1. Introduction & Enterprise Scope
Aryasri Techno Solutions Private Limited (“Company”, “ATS”, “we”, “our”, or “us”) is an engineering and technology integration enterprise incorporated under the Companies Act, 2013, with its registered corporate facility situated at Reg. Office, 908, NH 24, Tower Hazel-1, Jasmine Grove Society, Ghaziabad, Uttar Pradesh, 201002.
As an ISO 9001:2015 (Quality Management System) and ISO/IEC 27001:2022 (Information Security Management System) certified firm, we architect, deploy, and maintain mission-critical infrastructure, including extra-low voltage (ELV) networks, IP surveillance systems, biometric access management solutions (BAMS), EPABX unified communications, structured optical cabling, and enterprise hardware. This Privacy & Data Governance Policy applies unequivocally to all digital touchpoints, client portal interfaces, technical procurement interactions, and on-premises physical integration operations conducted across client sites.
2. Information We Collect
Due to the high-reliability industrial nature of our service catalog, ATS categorizes data processing into distinct architectural classes:
- Authorised representative identity (Full name, designation, corporate email address, direct telephone contacts).
- Statutory billing coordinates, GSTIN, PAN, and corporate billing domicile details.
- Purchase order specifics, contractual signatory manifests, and payment remittance verifications.
- IP subnet allocations, MAC addresses, VLAN configurations, and routing schedules supplied for integration.
- CAD layout schemas, rack elevations, optical fibre patch maps, and server room floorplans.
- Firmware logs, device heartbeat pings, and port diagnostics collected during commissioned maintenance.
- RTSP streams, NVR/DVR retention policies, camera field-of-view matrices (processed purely in local commissioning environments).
- Door controller schemas and Wiegand/OSDP communication parameters for access management.
- Alarm zone thresholds, smoke sensor addressable registers, and public address evacuation matrices.
- HTTPS session tokens, referral URLs, client browser engines, and system timestamp diagnostics.
- Support ticket correspondence, technician audit notes, and dispatch authorization tokens.
3. Purpose & Modalities of Processing
Data acquired by ATS is deployed exclusively under the following legally recognized lawful bases:
| Processing Domain | Intended Operational Objective | Lawful Foundation |
|---|---|---|
| Systems Engineering | Configuration, commissioning, and validation of client network hardware & surveillance units. | Contractual Necessity |
| SLA Execution | Preventative system health sweeps, firmware microcode upgrades, and emergency restorative dispatch. | Contractual Performance |
| Procurement & Warranty | Registering serialised OEM warranties with Tier-1 partners (e.g., Cisco, Hikvision, Matrix, Honeywell). | Legitimate Interest |
| Statutory Compliance | Auditing records under Indian corporate accounting, GST billing, and anti-money laundering mandates. | Legal Obligation |
4. ISO 27001 Information Security Controls
Aryasri Techno Solutions implements, maintains, and continually enhances an Information Security Management System (ISMS) audited in strict compliance with ISO/IEC 27001:2022. This framework governs administrative, technical, and physical safeguards across the information lifecycle.
Cryptographic Controls
Client network blueprints and credentials in our repositories are encrypted at rest using AES-256 and transmitted exclusively via TLS 1.3 tunnels.
Role-Based Access (RBAC)
Principle of Least Privilege (PoLP) strictly enforced. Field engineers access only the client network parameters allocated to their immediate work order.
Air-Gapped Tooling
Diagnostic firmware tools used in sensitive environments run on isolated testing benches with zero external public internet cross-routing.
Aryasri Techno Solutions certifies that it does not monetize, broker, sell, or rent any client architectural schematics, employee credentials, surveillance captures, or internal contact details to third-party data brokers or marketing syndicates under any circumstance.
5. Data Retention & Storage Integrity
Data is retained strictly for the duration necessary to satisfy contractual agreements, warranty enforcement, and statutory fiscal obligations:
- Infrastructure Blueprints & Commissioning Maps: Retained throughout the operational life of the deployed project plus 36 months following AMC expiration to assist in system handovers or decommissioning.
- Commercial & Financial Ledgers: Stored securely for 8 years in compliance with Section 128 of the Indian Companies Act, 2013, and GST retention rules.
- Transient Technician Debugging Logs: Automatically purged within 14 calendar days following sign-off and client acceptance of service.
- Surveillance Testing Footage: Captured strictly during focus/calibration phases; immediately deleted in the client's presence or stored directly on the client's own non-accessible storage units.
6. Disclosure to Third Parties & OEMs
ATS does not distribute client data except when strictly operationalized through authorized vendor integrations:
7. Cookies, Web Analytics & Tracking
Our corporate website (aryasritechnosolutions.com) utilizes minimal first-party cookies necessary to guarantee HTTP session persistence, CSRF security, and load-balancing efficiency. We do not use persistent behavioral advertising cookies. Aggregated site traffic metrics are anonymized and reviewed exclusively for server capacity planning. Users may manage cookie permissions through their native browser settings without losing access to public policy data.
8. User Rights (DPDP Act & Best Practices)
Under the Digital Personal Data Protection Act, 2023, data principals whose personal information is processed by ATS retain enforceable statutory rights:
Obtain confirmation and summary of personal data held, processing operations conducted, and third parties disclosed to.
Request immediate rectification of obsolete, erroneous, or misleading enterprise contact details.
Mandate erasure of personal information that is no longer necessary for the contractual purpose or statutory retention period.
Avail structured and timely resolution mechanisms administered directly through our designated Data Protection Officer.
9. Third-Party Equipment & ELV Systems Handling
A critical facet of ATS operations involves physical interaction with on-premises client hardware:
10. Grievance Redressal & Data Protection Contact
In compliance with Section 13(2) of the Digital Personal Data Protection Act, 2023, and Rule 5(9) of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, the details of the designated Grievance Officer are set forth below:
Reg. Office, 908, NH 24,
Tower Hazel-1, Jasmine Grove Society,
Ghaziabad, Uttar Pradesh, 201002
All grievances submitted are logged under a ticket tracking hash, acknowledged within 24 hours, and substantively resolved within a maximum period of 30 calendar days.