This Privacy Policy outlines how we process personal data in compliance with applicable laws, including the General Data Protection Regulation (GDPR), India’s Digital Personal Data Protection Act (DPDPA), and other relevant data privacy regulations. Tata Technologies and its subsidiaries and affiliates (hereinafter referred to as “we”) understand that your privacy is important to you and are committed to respecting your privacy and protecting your personal data. We may process your personal data in the capacity of data controllers. This privacy policy describes the information about you that Tata Technologies collects, how that information is used, maintained, shared, and protected and how you can update it.

This Privacy Policy applies to the personal data of our website users, any job applicants (whether through the Tata Technologies Careers portal, other job portals, third-party recruitment agencies, or otherwise), clients, suppliers, and any other person(s) whose personal data has been provided to us or collected in accordance with applicable law. It also applies to all personal data received by Tata Technologies from the European Economic Area (“EEA”) in any format, including electronic or paper. This Policy applies globally and includes all online and offline interactions.

Tata Technologies will process your personal data in accordance with this Privacy Policy unless such processing conflicts with the requirements of applicable law, in which case applicable law will prevail.

By submitting your personal data to Tata Technologies, you acknowledge that you have read and understood this privacy policy and agree to the use of your personal data as set out here. Your personal data may be transferred and processed by business units, processes and systems in all countries in which Tata Technologies conducts its business and/or has dealings or other business relationships with third parties for the purposes and in the manner specified in this notice or in any other privacy notice or fair processing notice we may provide on specific occasions when we are collecting or processing personal data about you.

Personal data that we collect

Tata Technologies may collect and process different types of personal data in the course of operating our business, engaging personnel and providing our services. Such personal data may include, without limitation:

• Identity & Contact Data: Name, email, phone number, address, job title
• Employment & Recruitment Data: Resumes, background checks, references
• Technical Data: IP address, browser type, device IDs, login data, cookies
• Usage Data: Website behavior, activity logs, time zone, and location
• Compliance Data: Government ID proofs, bank details, KYC documents
• Special Categories (only if permitted): Health/disability info, dietary restrictions, etc.
• Cookie Data: Refer to our Cookie Management Policy

Sensitive personal data is a special category of personal data and includes data pertaining to ethnicity, health-related information, trade union membership, religious and philosophical beliefs, sexual orientation, and other categories of sensitive personal information as prescribed by law. Tata Technologies does not seek to obtain and will not collect such data about you unless permitted to do so by applicable laws.

How we collect your personal data

Tata Technologies may obtain your personal information from you directly or through third parties authorized to share your personal data. Amongst others, we receive your personal information:

When you interact with us directly, such as registering on our website, applying for a job at Tata Technologies, register for and/or attend any meetings/events/webinars organized or sponsored by us, subscribe to any communications issued by us or applications developed by us, take any surveys or provide feedback relating to us, etc.

Where we monitor the use of, or interactions with, our website, applications or tools, or in any marketing communications we may send to you or other email communications sent from or received by Tata Technologies.

From third-party sources, for example, where we collect information about you to assist with credit and other KYC checks or background verification, or where we receive information about you from recruitment agencies for recruitment purposes;

Where you are listed as a reference or emergency contact for an employee, candidate, contractor, etc.

Legal Basis for Processing
We process personal data under one or more of the following lawful bases:

• Consent: For marketing emails, cookies, and optional data collection
• Contract: To fulfill our contractual obligations with you
• Legal Obligation: To comply with laws, regulatory filings, audits
• Legitimate Interest: For improving services, security, analytics, and direct communications
• Legal Claims: Where required to establish or defend legal rights

How we use your personal data

Tata Technologies will only collect and use your personal data where permitted to do so by applicable law and only in the manner and on the grounds therein permitted. The primary grounds on which your personal data is processed are:

• Consent: where you have freely consented to the use of your information, such as by accepting the use of cookies or by signifying your acceptance of a consent through the cookie banner by selecting the appropriate options.

• Legitimate Interests: where the processing is reasonable and necessary for the legitimate interests of our business and/or the legitimate interests of a third party, to the extent such processing does not infringe on your fundamental rights and freedoms.

• Fulfilment of Contract: where the processing of your information is necessary to fulfil any contractual obligations with you.

• Legal Obligation: where the processing is required to comply with applicable law.

• Legal Claims: where the processing is necessary for the establishment, exercise or defence of legal claims or whenever courts are acting in their judicial capacity.

