What we can or cannot do, what we consider possible or impossible, is rarely a function of our true capability it is more likely a function of our beliefs about who we are.
Menu

iTechWorks Technology Solutions Private Limited

Associate Privacy Notice

WHAT IS THE PURPOSE OF THIS NOTICE?

This Associate Privacy Notice (“Notice”) outlines how Personal Information of Associates is collected, managed and Processed by iTechWorks. iTechWorks is committed to handling the Personal Information of its Associates in an appropriate and lawful manner. This Notice sets out the minimum requirements for ensuring that the Personal Information of Associates is collected, used, retained and disclosed in a secure and compliant manner.

WHO IS THIS NOTICE DIRECTED TO?

This Notice applies between you, as a iTechWorks Associate, and the iTechWorks company that employs you, employed you or to which you have made an employment related enquiry, expressed an interest or submitted your Personal Information, resume or job application. If you are unsure as to which iTechWorks company is applicable you, please Contact Us (see Contact Us section below). This Notice applies to all Associates (which includes individual contractors, please see the definitions section below for more detail), with regards to your Personal Information. This Notice does not apply to Personal Information belonging to vendors, clients, or third party suppliers engaged with or by iTechWorks. Those standards are set out in iTechWorks’s Privacy Policy for Third Parties.

WHAT OTHER RULES OR NOTICES APPLY?

In some cases, local laws and regulations that apply to the Processing of Personal Information may be more restrictive than this Notice. Where this is the case, the more restrictive requirements will apply. Where required by local laws, iTechWorks will provide you with additional privacy notices or information. In addition, this Notice may be supplemented from time to time with more specific privacy information or notices, for example when you use particular iTechWorks apps or portals.

CONTACTS

For general information regarding privacy at iTechWorks, please refer to the Privacy Microsite. Any questions, concerns or complaints about the operation of this Notice should be addressed to the relevant talent manager, local HR representative, or recruiter (see Contact Us section below). You can find the most up-todate version of this Notice on the Privacy Microsite or you may contact us if you do not have access to this site.

Effective Date: September, 2018

WHAT ARE WE GOING TO TELL YOU IN THIS NOTICE?

  • How we collect and use your Personal Information
  • Why we need to collect your Personal Information
  • To whom we give your Personal Information
  • International transfer of your Personal Information
  • How we monitor your activities
  • How long we retain your Personal Information
  • How we protect your Personal Information
  • What are your rights

Contact Us

Capitalized terms are defined at the end of this Notice, in the definitions section.

How we collect and use your Personal Information

iTechWorks will only collect Personal Information relating to Associates or, for HR reasons, their nominated contacts, to the extent that it is required for a particular purpose or purposes, in the context of its business.

Read about the purposes in the next section “Why we need to collect your Personal Information”.

iTechWorks may collect any or all of the following types of Personal Information about Associates as part of their employment or engagement:

Personal Information Category Examples of Personal Information we may collect within each category include: Identity information Title, full name, gender, citizenship, nationality, marital status, date of birth, photograph, age, biometric data, passport or other unique ID number, and proof of eligibility to work.

Contact details Home and work address, phone number(s), email address(es), emergency contacts and nominated contacts.

Personal and family details Place of birth, nationality, marital status, dependent information, languages, family composition, passport and visa details, hobbies and interests and other information that an Associate volunteers in their resume, cover letter or by participating in an internal networking or affinity group (e.g. Yammer, etc.) (which could involve the disclosure of data about religion, ethnicity or sexual orientation).

Travel and relocation information Government issued IDs, visa details, passport, work permits, itineraries, preferences, emergency contacts.

Health information Disabilities, sickness absence records, accident reporting, occupational health information, meal preferences and food allergies, blood group data and, if required by certain clients, blood and alcohol drug testing.

Career management and development information

Date of hire, employee category, full-/part-time status, education and qualifications, language ability, references, background checks (including criminal records, directorship and credit checks, where permitted by local law), competency profile, professional experience, membership of professional bodies, and appraisal information.

Government identification details Copies of government issued identification and other government documents.

Compensation and benefits Information Current and past salary details, records of your benefits entitlements and utilization, bank account information.

Employment contract or engagement Information

Presence and absence, work schedules, responsible duties, marketing involvement and initiatives, employee Associate ID, time recording, vacation, maternity/paternity leave, secondments, performance evaluations, training and learning, including certain personality tests, career progression and promotion, complaints, disciplinary proceedings and grievances.

Financial Information Bank account number, tax/social security number, remuneration, bonuses, benefits, expenses, pensions, corporate and personal credit card details, payments to family and dependents and court judgments.

Data related to use of and access to facilities and corporate assets

Time and location of entry and exit, access to restricted zones and security camera footage data related to access to and usage of office equipment and corporate assets including fixed and mobile phones, computer systems, email and the intranet/internet, location identifiers, multifunctional devices, cost recovery systems, document management systems, car service pick up and drop off logs, contact management systems and online databases.

