PRIVACY STATEMENT

Your privacy is important to us. Tata Sons Private Limited (“Tata Sons” or “we”) takes the privacy of your information seriously. This privacy statement explains what personal data we collect from you, through our interactions with you on this website, and how we use that data.

This privacy statement applies to the following internal websites, as well as to their sub-links and subdomains:

• Group Innovation Management Systems (“GIMS”) (groupinnovationmanagement.com)
• Tata InnoVista (DIYRR) (tatadiyrnr.com)
• Tata InnoVista website (tatainnovista.com)
• Tata eHack
• Tata Ideas Plus

Permitted visitors may access these websites via GIMS or directly. Regardless of the means of access, this privacy policy shall apply to any visitor to these websites. Please note that these websites may include links to websites of third parties whose privacy practices differ from those of Tata Sons. If you provide personal data to any of those websites, then your data would be governed by the privacy statements of the respective third parties.

1. Definitions

In this privacy policy, the following definitions are used:

2. Scope

Tata Sons collects data to operate this Portal. You provide some of this data directly, such as when you register on the Portal. No sensitive personal information is collected without your consent, apart from any information or data voluntarily submitted by you, including the data provided while contacting us through the website, answering surveys and polls, entering contests and similar promotions and signing up for updates. You consent to such voluntary information/Data shared by you being shared within the Portal, and for contest and promotion purposes, with group companies of Tata Sons. You acknowledge Tata Sons has no liability or commercial interest in this regard.

You can visit the Portal and make choices about our collection and use of your personal data. For instance, you may want to access, edit or remove the personal information in the Portal or close your account. When you are asked to provide personal data, you may choose to not provide the information. However, if you do not provide the personal data which is mandatory to register you on the Portal, then you may not be able to access all sections of the Portal.

3. Data Collected

We may collect information or pieces of information that could allow you to be identified, including:

1. Personal data / information: We collect salutation (mandatory), first name, last name, email address, Company Name, country code (Optional for user but editable by Group Innovation (for jurors)), mobile number (Optional for user but editable by Group Innovation (for jurors)), Year of Birth (mandatory), gender (mandatory), profile photo (Optional for user but editable by Group Innovation (for jurors)), city (mandatory), Country (mandatory), Function Name (mandatory), Business Unit (mandatory), Level (mandatory), Work Experience (mandatory), Highest Qualification (mandatory), Tata Employee (mandatory only for Team Members in Tata Innovista), Employee Id (optional), Age Group (mandatory), Year of first job (mandatory), CV (Optional for user but editable by Group Innovation (for jurors)), Designation (mandatory) and IP Address.
2. Cookies, IP address and geo-location: These details are usually captured by the browser automatically when you visit our Portal, as per the cookie settings of the browser.

4. How We Collect Data

We collect Data in the following ways:

1. data is given to us by you when you register; and
2. data is collected automatically pursuant to your visit to the Portal.

5. Data Shared by You

Tata Sons may collect your Data in several ways from your use of the Portal, including:

1. when you contact us (through any form, e-mail address, hyperlink or social media address posted therein);
2. when you enter a contest, competition or promotion;
3. when you opt to receive any communications (including any newsletter, promotional offers) from us;
4. from the information gathered by your visit to our webpages;
5. information provided by you/your team member.

Other users registered on this Portal may be able to see the following of your personal details: first name, last name, email, company, and phone.

6. Data that is Collected Automatically

1. We automatically collect some information about your visit to the Portal. This information helps us to make improvements to the content and navigation of the Portal and includes your IP address and the way you use and interact with its content.
2. Our web server service providers and/or affiliates who provide analytics and performance enhancement services collect IP address, operating system details, browsing details, device details and language settings. This information is aggregated to measure the number of visits, average time spent on the site, pages viewed and similar information. Tata Sons uses this information to measure the site usage, improve content and to ensure safety and security, as well as enhance performance of the Portal.
3. We may collect your Data automatically via Cookies, in line with the cookie settings on your browser. For more information about Cookies, please see the section below, titled “Cookies”.

7. Our Use of Data

Any or all the Data may be required by us from time to time to work on the experience when using the Portal. Specifically, Data may be used by us for the following purposes:

1. Email: (i) transmission by email or any other form of communication of marketing materials (related to Group Innovation) to you (ii) contact for survey or feedback which may be done using email (iii) to enable our group companies to reach out to you in relation to their Innovation related programmes managed by them (iv) to process your requests (such as replying to your queries)
2. Demographic data (gender, year of birth, city, country, function name, business unit, level, work experience, highest qualification, age group, designation, year of first job) may be used in aggregate form for analysis to improve our products or services
3. Photograph: may be used for brand enhancement purposes (in internal and external marketing materials, including to inspire Tata colleagues)
4. Country Code & Mobile Number: to contact you ahead of any event being organised by Group Innovation in which you are either participating or being invited

We may use your Data for the above purposes if we deem it necessary to do so for our legitimate interests. Tata Sons may use your information for internal business purposes, such as analysing and managing its programs. If you are not satisfied with this, you have the right to object in certain circumstances (see the section headed "Your rights" below).

