Permitted visitors may access these websites via GIMS or directly. Regardless of the means of access, this privacy policy shall apply to any visitor to these websites. Please note that these websites may include links to websites of third parties whose privacy practices differ from those of Tata Sons. If you provide personal data to any of those websites, then your data would be governed by the privacy statements of the respective third parties.

1. Definitions

   In this privacy policy, the following definitions are used:
   

   Data	As defined under Data Protection Laws and includes the information that you submit to Tata Sons via the Portal, and information which is accessed by Tata Sons pursuant to your visit to the Portal.
   Cookies	a small file placed on your computer by this Portal when you either visit, or use certain features of, the Portal. A cookie generally allows the website to “remember” your actions or preference for a certain period.
   Data Protection Laws	any applicable laws for the time being in force relating to the processing of Data
   Portal	the portal/website that you are currently using, GIMS, which includes Tata eHack, Tata InnoVista and Tata Ideas Plus and their sub-links and sub-domains
   Tata Sons or us	Tata Sons Private Limited, a company incorporated in India whose registered office is at Bombay House, 24 Homi Mody Street, Mumbai, India, 400001
   User or you	the natural person who accesses the Portal

2. Scope

   Tata Sons collects data to operate this Portal. You provide some of this data directly, such as when you register on the Portal. No sensitive personal information is collected without your consent, apart from any information or data voluntarily submitted by you, including the data provided while contacting us through the website, answering surveys and polls, entering contests and similar promotions and signing up for updates. You consent to such voluntary information/Data shared by you being shared within the Portal, and for contest and promotion purposes, with group companies of Tata Sons. You acknowledge Tata Sons has no liability or commercial interest in this regard.

   You can visit the Portal and make choices about our collection and use of your personal data. For instance, you may want to access, edit or remove the personal information in the Portal or close your account. When you are asked to provide personal data, you may choose to not provide the information. However, if you do not provide the personal data which is mandatory to register you on the Portal, then you may not be able to access all sections of the Portal.

3. Data Collected

   We may collect information or pieces of information that could allow you to be identified, including:

   1. Personal data / information: We collect salutation (mandatory), first name, last name, email address, Company Name, country code (Optional for user but editable by Group Innovation (for jurors)), mobile number (Optional for user but editable by Group Innovation (for jurors)), Year of Birth (mandatory), gender (mandatory), profile photo (Optional for user but editable by Group Innovation (for jurors)), city (mandatory), Country (mandatory), Function Name (mandatory), Business Unit (mandatory), Level (mandatory), Work Experience (mandatory), Highest Qualification (mandatory), Tata Employee (mandatory only for Team Members in Tata Innovista), Employee Id (optional), Age Group (mandatory), Year of first job (mandatory), CV (Optional for user but editable by Group Innovation (for jurors)), Designation (mandatory) and IP Address.
   2. Cookies, IP address and geo-location: These details are usually captured by the browser automatically when you visit our Portal, as per the cookie settings of the browser.

4. How we Collect Data

   We collect Data in the following ways:

   1. data is given to us by you when you register; and
   2. data is collected automatically pursuant to your visit to the Portal.

5. Data shared by You

   Tata Sons may collect your Data in several ways from your use of the Portal, including:

   1. when you contact us (through any form, e-mail address, hyperlink or social media address posted therein);
   2. when you enter a contest, competition or promotion;
   3. when you opt to receive any communications (including any newsletter, promotional offers) from us;
   4. from the information gathered by your visit to our webpages;
   5. information provided by you/your team member.

   Other users registered on this Portal may be able to see the following of your personal details: first name, last name, email, company, and phone.

6. Data that is Collected Automatically

   1. We automatically collect some information about your visit to the Portal. This information helps us to make improvements to the content and navigation of the Portal and includes your IP address and the way you use and interact with its content.
   2. Our web server service providers and/or affiliates who provide analytics and performance enhancement services collect IP address, operating system details, browsing details, device details and language settings. This information is aggregated to measure the number of visits, average time spent on the site, pages viewed and similar information. Tata Sons uses this information to measure the site usage, improve content and to ensure safety and security, as well as enhance performance of the Portal.
   3. We may collect your Data automatically via Cookies, in line with the cookie settings on your browser. For more information about Cookies, please see the section below, titled “Cookies”.

7. Our Use of Data

   Any or all the Data may be required by us from time to time to work on the experience when using the Portal. Specifically, Data may be used by us for the following purposes:

   1. Email: (i) transmission by email or any other form of communication of marketing materials (related to Group Innovation) to you (ii) contact for survey or feedback which may be done using email (iii) to enable our group companies to reach out to you in relation to their Innovation related programmes managed by them (iv) to process your requests (such as replying to your queries)
   2. Demographic data (gender, year of birth, city, country, function name, business unit, level, work experience, highest qualification, age group, designation, year of first job) may be used in aggregate form for analysis to improve our products or services
   3. Photograph: may be used for brand enhancement purposes (in internal and external marketing materials, including to inspire Tata colleagues)
   4. Country Code & Mobile Number: to contact you ahead of any event being organised by Group Innovation in which you are either participating or being invited

   We may use your Data for the above purposes if we deem it necessary to do so for our legitimate interests. Tata Sons may use your information for internal business purposes, such as analysing and managing its programs. If you are not satisfied with this, you have the right to object in certain circumstances (see the section headed "Your rights" below).