Termination of employment or engagement or retirement Information Notice periods, reasons for leaving, exit interviews and references.

We receive Personal Information about you directly from you as well as from other sources (such as recruitment agencies, job portals, referral programs, iTechWorks applications and portals), including your usage of iTechWorks systems (such as onboarding process, internally developed applications), iTechWorks benefits providers and third parties such as past employers and clients.

Personal Information of others provided by you. In certain situations, including administration of pension and/or retirement plans and health insurance programs and schemes, travel on international assignments, as part of your benefits, and as a contact in emergency, you may provide to us the Personal Information of others (e.g. your next of kin, beneficiaries). It is your responsibility to inform the nominated individual about the processing of their Personal Information for the described purposes and to confirm, if required by law, that they have given their permission.

Why we need to collect your Personal Information

Purposes iTechWorks uses Associate's Personal Information for a variety of purposes. The most common uses of Personal Information are:

  • Determining eligibility for employment, including verification of references and qualifications and other background checks;
  • Administering pay and Associate recognition programs in the nature of rewards, incentives and/or benefits;
  • Providing training and education;
  • Responding to Associate requests;
  • Providing employment references;
  • Investigating complaints and issues;
  • Processing work-related claims such as health or medical insurance;
  • Performance reviews and career development;
  • Relocation and corporate travel;
  • Business continuity management;
  • Security and compliance with law;
  • Developing resource plans to meet business demands.

An extensive list of the purposes for which we are collecting your Personal Information is set out in the table below. Where iTechWorks wishes to use Personal Information for a new purpose that has not been notified to the Associate, where required by law, iTechWorks will notify the Associate of the new purpose.

Legal Basis for Processing

iTechWorks will Process Personal Information relating to Associates where it is required by law, necessary for the performance or administration of your contract of employment, or where it has a legitimate business interest in doing so. iTechWorks will Process Sensitive Personal Information where it is necessary for the purpose of carrying out a legal obligation or exercising your specific rights or those of iTechWorks with respect to your employment with iTechWorks and with your consent when required by local law.

The legal basis of Processing is set out in the table below.

Purpose of Use Legal Reason for Processing

For the hiring process

Recruitment, including assessing suitability for roles, notifying you about opportunities, verifying eligibility to work, obtaining references and screening educational and professional background data prior to and in the course of employment, not including criminal record checks.

  • Necessary for the performance of your employment contract.

    Criminal record checks prior to and in the course of employment.

  • Necessary for the performance of your employment contract where authorized by, and in accordance with, local law.

    For compliance with legislation and policies

    Managing, monitoring and investigating compliance with all relevant legal, regulatory and administrative obligations and responsibilities, whether in the jurisdiction where you are based or elsewhere.

  • Necessary for iTechWorks’s legal obligations as an employer and as a business entity.
  • Necessary for iTechWorks’s legitimate interest for monitoring compliance with regulatory obligations.

    Monitoring and investigating compliance with iTechWorks policies.

  • Necessary for iTechWorks’s legitimate interests to ensure compliance with our policies.

    For administration of your employment

    Personnel administration including maintaining contact information (and emergency contact information) for all Associates.

  • Necessary for the performance of your employment contract.
  • Necessary for iTechWorks’s legal obligations as an employer.
  • In the event of an emergency, to protect the vital interests of the data subject.

    Managing and reporting on disciplinary matters, grievances, queries and complaints, absences, and the termination of employment or engagement (including provision of references).

  • Necessary for iTechWorks’s legitimate interests (to comply with its responsibilities as an employer and to run a successful and efficient business).

    Managing and reporting on sickness absence, occupational health services, maternity and paternity leave, or other type of statutory or contractual leave, the health, safety and wellbeing of workers (including statutory health and safety reporting).

  • Necessary for iTechWorks’s legal obligations as an employer (for statutory entitlements).
  • Necessary for iTechWorks’s legitimate interests (to comply with its responsibilities as an employer and to run a successful and efficient business).

    Monitoring and reporting for equal opportunities, diversity and inclusion purposes.

  • Necessary for iTechWorks’s legal obligations as an employer and to comply with employment law.

iTechWorks - Associate Privacy Notice 2018

  • Necessary for iTechWorks’s legitimate interests (to comply with its responsibilities as an employer and to run a successful, efficient and diverse business).

    Administration of salaries, wages and benefits, management and execution of occupational pension, life, disability and retirement insurance schemes (including for relevant dependents), and the reimbursement of expenses.

  • For statutory entitlements, necessary for iTechWorks’s legal obligations as an employer.
  • Necessary for the performance of your employment contract.

    Management of Associates, including performance reviews, training and career planning, competency and professional qualifications, promotions and restructuring.

