Effective Date : Aug 26th,2024
1. Introduction
1.1 Purpose
GVR EMPORA HRMS upholds privacy as a core principle and a fundamental aspect of employee trust. With the dynamic regulatory landscape, this GVR EMPORA HRMS Data Privacy Policy 2025 ("Policy") establishes the framework for collecting, using, and safeguarding Human Resources (HR) personal data within the GVR EMPORA HRMS Portal.
1.2 Local Compliance
Adjustments necessary for compliance with local laws will be incorporated and communicated to employees as required.
2. Scope of this Policy
2.1 Applicability
This Policy applies to the collection, maintenance, and processing of personal data of past, present, temporary, and permanent employees, contractors, consultants, and trainees ("you") by GVR EMPORA HRMS and EMPORA Mobile Apps throughout the employment lifecycle.
2.2 Exclusions
- Personal data obtained outside the employment relationship, such as through GVR’s commercial services, is not governed by this Policy.
- This Policy does not constitute a contract and may be updated periodically, with employees being informed of any changes.
3. Privacy Commitment
3.1 Confidentiality & Security
- GVR EMPORA HRMS is committed to protecting employee privacy and ensuring HR data confidentiality.
- Employees responsible for managing personal data must comply with this Policy and all relevant GVR EMPORA HRMS security standards.
3.2 Third-Party Service Providers
GVR EMPORA HRMS ensures that third-party vendors handling HR data comply with stringent confidentiality and security measures consistent with this Policy.
4. Categories of Personal Data Processed
The following personal data categories are processed:
- Biographical Data (e.g., full name, gender, date of birth, nationality, employment history, educational background)
- Contact Information (e.g., home address, phone number, email, country of residence)
- Government Identification (e.g., national ID, passport details)
- Performance Metrics (e.g., feedback, appraisals, key performance indicators)
- IT & Communication Usage (e.g., work emails, monitored internet usage, AI-driven interactions)
- Payroll & Compensation (e.g., salary details, tax information, bank account data)
- Additional Voluntary Data (e.g., surveys, wellness programs, health data when required by law)
5. Legal Basis for Processing
- Personal data is processed to fulfill employment agreements and meet legal employer obligations.
- In some cases, data is processed based on legitimate business interests, with privacy safeguards in place.
- Explicit consent is sought where legally required and can be revoked at any time.
6. How Personal Data is Used
- Geo-Fencing & Location Permissions (e.g., tracking attendance, ensuring remote work compliance, enhancing security by restricting access to authorized locations)
- Workforce Management (e.g., performance reviews, career development, policy compliance, training programs)
- Payroll & Benefits Administration (e.g., salary processing, tax deductions, insurance, pension schemes)
- Hiring & Background Checks (e.g., recruitment, eligibility verification, performance tracking)
- Regulatory Compliance & Investigations (e.g., legal audits, disciplinary actions, fraud prevention)
- Cybersecurity & IT Management (e.g., employee authentication, security monitoring, IT resource management)
- Health & Safety Measures (e.g., emergency response, workplace wellness programs)
- Diversity & Inclusion Monitoring (e.g., equal employment opportunity compliance)
- Corporate Audits & Risk Assessments (e.g., internal and external compliance reviews)
7. Data Sharing & Transfers
7.1 Internal Data Sharing
Personal data may be shared within GVR EMPORA HRMS strictly for employment-related purposes in compliance with legal requirements.
7.2 External Data Sharing
Personal data is not disclosed to third parties or any external entities, ensuring confidentiality and compliance with privacy standards.
8. Employee Rights
Employees have the right to:
- Access: Request copies of their personal data stored in GVR EMPORA HRMS.
- Correction: Request modifications to inaccurate or outdated information.
- Erasure: Request deletion of personal data, subject to legal retention requirements.
- Restriction & Objection: Limit or challenge data processing where applicable.
- Portability: Receive personal data in a structured format for transfer.
- Withdraw Consent: Revoke previously granted consent.
- File Complaints: Raise any concerns with the GVR Infosystems Office or relevant regulatory authorities.
9. Data Security Measures
- GVR EMPORA HRMS employs state-of-the-art security technologies and access controls to protect personal data.
- Employees must adhere to security protocols, training programs, and incident reporting procedures.
10. Data Retention
- Personal data is retained only for as long as necessary for employment-related purposes and legal compliance.
- Employees may request details on data retention from the GVR Infosystems Office.
11. Contact Information
For inquiries, requests, or privacy-related concerns, contact:
GVR Infosystems Office
Email: [email protected]
Address: GVR Infosystems Pvt. Ltd
Plot No 3, 3rd Floor, Sri Sai Enclave, Old Bowenpally, Hyderabad, Telangana 500011