About this Notice and the DPDP Act, 2023

This Notice is provided in accordance with the Digital Personal Data Protection Act, 2023 (the “DPDP Act”) and the rules and standards made under it. For the purposes of the DPDP Act, E FACTOR EXPERIENCES is the “Data Fiduciary” in respect of the personal data we collect from you, and you are the “Data Principal”.

Lawful basis for processing your personal data

We process your personal data on the following lawful bases recognised under the DPDP Act:

• Your consent — for most processing in connection with your registration, attendance, and our communications with you. Your consent is sought through a clear affirmative action, such as ticking a checkbox at the time of registration.
• Certain legitimate uses recognised under the DPDP Act — including compliance with any law, judgment or order, performance of a function under law, and responding to a medical emergency or threat to public health or safety.

Your rights as a Data Principal under the DPDP Act

Subject to the conditions in the DPDP Act, you have the following rights in respect of your personal data:

• Right to access information — to obtain a summary of the personal data we process about you, the processing activities undertaken, and the identities of other Data Fiduciaries and Data Processors with whom your data has been shared.
• Right to correction and erasure — to have inaccurate or misleading data corrected, completed or updated, and to have personal data erased where it is no longer required for the purpose for which it was collected.
• Right to grievance redressal — to raise complaints with our Grievance Officer regarding any act or omission affecting your rights.
• Right to nominate — to nominate another individual who may exercise your rights under the DPDP Act in the event of your death or incapacity.
• Right to withdraw consent — you may withdraw your consent at any time, with effect from the date of withdrawal. Withdrawing consent is as easy as giving it. Withdrawal will not affect the lawfulness of processing carried out before the withdrawal, and we may continue to process your data where another lawful basis applies (for example, to meet a legal obligation).

You also have the right to lodge a complaint with the Data Protection Board of India in accordance with the DPDP Act.

How to exercise your rights or withdraw consent

You may exercise any of the rights set out above, including withdrawal of consent, by writing to our Grievance Officer at the contact details given in the next section. To withdraw consent for marketing communications specifically, you may also use the “Unsubscribe” link provided in our emails.

We may ask you to verify your identity before we act on your request. We will acknowledge your request within a reasonable period and aim to respond within thirty (30) days, or such longer period as may be permitted under applicable law. There is no charge for exercising your rights, unless your request is manifestly unfounded or excessive.

Personal data breach notification

In the event of a personal data breach affecting your personal data, we will notify you and the Data Protection Board of India in accordance with the requirements of the DPDP Act, including the nature of the breach, its likely consequences, and the measures we have taken or propose to take to address it.

Cookies and similar technologies

Our platform uses cookies and similar technologies to operate the site, remember your preferences, and (with your consent) to measure performance and deliver marketing. You can manage your preferences via the cookie banner on our platform or your browser settings. Essential cookies, which are necessary for the platform to function, cannot be switched off.

Personal data of children

Our platform and the services we offer are intended for individuals aged eighteen (18) years and above. We do not knowingly collect personal data of children except where verifiable consent of a parent or lawful guardian has been obtained in accordance with the DPDP Act. If you believe a child’s personal data has been collected without such consent, please contact our Grievance Officer.

Consent for marketing communications

Where we wish to send you marketing communications about our future events, offers, content, or related promotions, we will seek your separate, specific consent for that purpose at the time of registration through a clearly-marked, optional checkbox. Ticking this checkbox is not a condition of completing your registration. You can withdraw this consent at any time by clicking “Unsubscribe” in any marketing email or writing to our Grievance Officer.