Privacy Notice

1. Contact Details of the Data Fiduciary and Data Protection Officer

Data Fiduciary: Vedanta Iron & Steel Limited – IOB ("VISL-IOB")

Data Protection Officer (DPO) / CISO:
Vedanta Iron & Steel Limited – IOB
Sesa Ghor, 20 EDC Complex, Patto, Panjim, Goa – 403001, India

Email: SESA.ISMS@Vedanta.co.in

2. Purpose of Processing

VISL-IOB collects and processes personal data submitted through this application for legitimate business purposes, including:

• Processing enquiries, requests, and complaints.
• Vendor registration and onboarding.
• Recruitment and employment-related activities.
• User account creation and access management.
• Business communications and relationship management.
• Compliance with legal, regulatory, audit, and contractual obligations.
• Website administration, system monitoring, security management, fraud prevention, and service improvement.
• Any other purpose communicated to you at the time of data collection or otherwise permitted under applicable law.

Your personal data will be processed only for the purposes for which it is collected and in accordance with applicable laws.

3. Categories of Personal Data Collected

Depending on the nature of your interaction with VISL-IOB, we may collect the following information:

• Name
• Email Address
• Phone Number
• Designation
• Organization Details
• Address
• Country and State
• PAN Number (where required)
• Recruitment-related information
• Login and account information
• IP Address and usage information
• Information submitted through forms, enquiries, complaints, registrations, or other communications

Personal data collected will be limited to what is necessary for the specified purpose.

4. Legal Basis of Collection and Processing

VISL-IOB processes personal data on one or more of the following legal bases:

• Consent provided by the Data Principal.
• Performance of contractual obligations.
• Compliance with legal and regulatory requirements.
• Employment and recruitment-related requirements.
• Protection of legitimate business interests, including security, fraud prevention, risk management, and business operations.
• Other lawful grounds permitted under applicable data protection laws.

Where consent is relied upon, you may withdraw your consent at any time, subject to applicable legal and contractual obligations.

5. Recipients or Categories of Recipients of Personal Data

VISL-IOB may share personal data with:

• Vedanta Group entities.
• Authorized service providers and vendors.
• Cloud hosting and technology service providers.
• Recruitment agencies and background verification agencies.
• Consultants, auditors, legal advisors, insurers, and professional service providers.
• Regulatory authorities, government agencies, and law enforcement authorities.
• Other third parties where disclosure is required by law or necessary for legitimate business purposes.

All such recipients are obligated to maintain appropriate confidentiality, security, and data protection safeguards.

6. Transfer to Third Countries

VISL-IOB may transfer, store, access, or process personal data outside India where necessary for:

• Group-wide business operations.
• Technology support and cloud services.
• Vendor and service provider support.
• Legal, regulatory, compliance, or business requirements.

Any transfer of personal data outside India shall be undertaken in accordance with the Digital Personal Data Protection Act, 2023, applicable rules, and any restrictions or conditions prescribed by the Government of India from time to time.

7. Retention Period

Personal data will be retained only for as long as necessary to fulfill the purposes for which it was collected and to comply with applicable legal, regulatory, contractual, audit, dispute resolution, fraud prevention, or business requirements.

Upon expiry of the applicable retention period, personal data will be securely deleted, anonymized, or archived in accordance with VISL-IOB's retention requirements and applicable law.

8. Data Principal Rights

Subject to applicable law, you may exercise the following rights:

• Right to access your personal data.
• Right to correction of inaccurate personal data.
• Right to completion or updating of personal data.
• Right to erasure of personal data.
• Right to withdraw consent.
• Right to nominate another individual to exercise your rights.
• Right to grievance redressal.
• Right to lodge a complaint with the Data Protection Board of India where applicable.

Requests relating to your personal data may be submitted to the Data Protection Officer using the contact details provided above.

9. Security of Personal Data

VISL-IOB implements appropriate technical, organizational, and security measures to protect personal data against unauthorized access, disclosure, misuse, alteration, loss, or destruction.

These measures are regularly reviewed and updated to maintain the confidentiality, integrity, and availability of personal data.

10. Changes to this Privacy Notice

VISL-IOB may update this Privacy Notice periodically to reflect changes in legal, regulatory, operational, or business requirements.

This Privacy Notice shall be reviewed regularly, maintained under version control, and the latest version shall be made available through this application..