1. Introduction

1.1. Acceptance of Terms

User Agreement: By accessing or using our website and services, including but not limited to Training & Development, Seminars, Workshops, Digital Transformation, Business Consulting, Ebooks, and any other service, you agree to be bound by these Terms and Conditions, including our GDPR policies.

Consent to Data Processing: You acknowledge that in order to provide you with our services, we may need to collect and process personal data as outlined in our GDPR policies. Your use of our services constitutes your explicit consent to this data processing.

Legal Compliance: These Terms and Conditions are designed to ensure legal compliance with data protection laws, including the General Data Protection Regulation (GDPR). Failure to comply with these terms may result in the termination of your access to our services.

Scope of Services: Our website offers a range of services, including educational content through Ebooks and professional services such as Training & Development, Seminars, Workshops, Digital Transformation, and Business Consulting. These services may be subject to additional terms and fees, which will be clearly communicated to you.

Age Limitation: By using our services, you confirm that you are of the legal age required by your jurisdiction to enter into this agreement. If you are under the legal age, you may only use our services with the consent of a parent or legal guardian.

Acceptance of Amendments: We reserve the right to amend these Terms and Conditions and GDPR policies at any time. You will be notified of such changes, and your continued use of our services after the effective date of changes implies your acceptance of the updated terms.

1.2. Definitions

Personal Data: Personal data refers to any information that can directly or indirectly identify an individual, such as names, email addresses, phone numbers, and location data.

Data Processing: Data processing encompasses any operation or set of operations performed on personal data, including collection, recording, organization, structuring, storage, adaptation, retrieval, consultation, use, disclosure, dissemination, alignment, combination, restriction, erasure, or destruction.

Data Controller: The data controller, as defined by GDPR, is the organization responsible for determining the purposes and means of processing personal data. In this context, Repaper acts as the data controller for the personal data collected through our services.

Data Subject: A data subject is an individual whose personal data is processed. As a user of our services, you are a data subject, and we are committed to protecting your privacy and providing you with rights and safeguards as outlined in these Terms and Conditions and our GDPR policies.

Consent: Consent refers to the voluntary, informed, and unambiguous agreement by a data subject to the processing of their personal data for specified purposes. You may be asked to provide consent for specific data processing activities, and you have the right to withdraw your consent at any time as described in our GDPR policies.

GDPR: The General Data Protection Regulation is a European Union regulation that governs the collection and processing of personal data. Even if you are not located in the EU, our commitment to GDPR compliance extends to all users who interact with our services.

Data Protection Officer: [Your Organization] may appoint a Data Protection Officer (DPO) responsible for overseeing data protection efforts and ensuring compliance with GDPR. Contact information for the DPO will be provided in our Contact Information section.

These definitions lay the groundwork for a clear understanding of the terms and concepts used throughout the Terms and Conditions and GDPR policies, helping users comprehend their rights and the organization’s responsibilities regarding data protection.

2. Information We Collect

2.1. Personal Data

Types of Personal Data: We may collect various types of personal data from you, including but not limited to:

Full name

Email address

Postal address

Phone number

Billing and payment information

Date of birth

Gender

Username and password (for account registration)

Any other information voluntarily provided by you

Purpose of Collection: Personal data is collected for specific purposes, such as:

Providing access to our services, including Training & Development, Seminars, Workshops, Digital Transformation, Business Consulting, and Ebooks.

Processing orders and transactions, including the sale of Ebooks and other products.

Communicating with you regarding your account, orders, and customer support inquiries.

Sending promotional and marketing communications when you have opted in.

Legal Basis for Processing: The collection and processing of personal data are based on one or more legal grounds, including the necessity of processing for the performance of a contract, compliance with legal obligations, your consent, or our legitimate interests.

Data Retention: We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, as explained in our Data Retention Policy. This policy outlines specific retention periods for different types of data.

2.2. Non-Personal Data

Types of Non-Personal Data: In addition to personal data, we collect non-personal data, which may include:

IP addresses

Browser information

Device information

Usage data (e.g., pages visited, interactions with the website)

Cookies and tracking technologies (see Section 2.3)

Purpose of Collection: Non-personal data is primarily collected for analytical and statistical purposes, helping us improve our services, website performance, and user experience. It also aids in detecting and preventing fraudulent activities and security breaches.

Aggregated Data: Non-personal data may be aggregated and anonymized to create statistical reports or insights. Such aggregated data does not identify individual users and is used for business analysis and reporting.

2.3. Cookies and Tracking Technologies

Types of Cookies: Our website uses various types of cookies and tracking technologies, including:

Session Cookies: These are temporary and expire when you close your browser. They are essential for website functionality, such as maintaining login sessions and shopping cart items.

Persistent Cookies: These are stored on your device for a specified period and are used to enhance user experience, remember preferences, and track usage patterns.

