We employ the requisite data protection measures to ensure that your personal data is safe with us.
The collection and processing of data provided by you is subject to the Legasis Group Data Privacy Policy (“the Policy”). To know more about your rights under the Policy click here.

Please note that your consent is pivotal for us to fulfill our obligations which we may have contracted for under any agreement/form/contract/purchase order as enumerated under the Policy. If you click on ‘Yes’, it will be deemed that:

• You are above 18 years of age.
• You understand that you have provided specific consent to the Legasis Group to collect and process the personal data provided by you subject to the Policy.
• The consent provided by you forms the basis for lawful processing of personal data by the Legasis Group.
• You have read and understood the terms and conditions of the Policy and are aware that the collection and processing of your personal data will be subject to the same.
• You have read and understood the terms and conditions of the Policy and are aware that the collection and processing of your personal data will be subject to the same.

LEGASIS GROUP DATA PRIVACY POLICY

• About Legasis Group:

  Legasis Service Private Limited (“LSPL”) is a company incorporated under the provisions of the Companies Act, 1956 of India, having its registered office situated at 12A/09, 13th Floor, Parinee Cresenzo, G-Block, BKC, Bandra East, Mumbai - 400051, India, and its Delivery Centre located at B-105, International Convention Centre, Senapati Bapat Road, Pune 411016, India. Legasis Partners Advocates and Solicitors (“LP”), Legasis Consulting Services Private Limited (“LCSPL”) and Ethics Research and Consulting Private Limited (“EthicsIndia”), are the group entities with the same addresses as those of LSPL. ComplyGlobal Pte Ltd (“CGPTE”), a wholly owned subsidiary of LSPL, is a company incorporated in Singapore with its registered office at 583, Orchard Road, #06-01, FORUM, Singapore 238884 and Comply Global Cloud Solutions Private Limited (“CGIndia”) is a subsidiary of LSPL incorporated in India having its registered office at # 102, Eden Park 20, Vittal Mallya Road, Bangalore 560001, India. LSPL, LP, LCSPL, EthicsIndia, CGPTE and CGIndia will be hereinafter collectively referred to as “Legasis Group”.

• Objective of the Privacy Policy:

  The objective of this Privacy Policy (“the Policy”) is to help you understand the type of personal data collected by Legasis Group during the course of providing its various offerings, the purpose of such collection and the rights available to you in relation to your personal data.
  
  Since inception, Legasis Group has always been committed to safeguard and protect the data of all its stakeholders. In recent times, there has been increased focus of various countries on protecting the data of its citizens. In view of the proliferation and extensive use of personal data in an ever expanding digital India, data privacy and security are also of prime concern of the Government of India. Consequently, the Government of India has set up the Justice B N Srikrishna Committee, which will be instrumental in the enactment of Data Protection framework of India.
  
  This Policy has been suitably modified in accordance with the provisions of the General Data Protection Regulation (“GDPR”), issued by the European Commission that comes into force from May 25, 2018, to ensure that you are informed about the requisite levels of data protection adopted by the Legasis Group and your rights in relation to your personal data collected by the Legasis Group.

• Collection of Personal Data:

  • Types of personal data:
    During the course of services being rendered to you, proposed to be rendered to you or agreed to be rendered to you by Legasis Group, Legasis Group collects any or all of the following types of personal data belonging to you:
    

    • Your name;
    • Your work/personal email id;
    • Your phone number which may include your work landline number and/or mobile number;
    • The name and address of your employer organisation.
    
    Legasis Group collects, records, stores, organises, structures and upon requested so by the data subject alters, restricts, erases or destructs the personal data.

  • Purpose of collection of personal data:
    The personal data referred to in sub-clause 3(a) is collected and used by Legasis Group for any or all of the following purposes:

    • Approaching you in the course of marketing the variety of legal services offered by Legasis Group;
    • Creating your role-based user access in the IT enabled legal solutions that have been agreed to be implemented for your employer organisation in accordance with the principal contract signed between Legasis Group and your employer organisation;
    • Rendering effective legal services to you as may be agreed under the principal agreement signed between Legasis Group and yourself and/or your employer organisation for the purpose of such services;
    • Sending you the periodic knowledge-based issues such as newsletters, knowledge-posts or magazines issued by Legasis Group;
    • Inviting you to the professional events conducted by Legasis Group from time to time, for example, compliance 10/10 hosted by Legasis Group every year;
    • Processing your job application in Legasis Group for any suitable position
    • Engaging your employer organisation for the professional services outsourced on behalf of our clients as per the principal agreement signed between Legasis and your employment organisation.
    
    Legasis Group does not use the personal data for any other purposes than mentioned in sub-clauses (i) to (vi) above. Legasis Group does not sell, rent or provide any information to any third-party entities.

