Privacy Policy

This Privacy Policy describes Our policies and procedures on the collection, use and disclosure of Your information when You use the Service and tells You about Your privacy rights and how the law protects You.

We use Your Personal data to provide and improve the Service. By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.

Interpretation and Definitions

Interpretation

The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.

Definitions

For the purposes of this Privacy Policy:

• "Account" means a unique account created for You to access our Service or parts of our Service.
• "Company" (referred to as either "the Company", "We", "Us" or "Our" in this Agreement) refers to Tatasteelcanada.com website.

For the purpose of the GDPR, the Company is the Data Controller.

• "Country" refers to Canada.
• "Cookies" are small files that are placed on Your computer, mobile device or any other device by a website, containing the details of Your browsing history on that website among its many uses.
• "Data Controller", for the purposes of the GDPR (General Data Protection Regulation), refers to the Company as the legal person which alone or jointly with others determines the purposes and means of the processing of Personal Data.
• "Device" means any device that can access the Service such as a computer, a cell phone or a digital tablet.
• "Personal Data" is any information that relates to an identified or identifiable individual.

For the purposes of GDPR, Personal Data means any information relating to You such as a name, an identification number, location data, online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity.

• "Service" refers to the Website.
• "Service Provider" means any natural or legal person who processes the data on behalf of the Company. It refers to third-party companies or individuals employed by the Company to facilitate the Service, to provide the Service on behalf of the Company, to perform services related to the Service or to assist the Company in analyzing how the Service is used. For the purpose of the GDPR, Service Providers are considered Data Processors.
• "Usage Data" refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit).
• "Website" refers to Tatasteelcanada.com, accessible from http://www.tatasteelcanada.com.
• "You" means the individual accessing or using the Service, or the company, or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.

Under GDPR (General Data Protection Regulation), You can be referred to as the Data Subject or as the User as you are the individual using the Service.

Collecting and Using Your Personal Data

Types of Data Collected

Personal Data

While using Our Service, we may ask You to provide Us with certain personally identifiable information that can be used to contact or identify You. Personally identifiable information may include, but is not limited to:

• Email address
• First name and last name
• Phone number
• Address, State, Province, ZIP/Postal code, City
• Usage Data

Usage Data

Usage Data is collected automatically when using the Service.

Usage Data may include information such as Your Device's Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Service that You visit, the time and date of Your visit, the time spent on those pages, unique device identifiers and other diagnostic data.

When You access the Service by or through a mobile device, We may collect certain information automatically, including, but not limited to, the type of mobile device You use, Your mobile device unique ID, the IP address of Your mobile device, Your mobile operating system, the type of mobile Internet browser You use, unique device identifiers and other diagnostic data.

We may also collect information that Your browser sends whenever You visit our Service or when You access the Service by or through a mobile device.

Tracking Technologies and Cookies

Introduction

Tata Steel Minerals Canada Limited (hereinafter referred to as “TSMCL”, “we”, “us”, “our”) uses cookies across its websites to improve performance and enhance the experience. This policy explains how we do that.

What are cookies?

Cookies are small text files that a website downloads onto your computer or other internet-enabled devices (such as mobile phones and tablets) when you visit a website. The cookie will help the website recognise your device the next time you visit.

Cookies can be used for a variety of purposes such as remembering your preferences, measuring your activity and optimising your user experience.

Usage of cookies

When consulting the TSMCL websites, cookies may get placed on your computer, mobile or tablet. Cookies can be used for a variety of purposes such as remembering your preferences, measuring your activity, and optimising your user experience.

It could contain the following data:

• information about the browser; an identifier, in the form of a unique number.
• an expiration date (some cookies only).

Purposes for which TSMCL uses cookies
Generally, our cookies perform three different functions:

• Enabling our websites to function properly Some cookies are essential for the operation of our websites. For example, we use cookies to ensure that you are shown the correct webpages for your location, or to identify when we have broken links or other technical issues with the website.
• Analysing visitor behaviour We may use cookies to analyse how our visitors use our websites and to monitor website performance. This allows us to provide a high-quality experience by making sure that our content and layout remains relevant to you. For example, we use cookies to keep track of which pages and links are most popular and which are not providing the information that’s required by our visitors.
• Optimising and personalising Cookies are also used to optimise the webpages that you visit, and to personalise the content that we show you across all our digital assets, based on what we understand about your requirements.

Type of cookies used at TSMCL
We may use cookies of four categories: Session cookies, Functionality cookies, Analytical/Customization cookies and Advertising cookies.

• Session Cookies: Session cookies enable the website you are visiting to keep track of your movement from page to page, so you don't get asked for the same information you've already given to the site. Cookies allow you to proceed through many pages of a site quickly and easily without having to authenticate or reprocess each new area you visit. These only last for as long as the session (usually the current visit to a website or a browser session).
• Functionality cookies: These cookies allow our services to remember choices you make, such as:
  

• remembering your username, preferences, and settings.
• remembering if you've filled in a survey or taken part in a poll or contest or otherwise reacted to something on through the services, so you're not asked to do it again.
• remembering if you've used any of our services before; restricting the number of times you are shown a particular advertisement.
• remembering your location; and ✓ enabling social media components like Facebook or Twitter.

