We are delighted that you have shown interest in MolBAiozyme Pvt Ltd. Data protection is a high priority for our management. The use of our website is possible without providing personal data; however, if a data subject wants to use special enterprise services, processing of personal data could become necessary. If processing personal data is required and there is no statutory basis for such processing, we generally obtain consent from the data subject.

Definitions

This data protection declaration is based on the terms used by Indian data protection regulations. Our data protection declaration aims to be legible and understandable for the general public as well as our customers and business partners. Key terms include:

• Personal data: Information relating to an identified or identifiable natural person.
• Data subject: Any identified or identifiable natural person whose personal data is processed by the controller.
• Processing: Any operation performed on personal data, such as collection, recording, organization, storage, adaptation, retrieval, consultation, use, disclosure, alignment, restriction, erasure, or destruction.
• Restriction of processing: Marking of stored personal data with the aim of limiting their processing in the future.
• Profiling: Automated processing of personal data to evaluate personal aspects.
• Pseudonymisation: Processing personal data so that it can no longer be attributed to a specific data subject without additional information.
• Controller: The entity that determines the purposes and means of processing personal data.
• Processor: The entity that processes personal data on behalf of the controller.
• Recipient: The entity to which personal data is disclosed.
• Third party: Any entity other than the data subject, controller, processor, and persons authorized to process personal data.
• Consent: Any freely given, specific, informed, and unambiguous indication of the data subject’s wishes.

Name and Address of the Controller

Controller for the purposes of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, other data protection laws applicable in India, and other provisions related to data protection is:

MolBAiozyme Pvt Ltd

Jamnagar, Gujarat, India

Collection of General Data and Information

Our website collects a series of general data and information when a data subject or automated system calls up the website. This general data and information are stored in the server log files and may include browser types and versions used, the operating system, the website from which an accessing system reaches our website, sub-websites, date and time of access, an Internet protocol address (IP address), the Internet service provider, and any other similar data and information.

MolBAiozyme Pvt Ltd does not draw any conclusions about the data subject from this information. This information is needed to deliver the content of our website correctly, optimize the content and advertisements, ensure the long-term viability of our information technology systems and website technology, and provide law enforcement authorities with the information necessary for criminal prosecution in case of a cyber-attack. Therefore, MolBAiozyme Pvt Ltd analyzes anonymously collected data and information statistically to increase data protection and data security.

Contact Possibility via the Website

The website of MolBAiozyme Pvt Ltd contains information that enables quick electronic contact to our enterprise as well as direct communication with us. If a data subject contacts the controller by e-mail or via a contact form, the personal data transmitted by the data subject are automatically stored. Such personal data transmitted on a voluntary basis are stored for processing or contacting the data subject. There is no transfer of this personal data to third parties.

Routine Erasure and Blocking of Personal Data

The data controller processes and stores the personal data of the data subject only for the period necessary to achieve the purpose of storage or as far as this is granted by Indian law or other regulations to which the controller is subject. If the storage purpose is not applicable or if a storage period prescribed by law expires, personal data are routinely blocked or erased in accordance with legal requirements.

Rights of the Data Subject

1. a) Right of Confirmation: Data subjects have the right to obtain confirmation as to whether or not personal data concerning them are being processed.
2. b) Right of Access: Data subjects have the right to obtain free information about their personal data stored at any time and a copy of this information. This includes the purposes of the processing, the categories of personal data concerned, the recipients or categories of recipients to whom the personal data have been or will be disclosed, the envisaged period for which the personal data will be stored, the existence of the right to request rectification or erasure of personal data or restriction of processing of personal data, the existence of the right to lodge a complaint with a supervisory authority, the source of the personal data if not collected from the data subject, and the existence of automated decision-making, including profiling.
3. c) Right to Rectification: Data subjects have the right to obtain the rectification of inaccurate personal data concerning them without undue delay and to have incomplete personal data completed.
4. d) Right to Erasure (Right to be Forgotten): Data subjects have the right to obtain the erasure of personal data concerning them without undue delay if the processing is not necessary for reasons such as compliance with a legal obligation, public interest, or establishment, exercise, or defense of legal claims.
5. e) Right of Restriction of Processing: Data subjects have the right to obtain from the controller restriction of processing where one of the following applies: the accuracy of the personal data is contested by the data subject, the processing is unlawful, the controller no longer needs the personal data but they are required by the data subject for the establishment, exercise, or defense of legal claims, or the data subject has objected to processing pending the verification whether the legitimate grounds of the controller override those of the data subject.
6. f) Right to Data Portability: Data subjects have the right to receive the personal data concerning them, which they provided to a controller, in a structured, commonly used, and machine-readable format and have the right to transmit those data to another controller without hindrance.
7. g) Right to Object: Data subjects have the right to object to the processing of personal data concerning them at any time on grounds relating to their particular situation. This includes the right to object to profiling based on these provisions. MolBAiozyme Pvt Ltd shall no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing.
8. h) Automated Individual Decision-Making, Including Profiling: Data subjects have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them, unless the decision is necessary for entering into or the performance of a contract between the data subject and a data controller, is authorized by law, or is based on the data subject’s explicit consent.
9. i) Right to Withdraw Data Protection Consent: Data subjects have the right to withdraw their consent to processing of their personal data at any time.

Data Protection for Applications and the Application Procedures

The data controller collects and processes the personal data of applicants for the purpose of processing the application procedure. This may be carried out electronically if an applicant submits application documents by e-mail or via a web form. If the data controller concludes an employment contract with an applicant, the data will be stored for processing the employment relationship in compliance with legal requirements. If no employment contract is concluded, the application documents are erased two months after notification of the refusal decision, unless other legitimate interests of the controller require retention.

Legal Basis for the Processing

Art. 6(1) lit. a serve as the legal basis for processing operations for which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract to which the data subject is party, the processing is based on Art. 6(1) lit. b. If our company is subject to a legal obligation requiring processing of personal data, such as for tax obligations, the processing is based on Art. 6(1) lit. c. In rare cases, processing of personal data may be necessary to protect the vital interests of the data subject or another natural person, based on Art. 6(1) lit. d. Processing operations not covered by any of these legal grounds are based on Art. 6(1) lit. f if processing is necessary for the purposes of the legitimate interests pursued by our company or a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject.

The Legitimate Interests Pursued by the Controller or by a Third Party

Where the processing of personal data is based on Art. 6(1) lit. f, our legitimate interest is to carry out our business in favor of the well-being of all our employees and shareholders.

Period for Which the Personal Data Will Be Stored

The criteria used to determine the period of storage of personal data is the respective statutory retention period. After expiration of that period, the corresponding data is routinely deleted as long as it is no longer necessary for the fulfillment of the contract or the initiation of a contract.

Provision of Personal Data as Statutory or Contractual Requirement; Requirement Necessary to Enter Into a Contract; Obligation of the Data Subject to Provide the Personal Data; Possible Consequences of Failure to Provide Such Data

The provision of personal data is partly required by law (e.g., tax regulations) or can also result from contractual provisions. Sometimes it may be necessary to conclude a contract that the data subject provides us with personal data which must subsequently be processed by us. The data subject is obliged to provide personal data when signing a contract with us. The non-provision of personal data would have the consequence that the contract with the data subject could not be concluded. Before personal data is provided, the data subject must contact any employee who will clarify whether the provision of the personal data is required by law or contract, or is necessary for the conclusion of the contract, and the consequences of non-provision of the personal data.

Existence of Automated Decision-Making

As a responsible company, we do not use automatic decision-making or profiling.