Based on the above grounds, as applicable to the context, we process your personal data in order to:
– Enable you to avail of any of our services, including customer service issues;

– Allow you to receive responses to any requests made by you;

– Send communications to you about our or our affiliates’ current services, new products and services or promotions that we are developing, and opportunities that may be available to you;

– Send alerts for new features or enhancements to our products and services;

– Respond regarding job or career opportunities about which you have inquired;

– Identify and evaluate you as a candidate for potential employment, as well as for future roles that may become available;

– Ensure that our site and our services function in an effective manner for you;

– Deliver marketing and event communications to you across various platforms, such as email, telephone, text messaging, direct mail, online, etc. If we send you a marketing email, it will include instructions on how to opt out of receiving these emails in the future.

– Comply with our legal and compliance obligations, such as the prevention, detection, or investigation of a crime, loss prevention or fraud.

– Meet our internal and external audit requirements, information security purposes, and as we otherwise believe to be necessary or appropriate.

We endeavour to collect only such information as is reasonably necessary to perform services for you or to respond to your inquiries. You are responsible for ensuring that the information you provide is accurate, complete and current; we will take reasonable steps to ensure that the information we collect and process is relevant to its intended use.
 
Cookies and Tracking Technologies
Tata Technologies uses cookies to enhance your website experience. Cookies are categorized as:

Strictly Necessary: Essential for core functionality, such as security and page navigation
Analytics & Performance: Helps analyze usage and improve performance (e.g., Google Analytics)
Functional: Remembers your preferences (e.g., language, region)
Advertising/Targeting: Shows content and ads relevant to your interests

We only use non-essential cookies with your explicit consent. You can manage or withdraw your consent any time via our “Customize Cookies” in the website footer or writing to our Data Protection Officer at dpo@tatatechnologies.com. For full details, visit our Cookie Management Policy.

Who we share your personal data with

Tata Technologies shares or discloses personal data when necessary to provide services or conduct our business operations.

Within Tata Technologies, Personal data may be made available to and processed by Tata Technologies entities across the world as necessary for the provision of services, account administration, sales and marketing, customer and technical support, business and product development, etc. All of our employees and contractors are required to follow our data protection policy and security policies when handling personal data.

Our business partners: We occasionally collaborate with other organizations to deliver co-branded Services, provide content, or to host events, conferences, and seminars. As part of these arrangements we may collect and share information about you. Tata Technologies will handle, and ensure that our business partners handle, personal data in accordance with this privacy notice.

Our third-party service providers: We collaborate with and are supported by service providers around the world. Personal data will be made available to these parties only when necessary to fulfil the services they provide to us, such as software, system, and platform support, direct marketing services, cloud hosting services, advertising, and order fulfilment and delivery. Our third-party service providers are not permitted to share or use personal data we make available to them for any purpose other than to provide services to us.

Third parties for legal reasons: We will share personal data when it is required as a legal or contractual obligation, such as:

To comply with legal obligations and respond to requests from government agencies, including law enforcement and other public authorities, which may include authorities outside your country of residence.

In the event of a merger, sale, restructure, acquisition, joint venture, assignment, transfer, or other disposition of all or any portion of our business, assets, or stock (including in connection with any bankruptcy or similar proceedings).

Cross-Border Data Transfers
Your data may be transferred to or accessed by entities outside your country, including countries that may not have the same level of data protection. For such transfers, we rely on:
• Standard Contractual Clauses (SCCs)
• Intercompany Data Transfer Agreements
• Vendor Due Diligence & DPAs
These mechanisms ensure appropriate safeguards for your data.

Where we store and process personal data

Tata Technologies is a global organization, and your personal data may be stored and processed globally. This means that we may store, transfer and process your data outside of the jurisdiction in which it was provided. If you are located in the European Economic Area (EEA), this will mean that your personal data may be transferred to, accessed in, and/or stored outside the EEA in jurisdictions where data protection laws may not be as comprehensive as in the EEA. Notwithstanding the location where the data is being held or processed, Tata Technologies adopts reasonable and appropriate security practices and procedures, including administrative, physical security, and technical controls, in order to safeguard your Personal Information in accordance with applicable data protection laws.

Tata Technologies has data protection agreements with all our entities around the world, including standard contractual clauses as prescribed under applicable law. Where your personal data is shared with third party vendors or service providers, we take appropriate steps to ensure that such data is processed, secured, and transferred according to applicable law thus protecting the confidentiality, availability, and integrity of your personal data.

