Data Protection Policy

1. Introduction

At PlaceOneOs, we are committed to protecting the personal data of our users, including students, faculty, and institutional representatives. This Data Protection Policy outlines our practices regarding the collection, use, storage, and protection of personal data in compliance with applicable data protection laws.

2. Scope

This policy applies to all personal data processed by PlaceOneOs in connection with our placement management platform, including data collected through our website, mobile applications, and services provided to educational institutions.

3. Data Controller

PlaceOneOs acts as the data controller for personal data collected directly from users. Educational institutions using our platform remain the data controllers for student and staff data they upload to our system.

4. Legal Basis for Processing

We process personal data based on the following legal grounds:

• Consent: Where you have given clear consent for us to process your personal data
• Contract: Where processing is necessary for the performance of a contract
• Legal Obligation: Where processing is necessary for compliance with legal obligations
• Legitimate Interests: Where processing is necessary for our legitimate business interests
• Public Interest: Where processing is necessary for the performance of a task in the public interest

5. Data Subject Rights

Under applicable data protection laws, you have the following rights:

6. Data Security Measures

We implement comprehensive security measures to protect personal data:

• Encryption of data in transit and at rest
• Regular security audits and vulnerability assessments
• Access controls and role-based permissions
• Regular backups and disaster recovery procedures
• Employee training on data protection
• Incident response and breach notification procedures

7. Data Breach Notification

In the event of a personal data breach, we will notify affected individuals and relevant authorities within 72 hours, as required by applicable laws. We maintain detailed incident response procedures to minimize harm and prevent future breaches.

8. International Data Transfers

Personal data may be transferred to countries outside your jurisdiction. We ensure that such transfers are protected by appropriate safeguards, including standard contractual clauses or adequacy decisions.

9. Data Protection Officer

We have appointed a Data Protection Officer (DPO) responsible for overseeing our data protection strategy and ensuring compliance with applicable laws. You can contact our DPO at dpo@placeoneos.in for any data protection related queries.

10. Data Impact Assessments

We conduct Data Protection Impact Assessments (DPIAs) for high-risk processing activities to identify and minimize data protection risks before implementing new systems or processes.

11. Third-Party Processors

We may engage third-party processors to assist with our services. All processors are carefully selected and contractually bound to maintain appropriate security measures and comply with data protection laws.

12. Contact Information

For data protection inquiries, requests to exercise your rights, or to report a concern:

13. Updates to This Policy

This Data Protection Policy may be updated periodically to reflect changes in our practices or legal requirements. We will notify you of significant changes and update the "Last updated" date accordingly.