PRIVACY POLICY

Last updated August, 2023

At DUCEM TECHNOLOGIES PVT LTD, we believe it is your right to know what information we collect, how we use it, and what your options are for its use and are committed towards protecting the user’s personal information. This privacy policy covers the privacy practises employed by us and applies to all the products and services offered by Ducem Technologies or its subsidiaries or affiliated companies (“The Company”, “Ducem”, “Application”, “Service”, “we”, “us”, “our”, and terms of similar meaning). This Privacy Policy applies to the data provided on or through the corporate website (ducem.in) and applications of Ducem Technologies,

By accepting the Privacy Policy in registration or by visiting and using the Site or Mobile App(s), you expressly consent to our collection, use and disclosure of your personal information in accordance with this Privacy Policy. This Privacy Policy is incorporated into and subject to our Terms of Use.

This privacy policy for DUCEM TECHNOLOGIES PVT LTD, describes how and why we might collect, store, use, and/or share (‘process’) your information when you use our services (‘Services’), such as when you:

• Visit our website at http://www.ducem.in, or any website of ours that links to this privacy policy.

• Download and use our applications, or any other application of ours that links to this privacy policy.

• Engage with us in other related ways, including but not limited to any sales, marketing, or events.

Questions or concerns? Reading this privacy policy will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at info@ducem.in

Ducem Technologies provides an application designed to operate in client server architecture, which enables organizations to effectively manage their workforce, process payroll and other Human resources and business management.  A User may be either a company such as an employer who has entered into an agreement with the Application directly or via Application partners, resellers, and/or distributors who provide DUCEM’S services (“Customer”) or a Customer’s users for example an employer’s employees, of the Services or users of the Website (“End User(s)”) (End User and Customer shall collectively be referred to as “Users” or “you”). This Privacy Policy describes the policies and procedures of application on the collection, use, access, correction, and disclosure of your personal information on Ducem.in (the “Site”) and our Mobile Apps. Your personal information will include any information which, either alone or with other data, is reasonably available to us or relates to you (“Personal Information”). This Privacy Policy also covers any of your Personal Information which is provided to us and which is used in connection with the marketing of the services, features or content we offer (the “Services”) to Our Clients and/or the support that we may give you in connection with the provision of our Services and the Mobile Apps.

This Privacy Policy does not apply to any third party applications or software that can be accessed from the Site, the Services or the Mobile Apps, such as external applicant tracking systems, social media websites or partner websites (“Third Party Services”). By using our Services, you acknowledge you have read and understood this privacy policy. For the purposes of GDPR or European Economic Area data protection law, (the “Data Protection Law”), the data controller of the data processed through the Service is the Customer who makes available and permits End Users to access and use the Service or anyone on its behalf. For data retained through the website or data processed not through the Service (i.e., contact detailed of potential customers or resumes sent to us from potential employees for the purpose of engagement with Application), DUCEM’S application is the controller (the “Controller”).

SUMMARY OF KEY POINTS

This summary provides key points from our privacy policy, but you can find out more details about any of these topics by using our table of contents below to find the section you are looking for.

• What personal information do we process? When you visit, use our Services, we may process personal information depending on how you interact with us and the Services, the choices you make, and the products and features you use. However, we do not collect, store, or retain any personal information of users on our servers. The application is designed to operate offline, and all user data is stored solely on the user’s server. Personal information, such as name, email address, contact details, or any other identifiable data, is not processed or accessed by ducem.in.

• Do we process any sensitive personal information? We do not process any sensitive personal Information.

• Do we receive any information from third parties? We do not receive any information from third parties.

• Do we retain any of your data? We do not retain any of your data on our server. The information provided by you is solely stored on your own server.

• How do we process your information? Although we do not retain any user data, some non-sensitive data could be processed in order to provide, improve, and administer our Services, communicate with you, for security and to comply with law. We may also process your information for other purposes with your consent. We process your information only when we have a valid legal reason to do so.

