Customers’ Data Protection Policy

Valid Since: Nov 01, 2025

At EduskillX, we prioritize the trustworthiness of our data handling practices, ensuring cautious and transparent treatment of your personal information while respecting your privacy. When handling your personal data, we adhere closely to the Digital Personal Data Protection Regulations (DPDP) in India, Europe and other countries wherein we operate, distribute, market the products through our collaborator namely Constructor tech and other data protection laws. Our goal is to consistently follow best practices in data protection. This data protection statement outlines the methods by which we gather, handle, and safeguard the personal information of our B2B clients.

The data protection statement may be revised, such as in the case of modifications to our privacy policy or relevant legislation.

Data Protection Unit B2B: info@eduskill.org

Purpose of Processing	Legal Basis	Types of Personal Data	Retention Times
Processing of contacts	Legitimate interest in processing the received contact	Name, e-mail address, personal data in the message	3 years from the contact
Direct marketing	Legitimate interest in establishing and promoting customer relationships	Name, company, title, e-mail address, telephone number, customer relationship data	3 years from last contact, update or other event
Personalised marketing	Consent, legitimate interest in establishing and promoting customer relationships	Name, company, title, e-mail address, telephone number, customer relationship data	3 years from last contact, update or other event
Statistical analysis	Consent, contract	Name, e-mail address, title	3 years from last contact, update or other event
Conducting research and surveys	Consent	Name, e-mail address, title	3 years from data collection
Customer relationship management	Legitimate interest in maintaining and promoting customer relationships	Name, company, title, e-mail address, telephone number, communication	3 years from last contact, update or other event
Assignment management and invoicing	Legitimate interest in processing the data of the organisation’s contact persons for the contractual relationship	Name, e-mail address, title, company	For the duration of the customer relationship, for the period required by the legislation on accounting with regard to invoicing-related information

Origins of personal data

We directly gather personal data from individuals, such as through contacts. We may also get personal information from public registries or obtain it as disclosures from other data controllers, for instance.

We employ third-party service providers, such as system providers, to handle the data processing. The service providers act as data processors on behalf of EduskillX, A part of Eduskill Group, handling personal data. We employ contractual and technical methods to guarantee that the service providers we utilize handle your data in compliance with legislation and sound data protection standards.

We employ third-party processors to handle personal data for the following objectives:

• Contact processing
• Newsletter distribution
• Customer relationship management
• Task management and invoicing

Companies within the Eduskill Technologies Private Limited & its collaborator namely constructor tech may have access to personal data.

Occasionally, the service providers we use may handle personal data in locations outside of India, such as the United States, EU/ETA, and MENA. Personal data will be sent outside of India only if it meets the requirements set by data protection legislation. The service providers we employ are legally obligated to guarantee a sufficient level of data protection in all personal data processing activities.

We employ suitable technical and organizational measures to safeguard personal data from loss, unauthorized access, and other forms of misuse. Some examples of these precautions include the implementation of firewalls, encryption technology, data backups, and safe computer rooms. Internal restrictions are in place to control access to your personal data, both electronically and physically. Additionally, procedures are implemented to manage and monitor access to various systems. Only workers with authorized access rights within the scope of their responsibilities are allowed to access personal data. We utilize the server services provided by Godaddy to securely store, retrieve, and safeguard your data. The data protection policies of Godaddy also apply when you provide your permission to the data protection policies of EduskillX, A part of Eduskill Group and/or Eduskill Group /or Eduskill Technologies Private Limited.

Data subjects possess numerous rights that they can exercise to exert influence on the processing of their personal data. To exercise the rights mentioned here, please send a request regarding the problem by e-mail to info@eduskill.org.

Right	Description
Right to be informed	You have a right to be informed about what personal data we process regarding you and to receive a copy of that data.
Right to access	You have the right to access your personal data. As requested, we will deliver a copy of the personal data being processed or provide information if we are not processing your data.
Right to rectification	You have the right to request rectification or correction of your data if it is inaccurate or incomplete.
Right to erasure (“right to be forgotten”)	You have the right to have your personal data erased. This right may be limited by legal obligations to retain certain data.
Right to restrict processing	You have the right to request the restriction of processing in certain situations, such as when the legality of processing is disputed. When processing is restricted, data is retained but processed only with consent, for a legal claim, to protect another's rights, or for important public interest.
Right to data portability	You have the right to receive your personal data in a machine-readable format and transfer it to another controller, where processing is based on consent or a contract and you have provided the data directly.
Right to object	You have the right to object to the processing of your personal data based on legitimate interest.
Rights relating to automated decision-making	You have the right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects. You can request human review of such decisions. We do not make decisions with legal or significant effects based solely on automated processing.
Right to withdraw consent	If processing is based on your consent, you have the right to withdraw it at any time.
Right to lodge a complaint	You have the right to lodge a complaint with the competent supervisory authority. In India, this is the Office of the Data Protection Ombudsman.