The aim of these cookies is to provide you with a more personal experience so that you don't have to reset your preferences each time you use our services.
• Analytical/Customization cookies: These cookies collect information about how visitors use and interact with our services, for instance which pages they go to most often. These cookies also enable us to personalize content and remember your preferences (e.g., your choice of language, country, or region). These cookies help us improve the way our websites work and provide a better, personalized user experience.
• Advertising cookies: These cookies record your visit to our websites, the pages you have visited, and the links you have clicked. They gather information about your browsing habits and remember that you have visited a website. We (and third-party advertising platforms or networks) may use this information to make our websites, content, and advertisements displayed on them more relevant to your interests (this is sometimes called "behavioural" or "targeted" advertising). These types of cookies are also used to limit the number of times you see an advertisement as well as to help measure the effectiveness of advertising campaigns.

How can you block cookies?
You can control whether to accept cookies or not. If you decide to not accept cookies, some features and services on our websites will not function properly. If you would prefer not to accept cookies, you can either:

• Change your browser settings to notify you when you receive a cookie, which lets you choose whether or not to accept it; or
• Set your browser to automatically not accept any cookies. You can manage cookies in the privacy settings of the web browser you are using. Please note that if you use your browser settings to block all cookies, you may not be able to access parts of our or others' websites. The following pointers provide information on how to modify the cookies’ settings on some popular browsers:
• Apple Safari:
  ✓ https://support.apple.com/en-in/guide/safari/manage-cookies-and-website-data-sfri11471/mac
• Google Chrome:
  ✓ https://support.google.com/chrome/answer/95647?co=GENIE.Platform%3DDesktop&hl=en
• Microsoft Internet Explorer:
  ✓ https://support.microsoft.com/en-in/help/17442/windows-internet-explorer-delete-manage-cookies
• Mozilla Firefox:
  ✓ https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences

For more information about the cookies, we use and your choices regarding cookies, please visit our Cookies Policy or the Cookies section of our Privacy Policy.

Privacy Policy

This Privacy Policy explains how Tata Steel Minerals Canada Limited (hereinafter referred to as “TSMCL”, “we”, “us”, “our”) may collect, use, store, disclose or otherwise process your personal data including personal data provided when using our websites (TSMCL website) and describes the rights you have with respect to your personal data.

TSMCL is committed to providing the highest level of protection regarding the processing of their employees’, vendors’ and clients’/customers’ personal data based on applicable data protection laws and regulations.

Personal data comprises all the details that TSMCL collects and processes directly or indirectly about you as an individual, for instance information about your identity and contact details (such as name, email-ID, contact number), including information received from third parties and information collected through use of TSMCL websites, cookies or other similar tools. TSMCL will first and foremost comply with local law where it exists.

Processing Personal Data

TSMCL may process your personal data where such relevant personally identifiable information is required to be processed for legitimate TSMCL purposes as follows, but not limited to:

• Processing applications for products and services.
• Providing products and services; (It is not feasible for an organisation to provide product / service without processing)
• Monitoring and improving our website and its content.
• Conducting market research and surveys with the aim of improving our products and services.
• Sending you information about our products and services for marketing purposes and promotions.
• Complying with applicable local or foreign law, regulation, policy, voluntary codes, directive, judgement or court order, as well as any contractual obligation pursuant to agreements between TSMCL and any authority, regulator or enforcement agency or body or any request coming from said entities.
• Establishing, exercising or defending legal rights in connection with legal proceedings (including any prospective legal proceedings) and seeking professional or legal advice in relation to such legal proceedings.
• Surveillance of premises. (Video Recording)

TSMCL processes your personal data for the performance of the contracts/agreements concluded with you, compliance with applicable legal or regulatory obligations or TSMCL legitimate interests to provide you with adequate and qualitative products and services and to prevent against any excessive risk. Where providing the data is optional, and you choose not to share personal data, features like personalisation that use such data will not work for you.

Access to Personal Data

Your personal data processed by TSMCL will only be accessible by a limited list of recipients on a need-to-know basis or where required by law. Our policy does not apply to third-party websites where our online advertisements are displayed, nor to linked third-party websites which we do not operate or control. To the extent permitted by law, TSMCL may record and monitor your communications with TSMCL to ensure compliance with our legal and regulatory obligations and our internal policies.

Retention of Personal Information

Your personal data processed by TSMCL are kept in a form which permits your identification for no longer than is necessary for the purposes for which the personal data are processed in line with legal, regulatory or statutory obligations. At the expiry of such periods, your personal data will be deleted or archived to comply with legal retention obligations or in accordance with applicable statutory limitation periods.

