Introduction

At Triophase we value your privacy and are committed to protecting and processing your personal information responsibly.

This privacy statement describes how Triophase collects, uses, and shares personal information about consumers and other individuals within our clients, business partners, supplier and other organizations with which Triophase has or contemplates a business relationship. It applies to Triophase Corporation and Triophase subsidiaries except where a subsidiary presents its own statement without reference to Triophase’s.

Where we provide products, services, or applications as a business-to-business provider to a client, the client is responsible for the collection and use of personal information while using these products, services, or applications. This collection and use is covered by the client’s privacy policy, unless otherwise described. Our agreement with the client may allow us to request and collect information about authorized users of these products, services, or applications for reasons of contract management. In this case, this privacy statement, or a supplementary privacy notice, applies.

We may provide additional data privacy information by using a supplementary privacy notice.

Processing of Your Personal Data

Generally, you can visit our website without providing any personal data about yourself. However, in order to access some parts of our websites and/or for you to request specific information or services, we may need to collect personal data from you which we will process for the purposes described hereunder.

As part of pre-contractual and/or contractual obligations, we may process your personal data for:

• answering any requests, queries or inquires you may submit on our website; but also
• enabling you log on certain restricted parts of our website;
• managing your participation to online context

We may also use the personal data you share with us, for:

• maintaining and improving the website as well as to ensuring its security;
• conducting customer satisfaction surveys;
• manage the forums to which you may take part;
• recruitment purposes related when you submit a resume or a job application online; and
• compiling aggregate statistics regarding the use of the website.

These purposes are justified by our legitimate interest to make sure that you enjoy the experience when visiting our website and interacting with us.

Finally, subject to your prior express consent, we may also use the personal data you share with us for marketing purposes and in particular to provide you with personalized offers.

How we will share your personal data?

How long do we keep your data?

When you are an existing client, we will keep your personal data as long as our contractual and/or business relationship lasts. We may then place your personal data in an intermediary database for five (5) years after our contractual and/or business relationship lasts.

If you are a prospect with no established contractual and/or business relationship, we will not keep your data for longer than three (3) years after you last contacted us.

If you are a candidate, please note that if you are not hired, we will delete the information you shared with us at the latest two (2) years after you shared the information.

Finally, the log information we may collect for the security, maintenance and improvement purposes mentioned above will not be kept longer than one (1) year after collection.

Triophase Global Services Private Limited is committed to meeting legal and regulatory requirements regarding data protection and privacy where it conducts its business activities. This Privacy Policy (“Policy”) defines the minimum standards with respect to Triophase collecting, processing, or otherwise using personal data, including information that may be considered as sensitive Personal Data (“Personal Data”) about individuals including Triophase associates, business contacts, customers or vendors (“Individuals”).

Where Triophase Global Services Private Limited controls other company entities, such other companies will be required to abide by the principles set in this Policy.

PRIVACY PRINCIPLES

Triophase will handle Personal Data in accordance with the following principles. Triophase ensures that its business partners and vendors comply with the principles of this Policy and applicable legal and regulatory compliance standards through appropriate contractual agreements.

• Lawfulness of Processing

Triophase will collect, store, process, use, share, transfer, analyze or otherwise handle (“Process” or “Processing”) Personal Data in accordance with applicable legal requirements for legitimate business or compliance purpose or if individuals have provided consent to the Processing or any relevant basis as defined by the applicable laws or regulations.

• Limit Collection and processing

Triophase will limit the Processing of Personal Data in terms of scope and duration, as is necessary for the intended purpose.

• Transparency

In accordance with applicable legal requirements, Triophase will provide information to individuals that explains the scope and purpose of Processing, and whom to contact to seek clarifications about privacy or data protection.

• Accuracy

Triophase will take all necessary measures, as required by applicable laws and regulations, to ensure that Personal Data processed are accurate for the intended purpose. Any inaccurate personal data, in the context of the purposes for which they are processed, will either be erased or rectified without delay. Accuracy of data may be subject to the data subject’s duty to notify and/or utilise the options as outlined in Privacy Notices.

• Security and Confidentiality

Triophase aims to protect the security and confidentiality of individuals’ Personal Data and implement physical, technical and organizational measures against accidental, unlawful or unauthorized destruction, loss, alteration, disclosure or access. Triophase will ensure measures are appropriate to the risks represented by the Processing it carries out and the nature of those Personal Data.

