ERPROOTS Privacy Policy
This privacy policy will explain how our organization uses the personal data we collect from you when you use our website.
For residents (data subjects) of the European Union, when we collect and use personal data (information) about you, we may be subject to the General Data Protection Regulation (‘GDPR’) of the European Union and be responsible as a ‘data controller’ for such personal data.
For residents (consumers) of the United States, when we collect and use personal information about you, we may be subject to the California Consumer Protection Act (CCPA) and responsible as a ‘business’ or ‘service provider’ for such personal data.
Please note: all information in this privacy notice is applicable to you unless otherwise indicated based on your residency status. If you are a resident of the European Union, references to GDPR will be applicable to you. If you are a resident of the United States, references to the CCPA will be applicable to you.
We are required under data protection legislation to notify you of the information contained in this privacy notice. It is important that you read this notice, together with any additional and more specific information we may provide you on various occasions when we are collecting or processing personal data on certain specific websites, products or applications, events and initiatives so that you are aware of how and the purpose for which we are using such information. (We issue a different privacy statement which applies where there is an employment relationship between ERPROOTS and its employees.)
We may collect different kinds of personal information in a number of different ways and use it for a number of different purposes:
To ensure access to our website and online services.
In general, you can visit ERPROOTS on the World Wide Web without telling us who you are. Our web servers or Affiliates who provide analytics and performance enhancement services may collect:
This information is aggregated to measure the number of visits, average time spent on our website, pages viewed and similar information. ERPROOTS uses this information to measure the site usage, improve content and to ensure safety and security as well as enhance performance and user experience of the website. In a few situations, you are required to register to access a reserved area of the website: in these cases, we will also collect your username and the password.
We may also obtain data from third parties including:
ERPROOTS uses cookies (small text files placed on your device) and similar technologies to facilitate proper functioning of our websites and to help collect data: please read here our full cookie policy. Please note that our websites may include links to websites of third parties whose privacy practices differ from those of ERPROOTS; if you provide personal data to any of those websites, your data is governed by their privacy statements.
Under the GDPR, the lawful basis for this processing is our legitimate interest in enabling and improving our website and online services or consent, where requested and obtained.
To answer your queries, support and contact requests.
If you contact us with queries, requests for more information about initiatives or products or other generic support inquiries, we will need to collect information about you such as:
For information about managing your contact data, email subscriptions and promotional communications, please use the form at the bottom of this page or contact our Data Protection Officers or Chief Privacy Officer (see contact details below).
Under the GDPR the lawful basis for this processing may be for the performance of a contract with you or to take steps at your request before entering into a contract with you, or for our legitimate interests in behaving as a responsible organization in dealing with these matters, or consent, where requested and obtained.
To administer events and activities
ERPROOTS frequently organizes events and initiatives, either free to join or by invitation only; in these cases, this privacy statement applies to both participants and speakers, together with any other supplementary information that is provided in relation with each event. To allow participants to join the events (including communications pre and post event), we are required to collect and process a limited amount of information, such as:
This material can be used later by ERPROOTS for further compatible purposes if you don’t object to it. In the course of these events we may collect your personal data and contact you again in order to receive feedback and provide further commercial information about ERPROOTS; this will be done with your consent, when necessary.
We may also obtain data from third parties including:
Under the GDPR the lawful basis for this processing is our legitimate interest in organizing and running such events or consent, where requested and obtained.
Where ERPROOTS is in a contractual relationship with you (other than an employment relationship), your employer, your company or we are taking steps to enter into such a contractual relationship, we will need to process your personal information, usually limited to name, business contact details and job title in order to enter into and/or fulfill the obligations arising from the same contract, such as providing you or your employer or company with the services you have requested or make use of the services that you or your employer or company are offering to us. We will also process such personal data for ancillary tasks related to our daily business activities, such as accounting, auditing, reporting (to regulators and authorities) and to comply with applicable regulations.
Under the GDPR and depending on the processing activity, the lawful bases for this processing may be for the performance of a contract with you or to take steps at your request before entering into a contract with you, our legitimate interest in providing services to your company or employer, or legal obligation.
ERPROOTS has a strong interest in promoting its brand, service, products, initiatives and values. We may send you marketing communications through different channels, such as email, texts, phone calls or regular mail; to do so, we might use your contact details which were previously collected in the context of an event, a query sent by you or through the navigation on our websites. We may also obtain your personal information from third parties, such as business partners, data brokers, social networks, publicly available sources and marketing companies. In such cases, we will also comply with any additional restrictions imposed by the source of the data. If required by applicable legislation, we will ask for your consent separately before sending any marketing communications. You can opt-out of receiving such communications at any time using the form at the bottom of this page, writing to our Data Protection Officers or Chief Privacy Officer (see section below) or by any other given method provided from time to time (for example: unsubscribe link included at the bottom of emails).
From time to time, we may use your name, quotes, pictures or videos to promote and amplify ERPROOTS brand and activities. In any such case, you will receive appropriate additional information about the usage of your personal data.
Under the GDPR the lawful basis for this processing are ERPROOTS legitimate interests in promoting its brand, service, products, initiatives and values, or consent, where requested and obtained.
If you do not provide certain information when requested, it may delay or prevent us from administering a service you requested from us, replying to your queries and/or letting you join our initiatives.
We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason that is compatible with the original purpose and applicable law. If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.
Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.
We may share your data with third parties, including third-party service providers and other entities in the ERPROOTS Group. Please note, ERPROOTS has not in the past, nor does it currently, under any circumstances sell your personal data from or to any third party. Further, ERPROOTS does not use your personal data for any other purpose (as outlined below) unless required to fulfill a legitimate business purpose. Primarily, your data will be stored in the country in which you are located, India and the United States, but it may be stored in other countries on a need basis. We may share your information as described herein with third parties and ERPROOTS Group entities located in certain territories whose laws may not provide a level of protection equivalent to that of the national jurisdiction you are located in; in such cases your data may be accessible to law enforcement and national security authorities of that jurisdiction where such access is permitted by local law.
We may share your personal data with third parties where required by law, where it is necessary for one of the activities mentioned above or where we have another legitimate legal basis in doing so. We require third parties to respect the security of your data and to treat it in accordance with the law. Where required by the law, we will request your consent before transferring data to third parties which are not part of the ERPROOTS Group.
“Third parties” includes third-party service providers (including contractors and designated agents) and other entities within our group. The following activities may be carried out by third-party service providers: hosting and other internet services, data storage and analytics, marketing research and campaign management, event organizers and caterers. All our third-party service providers are required to take appropriate security measures to protect your personal data in line with our policies. We do not allow our third-party service providers to use your personal data for their own purposes. We only permit them to process your personal data for specified purposes and in accordance with our instructions. We may also need to share your personal data with regulators in order to comply with the law.
We may share your personal data with other entities in the ERPROOTS Group as part of our regular reporting activities on company performance, in the context of a business reorganization or group restructuring exercise, for system maintenance support and hosting of data and when it is required to do so in order to perform one of the activities listed above (see “How we will use information about you”). Other entities in the ERPROOTS Group are required to take appropriate security measures to protect your personal data in line with our policies.
We may transfer the personal data we collect about you to one or more countries outside the EU/EEA, including India, in order to perform one of the activities listed above (see “How we will use information about you”). Where there isn’t an adequacy decision by the European Commission in respect of those countries – meaning that these are not deemed to provide an adequate level of protection for your personal data – we have put in place the appropriate measures to ensure that your personal data will be secure. These measures include Data Transfer Agreements based on the European Commission’s Standard Contractual Clauses. If you require further information about these protective measures, you can request it from our Data Protection Officers (see contacts below).
We have put in place appropriate technical, organizational and security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.
We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so.
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. Details of retention periods for different aspects of your personal data are available in our retention policy upon request from our Data Protection Officers (see contact details below). To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.
In some circumstances we may anonymize your personal data so that it can no longer be associated with you, in which case we may use such information without further notice to you.
Depending on the jurisdiction you are located in, you may have certain legal rights such as the ability to withdraw your consent, the right to access personal data we hold about you (subject to restrictions recognized in applicable laws) and the right to have personal data rectified where you have demonstrated the inaccuracy or incompleteness of the data we hold about you. If you wish to exercise any rights which may apply to you under your local law or have a privacy concern, a complaint or a question regarding this privacy statement, please direct it to the Chief Privacy Officer of ERPROOTS at info@erproots.com or contact us through the form at www.erproots.com/contact-us
For the purposes of your data processed under this statement, the controller (under GDPR and other laws which use a similar concept) or business/service provider (under CCPA) for the data processing of your personal information collected through our websites is ERPROOTS, 4th Floor, N Towers, 25 Tex Park Road, Nehru Nagar West, Kalapatti Main Road, Sitra, Coimbatore, Tamilnadu,India – 641 014. For all the other purposes indicated above, the controller (under GDPR and other laws which use a similar concept) or business/service provider (under CCPA) is the same entity unless indicated otherwise in other privacy statements communicated in each situation.
If the processing of your personal information is subject to the EU General Data Protection Regulation (“GDPR“) (or any United Kingdom replacement legislation), you are entitled to the rights listed below.
It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.
Under certain circumstances, by law you have the right to:
If the processing of your personal information is subject to the CCPA, you are entitled to the rights listed below.
It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.
Under certain circumstances, by law you have the right to:
If you exercise one of the above rights, we may need to request specific information from you to help us confirm your identity and that you are entitled to make such a request. This is to ensure that personal data is not disclosed to any person who has no right to receive it.
In the limited circumstances where you may have provided your consent to the collection, processing and transfer of your personal data for a specific purpose, you have the right to withdraw your consent for that specific processing at any time. To withdraw your consent, please contact our Data Protection Officers (see contacts below). Once we have received notification that you have withdrawn your consent, we will no longer process your information for the purpose or purposes you originally agreed to, unless we have another legal basis for doing so.
We have appointed Data Protection Officers (DPOs) to oversee compliance of ERPROOTS with applicable data protection laws and with this privacy notice. If you have any questions about this privacy notice or how we handle your personal data, please contact the DPO by email info@erproots.com.
If you’re not satisfied of how we process your personal data and the processing of your personal information is subject to the EU GDPR, you can lodge a complaint at any time to our Data Protection Officers or to the relevant data protection supervisory Authority; you can find the complete list of the European Authorities here
We reserve the right to update this privacy notice at any time, and we will provide you with a new privacy notice when we make any substantial updates. We may also notify you in other ways from time to time about the processing of your personal data.
