This Privacy Policy (hereinafter referred to as the "Policy") governs the collection, use, and protection of personal data between PrimeEstate India (hereinafter referred to as the "Company"), and individuals (hereinafter referred to as the "Client").
The Policy has been developed in accordance with the Information Technology Act, 2000, Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and other applicable Indian data protection laws.
The purpose of the Policy is to protect the rights and freedoms of individuals when processing their personal data, including the protection of the rights to privacy, personal and family confidentiality.
DEFINITIONS
Personal data - any information relating directly or indirectly to an identified or identifiable individual (personal data subject).
Personal data processing - any action (operation) or set of actions (operations) with personal data, performed with or without the use of automation tools.
Sensitive personal data - includes passwords, financial information, physical/physiological/mental health condition, sexual orientation, medical records, biometric information, and any other information as defined under applicable Indian laws.
PRINCIPLES AND CONDITIONS OF PERSONAL DATA PROCESSING
Processing of personal data is carried out on a lawful and fair basis.
Processing of personal data is limited to achieving specific, predetermined, and legitimate purposes related to real estate services.
Processing of personal data is carried out with the consent of the personal data subject to the processing of their personal data.
Only personal data that meet the purposes of their processing are accepted for processing.
VOLUME AND CATEGORIES OF PROCESSED PERSONAL DATA
The Company processes the following personal data:
full name;
contact information (phone number, email address);
identification documents (as required for property transactions);
financial information (for property transactions and loan arrangements);
property preferences and requirements;
information voluntarily provided by the Client during the property search or transaction process.
The Company does not process special categories of personal data concerning racial, ethnic origin, political views, religious or philosophical beliefs, health status, or intimate life unless specifically required by law for property transactions.
PROCEDURE AND CONDITIONS FOR PROCESSING PERSONAL DATA
Processing of personal data is carried out by:
receiving personal data directly from the subjects of personal data;
entering personal data into real estate management systems and other documents;
using other methods of processing personal data in compliance with Indian law.
Personal data is not distributed or provided to third parties without the consent of the personal data subject, except as required for property transactions, legal compliance, or as permitted by law.
Storage of personal data is carried out in a form that allows determining the subject of personal data, no longer than required by the purposes of processing personal data, unless the storage period of personal data is established by Indian law or contract.
CONFIDENTIALITY OF PERSONAL DATA
Information received by the Company during the provision of real estate services is confidential, except in cases provided by law.
The Company and other persons who have gained access to personal data are obliged not to disclose to third parties and not to distribute personal data without the consent of the personal data subject, unless otherwise provided by law.
RIGHTS OF THE PERSONAL DATA SUBJECT
The personal data subject has the right to:
receive information regarding the processing of their personal data;
request clarification, blocking or destruction of their personal data;
withdraw consent to the processing of personal data;
demand the termination of the processing of their personal data;
appeal against actions or inaction of the Company to the authorized body for the protection of the rights of personal data subjects or in court.
MEASURES TO ENSURE THE SECURITY OF PERSONAL DATA
The Company takes necessary and sufficient organizational and technical measures to protect personal data from unauthorized or accidental access, destruction, modification, blocking, copying, distribution, as well as from other illegal actions.
Measures to ensure the security of personal data include:
identification of threats to the security of personal data during their processing;
application of organizational and technical measures to ensure the security of personal data;
assessment of the effectiveness of measures taken to ensure the security of personal data;
detection of facts of unauthorized access to personal data and taking measures;
restoration of personal data modified or destroyed due to unauthorized access to them.