How we secure personal data

Tata Technologies takes data security seriously, and we use appropriate technologies and procedures to protect personal data. Our information security policies and procedures are aligned with widely accepted international standards and are reviewed regularly and updated as necessary to meet our business needs, changes in technology, and regulatory requirements.

For example:
Policies and procedures: Tata Technologies employs reasonable technical, physical and operational security measures intended to protect your personal data from loss, misuse, alteration, or unintentional destruction. Our security measures are periodically reviewed and updated in an effort to provide appropriate security for all personal data held by us.

We place appropriate restrictions on access to personal data.

We implement appropriate measures and controls, including monitoring and physical measures, to store and transfer data securely.

We conduct privacy, information security, and other applicable training on a regular basis for our employees and contractors who have access to personal data and other sensitive data.

We require our third-party vendors and providers to protect any personal data with which they are entrusted in accordance with applicable law and our security policies and procedures.

How long do we keep your personal data?

We retain personal data for as long as is reasonably required to fulfil the purpose for which such data was collected, and any linked purposes such as satisfying any legal, accounting, or reporting requirements. In determining data retention periods, Tata Technologies takes into consideration local laws, its data retention policy, contractual obligations, and the expectations and requirements of our customers. After the retention period, data is securely deleted or anonymized.
Cookie retention durations are specified in our Cookie Management Policy, ranging from session-based to 12 months (e.g., Google Analytics: 24 months; advertising cookies: up to 12 months).

Your rights in relation to your personal data

Tata Technologies takes reasonable steps that are designed to keep your personal data accurate, complete, and up to date for the purposes for which it is collected and used and to ensure that the processing of your personal data complies with this privacy policy and applicable law. Depending on your jurisdiction, you may have the right to:

• Access, correct, or delete your personal data
• Object to or restrict data processing
• Withdraw consent for optional processing
• Receive a copy of your data (data portability)
• Lodge a complaint with a data protection authority
• Not be subject to automated decision-making without human oversight

If you would like to discuss how Tata Technologies processes your personal data, or you are an EU data subject who would like to make a request relating to the personal data that Tata Technologies has collected about you, please contact us at the following details: 

Email address: dpo@tatatechnologies.com

Address: Corporate HQ & Registered Office, Plot No 25, Rajiv Gandhi Infotech Park, Hinjawadi, Pune, India – 411 057.

To help protect the privacy and security of your data, Tata Technologies will take reasonable steps to verify your identity before granting you access to your personal data. Tata Technologies will make reasonable attempts to promptly investigate, comply with, or otherwise respond to your requests as may be required by applicable law. Depending upon the circumstances and the request, Tata Technologies may not be permitted to provide access to personal data or otherwise fully comply with your request, for example, where producing your information may reveal the identity of someone else. Tata Technologies reserves the right to charge an appropriate fee for complying with your request where allowed by applicable law and/or to deny your requests where, at Tata Technologies’ discretion, they may be unfounded, excessive, or otherwise unacceptable under applicable law.

Cookies

From time to time, we may, like many other commercial sites, use a standard technology called a “cookie”. A cookie is a small text file placed on a computer or other device and used to identify the user or device and collect information. Cookies are typically assigned to one of four categories, depending on their function and intended purpose: necessary cookies, performance cookies, functional cookies, and cookies for marketing purposes. A cookie cannot retrieve any other data from your hard drive, pass on computer viruses, or capture your email address. Currently, websites use cookies to enhance the user’s visit; in general, cookies can securely store a user’s ID and password, personalize home pages, and identify which parts of a site have been visited. It is possible to set your browser to inform you when a cookie is being placed. This way, you have the opportunity to decide whether to accept the cookie. By showing how and when our visitors use this site, this information can help us to improve our site on a continual basis. More details on cookie management policy can be accessed here.

Children

Tata Technologies does not intend to collect or maintain personal data of individuals under 13 years of age. IF YOU ARE UNDER 13 YEARS OF AGE, PLEASE DO NOT USE OR ACCESS OUR WEBSITE(S) OR OTHERWISE PROVIDE ANY INFORMATION TO TATA TECHNOLOGIES WITHOUT THE KNOWLEDGE AND CONSENT OF YOUR PARENT/GUARDIAN. If Tata Technologies learns that the personal data of an individual under 13 years old has been collected without verifiable parental consent, then Tata Technologies will take the appropriate steps to delete such information.

Contact

If you have any questions about this privacy notice, please contact us at dpo@tatatechnologies.com

Tata Technologies reserves the right to modify this privacy notice. Tata Technologies will post changes to the privacy notice on the Privacy Policy. Please check this page at regular intervals for updates.