privacy rights and protection


Privacy Policy – Infotree Global Solutions Corporate

This Privacy Policy is designed primarily for GDPR compliance within the EU/EEA and includes references
to other major privacy laws (e.g., CCPA, DPDP Act).

Effective Date: 2nd April 2025
Last Updated: 2nd April 2025

1. Introduction

Infotree Global Solutions Corporation (“Company,” “we,” “us,” or “our”) respects your privacy and is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and all other applicable data protection laws. Although we primarily focus on EU/EEA compliance, we also acknowledge relevant requirements under the California Consumer Privacy Act (CCPA), India’s Digital Personal Data Protection Act (DPDP Act), and other global regulations where appropriate.

This Policy explains how we collect, use, disclose, and secure your personal data when you interact with us, whether you are a job applicant, employee, client, partner, website visitor, or any other data subject whose data we process.

2. Scope & Applicability
  • This Privacy Policy applies to personal data collected through our websites, job portals, recruitment processes, services, and other online/offline interactions.
  • It covers all individuals in the European Union (EU)/European Economic Area (EEA) and beyond, where applicable.
  • In case local laws in a particular country set stricter standards than those described here, we will comply with the more stringent local requirements.

By accessing our services or otherwise providing us your personal data, you acknowledge the practices described in this Policy.

3. Data Controller & EU Representative (If Required)

Depending on your location and the nature of our operations, Infotree Global Solutions Corporation (215 Ann Arbor Rd, Suite 304, Plymouth, MI, USA) may act as the Data Controller of your personal data for GDPR purposes.

If you have questions about which Infotree entity is processing your data, or if you wish to contact our EU Representative (if appointed), please see the Contact Information section below.

4. Information We Collect

We adhere to GDPR’s data minimization principle, collecting only the personal data necessary to achieve specific, lawful purposes.

4.1 Personal Data You Provide
  • Identifiers: Name, email, phone number, mailing address.
  • Employment & Recruitment Data: Résumés/CVs, job history, educational qualifications, references, background checks (where lawful).
  • Financial Data: Bank details, tax identification numbers (for payroll purposes), invoicing details.
  • Communication Data: Content of emails, messages, or other correspondence.
  • Government-Issued Identifiers: Social Security numbers (US), Aadhaar (India), passport numbers, driver’s license details—collected only if legally required or necessary (e.g., onboarding employees).
4.2 Data Collected Automatically
  • Device Information: IP address, browser type, operating system, device identifiers.
  • Usage Data: Pages viewed, clicks, cookies, analytics data, log files, session duration.
  • Location Data: Approximate or precise location, if you have granted permission in your device/browser settings.
4.3 Data from Third Parties
  • Recruitment Partners & Background Check Agencies: Additional information on candidates or employees.
  • Public Sources: Social media profiles (if publicly visible), job portals, public records.
  • References Provided by You: Contact and professional details for references.
5. Lawful Bases for Processing (GDPR)

We process personal data under one or more of the following lawful bases (GDPR Article 6):

  • Consent (Art. 6(1)(a)): Where you have explicitly consented (e.g., certain marketing communications or optional cookies).
  • Contractual Necessity (Art. 6(1)(b)): To perform a contract with you or to take steps before entering into a contract (e.g., employment agreements, service contracts).
  • Legal Obligation (Art. 6(1)(c)): Where processing is necessary to comply with a legal or regulatory obligation (e.g., tax laws, labor regulations).
  • Legitimate Interests (Art. 6(1)(f)): Where our (or a third party’s) legitimate interests are not overridden by your fundamental rights or freedoms (e.g., fraud prevention, internal analytics, IT security).

When processing special categories of data (GDPR Art. 9, e.g., health data or biometrics), we do so only if permitted by law and with enhanced safeguards (e.g., explicit consent, obligations under labor law).

6. How We Use Your Information

We process personal data strictly for legitimate business and legal purposes, including:

  • Recruitment & Employment: Evaluating candidates, verifying qualifications, onboarding employees, managing payroll, and fulfilling HR-related obligations.
  • Communication: Sending notifications, responding to inquiries, or providing service updates.
  • Legal Compliance & Security: Adhering to regulatory obligations (tax, labor law), implementing fraud prevention, and ensuring IT/network security.
  • Service Improvement: Enhancing user experience, using analytics to refine our websites and services.
  • Marketing & Promotions: Providing tailored ads or promotional content where lawfully permitted (e.g., after obtaining consent if required).
  • Customer Support & Issue Resolution: Handling complaints, providing technical support, and resolving disputes.
7. Rights Under CCPA & DPDP Act:
  • California residents have additional rights under the CCPA (e.g., right to know, delete, opt-out of sale/sharing).
  • India residents have rights under the DPDP Act (access, correction, grievance redressal, etc.).

For EU residents, the GDPR rights (access, rectification, erasure, restriction, data portability, object, and withdraw consent) apply, as detailed below in Section 10.