  • Sources of collection of personal data:
    Personal data referred to in sub-clause (a) may be collected by Legasis Group from one or more of the following sources for the purposes mentioned in sub-clause (b).

    • Yourself directly, or
    • Your employer organisation, or
    • Any common professional networking platforms for example, LinkedIn or the website of your organisation, or
    • Any publicly accessible government owned databases, for example, Ministry of Corporate Affairs.

• Retention of personal data:

  The personal data collected as and in the manner of clause (3) will be stored and retained by Legasis Group in accordance with the applicable laws and regulations, more specifically for the period as mentioned below for each purpose:

  • For not more than 5 years, unless otherwise intimated to Legasis Group in writing, for the purpose described in clause 3(b)(i);
  • For such period as long as the principal agreement referred to in clause 3(b)(ii) or any renewal thereof is enforceable, unless removal of such role-based user access is intimated to Legasis Group, for the purpose described in clause 3(b)(ii);
  • For such period as long as the principal agreement referred to in clause 3(b)(iii) or any renewal thereof is enforceable for the purpose described in clause 3(b)(iii);
  • Until any intimation of un-subscription is received by Legasis Group either by you or your employer organisation for the purpose described in clause 3(b)(iv);
  • Until any intimation of un-subscription is received by Legasis Group either by you or your employer organisation for the purpose described in clause 3(b)(v);
  • In case of making you a successful job offer, for the period as may be agreed in your employment contract and in case of rejecting your job application, for the period of not more than 2 years for the purpose described in clause 3(b)(vi);
  • For such period as long as the principal agreement referred to in clause 3(b)(vii) or any renewal thereof is enforceable for the purpose described in clause 3(b)(vii).



• Rights with respect to Your Personal Data:

  By virtue of being a data subject under GDPR, you have the following rights with respect to the personal data collected by Legasis Group:
  

  • You have the right to request Legasis Group to erase your personal data from our records for opting out of any of the purposes mentioned in the aforementioned clause 3(b). You may exercise your right by writing to us at dpr-consent@legasis.in directly. Legasis Group will process your request within one (1) month of receiving such request from you unless Legasis Group requires to process the personal data for exercising the right of freedom of expression and information, or for compliance with a legal obligation under the European Union or Member State law, or for reasons of public interest in the area of public health as specified in GDPR, or for the establishment, exercise or defence of legal claims.
  • You have the right to request Legasis Group to update, rectify, edit, complete your personal data in our records by writing to us at dpr-support@legasis.in. Legasis Group will process your request within ten (10) working days of receiving such request from you.
  You have the right to request Legasis Group to provide access to and/or obtain details of your personal data in our records by writing to us at dpr-support@legasis.in. Legasis Group will process your request within ten (10) working days of receiving such request from you. You have the right to receive your personal data in a structured, commonly used and machine-readable format in case the processing is carried out by Legasis Group by automated means. Such access will be provided to you free of charge unless such requests are manifestly unfounded or excessive, in particular because of their repetitive character.
  • d. You have the right to request Legasis Group to restrict further processing of your personal data in our records for any of the reasons as stated below:
    • Accuracy of personal data is contested by you;
    • Lawfulness of processing of personal data is contested and erasure is opposed by you;
    • The processing of personal data is no longer required by the Legasis Group but is required by you for the establishment, exercise or defence of legal claims;
    • Processing has been objected by you pending the verification of legitimate grounds of Legasis Group.

    You may exercise this right by writing to us at dpr-consent@legasis.in directly or using a Consent Form on our website. Legasis Group will process your request within one (1) month of receiving such request from you unless Legasis Group requires your personal data for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of a Member State. In such cases, Legasis Group will keep you informed.

  • With respect to data portability, you have the right to request Legasis Group to transmit your personal data to any other controller in cases where the processing is carried out by automated means by Legasis Group. You may exercise this right by writing to us at dpr-support@legasis.in. Legasis Group will process your request within one (1) month of receiving such request from you, where technically feasible, unless processing is necessary in the public interest or it adversely affects the rights and freedoms of others
  • You have the right to lodge a complaint with the Supervisory Authority in case you are not satisfied with any of our data privacy measures as contemplated in the GDPR.

• Legal Basis for processing:

  In keeping with the provisions of Article 6 of the GDPR, it will be lawful for Legasis Group to process your personal data after obtaining your consent for data collection as mentioned in clause 3 of this Policy and/or as per the principal agreements referred to in clause 3(b) to fulfil our obligations under such agreements.

• Review and Amendment of the Policy:

  Legasis Group reserves the right of reviewing and amending the Policy in keeping with the expansion of its business and changes in the business processes. In such cases, the amended policy will be updated on our website and will be emailed to you provided your email address is in our records.

• Contact us:

  In case of any queries or concerns with respect to the Policy, you may write to us at dpr-support@legasis.in.