• In what situations and with which types of parties do we share personal information? We do not share your information with any parties unless required for business or legal purposes. We may share information in specific situations and with specific categories of third parties.

• How do we keep your information safe? We have organisational and technical processes and procedures in place to protect your personal information, However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorised third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information.

• What are your rights? Depending on where you are located geographically, the applicable privacy law may mean you have certain rights regarding your personal information.

• How do you exercise your rights? The easiest way to exercise your rights is by submitting a data subject access request, or by contacting us. We will consider and act upon any request in accordance with applicable data protection laws.

Want to learn more about what we do with any information we collect? Review the privacy policy in full.

TABLE OF CONTENTS

1. WHAT INFORMATION DO WE COLLECT?
2. HOW DO WE PROCESS YOUR INFORMATION?
3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR PERSONAL INFORMATION?
4. HOW AND WHEN DO WE RETAIN YOUR INFORMATION?
5. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?
6. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?
7. HOW DO WE KEEP YOUR INFORMATION SAFE?
8. DO WE COLLECT INFORMATION FROM MINORS?
9. WHAT ARE YOUR PRIVACY RIGHTS?
10. CONTROLS FOR DO NOT TRACK FEATURES
11. DO WE MAKE UPDATES TO THIS POLICY?
12. HOW CAN YOU CONTACT US ABOUT THIS POLICY?
13. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

1. WHAT INFORMATION DO WE COLLECT?

Personal Information

We do not collect, store, or retain any personal information of users on our servers. The application is designed to operate offline, and all user data is stored solely on the user’s server. Personal information, such as name, email address, contact details, or any other identifiable data, is not processed or accessed by ducem.in.

Non-personal Information

This Data is non-identifiable and anonymous information (“Non-personal Information”). We are not aware of the identity of the User from which we have collected Non-Personal Information. Non-Personal Information is any unconcealed information which is available to us while Users are using the Service or the Website. Non-personal Information which is being gathered consists of technical information and behavioural information and which may include, the User’s Internet protocol (IP) address used to connect your computer to the Internet, your uniform resource locators (URL), operating system, type of browser, browser plug-in types and versions, screen resolution, Flash version, time zone setting, the User’s ‘click-stream’ on the Website and Services, the period of time the User visited a specific page on the Website or Service, methods used to browse away from a page.

Location Information: We do not ask you for access or track any location-based information from your mobile device at any time while downloading the Mobile Apps. However, if you are using the Application Mobile App, your employer may enable location tracking technology for time keeping purposes. This information is owned by and can be used in accordance with the Customer’s instructions, applicable terms in the Master Subscription Agreement for timekeeping and payroll processing purposes. The GDPR legal basis for processing this information is the contractual obligation to your employer to perform the Services.

Device Information: When you download and use the Mobile Apps, we automatically collect your device information such as operating system version, type, hardware usage statistics, etc. We may collect non-personal information or usage data to monitor and improve the performance and functionality of our software and applications. This information is collected anonymously and does not identify individual users. Usage data may include technical information such as device type, operating system, browser type, and interactions within the software. The GDPR legal basis for processing this information is the contractual obligation to your employer to perform the Services.

Data Collected as a Service Provider: As a service provider, Application systems only collects information as per the Customer (employer’s) requirement. Our Master Service Agreement governs the delivery, access, and use of the Services and Mobile Apps, including the processing of Personal Information and data submitted through Services accounts. The Customer (e.g., your employer) controls their Platform and any associated client data. If you have any questions about specific Platform settings, the processing of Personal Information in the Platform, or its privacy practices, please contact the Customer administrator of the Platform you use.

Customer data will be used by Application in accordance with the Customer’s instructions, applicable terms in the Master Service Agreement, Customer’s use of Services functionality, and as required by applicable law. Under applicable GDPR, Application is a processor of Customer data and Customer is the controller.

2. HOW DO WE PROCESS YOUR INFORMATION?

Although we do not retain any user data, and do not process any of the personal or sensitive data, however, some non-sensitive information could be processed in order to provide, improve, and administer our Services, communicate with you, for security and to comply with law. We do not process any of your information for other explicit purposes.