• Privacy by Design

Triophase incorporates the principles of Privacy by Design into all of its personal data processes executed using digital systems, technologies or manually. By default, privacy requirements are embedded into every standard, protocol and process followed by Triophase.

• Disclosure

Triophase discloses, when required/asked, personal data to third parties only for the purposes identified in the privacy notice, with the consent of the individual, or as required for lawful purposes. Third parties refer to public authorities, Law Enforcement Agencies and similar authorities.

DATA SUBJECT RIGHTS

In accordance with applicable legal requirements, Triophase will provide opportunity to exercise data subject rights, which are available to the individuals in the context of their engagement with Triophase. Such rights may include the right to request access to their Personal Data, to correct inaccurate or incomplete Personal Data or to object to the Processing of their Personal Data. Each Data Subject Request is validated and tracked to closure. As per the applicable law, and the engagement of data subject with Triophase, there might be other rights available such as right to be forgotten, right to withdraw consent, right to data portability, etc. Triophase will ensure its compliance and deploy all required measures to help data subjects exercise their rights granted.

INTERNATIONAL DATA TRANSFERS

Triophase operates on a global level and from time to time it may be required to transfer Personal Data across countries. Triophase recognizes that Personal Data needs to be treated with care, including data transfer to countries, which may not have adequate data protection laws. If Triophase transfers Personal Data to such countries, it will protect these Personal Data as set out in this Policy and in accordance with the requirements of applicable law.

DATA RETENTION

Triophase will observe retention policies and procedures so that it deletes Personal Data after a reasonable time and the purposes are met. Exception applies if in the context of those purposes, it is necessary to keep the Personal Data indefinitely, or a law requires the Personal Data to be kept for a certain time. When Triophase no longer needs to keep Personal Data for the purposes, for which they are held, it will delete them as soon as practicable.

JURSIDICTION-SPECIFIC REQUIREMENTS AND IMPLEMENTATION

National data protection and privacy laws may impose additional requirements on Triophase for the Processing of Personal Data. Where required, Triophase will establish procedures and guidelines in order to supplement the principles of this Policy and engage with relevant regulatory/ supervisory authority, as required.

PRIVACY ORGANIZATION AND CONTACT

Triophase has set up a global Privacy Function, which is headed by the Head – Global Privacy Office of Triophase, and which is tasked with overseeing and implementing privacy and applicable data protection requirements. Specific data protection or privacy functions and roles may be added for individual countries or geographies. The privacy function is also responsible for deploying training and awareness programs and supporting the implementation of privacy principles into Triophase business operations and processes. If you have questions about this Policy, please direct contact [email protected] at www.triophase.com.

DATA BREACH REPORTING

All known or suspected incidents involving Personal Data must be reported immediately upon discovery. This includes incidents notified to Triophase from any Triophase associate, client, third party service provider or other business partner. Triophase will provide education and awareness to its workforce regarding the procedures for reporting a suspected or confirmed incident. Each incident is investigated and tracked to closure.

IMPLEMENTATION

Triophase has internal arrangements in place to ensure compliance with this Policy, to allow effective exercise of individuals’ rights set out in this Policy and under applicable law, and to deal with any concerns from individuals that Triophase may not have complied with the Policy and/or applicable law. All individuals can leverage these arrangements and/or exercise their rights by contacting [email protected]

CHANGES TO THE POLICY

Triophase may update this Policy from time to time and without prior notice to individuals to reflect changes in law or privacy practices. If you have questions about this Policy, If you have questions about this Policy, please direct contact [email protected] at www.triophase.com.

Children’s privacy protection

The Sites are not intentionally targeted to, or intended for, children under the age of 13. We do not knowingly collect data relating to children.

In the limited circumstances and based on your country of residence; where you may have provided your consent to the collection, processing and transfer of your personal data for a specific purpose, you may have the right to withdraw your consent for that specific processing at any time. To withdraw your consent, please contact through [email protected]. Once we have received notification that you have withdrawn your consent, we will no longer process your information for the purpose or purposes you originally agreed to, unless we have another legal basis for doing so.

Changes to this Privacy Policy

We may change and update this Privacy Policy from time to time. Any changes to our Privacy Policy will be posted on this page.