We have put in place appropriate technical, organizational and security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed. In addition, we limit access to your personal data to EnerUni`s employees who have a business need to process your data. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

We have put in place procedures to deal with any suspected personal data security breach and will notify, your employer/organization and any applicable regulator of a suspected breach where we are legally required to do so.

Retention

Your personal data will be retained for the period mentioned or agreed in the agreement with your employer/organization. If required by applicable Data Privacy Law which EnerUni is subject to, EnerUni could retain a copy of your personal data for the period specified by the Law. We guarantee that the security, privacy and confidentiality of the personal data retained shall have the same level of security as a personal data currently in use.

What are your rights?

In some circumstances where EnerUni is a data controller, your rights are to:

• Request access to your personal data
• Request correction of the personal data held about you.
• Request erasure of your personal data in certain circumstances.
• Object to processing of your personal data in certain circumstances
• Request the restriction of processing of your personal data in certain circumstances
• Request the transfer of your personal data to another party
• Consent withdrawal

If you want to exercise a data subject right please contact as per EnerUni contact details provided in the document below

What we may need from you?

We may need to request specific information from you to help us confirm your identity and ensure your right to access the information (or to exercise any of your other rights). This is another appropriate security measure to ensure that personal data is not disclosed to any person who has no right to receive it.

Right to Withdraw Consent

In the limited circumstances where you may have provided your consent to the collection, processing and transfer of your personal data for a specific purpose, you have the right to withdraw your consent for that specific processing at any time. To withdraw your consent, please contact [us at details mentioned in below section Data Protection Authority DPO contact details for the respective country, where the notice is issued or the contact, which was provided in the consent form]. Once we have received notification that you have withdrawn your consent, we will no longer process your information for the purpose or purposes you originally agreed to, unless we have another legitimate basis for doing so in law.

What policies are in place for reporting any incidents of data breaches?

We have put in place procedures to deal with any suspected/materialised personal data security breach and will carry out notifications regarding a suspected breach in accordance with the terms of our agreement with your employer/organization or as is required by applicable law