ITNS-Global Private Limited is committed to complying with the General Data Protection Regulation (GDPR) (EU) 2016/679 when processing personal data of individuals in the European Union and European Economic Area. This page supplements our Privacy Policy with information specific to EU/EEA data subjects.
Although ITNS-Global is headquartered in India, GDPR applies to us whenever we process personal data of EU/EEA residents in connection with offering goods or services, or monitoring their behaviour.
ITNS-Global Private Limited acts as the Data Controller for personal data collected through our websites and services.
| Organisation | ITNS-Global Private Limited |
| Headquarters | Hyderabad, Telangana, India |
| EU Representative | To be appointed — contact consult@itns.in for GDPR matters |
| Contact for GDPR | consult@itns.in — Subject: GDPR Request |
We process personal data under one or more of the following GDPR lawful bases:
| Basis | When We Use It |
|---|---|
| Contract (Art. 6(1)(b)) | Processing necessary to deliver contracted services, process payments, and communicate about your engagement. |
| Legitimate Interest (Art. 6(1)(f)) | Website analytics, fraud prevention, security monitoring, and improving our services — balanced against your privacy interests. |
| Consent (Art. 6(1)(a)) | Marketing emails, non-essential cookies, and any other processing where consent is required and obtained. |
| Legal Obligation (Art. 6(1)(c)) | Retaining financial records, responding to lawful regulatory or law enforcement requests. |
As an EU/EEA data subject, you have the following rights under GDPR. You may exercise them at any time by contacting us at consult@itns.in:
| Right | What It Means |
|---|---|
| Access (Art. 15) | Request a copy of all personal data we hold about you, plus information on how it is processed. |
| Rectification (Art. 16) | Request correction of inaccurate or completion of incomplete personal data. |
| Erasure (Art. 17) | Request deletion of your personal data where no overriding legal basis exists for retention ("right to be forgotten"). |
| Restriction (Art. 18) | Request that we restrict processing of your data in certain circumstances. |
| Portability (Art. 20) | Receive your data in a structured, commonly used, machine-readable format and transmit it to another controller. |
| Objection (Art. 21) | Object to processing based on legitimate interests or for direct marketing (including profiling). |
| Withdraw Consent | Where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing. |
| Not Subject to Automated Decisions (Art. 22) | Not be subject to solely automated decisions that significantly affect you, unless you have given explicit consent or it is contractually necessary. |
We will respond to all GDPR rights requests within 30 calendar days. We may extend this by a further two months for complex or numerous requests, with notification provided within the initial 30 days.
Your personal data may be transferred from the EEA to India and to other countries where our service providers operate. We ensure appropriate safeguards are in place for all international transfers:
We do not retain personal data for longer than necessary. Retention periods are based on statutory requirements, legitimate business needs, and the nature of the data. See our Privacy Policy — Data Retention section for a full retention schedule.
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the relevant supervisory authority. We would appreciate the opportunity to address your concerns directly first — please contact us at consult@itns.in before lodging a formal complaint.
EU/EEA residents may contact their local Data Protection Authority (DPA). A list of EU DPAs is available at edpb.europa.eu.
In India, matters relating to the Digital Personal Data Protection Act (DPDPA) 2023 may be referred to the Data Protection Board of India once operational.
Hyderabad, Telangana, India
Email: consult@itns.in
Phone: +91 7799037755
Privacy & legal requests: within 30 days
General enquiries: within 3 business days