GDPR

Additional Information for Individuals in the European Economic Area — GDPR

1. Application

Where AnalystIP Legal Services Pvt. Ltd.’s processing of personal information falls within the scope of the General Data Protection Regulation (EU) 2016/679 (“GDPR”), the following provisions supplement this Privacy Policy.

GDPR applicability depends on the circumstances of the processing, including relevant establishment, service offering, or monitoring activities. It is not determined solely by an individual’s citizenship.

2. Our Role and Contact Details

AnalystIP acts as a controller where it determines the purposes and means of processing personal information, including for relevant enquiry handling, client administration, billing, and business operations.

Where we process personal information solely on a client’s documented instructions, we act as a processor and will address the applicable requirements through an appropriate data processing agreement.

For privacy enquiries and rights requests, contact:

AnalystIP Legal Services Pvt. Ltd.
Email: info@analystip.com
Telephone: +91 91178 31863
Address: C-116, Block C, Sector 2, Noida, Uttar Pradesh – 201301, India.

3. Purposes and Lawful Bases

Where GDPR applies, we identify a lawful basis for each processing activity. Depending on the circumstances, this may include:

• Contractual necessity: responding to an individual’s request before entering a contract or performing a contract with that individual.
• Legitimate interests: administering corporate client relationships, protecting systems, managing business communications, and establishing or defending claims, where those interests are not overridden by the individual’s rights.
• Consent: carrying out optional activities for which consent is the appropriate basis, including relevant marketing or tracking activities.
• Legal obligations: meeting an obligation that qualifies as a lawful basis under GDPR.

The purposes, information categories, sources, recipients, and retention criteria are described in the relevant sections of this Privacy Policy. Further information about the basis applicable to a particular activity may be requested from us.

4. Your Rights

Subject to GDPR’s conditions and exceptions, you may have the right to:

• Access your personal information and receive a copy.
• Correct inaccurate information or complete incomplete information.
• Request deletion of personal information.
• Restrict certain processing.
• Receive eligible information in a structured, commonly used, machine-readable format and request its transfer to another controller.
• Object to processing based on legitimate interests.
• Withdraw consent where processing relies on it.
• Lodge a complaint with a competent supervisory authority.

You may object to the use of your personal information for direct marketing at any time. Where you do so, we will stop processing it for that purpose.

These rights may be limited where necessary to comply with applicable legal requirements, protect another person’s rights, or establish, exercise, or defend legal claims.

5. Requests and Response Periods

Send requests to info@analystip.com, using the subject line “GDPR Rights Request.”

We may request proportionate information to verify your identity or clarify the request. We will respond without undue delay and ordinarily within one month of receipt.

Where permitted because of the complexity or number of requests, this period may be extended by up to two additional months. We will inform you within the initial month and explain the reason.

Requests are generally handled without charge. Any fee or refusal will be limited to circumstances permitted by GDPR and explained to you.

6. Withdrawal of Consent

You may withdraw consent through the relevant preference mechanism or by contacting us.

Withdrawal does not affect the lawfulness of processing undertaken before withdrawal. Information may still need to be retained or processed where another lawful basis applies.

Where withdrawal affects our ability to provide a requested service, we will explain the consequences.

7. International Transfers

AnalystIP operates from India, and an engagement may involve information being processed outside the EEA.

Where GDPR’s international transfer requirements apply, transfers will use an appropriate mechanism, such as an applicable adequacy decision or suitable contractual safeguards. Where required, this includes assessment of the transfer and supplementary protective measures.

A limited statutory exception will be relied upon only where its conditions are satisfied. Acceptance of this Privacy Policy does not, by itself, constitute consent to unrestricted international transfers.

You may contact us for information about relevant safeguards or a copy, subject to appropriate protection of confidential information.

8. Retention and Security

Personal information will be retained according to the purposes and criteria described in this Privacy Policy, including relevant engagement needs, legal obligations, and claim periods.

We will apply technical and organizational measures appropriate to the risks. Where GDPR requires notification of a personal data breach to an authority or affected individuals, we will comply with the applicable requirements.

9. Complaints

You may raise a privacy concern directly with AnalystIP at info@analystip.com.

You also have the right to complain to a competent data protection supervisory authority, particularly in the EEA country of your habitual residence, place of work, or the alleged infringement.

You do not need to complete AnalystIP’s internal complaint process before exercising that right.