PRIVACY NOTICE

This Privacy Notice explains how we use the personal information that I-Hub for Robotics and Autonomous Systems Innovation Foundation, its subsidiaries and affiliates collects or generates both in relation to our mobile application Aarogya Aarohan, products and services (“Privacy Notice”) as updated from time to time. 

I-Hub for Robotics and Autonomous Systems Innovation Foundation, has a registered office at Indian Institute of Science, Ground Floor, Entrepreneurship Building Bengaluru 560012 along with its subsidiaries and affiliates (hereafter “I-Hub for Robotics and Autonomous Systems Innovation Foundation”, “we”, “us” or “our”). This Privacy Notice is applicable when you use our Website artpark.in along with any webpages and portals thereof including the Aarogya Aarohan (the “Website” and “Mobile App” or “Application” respectively) or I-Hub for Robotics and Autonomous Systems Innovation Foundation proprietary softwares.

All definitions in this Privacy Notice shall be interpreted in accordance with applicable data protection laws which refers to the General Data Protection Regulation (Regulation no. 2016/679) and the Directive on Privacy and Electronic Communications (Directive 2002/58/EC), as well as the national implementations and related national legislation. 

This Privacy Notice shall be construed in accordance with the applicable data protection laws, including but not limited to Data Protection Act 2018, General Data Protection Regulation (GDPR), Children’s Online Privacy Protection Act (COPPA), Information Technology Act 2000 (IT Act), The Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules 2011 (SPDI rules) and Health Insurance Portability and Accountability Act (HIPAA), Digital Personal Data Protection Act, 2023 and  Ayushman Bharat Digital Mission (ABDM), 2020. 

By visiting our Website, or using our Application or Services, you acknowledge and accept the data processing described in this Privacy Notice, our Website terms and related documents. We will let you know, by posting on our Website or otherwise, if we make any changes to this Privacy Notice from time to time. Your continued use of the Services after notifying such changes will amount to your acknowledgement and acceptance of the amended Privacy Notice.  

We strive to treat your personal information as safely and securely as reasonably possible. As described below, your personal data may be collected and used by I-Hub for Robotics and Autonomous Systems Innovation Foundation or disclosed to third parties for use on behalf of I-Hub for Robotics and Autonomous Systems Innovation Foundation. This Privacy Notice describes the information we collect about you and what may happen to that information. You must be at least 18 years old to have our permission to use our Services. Our policy is that we do not knowingly collect, use or disclose Personal data about visitors that are under 18 years of age. 


I-Hub for Robotics and Autonomous Systems Innovation Foundation created this Privacy Policy to demonstrate respect for your privacy preferences and to disclose our information collection and sharing practices. Regardless of whether you provide us with your personal information via our website (https://artpark.in/) or in another manner (e.g. telephone, regular mail or face-to-face), we strive to honor your privacy preferences.

Where does I-Hub for Robotics and Autonomous Systems Innovation Foundation collect information?

I-Hub for Robotics and Autonomous Systems Innovation Foundation collects and processes certain information about you through the services you use, such as our websites, when you subscribe to our newsletter, and through social media sites. I-Hub for Robotics and Autonomous Systems Innovation Foundation also collects the information you provide when filling out a form on our websites or making a donation, as well as through communications with us via email, telephone, mail, face-to-face, and other communications channels. 

The processing of your Personal data for the required purposes is conducted on the basis of the legitimate interest of I-Hub for Robotics and Autonomous Systems Innovation Foundation. Our legitimate interest for the processing is maintaining sufficient IT security through logging data when you use our Services and to evade fraud and to protect the Services from cyber threats. We also log data for the maintenance and improvement of our Services. 

The service providers are contractually bound not to share Personal data collected from visitors on our Website and Proprietary App with anyone else. 

We confirm and acknowledge that we do not commercially exploit or distribute Personal data to any third party for commercial purposes. We share and disclose your Personal data to companies with which we have legal contracts in place. These companies mainly provide data storage, data analytics, IT support and other services to be able to run and improve our Services.  

When you use our Services, you may be directed to other websites where the Personal data collected is not in our control. The privacy notice of such other websites will govern the Personal data obtained from you on that website. 

What information do we collect?

I-Hub for Robotics and Autonomous Systems Innovation Foundation may collect one or more of the following types of information:

  • Personal details (e.g. title, full name, age)

  • Contact details (e.g. address, email, phone number)

  • Professional details and employment details

  • Public information from publicly available sources, including open postings on social media

  • Contact preferences

What information does the Aarogya Aarohan application collect?