3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR INFORMATION?

We only process your personal information when we believe it is necessary and we have a valid legal reason to do so under applicable law, with your consent, to comply with laws, to provide you with services to enter into or fulfil our contractual obligations, to protect your rights, or to fulfil our legitimate business interests. The General Data Protection Regulation (GDPR) and UK GDPR require us to explain the valid legal bases we rely on in order to process your personal information. As such, we may rely on the following legal bases to process your personal information:

• We may process your information (only the non-sensitive data) if you have given us permission (i.e., consent) to use your personal information for a specific purpose. You can withdraw your consent at any time.

• Legal Obligations. We may process your information (only the non-sensitive data) where we believe it is necessary for compliance with our legal obligations, such as to cooperate with a law enforcement body or regulatory agency, exercise or defend our legal rights, or disclose your information as evidence in litigation in which we are involved.

4. HOW AND WHEN DO WE RETAIN YOUR INFORMATION?

We do not retain any personal information or sensitive data of users on our servers. As an application designed to operate in client server architecture, all user data is stored solely on the user’s server, and we do not have access to or control over this data.

Usage Data: The non-personal and non-sensitive usage data collected by our application is used solely for internal purposes, such as monitoring and improving software performance, enhancing functionality, and resolving technical issues. We do not retain this usage data beyond what is reasonably necessary to achieve these objectives.

 

Sensitive Data: We do not collect any sensitive data, unless required. However, any sensitive data processed through the application will be retained only for the specific purposes for which it was collected. The retention period for sensitive data will be determined by the purpose for which it was collected, applicable legal requirements, and your explicit consent. Once the specified purpose is fulfilled, and the data is no longer needed, it will be securely deleted or anonymized.

 

Data Deletion and Anonymization: As we do not retain any personal or sensitive data, there is no need for users to request data deletion from our servers. Since all data is stored locally on the user’s server, it is within your control to manage the retention and deletion of any data processed through our software. However, in the case if any private information handled by the software will only be retained as long as necessary to fulfil the specific objectives for which it was obtained. Sensitive data will be retained for a period of time based on the reason it was acquired, for the purpose of applicable legal obligations, and your explicit authorization. When the intended use of the data has concluded and it is no longer required, it will be safely eliminated or anonymized.

 

Third-Party Services: Please note that if you integrate third-party services or applications with our application, they may have their own data retention policies. We encourage you to review the privacy policies of these third-party services to understand their data retention practices.

Data Security: We take appropriate measures to protect your data from unauthorized access, loss, misuse, alteration, or destruction during the time it is within our control. However, as we do not retain any user data, any data retention beyond the user’s control is not applicable to ducem.in.

Changes to Data Retention Policy: If, in the future, ducem.in implements any data retention practices, this Privacy Policy will be updated accordingly to include the applicable data retention periods and procedures. Any changes will be communicated to users through the software or our website.

 

5. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

We do not share any personal information or sensitive data of users with anyone. However, the non-personal data may be needed in the following situations:

• Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

• We may share your information with our affiliates, in which case we will require those affiliates to honour this privacy policy. Affiliates include our parent company and any subsidiaries, joint venture partners, or other companies that we control or that are under common control with us.

6. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

We may use cookies and similar tracking technologies to access or store information. Specific information about how we use such technologies and how you can refuse certain cookies is set out in our Cookie Policy.

7. HOW DO WE KEEP YOUR INFORMATION SAFE?

We aim to protect your personal information through a system of organizational and technical security measures.

We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. Although we will do our best to protect your personal information, transmission of personal information to and from our Services is at your own risk. You should only access the Services within a secure environment.

8. DO WE COLLECT INFORMATION FROM MINORS?

We do not knowingly solicit data from or market to children under 18 years of age. By using the Services, you represent that you are at least 18 or that you are the parent or guardian of such a minor and consent to such minor dependent’s use of the Services.

