1. Introduction 

L&T Technology Services Limited (hereafter referred to as “LLTS”, “we”, “our”, “us”) is committed to protect the privacy and security of your personal data that we process. This Privacy Notice (‘Notice’) describes our privacy practices regarding collection and use of your personal data when you visit any LTTS office/premises.  

This notice must be read together with any other privacy notice that is provided to you on specific occasions when we are collecting or processing your personal data, so that you are aware of how and why we are using it.  

This Privacy Notice for Visitors was last updated on 1^st July 2024.   

2. Applicability 

This Notice applies to all visitors including but not limited to clients, job applicants, employees, third party service providers, and whoever enter any LTTS office/premises. This Notice does not form part of any contract of employment or contract to provide services. This Notice can be updated at any time. 

3. Relationship  

We are the “Data Controller”, which means that we decide why and how we process your personal data.  

4. Your personal data that we will process 

When you visit any LTTS office/premises, we may need to collect and hold certain information about you and your visit, which may include personal data, and occasionally special category of data or sensitive personal data such as: 

• Personal details including but not limited to name, title, signatures, CCTV footage, mobile number etc. 
• National ID details including but not limited to passport number and any other national identification number, etc. 
• Biometric information 
• Relevant health information for the purpose of health and safety at LTTS office/premises or to comply with government notifications. 

5. How is your personal data collected? 

We collect personal data about visitors directly through visitor’s registers or visitor’s logbook maintained at the reception. We may collect additional personal data in the course of business, if required.  

6. Your Duties as a Data Subject¹ 

• Comply with the provisions of all applicable laws for the time being in force while exercising rights under the provision of India’s Digital Personal Data Protection Act (2023). 
• Ensure not to impersonate another person while providing Personal Data for a specified purpose. 
• Ensure not to suppress any material information while providing Personal Data for any document, unique identifier, proof of identity or proof of address issued by the State or any of its instrumentalities. 
• Ensure not to register a false or frivolous grievance or complaint with LTTS or the Board. 
• Furnish only such information as is verifiably authentic, while exercising the right to correction or erasure under the provisions of India’s Digital Personal Data Protection Act (2023) or the rules made thereunder.  

7. Purpose for processing your personal data 

We may use your personal data when allowed under law and mostly for the following purposes: 

• To create gate pass for your entry 
• To maintain records, such as for audit purposes 
• To ensure the physical security of the people and items, security of confidential Information located in the company’s premises or accessible from the company’s premises. 
• To prevent loss, frauds, thefts, injuries, acts of terrorism and other events of such kind within LTTS office/premises. 

We rely on the following lawful basis: 

• Where we need to comply with a legal obligation.  
• Where it is necessary for our legitimate interests (or those of a third party) provided your interests and fundamental rights do not override those legitimate interests. 
• Where we need to protect your interests (or someone else's interests). 
• Where it is needed in the public interest (or for official purposes).   

Please note that, when it is required in the interest of our business or is permitted by law, we may process your personal data without your knowledge or consent. 

8. Data sharing 

We may share your personal data with the following recipients:  

• Third parties with whom we have a contractual relationship, including but not limited to office security vendors, etc. We require third parties to respect the security of your data and to treat it in accordance with our instructions and as per the law. 
• Internal departments, including our IT team, admin team or any other team if access to the data is necessary for performance of their roles. 

9. Data security 

We have implemented reasonable technical, physical, contractual, and organizational safeguards to secure your personal data. Third parties, with whom we may share your personal data, are required to treat such data with the required amount of security, confidentiality, and care.  

10. Data retention 

We will only retain your personal data as long as necessary to fulfil the purposes for which it was collected. Your personal data will be retained and securely destroyed in accordance with our data retention policy or as per applicable laws and regulations. 

11. Your rights 

You have the following rights regarding your personal data: 

• right to request access to your data 
• right to correct your data if it is incorrect 
• right to obtain from the controller the erasure of your data 
• right to object to your data being processed 
• right to nominate any other individual, who shall, in the event of death or incapacity, exercise your rights in accordance with the provisions of India’s Digital Personal Data Protection Act (2023) and the rules made thereunder²  

If you are a California resident, you have the following rights under certain circumstances:  

• Right to Know: You have the right to request from us information on the personal data about you that we have processed in the preceding 12 months. This also enables you to receive a copy of the personal data we hold about you. 
• Right to Delete: You have the right to request from us the deletion of your personal data. 
• Right to Non-Discriminate: You have the right to exercise any of the rights listed above (and any other rights under CCPA) without discrimination by us. 

Additionally, under the CCPA, you can request LTTS to not sell your personal information to third parties. Similarly, under CCPA, LTTS is also required to inform you if LTTS sells or has sold your personal data during the last 12 months. 

If you wish to exercise your rights, please contact the Data Protection Officer over email dpo@ltts.com. 

We reserve the right to update this Notice at any time. Please visit our website from time to time for to know about the changes in this Notice.  For the detailed information, kindly refer to our Privacy Policies and Notices | L&T Technology Services (ltts.com)  

Footnotes:

[1] Additional requirement from India’s Digital Personal Data Protection Act (2023)

[2] Additional requirement from India’s Digital Personal Data Protection Act (2023)