In addition to the above-named data the Aarogya Aarohan App also collects some or all of the following:

  • Patient First and Last Name

  • Date of Birth

  • Age

  • Gender

  • Address

  • Mobile Number,

  • Patient Habit History

  • Date of Visit

  • Only images of the mouth and lesions are captured, excluding any facial or identifiable features, to ensure patient privacy and compliance with data protection regulations

How do we use the information we collect in the Aarogya Aarohan App?

We collect, process, and use your non-personal information in the following ways:

  • The application would share information collected by the ASHA workers to doctors who may make a diagnosis, the diagnosis information would be shared with the ASHA workers and subsequently with the affected patient. The data shared with doctors will be fully deidentified, with no patient details provided. Each case will be mapped to a unique patient ID, allowing doctors to diagnose. Once diagnosed, the results will be sent back to ASHA workers for further action

Country laws & regulations:

The Aarogya Aarohan App adheres to applicable country laws, principles, regulations, and guidance, including but not limited to the following: 

In India — (1) the India Information Technology Act 2000; (2) the Electronic Consent Framework developed by the Ministry of Electronics and Information Technology; and the Information Technology Rules, 2011; (4) Digital Personal Data Protection Act, 2023 (5) Ayushman Bharat Digital Mission (ABDM), 2020 

How do we store and protect your data?

I-Hub for Robotics and Autonomous Systems Innovation Foundation uses commercially reasonable technical and organizational measures to help ensure and demonstrate that your personal information is safe from loss, misuse, and unauthorized access, disclosure, alteration or destruction. These measures shall be reviewed and updated when necessary.

I-Hub for Robotics and Autonomous Systems Innovation Foundation stores all of your data on servers located inside India.

I-Hub for Robotics and Autonomous Systems Innovation Foundation has a layered security in our systems and only designated employees have access to copies of your personal information. All online transactions are done on a secure server. This means that information entered on the transaction page is encrypted using SSL (Secure Socket Layer) before transmission. On secure pages, a "closed" lock symbol is displayed in the bottom part of your browser screen and the website address in the address bar at the top of the browser screen starts with an "https" instead of an "http".

We do not knowingly collect or solicit personal information from anyone under the age of 18 or knowingly allow such persons to provide us with their personal information without parent or guardian consent.

Data sharing and data transfers:

I-Hub for Robotics and Autonomous Systems Innovation Foundation does not sell your data to third parties or give it to third parties without your consent, with the exception of sharing or transferring your data to our affiliates, I-Hub for Robotics and Autonomous Systems Innovation Foundation affiliate offices. I-Hub for Robotics and Autonomous Systems Innovation Foundation will not share any information with an affiliate until an agreement or MOU is in place between I-Hub for Robotics and Autonomous Systems Innovation Foundation and the affiliate with explicit provisions to privacy preserving techniques for the confidentiality of shared data.If the patient consents, we will make the anonymized data available on platforms such as MIDAS for research purposes

Accessing your information:

Any individual who makes a request is entitled to be told whether any personal data is being stored and receive a description of the personal data, the reasons it is being stored, and whether it will be given to any other organizations or people. You have the right to obtain from us confirmation of whether we are processing personal data concerning you, as well as the purposes of such processing, the categories of data being processed, and other information related to the use and storage of your data. Requests for confirmation should be made to us in writing via: connect@artpark.in

I-Hub for Robotics and Autonomous Systems Innovation Foundation will also give you a copy of data and the source of data about you upon request and after verification of your identity. You also may ask us to stop storing your personal data, and we will accommodate your request unless the data is necessary to achieve the purposes for which you provided it or it is otherwise required for legitimate legal purposes. You also have a right to ask for a copy of the information we hold about you. If there are any discrepancies in the information we provide, please let us know and we will correct them.

Cookies:

I-Hub for Robotics and Autonomous Systems Innovation Foundation does not use cookies for collecting personal information.

Program related data

This policy is limited in scope to data collected through the general methods listed above. Data that is gathered, stored or processed as a result of our programmatic efforts may be subject to different data policies as required by the nature of the programmatic work, the nature of the data, and/or legal requirements.

Data Subject Rights:

Data Subjects may have numerous rights in relation to their personal data. 

  1. Right to make a subject access request (SAR): Data Subjects may request in writing copies of their personal data. However, compliance with such requests is subject to certain limitations and exemptions and the rights of other individuals. Each request should make clear that a SAR is being made. You may also be required to submit a proof of your identity and any payment permitted by law, where applicable. 

