Legal Basis for Processing

We process your personal data exclusively for lawful purposes – either on the basis of your consent or within the scope of certain legitimate uses under the DPDP Act.

Your consent is:

  • free

  • specific

  • informed

  • unconditional

  • provided by clear affirmative action

It relates only to the personal data necessary for the specified purpose.

2. Notice

Each request for your consent is preceded by or accompanied by a notice informing you of:

  • The personal data to be processed and the purpose of processing

  • How you may exercise your rights

  • How you may make a complaint to the Data Protection Board of India

You may access this notice and consent requests in English or any language listed in the Eighth Schedule of the Constitution of India.

3. Data Erasure and Retention Periods

We will erase your personal data:

  • when you withdraw consent, or

  • when the purpose of processing is no longer being served

— whichever occurs earlier — unless retention is required by law.

We will also ensure that our Data Processors delete such data accordingly.

III. Provision of the Website and Creation of Log Files

1. Scope of Data Processing

Each time our website is accessed, our system automatically collects the following information:

  • Browser type and version

  • Operating system

  • Internet service provider

  • IP address

  • Date and time of access

  • Websites from which our site was accessed

  • Websites accessed through our website

2. Legal Basis and Purpose

The temporary storage of IP address and log files is carried out on the basis of legitimate uses under Section 7 of the DPDP Act, as you voluntarily provide these data by accessing our website.

Processing is technically necessary to:

  • deliver the website to your device

  • ensure secure operation of our IT systems

No processing for marketing purposes takes place.

3. Retention Period

  • IP addresses are stored only for the duration of the session.

  • Log file data are deleted after a maximum of 180 days.

IV. Use of Cookies

1. Technically Necessary Cookies

Technically necessary cookies are required for website operation.

Processing is carried out on the basis of legitimate uses under Section 7 DPDP Act.

These cookies do not store personal data beyond what is required for technical operation.

2. Analytics Cookies

For analysing user behaviour, we may use analytics cookies.

We obtain your express consent before processing.

The following data may be collected:

  • Search terms entered

  • Frequency of page views

  • Use of website features

These data are pseudonymised and not combined with other personal data.

3. Third-Party Cookies

We may use cookies from third-party providers (e.g., Google LLC) for analytics or marketing purposes.

We obtain your active consent for this.

Such providers may process data outside India (see Section VIII).

4. Withdrawal of Cookie Consent

You may withdraw your consent to cookies at any time through our cookie settings.

You may also disable cookies in your browser settings, although some website features may not function properly.

V. Newsletter

1. Scope of Data Processing

Users may subscribe to our newsletter. During registration we collect:

  • Email address

  • IP address

  • Date and time of registration

2. Legal Basis

Processing is based on your explicit consent.

Your email address is used only for sending the newsletter.

Other data are used to prevent misuse.

3. Retention Period

Email addresses remain stored as long as the subscription is active.

4. Withdrawal

You may unsubscribe anytime using the unsubscribe link in each newsletter.

VI. Contact Form and Email Contact

1. Scope of Data Processing

If you contact us via a form or email, we store:

  • Name

  • Email address

  • Message content

  • Date and time of enquiry

2. Legal Basis

Processing occurs under legitimate uses (Section 7 DPDP Act) since you voluntarily provide the information.

Data is used solely to respond to your enquiry.

3. Retention Period

Data is deleted once the enquiry has been resolved.

4. Withdrawal

You may request deletion of your data at any time.

VII. Disclosure to Data Processors

We may disclose personal data to third-party service providers (Data Processors) acting on our behalf.

These processors are engaged only under valid contractual agreements requiring them to implement appropriate safeguards to protect personal data.

VIII. Processing of Personal Data Outside India

The Government of India may restrict transfers of personal data to certain countries.

Where data processing outside India occurs via third-party services, it will only occur:

  • with your express consent

  • in compliance with applicable laws.

IX. Processing of Children’s Data

Our website is not directed to individuals under 18 years of age.

If we become aware that personal data of a child has been collected without parental consent, it will be deleted immediately.

X. Grievance Officer and Complaints

For exercising your rights or filing complaints regarding personal data processing, please contact:

EFKON India Private Limited

1405–1408, ‘Supremus’, E Wing
I-Think Techno Campus
Kanjurmarg (East)
Mumbai – 400042, India

Phone: +91 22 4294 9494
Email: frontdesk@efkonindia.com

XI. Your Rights as a Data Principal

You have the following rights under the DPDP Act:

1. Right to Access Information

You may request a summary of your personal data being processed.

2. Right to Correction and Erasure

You may request correction, completion, updating, or deletion of personal data.

3. Right to Withdraw Consent

You may withdraw consent at any time.

Withdrawal does not affect lawful processing conducted before withdrawal.

4. Right to Nominate

You may nominate another individual to exercise your rights in case of death or incapacity.

5. Right to Complain

You may file a complaint with the Data Protection Board of India after exhausting internal grievance procedures.

XII. Personal Data Breach

We implement safeguards to prevent breaches.

In case of a breach, we will notify:

  • the Data Protection Board of India

  • affected users

as required by law.

XIII. Security of Processing

We implement technical and organisational measures to protect personal data from:

  • unauthorised access

  • misuse

  • loss

  • disclosure

XIV. Updates to this Privacy Policy

This policy may be updated periodically to reflect:

  • legal changes

  • new services

  • new website functionality

We recommend reviewing this policy periodically.