Your Rights

Your Rights under the Digital Personal Data Protection Act, 2023 (India)

If the processing of your personal data is governed by the Digital Personal Data Protection Act, 2023 (“DPDPA”) and the rules made thereunder, you are entitled to exercise the following rights, subject to the provisions of the DPDPA and other applicable laws. BridgeBeyond is committed to facilitating the exercise of these rights in a fair, transparent and timely manner.

Right to Access Information

You have the right to obtain information regarding the personal data processed by BridgeBeyond, including: a summary of the personal data being processed; the processing activities undertaken by BridgeBeyond; the identities or categories of Data Processors and other recipients with whom your personal data has been shared, where disclosure is required or permitted under applicable law; and such other information as may be prescribed under the DPDPA.

Right to Correction, Completion, Updating and Erasure

Where your personal data is inaccurate, incomplete or outdated, you may request that BridgeBeyond correct inaccurate personal data; complete incomplete personal data; update personal data that is no longer current; or erase personal data that is no longer necessary for the purpose for which it was collected, subject to any legal, regulatory or contractual obligations requiring its continued retention. BridgeBeyond may decline or defer an erasure request where continued retention is required under applicable law or is otherwise necessary for legitimate business or legal purposes recognised under the DPDPA.

Right to Withdraw Consent

Where the processing of your personal data is based on your consent, you may withdraw such consent at any time. Withdrawal of consent shall not affect the lawfulness of processing undertaken before such withdrawal. Please note that withdrawal of consent may affect our ability to provide certain Services or perform contractual obligations that depend upon the relevant personal data.

Right to Grievance Redressal

If you have any concerns regarding the manner in which BridgeBeyond processes your personal data, or if you believe that your rights under the DPDPA have been violated, you may submit a grievance to our designated Grievance Officer using the contact details provided below. BridgeBeyond will endeavour to acknowledge and address grievances within the timelines prescribed under applicable law. If you remain dissatisfied with our response, you may have the right to seek further remedies before the Data Protection Board of India in accordance with the DPDPA.

Right to Nominate

You may nominate another individual to exercise your rights under the DPDPA on your behalf in the event of your death or incapacity, in accordance with the provisions of the DPDPA and any applicable rules. BridgeBeyond may require reasonable documentation before recognising or acting upon any such nomination.

Duties of Data Principals (DPDPA)

While exercising your rights, you are also expected to comply with the obligations imposed under the DPDPA. Accordingly, you should ensure that:

• the personal data provided to BridgeBeyond is accurate, complete and not misleading;
• you do not impersonate another individual while interacting with the BridgeBeyond Platform or our Services;
• you exercise your rights responsibly and in good faith; and
• you comply with applicable laws while using our Services.

Your Rights under the GDPR (Applicable to individuals in the EEA and the United Kingdom, where applicable)

If the processing of your personal data is governed by the General Data Protection Regulation (EU) 2016/679 (“GDPR”) or other applicable European data protection laws, you may be entitled to exercise the rights described below, subject to the conditions and limitations prescribed under applicable law. BridgeBeyond is committed to respecting and facilitating the exercise of these rights in a transparent and timely manner.

Right of Access

You have the right to request confirmation as to whether BridgeBeyond processes your personal data and, where this is the case, to obtain access to such personal data together with information relating to: the purposes for which it is processed; the categories of personal data concerned; the categories of recipients with whom it has been shared; the envisaged retention period; the source of the data (where not collected directly from you); international transfers and applicable safeguards; and the rights available to you under the GDPR. You may also request a copy of the personal data processed by BridgeBeyond, subject to applicable legal limitations.

Right to Rectification

If you believe that any personal data held by BridgeBeyond is inaccurate, incomplete or outdated, you may request that we correct, complete or update such information without undue delay. BridgeBeyond may request appropriate information to verify the accuracy of the proposed correction before updating its records.

Right to Erasure (“Right to be Forgotten”)

You may request the deletion of your personal data where: it is no longer necessary for the purpose for which it was collected; you withdraw consent and no other lawful basis exists; you successfully object to the processing; it has been processed unlawfully; or erasure is otherwise required under applicable law. This right is not absolute — BridgeBeyond may retain personal data where necessary to comply with legal obligations, establish or defend legal claims, or for other lawful purposes recognised under the GDPR.

Right to Restrict Processing

In certain circumstances, you may request that BridgeBeyond temporarily restrict the processing of your personal data, including where: you contest the accuracy of the data; the processing is unlawful but you oppose erasure; BridgeBeyond no longer requires the data but you need it for legal claims; or you have objected to processing pending verification of whether our legitimate grounds override your interests. Where processing has been restricted, we will continue to store your personal data but will process it only where permitted under applicable law.

Right to Data Portability

Where processing is based on your consent or on the performance of a contract and is carried out by automated means, you may request a copy of the personal data you have provided to BridgeBeyond in a structured, commonly used and machine-readable format. Where technically feasible, you may also request that such information be transmitted directly to another controller.

Right to Object

You have the right to object to the processing of your personal data where such processing is based on our legitimate interests or is carried out for direct marketing purposes. Where you object to processing for direct marketing purposes, we will cease such processing. Where you object to processing based on legitimate interests, BridgeBeyond may continue only where compelling legitimate grounds exist that override your interests, rights and freedoms, or where processing is necessary for the establishment, exercise or defence of legal claims.

Right to Withdraw Consent

Where processing of your personal data is based on your consent, you may withdraw your consent at any time. Withdrawal of consent shall not affect the lawfulness of processing carried out prior to such withdrawal. Please note that withdrawing consent may affect our ability to provide certain Services where such processing is necessary for the requested Service.

Rights Relating to Automated Decision-Making

BridgeBeyond does not currently make decisions based solely on automated processing that produce legal or similarly significant effects on individuals. If this changes, we will implement appropriate safeguards and update this page accordingly. Where applicable, you would have the right to request human intervention, express your point of view, contest the decision, and seek a review.

Right to Lodge a Complaint

If you believe that BridgeBeyond has processed your personal data in a manner that does not comply with the GDPR, you have the right to lodge a complaint with the competent supervisory authority in the EU or EEA Member State in which you reside, work or where the alleged infringement occurred. We encourage you to contact BridgeBeyond first so that we may have an opportunity to address your concerns.

International Transfers

Where your personal data is transferred outside the European Economic Area, BridgeBeyond will ensure that such transfers are carried out in accordance with the GDPR and are subject to appropriate safeguards recognised under applicable law. Further information may be obtained by contacting us using the details below.

How to exercise your rights

To exercise any of the rights described above, please contact our Grievance Officer:

Name: Girish Singhania
Designation: Founder & CEO
Email: support@bridgebeyond.in
Postal Address: 1/1, Pollock Street, Kolkata, West Bengal, India, 700001

You may also submit a request via our contact page. To protect your personal data and prevent unauthorised disclosures, BridgeBeyond may request information reasonably necessary to verify your identity before processing your request. Where permitted by applicable law, BridgeBeyond may refuse or limit a request that is manifestly unfounded, fraudulent, repetitive, impossible to verify, or otherwise not required to be fulfilled under applicable law. Where a request cannot be fulfilled, we will endeavour to inform you of the reasons, unless prohibited by law.