8. Who We Share Data With

We may share your personal Data with:

1. affiliates, associates and subsidiaries of Tata Sons and other group companies, to assist them to reach out to you in relation to their Innovation programs or campaigns (including marketing and sales) and to process your query / requests;
2. our employees, vendors, agents and professional advisors working on our behalf for the purposes described in this policy statement; and
3. service-providers who assist in protecting and securing our systems and provide services to us which require the processing of personal data, to carry out analytics at the aggregate level, which might be used for driving improvements in Group Innovation programs.

We do not share other personal Data collected from the Portal with other third parties unless:

1. You request or authorize us to do so;
2. We need to comply with applicable law or respond to valid legal process; or
3. We need to operate and maintain the security of this website, including to prevent or stop an attack on our computer systems or networks.

9. Keeping Data secure

Tata Sons is committed to protecting the security of your Data. We use a variety of security technologies and procedures to help protect your Data from unauthorized access, use or disclosure. We use technical and organisational measures to safeguard your Data and we take full caution from our end to store your Data on secure servers. Technical and organisational measures include measures to deal with any suspected data breach. If you suspect any misuse or loss or unauthorised access to your Data, please let us know immediately by contacting us via e-mail on innovationsupport@tata.com.

In case of a data breach, Tata Sons will notify the data subjects about the type of breach, type of personal data involved, actions that Tata Sons will take for affected persons and assistance to affected persons to help assist themselves.

10. Retention of Personal Data

Tata Sons retains personal Data for as long as is necessary to fulfil the purposes for which it was collected, which may extend up to a period of 50 years from the date of last access to any of the abovementioned platforms, based on a determination of the nature and sensitivity of the personal Data, the purposes for which the personal Data was processed and applicable legal requirements.

Even if we delete/remove/de-activate your personal Data, it may persist on backup or archival media for audit, legal, tax or regulatory purposes.

11. Your Rights

When we process Data about you, we do so with your consent and/or as necessary to provide the Portal you use, operate our business, meet our contractual and legal obligations, protect the security of our systems and our customers, or fulfil other legitimate interests of Tata Sons as described in this privacy statement

Below, you will find additional privacy information that you may find important. Tata Sons adheres to applicable Data Protection Laws, including providing the following rights in relation to your Data:

1. Right to access - the right to request
   1. copies of the information we hold about you at any time, or
   2. that we modify or update such information.

If we provide you with access to the information we hold about you, we will not charge you for this,unless your request is manifestly unfounded or excessive. Tata Sons reserves the right to refuse any such request without providing an explanation.

2. Right to correct - the right to have your personal Data rectified if it is inaccurate or incomplete.
3. Right to erase - the right to delete/remove/de-activate your personal Data from our systems
4. Right to restrict use - the right to limit the way in which we can use your personal data
5. Right to sharing your Data - the right to request that we move, copy, or share your Data with other Tata companies
6. Right to object - the right to object to our use of your Data including where we use it for our legitimate interests.

For information about managing your personal Data, email subscriptions and promotional communications and/or exercising any of the above rights, please submit a request to us by sending an email on innovationsupport@tata.com. Tata Sons reserves the right to request any additional information/ documentation that is required to verify your identity to ensure genuineness of the request and security of the Data.

It is important that the personal Data we hold about you is accurate and current. Please keep us informed if your personal Data changes during the period for which we hold it.

For programs where your organisation is the Data Controller, please reach out to your respective organizational contact

12. Links to Other Websites

This Portal may, from time to time, provide links to other external websites. We have no control over Confidential such websites and are not responsible for the content of these websites. This privacy policy does not extend to your use of such websites.

13. Cookies

This Portal may place and access certain Cookies on your computer. Tata Sons uses Cookies to improve your experience of using the Portal.

You can choose to enable or disable Cookies in your internet browser. By default, most internet browsers accept Cookies, but this can be changed. For further details, please consult the help menu in your internet browser.

You can choose to delete Cookies at any time; however, you may lose any information that enables you to access the Portal more quickly and efficiently including, but not limited to, personalisation settings.

It is recommended that you ensure that your internet browser is up-to-date and that you consult the help and guidance provided by the developer of your internet browser if you are unsure about adjusting your Cookies settings.

14. Where We Store and Process Personal Data

Personal Data collected by Tata Sons may be stored and processed in your region, in India, and in any other country where Tata Sons or its affiliates, subsidiaries or service providers operate facilities. The storage location(s) are chosen to operate efficiently. We take steps to ensure that the Data we collect under this privacy statement is processed according to the provisions of this statement and the requirements of applicable law wherever the Data is located.

Data which we collect from you may be stored and processed in and transferred outside of your jurisdiction. Transfer of Data will be in compliance with applicable laws.

To ensure that your Data receives an adequate level of protection, we have put in place appropriate safeguards and procedures with the third parties we share your Data with. This ensures your Data is treated by those third parties in a way that is consistent with the Data Protection Laws

15. General

If any court or competent authority finds that any particular provision of this privacy policy (or part of any provision) is invalid, illegal or unenforceable, that provision or part-provision will, to the extent required, be deemed to be deleted. The validity and enforceability of the other provisions of this privacy policy shall remain unaffected.

16. Changes to this Privacy Statement

Tata Sons reserves the right to change this privacy statement as it may deem necessary, from time to time, or as may be required by law. Any changes will be immediately posted on the Portal, and you are deemed to have accepted the terms of the privacy statement on your first use of the Portal following the alterations

For any grievances or support, you may contact Tata Sons through innovationsupport@tata.com