  2. Right to rectification: Data Subjects may request that we rectify any inaccurate or incomplete personal data. 

  3. Right to object to processing including automated processing and profiling: We do not make automated decisions about Data Subjects. However, we may rely on information provided by third parties such as credit reference agencies which may score Data Subjects on the basis of automated decisions. Profiling may be carried out for business administration purposes, such as monitoring trends in User visits of our Website. We will comply with valid objection requests unless we have a compelling overriding legitimate ground for the continuation of our processing or we have another lawful reason to refuse such request. We will comply with each valid opt-out request in relation to marketing communications. 

  4. Right to erasure: Data Subjects may request that we erase their personal data. We will comply, unless there is a lawful reason for not doing so. For example, there may be an overriding legitimate ground for keeping the personal data, such as, our business record retention obligations that we have to comply with. 

  5. Restriction: Data Subjects may request that we restrict our processing of their personal data in various circumstances. We will comply, unless there is a lawful reason for not doing so, such as, a legal obligation to continue processing your personal data in a certain way. 

  6. Right to data portability: In certain circumstances, Data Subjects may request the controller to provide a copy of their personal data in a structured, commonly used and machine-readable format and have it transferred to another provider of the same or similar services. We do not consider that this right applies to our Services. However, to the extent it does, we will comply with such transfer request. Please note that a transfer to another provider does not imply erasure of the Data Subject’s personal data which may still be retained for legitimate and lawful purposes. 

  7. Right to lodge a complaint with the supervisory authority: We suggest that Data Subjects contact us about any questions or complaints in relation to how we process their personal data. However, each Data Subject has the right to contact the relevant supervisory authority directly. 

Responding to Legal Requests:

We may access, preserve and share your Personal data in response to a legal request (like a search warrant, court order or a subpoena or the like), or when necessary to detect, prevent and address fraud and other illegal activity, to protect ourselves, you and other users.

Retention of Personal Data:

Personal data about registered users will be retained for as long as the user has an active profile on the Services. Users who have not used our Services will have all personal data deleted after 1 year of inactivity on the Services. 

If you agree to be added to our mailing list, we will keep your personal information for that purpose unless and until you tell us that you want to unsubscribe or be removed from the list. If you advise that you do not want to be added to our mailing list or you ask to be removed, we will delete your Personal data (aside from keeping a record that you have asked us not to send you marketing information). 

Security Practices:

The importance of security for Personal data is of great concern to us. At I-Hub for Robotics and Autonomous Systems Innovation Foundation, we have gone to great lengths to manage the security and integrity of the Services and to ensure that we use best–in-class services when providing secure transmission of information from your device. Personal Data collected via the Services is stored in secure environments that are not available or accessible to the public; only those duly authorized people, officers, employees or agents of I-Hub for Robotics and Autonomous Systems Innovation Foundation who need access to your information in order to do their jobs are allowed access.  

Anyone who violates our privacy or security policies is subject to disciplinary action, including possible termination of their contract with I-Hub for Robotics and Autonomous Systems Innovation Foundation and civil and/or criminal prosecution. I-Hub for Robotics and Autonomous Systems Innovation Foundation uses the latest technologies to ensure utmost security, including utilizing several layers of firewall security and encryption of Personal data to ensure the highest level of security. As a result, while we strive to protect your Personal data, you acknowledge that: 

(a) there are security and privacy limitations of the Internet which are beyond our control; 

(b) the security, integrity and privacy of any and all information and data exchanged between you and us through this Website cannot be guaranteed; and 

(c) any such information and data may be viewed or tampered with in transit by a third party. 

Grievances Redressal:

To exercise your rights, or if you have any questions or complaints regarding our processing of your personal data, please contact us at the following email ID – Connect @artpark.in. In your letter/email please state your full name, your username (if you are a user) and which institution you are linked to. Note that you should sign the request to receive information about the processing of your personal data yourself. 

Notice of Changes to the Privacy Notice: 

If we make changes to this Privacy Notice, we will notify you by posting a copy of the updated policy on our Services prior to any change becoming effective. We will post a copy of the updated policy on our Services prior to any change becoming effective. If your consent is required due to the changes, we will provide you additional prominent notice as appropriate under the circumstances and ask for your consent in accordance with applicable law. 

Contact I-Hub for Robotics and Autonomous Systems Innovation Foundation:

If you have any questions about this policy or need any additional information about how I-Hub for Robotics and Autonomous Systems Innovation Foundation collects, stores, and uses your data, please contact us using the information provided on our websites or by emailing connect@artpark.in.