Version: 1.0
Effective Date: January 2025
Last Updated: January 2025
1. Introduction
Welcome to TRIS (Traffic Information System) Mobile Application. Bokaro Steel Plant ("we," "us," "our," or "Company") is committed to protecting your privacy and ensuring transparency about how we collect, use, and protect your personal information.
This Privacy Policy explains our practices regarding data collection, usage, storage, and protection when you use the TRIS mobile application (the "App").
2. Data Controller
For any privacy-related inquiries, complaints, or requests, please contact us at the email address provided above.
3. Applicable Law
This Privacy Policy is governed by the Digital Personal Data Protection Act, 2023 (DPDP Act, 2023) as applicable in India. We comply with all applicable data protection laws and regulations.
4. Personal Data We Collect
We collect the following personal data from users when you register and use the TRIS application:
- Name: Your full name as registered in the system
- Email Address: Your official email ID for communication and account recovery
- Mobile Number: Your contact phone number for notifications and operational alerts
Note: Locomotive GPS tracking data collected by the system is not considered personal data under this policy.
Data Collection Methods:
- Direct input during user registration and profile creation
- Updates made through user profile management interface
- Operational data generated during system usage
5. Purpose of Data Collection
We collect and process your personal data for the following purposes:
1. User Authentication & Account Management
- Creating and managing your user account
- Verifying your identity
- Authenticating login credentials
2. Operational Functionality
- Enabling wagon tracking and management
- Facilitating loading and unloading operations
- Maintenance scheduling and tracking
- Document archiving and retrieval
3. Communication
- Sending operational alerts and notifications
- Notifying you about system updates or maintenance
- Addressing your queries and support requests
4. Audit & Compliance
- Maintaining audit logs for security purposes
- Ensuring accountability and compliance with internal policies
- Tracking user actions for operational transparency
5. Performance Monitoring
- Analyzing app usage patterns
- Improving system reliability and performance
- Identifying and resolving technical issues
6. Data Storage & Security
Storage Location:
- Primary Storage: All personal data is stored in a secure Virtual Machine (VM) located at Bokaro Steel Plant
- On-Premises Infrastructure: Data remains within the BSL premises and is not hosted on external cloud services
- Access Control: Access to data is restricted to authorized personnel only
Security Measures:
- Encryption: Sensitive data is encrypted both in transit and at rest
- Role-Based Access Control (RBAC): Only authorized users with appropriate roles can access personal data
- JWT Authentication: Secure token-based authentication for all API communications
- Regular Monitoring: Continuous monitoring for unauthorized access attempts
- Backup & Recovery: Regular backups ensure data availability and disaster recovery
7. Data Sharing & Third Parties
No Third-Party Sharing:
- We do not share your personal data with any third parties
- Your data is not sold, rented, or disclosed to external vendors
- No integration with external services: SAP, FOIS, CRIS, and other external systems receive only operational data, not personal identifiable information
Internal Access:
- Operators Cannot Access Own Data: Operational users cannot view or access their own personal information
- Admin-Only Access: Only system administrators with appropriate privileges can access personal data for management purposes
- Secure Compartmentalization: Operational and personal data are kept separate and compartmentalized
8. Data Retention Policy
Personal Data Retention:
- User Account Data: Retained for the duration of your employment/tenure as an active user
- Deletion: Personal data is permanently deleted when your user account is deactivated or deleted from the system
Operational & Audit Data:
- Audit Trails & Logs: Retained for 1 year from the date of creation
- Transactional Records: Retained for 5 years as per operational requirements
- Automatic Purging: Data older than the specified retention period is automatically deleted
9. Your Rights & Data Subject Requests
Right to Access:
You have the right to request access to your personal data stored in the system. Contact us at softmeets@gmail.com with your request, and we will provide the information within 30 days.
Right to Modify/Correct:
You can update and modify your personal data (Name, Email, Mobile Number) at any time through the App's user profile settings. Changes are reflected immediately in the system.
Right to Deletion:
- Operator Users: You may submit a manual request for data deletion to the administrator
- Admin Users: Only ADMIN role users have the authority to delete user data from the system
- Manual Process: Deletion requests from Operator users are processed manually by ADMIN users
- Timeframe: Deletion requests will be processed within 30 days of submission
- Limitations: Some operational and transactional data may be retained as per legal and operational requirements
Right to Lodge a Complaint:
You have the right to lodge a complaint with relevant data protection authorities if you believe your data rights have been violated.
10. Data Breach & Security Incident
In the event of a data breach or unauthorized access:
- We will notify affected users without undue delay
- We will report the incident to relevant authorities as required by law
- We will take immediate corrective measures to prevent further unauthorized access
- A detailed incident report will be maintained for audit purposes
11. User Responsibilities
By using the TRIS application, you agree to:
- Provide accurate and complete personal information during registration
- Maintain the confidentiality of your login credentials
- Immediately notify us of any unauthorized access to your account
- Comply with all applicable laws and company policies while using the App
12. Children's Privacy
The TRIS application is designed for use by authorized employees of Bokaro Steel Plant and is not intended for children under the age of 18. We do not knowingly collect personal data from individuals under 18 years of age.
13. Policy Updates & Changes
Important: This Privacy Policy is not subject to automatic updates. Any changes or updates to this policy will be communicated through:
- In-app notifications
- Email notification to registered users
- Updated version posted on the BSL intranet/official communication channels
Your continued use of the App after any policy changes constitutes your acceptance of the revised Privacy Policy.
14. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact us:
15. Acknowledgment
By downloading, installing, and using the TRIS mobile application, you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy.
If you do not agree with our privacy practices, please refrain from using the TRIS application.