  • Necessary for the performance of your employment contract.

    Work scheduling (both administratively and organizationally), planning, drafting and managing working schedules or tasks.

  • Necessary for the performance of your employment contract.

    Managing relocations, rebadging, transfers of undertaking, secondments, international assignments and work-related travel.

  • Necessary for the performance of your employment contract.
  • Necessary for iTechWorks’s legitimate interests (to comply with its responsibilities as an employer and to run a successful and efficient business).

For organizing and maintaining our business structure

Development of central databases with respect to the Personal Information of all Associates, including databases used by subsidiaries or branch offices for human resources management.

  • Necessary for iTechWorks’s legitimate interests (to comply with its responsibilities as an employer and to run a successful and efficient business).

    Maintaining and ensuring the communication between iTechWorks offices and its Associates and clients.

  • Necessary for iTechWorks’s legitimate interests (to comply with its responsibilities as an employer and to run a successful and efficient business).

Business development

  • Necessary for iTechWorks’s legitimate interests (to run a successful and efficient business). Preparation and provision of services to clients and potential clients.
  • Necessary for the performance of your employment contract.

For Security & Business Continuity

Management of access controls and usage of buildings and facilities (including CCTV and parking lots).

  • Necessary for iTechWorks’s legitimate interests (to comply with its responsibilities as an employer and to run a safe, secure and efficient business).

    Management of access to and usage of office equipment and resources including but not limited to telephones, mobile phones, laptops and portable devices, multifunctional devices and more generally the computer network and applications.

  • Necessary for iTechWorks’s legitimate interests (to comply with its responsibilities as an employer, to protect iTechWorks’s finances and help prevent fraud).

    Maintaining the security of iTechWorks’s and its client’s networks and information and intellectual property.

  • Necessary for iTechWorks’s legitimate interests (to run a successful and efficient business).

    Managing business continuity such as monitoring and accessing files and email after an Associate’s departure.

  • Necessary for iTechWorks to comply with its legal obligations as an employer.
  • Necessary for iTechWorks’s legitimate interests (to run a successful and efficient business).

Detecting, preventing or otherwise addressing security, fraud or technical issues.

Necessary for iTechWorks’s legitimate interests (to run a successful and efficient business and help prevent fraud).

iTechWorks will obtain your consent to use your Personal Information for a new or additional purpose where it is required to do so. Under local law, to the extent that Processing is based on consent, Associates may be entitled to withdraw consent to the Processing of their Personal Information. Associates who wish to withdraw consent should contact us (see Contact Us section below).

To whom we give your Personal Information

Disclosure within the iTechWorks group of companies. iTechWorks is a global company and your Personal Information may be shared with or accessed by other companies within the iTechWorks group.

Disclosure to third parties. iTechWorks may also share your Personal Information:

  • With clients and potential clients, in the course of business and business development and with clients for their evaluation before deployment on projects or to prepare for transfers or rebadging exercises;
  • With government bodies, including tax and social security authorities, to comply with applicable laws (including employment and tax laws), to obtain licenses or approvals, and upon request during an audit or assessment;
  • With suppliers, subcontractors and service providers, to maintain an efficient and commercially viable business, including technology, telecom, internet providers;
  • With travel agents, visa agencies and other preferred suppliers, to manage the corporate travel and/or corporate transfers of Associates (whether in relation to an affiliate, client or third party supplier), including visa processing and disclosure for other immigration purposes;
  • With professional advisers, consultants, and employment and recruitment agencies, to conduct background verification and reference checks, administer benefits and payroll, deal with disciplinary and grievance issues and maintain emergency contact details;
  • With our legal advisors and external auditors for legal advice and to conduct business audits;
  • With credit reference agencies and background verification agencies, to conduct credit checks and background verification and reference checks;
  • With service providers for business continuity management and contingency planning in the event of business disruptions;
  • With prospective sellers or buyers and their advisers in the event that iTechWorks merges, acquires or sells any business or assets.

The third parties with whom we share your Personal Information may in some instances independently determine the purposes and uses of your Personal Information (e.g. an airline, a corporate credit card company or a benefits provider); in such cases, the recipient’s own privacy policy will govern their use of your Personal Information.

Disclosure without notification

There may be circumstances where iTechWorks discloses Personal Information to third parties without notifying Associates. These circumstances could include:

  • Where the information is publicly available;
  • Where iTechWorks is required to do so by law or by order of a court or tribunal, or where iTechWorks has a good faith belief that such disclosure is reasonably necessary to comply with a legal obligation, process or request;
  • Where it is alleged by a law enforcement authority that an Associate is guilty of a criminal offence, or is civilly liable in a legal action, and iTechWorks has a good faith belief that any disclosure is necessary to comply with a legal process or request.
  • Where iTechWorks is legally required to, or has a good faith belief that such disclosure is reasonably necessary to protect the rights, property or safety of iTechWorks, its Associates and vendors, clients, customers of clients, third parties or the public as required and permitted by law.

