- The responsible use of personal data is a core value at Sava, and we fully respect extant privacy laws and regulations. We are responsible for the processing of your Personal Information as we decide why and how it is processed, thereby acting as the data controller of such Personal Information.
Privacy policies of other websites
- The following Policy discloses our information gathering and dissemination practices for this website. This website may contain links to other sites. Sava is not responsible for the privacy practices or the content of such other websites.
- You may also be asked to refer to additional privacy policies or separate data privacy notices on our country specific website/s (if any) if you reside in a certain location or where you use certain applications or websites not covered under this Policy. Wherever required, we will also present you with specific privacy notices for the purposes of activities not covered under this policy which govern collection and/or disclosure of Personal Information submitted by users, if any.
Personal Information from individuals under the age of 18
How we collect and make use of Personal Information
- Our website does not require any form of registration or sign-up to view our products and services. However, depending on how you interact with us, we may collect and process Personal Information, including all or some of the following Personal Information about you:
- Information you provide to us voluntarily: Personal Information that you provide to us, such as when using the contact form on our website or addressing any correspondence to us, including your name, email address, other contact details, your place of work, etc.
We process and save the Personal Information provided in the contact request only to process and answer your request regarding our products and services and to get in touch with you.
The legal basis for processing your Personal Information is the fulfilment of our contractual obligations to communicate any relevant queries or concerns about which you have contacted us.
- Information that is collected automatically –
(a) Social Media Listening: We may also collect Personal Information that you made publicly available on public social media platforms (including blogs, forums, engagement pages, etc.), related to Sava and our products.
This activity, called “social media listening”, is based on our legitimate business interests, for example to (i) have a better understanding of how certain key audiences react to the use of Sava products, (ii) have a better understanding of our reputation as well as other market trends, (iii) identify key-stakeholders and to initiate contact with them.
This may include your Personal Information in form of comments, messages, blogs, photos, and videos, although we will take steps to limit this Personal Information to the minimum necessary and keep it for no longer than necessary for the social media listening activity.
If you want to limit further who can see your information, we recommend that you use the privacy settings available to you on such platforms.
(b) Website usage analytics: We may also collect and process information about your visit to this website, including, but not limited to, your IP address and domain name, geographical location, your browser version and operating system, traffic data, location data, web logs and other communication data, the resources that you access, the pages you visit, the website you came from and the searches you perform.
We may use such information to help improve the contents of the site and to compile aggregate statistics about people using our site for our internal usage statistics and market research purposes. In doing this, we may install “cookies” or similar tracking technologies.
Please refer to our Cookies Policy to learn more about what types of cookies we use, the purpose they serve and how you can manage your preferences.
The legal basis for the processing of your Personal Information when we do website analytics is your consent or our legitimate business interests.
(c) Website preferences and security: We may collect certain information about you like your IP address, unique device identifiers like MAC address, computer type, browser type and version, screen resolution, operating system and version. We may also derive your location information from your IP address.
We use this information to secure our websites and network systems and to improve our services by recording your preferences, maintaining service levels, diagnosing, and troubleshooting technical issues.
The legal basis for the processing of your Personal Information is our legitimate business interests.
Further notices highlighting certain uses we wish to make of your Personal Information together with the ability to opt in or out of selected uses may also be provided when we collect Personal Information from you.
We do not usually collect sensitive Personal Information. You are requested to not disclose your sensitive Personal Information to us unless we specifically ask for it.
We may combine, aggregate, or anonymize Personal Information with data we may collect from or about you from other sources, such as public databases, providers of demographic information, joint marketing partners, public social media platforms (data made public by you), and other third parties.
We may use your data for our business purposes, including audits, reviews, monitoring and prevention of fraud, infringement, and other potential misuse of our products and services, and for modifying our services.
Also, we may use your Personal Information:
if we are required to do so because of an applicable law, requests from public and government authorities (including orders of court or government regulations), even outside your country of residence;
if we need to enforce our terms and conditions;
when we believe in good faith that the use of Personal Information is necessary to protect legal rights, the security or integrity of this website;
to protect your safety or the safety of others;
as part of any criminal or other legal investigation or proceeding in your country or in other countries; or,
to the extent reasonably necessary for development of or to proceed with the negotiation or completion of a corporate or commercial transaction or business reorganisation.
Who we may share your Personal Information with
We may also transfer Personal Information to third parties who act on our behalf, for further processing in accordance with the purpose/s for which the information was originally collected or may otherwise be lawfully processed, such as product or services delivery, evaluating the usefulness of our products or services, marketing, advertising, data management, or technical support.
our personnel (including employees, departments, or other companies of the Sava group);
our IT systems providers, cloud service providers, database providers and consultants;
any third party to whom we assign or novate any of our rights or obligations; and
our advisors and external lawyers in the context of the sale or transfer of any part of our business or its assets.