Third-Party Cookies: Some cookies may be placed by third-party service providers, such as analytics and advertising partners, to assist in data analysis and marketing efforts.

Cookie Policy: We have a dedicated Cookie Policy that provides detailed information about the types of cookies we use, their purposes, and your options for managing or disabling cookies. By using our website, you consent to the use of cookies as described in our Cookie Policy.

Opting Out: You have the option to manage your cookie preferences and may choose to opt out of certain types of cookies. Please refer to our Cookie Policy for instructions on how to do this.

This section informs users about the data we collect, the purposes of data collection, the legal basis for processing, and how non-personal data and cookies are utilized to enhance their experience on our website. Providing transparency about data practices is essential for GDPR compliance and building user trust.

3. How We Use Your Information

3.1. Purpose of Data Processing

To Provide Services: We use your personal data to deliver a wide range of services, including Training & Development, Seminars, Workshops, Digital Transformation, Business Consulting, and Ebooks. This may involve creating user accounts, customizing content, and facilitating communication between you and our experts.

Order Processing: Personal data is necessary to process orders for Ebooks and other products. This includes verifying payment information, fulfilling orders, and providing order-related support.

Marketing Communications: With your consent, we may use your contact information to send you promotional and marketing communications. You can opt out of these communications at any time (see Section 10.2).

Customer Support: Your personal data allows us to address your inquiries, provide technical assistance, and resolve issues related to our services.

Legal Compliance: We may process personal data to comply with legal obligations, respond to lawful requests from authorities, or enforce our Terms and Conditions.

3.2. Legal Basis for Processing

Consent: When you provide personal data voluntarily, such as when signing up for our services or subscribing to newsletters, we process this data based on your explicit consent. You have the right to withdraw your consent at any time (see Section 10.2).

Contract Fulfillment: When you enter into a contract with us, such as purchasing an Ebook, we process personal data to fulfill the terms of that contract. This includes processing payment information and delivering the purchased product.

Legitimate Interests: In some cases, we may process personal data based on our legitimate interests, provided these interests are not overridden by your rights and interests. This may include fraud prevention, security, and improving our services.

3.3. Data Retention

Retention Period: We retain personal data only for as long as necessary to achieve the purposes for which it was collected, as specified in our Data Retention Policy. The length of retention may vary depending on the type of data and legal requirements.

Criteria for Retention: Our data retention criteria include the necessity of the data for the original purposes, legal requirements, and business needs. Personal data no longer required will be securely deleted or anonymized.

4. User Rights

4.1. Right to Access

Access Requests: You have the right to request access to the personal data we hold about you. To exercise this right, please contact our Data Protection Officer or use the contact information provided in Section 12.1.

Verification: We may ask you to verify your identity before providing access to your personal data to protect your privacy and security.

4.2. Right to Rectification

Correction Requests: If you believe that your personal data is inaccurate or incomplete, you can request corrections by contacting us through the means outlined in Section 12.1.

4.3. Right to Erasure

Conditions for Erasure: You may request the deletion of your personal data under certain conditions, including when the data is no longer necessary for the purposes for which it was collected, or if you withdraw your consent (see Section 10.2).

4.4. Right to Restriction of Processing

Circumstances for Restriction: You have the right to request the restriction of processing when you contest the accuracy of your data, processing is unlawful, or you have objected to processing (see Section 4.6).

4.5. Right to Data Portability

Data Portability Requests: You can request a copy of your personal data in a structured, commonly used, and machine-readable format. This right applies to data provided by you and processed based on your consent or a contract.

4.6. Right to Object

Objection to Processing: You have the right to object to the processing of your personal data when it is based on legitimate interests or for direct marketing purposes. We will cease processing unless there are compelling, legitimate grounds for processing that override your interests.

4.7. Automated Decision-Making

Automated Decisions: We do not engage in fully automated decision-making processes that have legal or significant effects on individuals. Any automated processing is subject to human review and intervention when necessary.

These sections provide a comprehensive understanding of how personal data is used, the legal bases for processing, data retention policies, and user rights under GDPR. It ensures transparency and empowers users to exercise their data protection rights.

5. Data Security

5.1. Security Measures

Data Encryption: We employ industry-standard encryption protocols, including Secure Socket Layer (SSL) technology, to secure data transmission between your browser and our servers. This ensures that data exchanged is protected during transit.

Access Controls: Access to your personal data is strictly controlled and limited to authorized personnel who require access for legitimate purposes, such as providing services, support, or maintenance.

Firewalls and Intrusion Detection: We utilize firewalls and intrusion detection systems to safeguard our systems against unauthorized access, malicious activities, and potential threats.

Regular Security Audits: Our security measures undergo regular internal and external audits to identify vulnerabilities and ensure compliance with security best practices.

Employee Training: Our staff is trained in data security best practices, emphasizing the importance of data protection and privacy.