International transfer of your Personal Information

Due to the global nature of iTechWorks’s business, Personal Information may be shared, disclosed and transferred between the various iTechWorks group companies where such transfers are required for legitimate business reasons. Where iTechWorks transfers your Personal Information internationally, which may include transferring Personal Information outside of India, iTechWorks will comply with applicable legal requirements. Where required we will sign a data transfer agreement with the recipient of the Personal Information.

How we monitor your activities

Where permitted by local law, iTechWorks may monitor the activities of Associates at iTechWorks or client facilities using CCTV, particularly where Associates work in a client-controlled environment. Where required, signage will indicate which areas are subject to such monitoring. Recorded images are destroyed in accordance with our retention policy, unless they are required for initiating disciplinary investigations or proceedings or are required for criminal or other investigations (including circumstances where we are required to provide such information to clients for the purposes of their investigations).

In addition to the above and where permitted by local law, iTechWorks may monitor its company assets, including computers, telephones, fax machines, voice mail systems, etc., and its networks, including intranet/internet access, email, applications, etc., and the activities of Associates while accessing or using such office equipment or networks as more fully set out in our Acceptable Use Policy. If you have further questions, please contact us (see Contact Us section below).

How long we retain your Personal Information

iTechWorks will retain Personal Information for as long as necessary for the purpose or purposes for which it was collected, in accordance with local law and as set out in our Retention Policy.

How we protect your Personal Information

iTechWorks implements appropriate security measures designed to prevent unlawful or unauthorized Processing of Personal Information and accidental loss of or damage to Personal Information. iTechWorks maintains written security management policies and procedures designed to prevent, detect, contain, and correct violations of measures taken to protect the confidentiality, integrity, availability, or security of your Personal Information. These policies and procedures assign specific data security responsibilities and accountabilities to specific individuals, include a risk management program that includes periodic risk assessment and provide an adequate framework of controls that safeguard your Personal Information.

What are your rights

iTechWorks systems allow Associates to check and update certain Personal Information. It is the responsibility of all Associates to ensure that their Personal Information is kept up-to-date. In certain circumstances, Associates have the right to access their Personal Information, verify and challenge the accuracy and completeness of their Personal Information and have it corrected, amended or deleted if inaccurate and, in limited circumstances, object to processing of their Personal Information. iTechWorks may require Associates to provide reasons or evidence to justify the amendment of Personal Information held by iTechWorks. Associates can exercise these rights by contacting us per the Contact Us section below.

Contact Us

Any questions, concerns or complaints about the operation of this Notice should be addressed to the relevant talent manager or local HR representative in the first instance. If you do not have a talent manager or a local HR representative please email at careers@inettechworks.com. In addition, Associates may submit concerns or complaints about iTechWorks’s privacy practices to the compliance helpline at the Contact Us Portal.

Note: iTechWorks may update this Notice from time to time. Any such updates will be effective from the date on which they are notified to associates or posted on the Privacy Microsite. Associates should check this Notice from time to time and take notice of any changes made.

Definitions

  • “Associate” means any current, past and prospective employees, individual contractors or other members of personnel of iTechWorks.
  • “iTechWorks” means iTechWorks Technology Solutions Private Limited, a private limited company incorporated in Bombay (Navi Mumbai), India with a registered address at 301,Bhagirathi Niwas, Plot No. H-825, Sector-II, P.O-Vashi, Navi Mumbai-400703. , and its global affiliates and subsidiaries, including the iTechWorks company which employs or engages you or to whom you have applied for a job.
  • “Personal Information” means any information or combination of information, in any form or medium, that can identify an Associate. Examples include name, email address, physical address, phone number, date of birth, age, home address, personal preferences, behavioral information, government issued IDs, IP address, hardware identifiers, etc.
  • “Sensitive Personal Information” means Personal Information, which if lost, compromised, or disclosed without authorization, could result in substantial harm, embarrassment, inconvenience, or unfairness to an individual. Examples of Sensitive Personal Information in various jurisdictions may include social security numbers, driver’s license numbers, passwords, passports, tax IDs, financial account and credit card numbers, health information (including Protected Health Information (PHI)), biometric identifiers, racial or ethnic origin, and information about political opinions, religious beliefs, trade union membership, criminal history, sexual orientation or blood group.
  • “Process/Processed/Processing” means any operation or set of operations which is performed on Personal Information or on sets of Personal Information, whether or not by automated means, such as collecting, recording, storing, deleting, viewing, accessing, amending, using or disclosing the Personal Information.

Note, where we have used words such as “include,” “including,” “for example,” or “such as” in this Notice these are meant to be examples and not exhaustive lists.