How to access and control your personal data?

Subject to applicable law, regulations and/or industry guidelines, you may have the right to invoke a data subject right in relation to your personal data being processed by TSMCL.

TSMCL may be allowed by law, in particular in case of excessive or manifestly unfounded request, to charge a fee for fulfilling your request, subject to applicable conditions.

TSMCL shall provide information on action taken on a request pertaining to the Data Subject Rights without undue delay and in any event within one month of receipt of the request. That period may be extended by two further months where necessary, taking into account the complexity and number of the requests.

TSMCL shall inform the data subject of any such extension within one month of receipt of the request, together with the reasons for the delay.

To invoke your data subject rights, please use the data subject right request form, or send an email to data protection officer (for contact details refer to the last section of this policy).

Finally, note that you are entitled to lodge a complaint with a competent Data Protection Authority where existing, concerning TSMCL’s compliance with the applicable data protection laws and regulation.

Security

The security and confidentiality of your Personal Data is important to us and TSMCL has invested significant resources to protect the safekeeping and confidentiality of your personal data. When using external service providers acting as processors, we require that they adhere to the same standards as TSMCL. Regardless of where your personal information is transferred or stored, we take all steps reasonably necessary to ensure that personal data is kept secure.

Social Media

TSMCL operates channels, pages and accounts on some social media sites to inform, assist and engage with employees, vendors and clients/customers. TSMCL monitors and records comments and posts made on these channels about TSMCL in order to improve its products and services. Please note that you must not communicate to TSMCL through such social media sites the following information:

confidential personal data, including any information regarding your financial situation, bank account details, transactions, etc.

sensitive personal data including (i) special categories of personal data meaning any information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person's sex life or sexual orientation and (ii) other sensitive personal data such as criminal convictions and offences and national identification number; and

excessive, inappropriate, offensive or insulting information towards individuals.

TSMCL is not responsible for any information posted on those sites other than the information posted by its employees on its behalf. TSMCL is only responsible for its own use of the personal data received through such sites.

Changes to this Privacy Policy

TSMCL may in its absolute discretion update this policy from time to time. The use of the TSMCL Websites and any products and services supplied are subject to our Terms and Conditions.

Legal Basis for Processing Personal Data under GDPR

We may process Personal Data under the following conditions:

• Consent: You have given Your consent for processing Personal Data for one or more specific purposes.
• Performance of a contract: Provision of Personal Data is necessary for the performance of an agreement with You and/or for any pre-contractual obligations thereof.
• Legal obligations:Processing Personal Data is necessary for compliance with a legal obligation to which the Company is subject.
• Vital interests: Processing Personal Data is necessary in order to protect Your vital interests or of another natural person.
• Public interests: Processing Personal Data is related to a task that is carried out in the public interest or in the exercise of official authority vested in the Company.
• Legitimate interests: Processing Personal Data is necessary for the purposes of the legitimate interests pursued by the Company.

In any case, the Company will gladly help to clarify the specific legal basis that applies to the processing, and in particular whether the provision of Personal Data is a statutory or contractual requirement, or a requirement necessary to enter into a contract.

The Company undertakes to respect the confidentiality of Your Personal Data and to guarantee You can exercise Your rights.

You have the right under this Privacy Policy, and by law if You are within the EU, to:

Request access to Your Personal Data. The right to access, update or delete the information We have on You. Whenever made possible, you can access, update or request deletion of Your Personal Data directly within Your account settings section. If you are unable to perform these actions yourself, please contact Us to assist You. This also enables You to receive a copy of the Personal Data We hold about You.

Request correction of the Personal Data that We hold about You. You have the right to have any incomplete or inaccurate information We hold about You corrected.

Object to processing of Your Personal Data. This right exists where We are relying on a legitimate interest as the legal basis for Our processing and there is something about Your particular situation, which makes You want to object to our processing of Your Personal Data on this ground. You also have the right to object where We are processing Your Personal Data for direct marketing purposes.

Request erasure of Your Personal Data. You have the right to ask Us to delete or remove Personal Data when there is no good reason for Us to continue processing it.

Request the transfer of Your Personal Data. We will provide to You, or to a third-party You have chosen, Your Personal Data in a structured, commonly used, machine- readable format. Please note that this right only applies to automated information which You initially provided consent for Us to use or where We used the information to perform a contract with You.

Withdraw Your consent. You have the right to withdraw Your consent on using your Personal Data. If You withdraw Your consent, we may not be able to provide You with access to certain specific functionalities of the Service.

Exercising of Your GDPR Data Protection Rights

You may exercise Your rights of access, rectification, cancellation, and opposition by contacting Us. Please note that we may ask You to verify Your identity before responding to such requests. If You make a request, we will try our best to respond to You as soon as possible.

have the right to complain to a Data Protection Authority about Our collection and use of Your Personal Data. For more information, if You are in the European Economic Area (EEA), please contact Your local data protection authority in the EEA.