Who controls personal data

The ETEXKART entity that entered into an agreement with a customer entity or such other ETEXKART entity which is providing services or is communicating with a customer entity is responsible for the personal data. For applicable data protection law, such Silicon Automation entity will be the controller of the personal data. Each such entity is regarded as an independent controller of the personal data, and this Data Privacy Policy (DPP) applies to all such companies.

The personal data we collect and how we get it

We collect the following categories of personal data:

• The business contact information shared with us: name, title, job title, email address, business address, telephone number, mobile telephone number
• Additional information provided to us in the course of our business relations, such as: interests in ETEXKART products, marketing preferences, registration and login information, audit logs, contract or order data, invoices, payments, credit card or other payment information, business partner history, etc.
• Information a browser makes available when an individual visits an ETEXKART website or an Silicon Automation mobile application: IP address, the source of the site visit, time spent on the website or a particular page, links clicked, comments shared, browser type, date and time of visit, etc.

What we may use personal data for

• Depending on our product and service delivery we may use the personal data to:
  
• process and fulfill orders and keep an individual informed about the status of an order;
• provide and administer our services, software and products;
• provide customer support and process, evaluate and respond to requests and inquiries;
• conduct and facilitate customer satisfaction surveys; and
• perform data analytics (such as market research, trend analysis, financial analysis, and customer segmentation).

We only collect the personal data that we need for the above purposes. We may also anonymize the personal data, so it no longer identifies an individual and use it for various purposes, including the improvement of our services, software and products and testing our IT systems.

The legal basis on which we use personal data

We use the personal data for the purposes described in this DPP based on one of the following legal bases, as applicable:

• We may process the personal data for the fulfilment of contractual obligations resulting from contracts, or as part of pre-contractual measures;
• We may process the personal data on the basis of statutory requirements, for example, on the basis of tax or reporting obligations, cooperation obligations with authorities or statutory retention periods; or
• We will rely on our legitimate interests to process the personal data within the scope of a business relationship. Our legitimate interests to collect and use the personal data for this purpose are management and furtherance of our business.

How long we keep personal data

We only keep the personal data for as long as necessary for the purposes described in this DPP. After this time, we will securely delete the personal data, unless we are required to keep it in order to meet legal or regulatory obligations, or to resolve potential disputes.

Technical and organizational security measures

We take appropriate security measures to protect against unauthorized access to or unauthorized alteration, disclosure or destruction of personal data and we restrict access to personal data to Silicon Automation employees who need to have that information in order to fulfill their respective tasks in accordance with the customer contract and this DPP. We will in particular take the following measures to protect the personal data if and when appropriate.

Access control and pseudonymization

• Physical access controls to prevent unauthorized access to data processing facilities, e.g.: entry protected by magnetic or chip cards, keys, biometric controls, facility security services and/or entrance security staff, alarm systems, video/CCTV systems;
• Logical and data access controls to prevent unauthorized use of the data processing and data storage systems, e.g.: (secure) passwords, automatic blocking/locking mechanisms, multi-factor authentication, encryption of data at rest and transit; and unauthorized reading, copying, changes or deletions of data within the system, e.g. rights authorization concept, need-to-know based access, logging and storing of system access events;
• Segregation of data to isolate processing of data, which is collected for different purposes, e.g. multiple controller support, sandboxing;
• Pseudonymisation to process personal data in such a method/way, that the data cannot be associated with a specific data subject without the assistance of additional information.

Integrity

• Data transfer control to prevent unauthorized changes or deletion of data within network or physical transfer or transport, e.g.: digital signing, write-only file systems or media;
• Data entry controls to verify by whom personal data is entered into a, is changed in or deleted, from a data processing system e.g.: logging and storing of transactions.

Availability and resilience

• Availability controls to prevent accidental or willful destruction or loss, e.g.: backup strategy (online/offline; on-site/off-site), uninterruptible power supply (UPS), malware protection, threat, vulnerability and patch management, firewall, reporting procedures and contingency planning;
• Rapid recovery, e.g. Disaster Recovery Strategy and Processes.

Procedures for regular testing, assessment and evaluation

• Data protection management, incident response management, intrusion detection and protection, data protection by design and default;
• Order or contract controls, e.g.: clear and unambiguous contractual arrangements, formalized instruction management, strict controls on the selection of third parties, duty of pre-evaluation, supervisory follow-up checks.

Exchange Policy

Order cancellation, Product exchange, return and warranty policy is offered by sellers. Kindly refer the respective products and its seller pages for the same.