9. WHAT ARE YOUR PRIVACY RIGHTS?

Your Rights associated with your information

If we are storing your personal information, you have the following rights to your information based on the services and your region.

In the event that you have provided Personal Information to us on our website Ducem.in, we will provide you with information about whether we hold any of your Personal Information. You may access, correct, or request deletion of your Personal Information by contacting us at info@ducem.in. We will respond to your request within a reasonable timeframe.

When acting as a service provider of Our Customer, Application has no direct relationship with the individuals whose Personal Information is provided to Application through the Services. An individual who is or was employed by one of Our Customers and who seeks access to, or who seeks to correct, amend, object to the processing or profiling of, or to delete his/her Personal Information in the Platform, should direct his/her query to the HR department of the Customer Organization that uses the Platform and for which he/she works or used to work if he/she cannot make the appropriate changes via its access to the Platform provided by the Customer.

If you are a user from Indian region, your privacy rights shall be as per the Indian privacy laws.

In some regions (like the EEA and UK), you have certain rights under applicable data protection laws. These may include the right (i) to request access and obtain a copy of your personal information, (ii) to request rectification or erasure; (iii) to restrict the processing of your personal information; and (iv) if applicable, to data portability. In certain circumstances, you may also have the right to object to the processing of your personal information. You can make such a request by contacting us by using the contact details provided in this policy. We will consider and act upon any request in accordance with applicable data protection laws.

If you are located in the EEA or UK and you believe we are unlawfully processing your personal information, you also have the right to complain to your Member State data protection authority or UK data protection authority.

If you are located in Switzerland, you may contact the Federal Data Protection and Information Commissioner.

Withdrawing your consent: If we are relying on your consent to process your personal Information, you have the right to withdraw your consent at any time. You can withdraw your consent at any time by contacting us by using the contact details provided in this policy.

However, please note that this will not affect the lawfulness of the processing before its withdrawal nor, will it affect the processing of your personal information conducted in reliance on lawful processing grounds other than consent.

Cookies and similar technologies: Most Web browsers are set to accept cookies by default. If you prefer, you can usually choose to set your browser to remove cookies and to reject cookies.

If you choose to remove cookies or reject cookies, this could affect certain features or services of our Services.

If you have questions or comments about your privacy rights, you may email us at

info@ducem.in.

10. CONTROLS FOR DO-NOT-TRACK FEATURES

Most web browsers and some mobile operating systems and applications include a Do- Not-Track (“DNT”) feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this privacy policy.

11. DO WE MAKE UPDATES TO THIS POLICY?

The terms of this Privacy Policy will govern the use of the Service and any information collected in connection therewith, however, Ducem Application may amend or update this Privacy Policy from time to time. The most current version of this Privacy Policy will always be posted at: Ducem.in. Ducem reserves the rights to amend the terms of this policy and such material changes to this policy shall be available on the homepage of the website and your continued use of Services will constitute your active acceptance of, and agreement to be bound by, the changes to the Privacy Policy. The updated version will be indicated by an updated “Revised” date and the updated version will be effective as soon as it is accessible. If we make material changes to this privacy policy, we may notify you either by prominently posting a policy of such changes or by directly sending you a notification. We encourage you to review this privacy policy frequently to be informed of how we are protecting your information.

12. HOW CAN YOU CONTACT US ABOUT THIS POLICY?

We, at Ducem, regularly review its compliance with this Privacy Policy. Please feel free to direct any questions or concerns regarding this Privacy Policy or Ducem Technologies’ treatment of personal information by contacting us through this web site or by writing to us at:

Privacy Matters,

C/o    Ducem Technolgies Pvt. Ltd

103, Someshwar Square, Opp. Someshwar Enclave, Vesu, Surat, Gujarat,

India. Pin- 395007.

India

13. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

Based on the applicable laws of your country, you may have the right to request access to the personal information we collect from you, change that information, or delete it.

By using Application, you acknowledge that you have read, understood and agreed to this Privacy Policy.