Duraco Ltée (hereinafter “The Company” or “we” or “us”) is concerned about privacy issues and wants you to know how we are collecting, using, processing, disclosing and protecting your information in accordance with applicable law and the Data Protection Act 2017.
You may not be asked for consent where the Company has a lawful basis for processing personal data we already have, or acquire through performance of a contract, in compliance with legal requirements, for the protection of your vital interests as a data subject, for the performance of a task carried out in the public interest or the processing is necessary for other legitimate interests of us or a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject.
Personal Data we collect
Personal data means any information relating to a data subject, as such term is defined under the Data Protection Act 2017. Personal data includes, but is not restricted to:
Personal data such as race, ethnicity, sexual orientation, medical information or biometrics are sensitive data according to the requirements under the Data Protection Act 2017 and as such are subject to enhanced security measures as required by the applicable law.
Use of Personal Data
To the extent permitted by law, we may use your information for purposes of operating our business and other legitimate purposes. We may use your personal information in the following ways:
The purpose and retention conditions for which we collect the personal data will be stated in any consent form you are asked to accept or implied in any participation in a lawful basis for collection. Where we collect or use personal information other than as set out in this policy, we will ensure that we do so in accordance with applicable law and the Data Protection Act 2017.
Disclosure of Personal Data
We may disclose your Personal Information with your consent or:
If you choose to provide personal information of a third party (such as name, email and telephone number) to Duraco Ltée, you represent and warrant that you have permission from the third party to do so (e.g. Marketing material or Job referrals). However, we do not accept any personal data of third party without the proof of consent.
Duraco Ltée is committed to comply with regulations with respect to your rights. It is your responsibility as a data subject to assure that your information we collect is kept up to date and is accurate. The Company takes all reasonable step to discard or update any inaccurate data without delay.
You have certain rights in respect to how we use your personal data. These are:
Please contact us at email@example.com if you wish to exercise any of the above rights.
Protecting your Personal Data
The security of your personal data is important for us. We use appropriate methods to protect your personal data. Duraco Ltée is compliant with the basic privacy and security principles such as access control to different categories of personal data, clear screen policy, clean desk policy, and lockable document storage cabinets. Wherever practical, we ensure that data is encrypted during transit and storage and that access to this data is strictly limited to a minimum number of individuals and subject to confidentiality obligations.
We also train our employees on privacy and security protection to raise awareness on personal data protection and to ensure the security of your personal data. Our personnel having access to your personal data are bound by a non-disclosure agreement with the Company.
The Company only retains your personal data for a reasonable period and until the purpose for which the data was collected is achieved, including for the purposes of satisfying any legal, accounting, or reporting requirements. It is our policy to destroy personal information once we are no longer required to retain it by law or business.
In certain circumstances, we may anonymize your personal data (so that it is no longer associated with you) for research or statistical purposes.
Children’s Personal Data
The Company is sensitive with regards to children’s personal data, which is considered sensitive data. Children’s personal data is collected with prior consent from their parents or guardians, for purposes outlined in that consent, for example, to be published in our newsletter or on our website or otherwise displayed within the Company. The Company is involved in activities including Taylor Smith foundation, Welfare, CSR program and Company events, where Children’s personal data may be collected. Duraco Ltée will be using or disclosing the data only as permitted by law, with the clear consent of the parents or guardians of the child or as required for the child’s protection. If we accidentally collect personal data of a child without verified prior permission from the parent or guardian, we will endeavor to delete the data at the earliest practicable opportunity.
Transfer of information outside Mauritius
Your personal data we collect may be processed or accessed outside Mauritius where Duraco Ltée or its affiliates, service providers or business partners are situated. In this case, we take appropriate safeguards to ensure that the personal data is treated securely in accordance with this policy and applicable laws. We use encryption where appropriate. The Company uses a wide range of legal procedures, such as standard contractual clauses with those parties to ensure data is processed in a secure manner.