Physical Security: Physical access to our data centers and servers is restricted and monitored to prevent unauthorized entry.

Incident Response: We maintain incident response procedures to promptly address security incidents and breaches, minimizing potential harm.

5.2. Data Breach Notification

Data Breach Protocol: In the unfortunate event of a data breach, we have established a robust data breach notification protocol in accordance with GDPR requirements.

Timely Notification: We are committed to promptly notifying affected users and relevant data protection authorities of any breach that poses a risk to your rights and freedoms.

Notification Contents: Our breach notifications will include details of the breach, the potential impact, the actions taken to mitigate the breach, and steps you can take to protect yourself.

6. Third-Party Disclosure

6.1. Sharing with Service Providers

Third-Party Service Providers: We may engage third-party service providers, such as payment processors or cloud hosting services, to assist in the delivery of our services.

GDPR Compliance: Before entering into partnerships, we carefully vet these service providers to ensure they are GDPR-compliant and adhere to stringent data protection standards.

Data Processing Agreements: We establish data processing agreements with our third-party service providers to ensure they handle personal data in a manner consistent with our obligations under GDPR.

6.2. Business Transfers

Merger or Acquisition: In the event of a merger, acquisition, or other change in ownership or control of our organization, user data may be transferred as part of the assets. We will notify users of such transfers and any changes to data processing practices.

6.3. Legal Compliance

Legal Obligations: We may disclose personal data when required to do so by law, legal process, or regulatory authorities. We will ensure that any disclosure is made in compliance with applicable legal requirements and will only share data to the extent necessary to meet such obligations.

These sections clarify the measures we take to protect user data, our commitment to notifying users in the event of a breach, how we engage with third-party service providers, and the circumstances under which we may disclose data for legal compliance. It demonstrates our dedication to data security and transparency in handling user information.

7. Cookies and Analytics

7.1. Cookie Policy

Types of Cookies: Our website uses various types of cookies, including session cookies, persistent cookies, and third-party cookies. These serve different purposes, such as enhancing website functionality, remembering user preferences, and analyzing user behavior.

Cookie Purpose: We use cookies for several purposes, including but not limited to:

Essential Cookies: These are necessary for the basic functionality of our website, such as maintaining login sessions and ensuring secure transactions.

Performance Cookies: These cookies help us understand how you interact with our site, allowing us to improve its performance and user experience.

Functionality Cookies: These cookies remember your preferences and settings, making your browsing experience more personalized.

Marketing and Advertising Cookies: With your consent, we use these cookies to deliver tailored content and advertisements based on your interests.

User Consent: We respect your privacy preferences. You can manage your cookie settings through our Cookie Consent Banner. By using our website, you consent to the use of cookies as described in this policy and our Terms and Conditions.

Opting Out: You have the option to opt out of non-essential cookies. Please refer to our Cookie Policy for detailed instructions on how to do this.

7.2. Analytics Tools

Analytics Tools Used: We utilize various analytics tools, such as Google Analytics, to collect data on user behavior, including page views, interactions, and navigation patterns.

Data Processing: The data collected by these tools is anonymized and aggregated, making it impossible to identify individual users. We use this information to analyze website performance and improve our services.

User Opt-Out: If you prefer not to participate in website analytics, you can opt out by adjusting your browser settings or using the tools provided by the analytics service providers. Please refer to our Cookie Policy for detailed instructions.

8. Children’s Privacy

8.1. Age Limitations

Age Restrictions: Our services are intended for users of a certain age or older, depending on the legal requirements of your jurisdiction. We do not knowingly collect or process personal data from individuals below the specified age limit without verifiable parental consent.

Parental Consent: If you are under the age limit, you must obtain parental or guardian consent to use our services. We may request proof of such consent in compliance with applicable laws.

9. Links to Third-Party Websites

9.1. External Links

Third-Party Websites: Our Terms and Conditions and GDPR policies apply solely to our website and services. We may provide links to third-party websites for your convenience, but we have no control over the content or data practices of these external sites.

Review of Third-Party Policies: Users are encouraged to review the privacy policies and terms of use of any third-party websites they visit through links on our site. We do not accept responsibility for the actions or policies of these external sites.

10. Consent and Withdrawal

10.1. Consent

Explicit Consent: In certain situations, we may require your explicit consent before processing your personal data. When such consent is needed, we will clearly explain the purpose of data processing and request your agreement.

10.2. Withdrawal of Consent

Process for Withdrawal: You have the right to withdraw your consent at any time. To do so, please contact us through the means provided in Section 12.1. Please note that withdrawing consent may affect your ability to access certain services or features.

Implications: Withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal. It is important to understand that some processing activities, such as those required for fulfilling a contract, may not be subject to withdrawal of consent.