We may also disclose your Personal Information to a third party if we are required to do so under the applicable law, requests from public and government authorities (including orders of court or government regulations), even outside your country of residence; if we need to enforce our terms and conditions; when we believe in good faith that the disclosure is necessary to protect legal rights, the security or integrity of this website; to protect your safety or the safety of others; as part of any criminal or other legal investigation or proceeding in your country or in other countries; or to third parties, advisors, and other entities to the extent reasonably necessary for development of or to proceed with the negotiation or completion of a corporate or commercial transaction.
Your Personal Information may also be processed, accessed, or stored in countries outside India, in which Sava, its affiliates or subsidiaries maintain facilities, and by using this site, you consent to any such transfer of information outside of your country. Such countries may offer a different level, including a lower level, of protection of Personal Information. If we transfer your Personal Information to other jurisdictions, we will endeavour to protect your Personal Information by applying the level of protection required under applicable data privacy laws by implementing adequate technical and organisational measures. In the event that your Personal Information is transferred to a service provider based in a third country and processed there, we will endeavour to ensure the protection of your Personal Information by means of appropriate data protection clauses or another method in accordance with applicable law.
- Our retention periods for Personal Information are based on business needs and legal requirements. We will retain your Personal Information for as long as necessary to fulfil the purpose for which it was collected, or to comply with legal or regulatory requirements, or any other permissible, related purpose.
- When we deem that Personal Information is no longer needed, we either irreversibly anonymise the information (and we may further retain and use the anonymised information) or securely destroy the information.
Security and protection of your Personal Information
No data transmission over the Internet or website can be guaranteed to be secure from intrusion. We have implemented appropriate technical and organisational measures designed to provide an adequate level of security and confidentiality to your Personal Information.
The purpose of these measures is to protect Personal Information, in accordance with data protection legislative requirements, against accidental or unlawful destruction or alteration, accidental loss, unauthorized disclosure, or access and against other unlawful forms of processing.
While we strive to protect your Personal Information at all times, we cannot guarantee its absolute security and shall not be liable for any breach of security by an outside party, including where an unauthorized access, modification, destruction or disclosure of your Personal Information or data is attributable to any acts of an outside party, or any breach of security, virus and data protection protocols at your end or on the computer or system that you use to access our website.
You are responsible for keeping sensitive Personal Information confidential and for complying with any other security procedures that we notify you of.
Your rights and how to exercise them
Whenever we process Personal Information, we take reasonable steps to keep your Personal Information accurate and up to date for the purposes for which the same was collected.
If you have any questions in relation to our use of your Personal Information, you may contact our data protection officer at email@example.com.
Under certain conditions and within the limits set forth in the law, you may exercise the following rights:
to be informed about what Personal Information we have about you and how we process and/or make use of the same;
access or be provided with a copy of your Personal Information held by us and, if you believe that any information relating to you is inaccurate, obsolete, or incomplete, to request its updating or correction;
to request the deletion of your Personal Information that we no longer have a lawful ground to use;
where processing is based on consent, to withdraw your consent or restrict the processing to specific categories (without affecting the lawfulness of the processing before such withdrawal or restriction) – please note that this may impact your experience on the site and the services we are able to offer;
to ask us to transmit the Personal Information you have provided to us and which we still hold to a third party electronically, and
object to any processing based on the legitimate interests ground unless our reasons for undertaking that processing outweigh any prejudice to your data protection rights.
You also have the right to ask us not to process your Personal Information for marketing purposes. Where you do not wish to receive marketing from us, you can decline or withdraw your consent at any time, either by clicking the unsubscribe link in any marketing message received from us, or by contacting our data protection officer at firstname.lastname@example.org.
We will use reasonable endeavours to ensure that your Personal Information held with us is accurate. In order to assist us with this, you should notify us of any changes to the Personal Information that you have provided us by contacting our data protection officer at email@example.com. Please note that it is your responsibility to ensure that your Personal Information provided to us is accurate.
If you have any questions, or want to exercise the above rights or you are not satisfied with how we process your Personal Information, you may send an email to our data protection officer at firstname.lastname@example.org with a scan of your identity card for identification purpose, it being understood that we shall only use such data to verify your identity and shall not retain the scan after completion of the verification. When sending us such a scan, you should make sure to redact your picture and national identification number or equivalent on the scan.
Exercise of these rights is subject to certain exemptions to safeguard the public interest and our interests. If you exercise any of these rights, we will check your entitlement and respond in most cases within a month.
If you are not satisfied with our response to any exercise of these rights, you may address our data protection officer at email@example.com], who will look into your concern. You may request us to restrict how we use your information whilst your concern is being looked into.