8. Who we share Data with

   We may share your personal Data with:

   1. affiliates, associates and subsidiaries of Tata Sons and other group companies, to assist them to reach out to you in relation to their Innovation programs or campaigns (including marketing and sales) and to process your query / requests;
   2. our employees, vendors, agents and professional advisors working on our behalf for the purposes described in this policy statement; and
   3. service-providers who assist in protecting and securing our systems and provide services to us which require the processing of personal data, to carry out analytics at the aggregate level, which might be used for driving improvements in Group Innovation programs.

   We do not share other personal Data collected from the Portal with other third parties unless:

   1. You request or authorize us to do so;
   2. We need to comply with applicable law or respond to valid legal process; or
   3. We need to operate and maintain the security of this website, including to prevent or stop an attack on our computer systems or networks.

9. Keeping Data secure

   Tata Sons is committed to protecting the security of your Data. We use a variety of security technologies and procedures to help protect your Data from unauthorized access, use or disclosure. We use technical and organisational measures to safeguard your Data and we take full caution from our end to store your Data on secure servers. Technical and organisational measures include measures to deal with any suspected data breach. If you suspect any misuse or loss or unauthorised access to your Data, please let us know immediately by contacting us via e-mail on innovationsupport@tata.com.

   In case of a data breach, Tata Sons will notify the data subjects about the type of breach, type of personal data involved, actions that Tata Sons will take for affected persons and assistance to affected persons to help assist themselves.

10. Retention of Personal Data

    Tata Sons retains personal Data for as long as is necessary to fulfil the purposes for which it was collected, which may extend up to a period of 50 years from the date of last access to any of the abovementioned platforms, based on a determination of the nature and sensitivity of the personal Data, the purposes for which the personal Data was processed and applicable legal requirements.

    Even if we delete/remove/de-activate your personal Data, it may persist on backup or archival media for audit, legal, tax or regulatory purposes.

11. Your Rights

    When we process Data about you, we do so with your consent and/or as necessary to provide the Portal you use, operate our business, meet our contractual and legal obligations, protect the security of our systems and our customers, or fulfil other legitimate interests of Tata Sons as described in this privacy statement.

    Below, you will find additional privacy information that you may find important. Tata Sons adheres to applicable Data Protection Laws, including providing the following rights in relation to your Data:

    1. Right to access - the right to request
       1. copies of the information we hold about you at any time, or
       2. that we modify or update such information.

       If we provide you with access to the information we hold about you, we will not charge you for this, unless your request is manifestly unfounded or excessive. Tata Sons reserves the right to refuse any such request without providing an explanation.

    2. Right to correct -- the right to have your personal Data rectified if it is inaccurate or incomplete.
    3. Right to erase - - the right to delete/remove/de-activate your personal Data from our systems
    4. Right to restrict use - - the right to limit the way in which we can use your personal data
    5. Right to sharing your Data - - the right to request that we move, copy, or share your Data with other Tata companies.
    6. Right to object - the right to object to our use of your Data including where we use it for our legitimate interests.

    For information about managing your personal Data, email subscriptions and promotional communications and/or exercising any of the above rights, please submit a request to us by sending an email on innovationsupport@tata.com. Tata Sons reserves the right to request any additional information/ documentation that is required to verify your identity to ensure genuineness of the request and security of the Data.

    It is important that the personal Data we hold about you is accurate and current. Please keep us informed if your personal Data changes during the period for which we hold it.

    For programs where your organisation is the Data Controller, please reach out to your respective organizational contact.

12. Links to other websites

    This Portal may, from time to time, provide links to other external websites. We have no control over such websites and are not responsible for the content of these websites. This privacy policy does not extend to your use of such websites.

13. Cookies

    This Portal may place and access certain Cookies on your computer. Tata Sons uses Cookies to improve your experience of using the Portal.

    You can choose to enable or disable Cookies in your internet browser. By default, most internet browsers accept Cookies, but this can be changed. For further details, please consult the help menu in your internet browser.

    You can choose to delete Cookies at any time; however, you may lose any information that enables you to access the Portal more quickly and efficiently including, but not limited to, personalisation settings

    It is recommended that you ensure that your internet browser is up-to-date and that you consult the help and guidance provided by the developer of your internet browser if you are unsure about adjusting your Cookies settings.

14. Where We Store and Process Personal Data

    Personal Data collected by Tata Sons may be stored and processed in your region, in India, and in any other country where Tata Sons or its affiliates, subsidiaries or service providers operate facilities. The storage location(s) are chosen to operate efficiently. We take steps to ensure that the Data we collect under this privacy statement is processed according to the provisions of this statement and the requirements of applicable law wherever the Data is located.

    Data which we collect from you may be stored and processed in and transferred outside of your jurisdiction. Transfer of Data will be in compliance with applicable laws.

    To ensure that your Data receives an adequate level of protection, we have put in place appropriate safeguards and procedures with the third parties we share your Data with. This ensures your Data is treated by those third parties in a way that is consistent with the Data Protection Laws.

15. General

    If any court or competent authority finds that any particular provision of this privacy policy (or part of any provision) is invalid, illegal or unenforceable, that provision or part-provision will, to the extent required, be deemed to be deleted. The validity and enforceability of the other provisions of this privacy policy shall remain unaffected.

16. Changes to this Privacy Statement

    Tata Sons reserves the right to change this privacy statement as it may deem necessary, from time to time, or as may be required by law. Any changes will be immediately posted on the Portal, and you are deemed to have accepted the terms of the privacy statement on your first use of the Portal following the alterations.

    For any grievances or support, you may contact Tata Sons through innovationsupport@tata.com