These sections provide clear and detailed information about our cookie usage, analytics practices, children’s privacy policies, links to third-party websites, and the processes for obtaining and withdrawing consent. They are designed to ensure transparency and provide users with the necessary information to make informed choices regarding their privacy and data preferences.

11. Changes to the Privacy Policy

11.1. Notification of Changes

Notification Process: We are committed to keeping our users informed about any updates or changes to our Terms and Conditions and GDPR policies. When we make significant changes, we will provide notice through one or more of the following methods:

Email Notification: If you have provided us with your email address and consented to receive communications from us, we will send an email notification outlining the changes.

Website Notification: We will prominently display a notice on our website’s homepage to alert users to policy updates. This notice will include a link to the revised policies.

Effective Date: Each updated version of our Terms and Conditions and GDPR policies will include an “Effective Date” indicating when the changes come into effect. It is your responsibility to review these policies periodically to stay informed about any modifications.

12. Contact Information

12.1. Contact Details

Data Protection Concerns: If you have questions, concerns, or requests related to data protection or our privacy practices, please do not hesitate to contact us. You can reach us through the following means:

Email: bm@repaper.in

Postal Address: 4 th Floor, Aparna Astute, situated in Survey Nos. 75/A &;76 Corresponding to New Sy. No’s. 103 ; 104, Correlated to T.S. Nos. 15/1, 2 & 3 of Shaikpet Village and Mandal, Hyderabad District – 500008.

Response Time: We strive to address all data protection inquiries promptly and within a reasonable time frame.

12.2. Data Protection Officer (if applicable)

Introduction of DPO: In accordance with GDPR requirements, we may appoint a Data Protection Officer (DPO) responsible for overseeing data protection activities within our organization. If a DPO is designated, their role will include monitoring compliance with data protection laws, handling data protection inquiries, and serving as a point of contact for regulatory authorities.

DPO Contact Information: If a DPO is appointed, their contact information will be provided here, including an email address and other relevant contact details.

13. Applicable Law and Dispute Resolution

13.1. Governing Law

Jurisdiction: Any disputes, claims, or legal proceedings arising from the use of our services and related to these Terms and Conditions and GDPR policies shall be subject to the exclusive jurisdiction of the courts located in Hyderabad, India.

Governing Law: These Terms and Conditions and GDPR policies are governed by and construed in accordance with the laws of India.

This section establishes Hyderabad, India, as the exclusive jurisdiction for resolving disputes related to your services and specifies that Indian law governs these Terms and Conditions and GDPR policies. Please ensure that this aligns with your business practices and consult with legal counsel if needed.

13.2. Dispute Resolution

Negotiation: In the event of a dispute, both parties agree to make reasonable efforts to resolve it amicably through good-faith negotiations.

Mediation or Arbitration: If a resolution cannot be reached through negotiation, both parties agree to explore alternative dispute resolution methods, such as mediation or arbitration, as an efficient means of resolving disputes.

14. Miscellaneous

14.1. Entire Agreement

Entire Agreement: These Terms and Conditions, along with our GDPR policies, constitute the entire agreement between you and [Your Organization] regarding the use of our services and supersede any prior agreements, understandings, or representations.

14.2. Severability

Severability: If any provision of these Terms and Conditions or GDPR policies is found to be invalid or unenforceable by a court of competent jurisdiction, the remaining provisions shall remain in full force and effect.

14.3. Waiver

Waiver: The failure to enforce any provision of these Terms and Conditions or GDPR policies at any time shall not be construed as a waiver of that provision or the right to enforce it later.

14.4. Assignment

Assignment: Repaper Consultants may assign its rights and obligations under these Terms and Conditions to a third party, including in the event of a merger, acquisition, or transfer of assets, without obtaining your consent.

15. GDPR Compliance Statement

15.1. GDPR Principles

GDPR Principles: We are committed to upholding the principles of the General Data Protection Regulation (GDPR), including lawful, fair, and transparent processing of personal data.

15.2. Data Processing Records

Data Processing Records: Repaper Consultants maintains comprehensive records of its data processing activities, including the purposes of processing, data categories, and security measures.

15.3. Data Protection Impact Assessment

Data Protection Impact Assessment: When necessary and applicable, we conduct Data Protection Impact Assessments (DPIAs) to assess and mitigate the risks associated with data processing activities that may pose a high risk to user privacy.

16. Acceptance and Acknowledgement

By using our services, you acknowledge that you have read, understood, and agreed to these Terms and Conditions and GDPR policies, and you consent to the collection, use, and processing of your personal data as described herein.

These additional sections provide clarity on applicable law, dispute resolution, and miscellaneous terms, while also reinforcing your commitment to GDPR compliance. The acceptance and acknowledgment section ensures that users acknowledge their understanding and agreement with your policies before using your services. Please adapt these sections to your specific needs and consult with legal counsel to ensure compliance with relevant laws and regulations.