Privacy Policy

In this privacy and cookies policy (“Policy”), we describe the information that we collect about you, that you provide to us, is provided to us by third parties, and will be processed by us, as you use this site and the services available through this site and our mobile website. We recommend that you read this policy carefully in order to understand what H First and its subsidiaries do with your personal information. Your use of our Website and Services and any dispute over privacy is subject to this Policy and any of our applicable Terms and Conditions for use of our Services, including their applicable limitations on damages and the resolution of disputes. Our Terms and Conditions for our Services are incorporated by reference into this Policy. By visiting this site with the address www.HFirst.in, you are accepting and consenting to the practices described in this Policy. Regardless of the applicable law set forth in the H First Terms and Conditions for use of our Services, please note that any disputes arising under this Policy will be interpreted in accordance with the Governing Law provision set forth below.

Collecting Data

When you visit the HFirst website, general information is collected automatically (in other words, not by means of registration) which is not stored as personal related data. The web servers that are used store the following data by default:

            The name of your internet service provider

            The website from which you visited us

            Your IP address with Geo-location

Collecting and processing personal data

Personal data is only collected when you provide us with it in the course of, say, registration, by filling out forms or sending emails, and in the course of ordering products or services, inquiries or requests for material. Such personal data is limited to the details provided during such registration or communication or ordering or inquiry or request. No other data is collected without information and through any other means.

Your personal data remains with our company, our subsidiaries, our affiliates, and our provider, and will not be made available to third parties in any form by us or by persons instructed by us. The personal data that we do collect will only be used in order to perform our duties to you. We do not use the data for marketing or promotional purposes unless you have provided express consent to that effect during registration or other communication.

The only exceptions to our obligation to not share information would lie in the following scenarios:

  • H First may disclose your Personal Information if required to do so by law, or,

  • in the good faith belief that such action is necessary to comply with a legal obligation, including lawful requests by public authorities, including to meet national security or law enforcement requirements, or,

  • to protect and defend the rights or property of , or,

  • to act in urgent circumstances to protect the personal safety of users of the Services or the public.

Data retention

We store personal data for as long as it is necessary to perform a service that you have requested or for which you have granted your permission, providing that no legal requirements exist to the contrary such as in the case of retention periods required by trade or tax regulations.

Security

All information you provide to us is stored on our secure servers. Any payment transactions will be encrypted using SSL technology. Where we have given you (or where you have chosen) a password which enables you to access certain parts of our site, you are responsible for keeping that password confidential. We ask you not to share a password with anyone.

H First deploys technical and organizational security measures to protect the information you have made available from being manipulated unintentionally or intentionally, lost, destroyed, or accessed by unauthorized persons. Where personal data is being collected and processed, the information will be transferred in encrypted form in order to prevent misuse of the data by a third party. Our security measures are continuously reviewed and revised in line with the latest technology.

Right to obtain and correct information

You have the right to obtain information on all of your stored personal data, to receive, to review, and if necessary to amend or erase. To do this, just send an email to the email address indicated in the imprint or to the person in charge of data protection (see below for the relevant contact details). The deletion of your personal data will be completed unless we are legally obligated to store the information.

Cookies

Cookies are alphanumeric identifiers that we transfer to your computer’s hard drive through your web browser for record-keeping purposes. Some cookies allow us to make it easier for you to navigate our Website and Services, while others are used to enable a faster log-in process or to allow us to track your activities at our Website and Service. On our website, we only use cookies if they are required for an application or service which we provide. If you would like to opt out of the advantages of these cookies, you can read in the ‘help’ function on your browser how to adjust your browser to prevent these cookies, accept new cookies, or delete existing cookies. You can also learn there how to block all cookies or set up notifications for new cookies.

Changes to our Privacy and Cookies Policy

This Policy may change from time to time. Any changes in the future will be posted on our Website. Please check back frequently to see any updates or changes to our Policy. We will not materially reduce your rights under this Policy without taking steps to bring such changes to your attention.

Other important information

The “Do Not Track” browser setting is supported by recent versions of major browsers, including Firefox 5+, Internet Explorer 9+, Safari 5.1+, and Google Chrome. Please consult http://donottrack.us on how to enable this privacy setting on your browser. You can also change the way your browser handles cookies. Already existing cookies can be deleted. Please consult www.allaboutcookies.org on how to manage or delete cookies in your browser. This Policy covers the use of cookies and similar files by H Education World only and does not cover the use of cookies, flash cookies, and similar files by any third-party advertisers or websites linked to the Site. We also may use Google Analytics and other similar services. Google Analytics uses cookies to help analyze how users use the Site. The information generated by the cookie about your use of the Site (including your IP address) will be transmitted to and stored by Google, Inc. (“Google”). Google will use this information for the purpose of evaluating your use of the Site, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. Google will not associate your IP address with any other data held by Google.

Contact

If you have any questions or ideas, please refer to the data protection representative at H First, who will be pleased to help you. The continuous development of the Internet makes it necessary for us to adjust our data protection rules from time to time. We reserve the right to implement appropriate changes at any time.

General Contact

Data Protection Officer at H First - Support@HFirst.in

Data Processing Addendum

This Data Processing Addendum (“DPA”) forms part of the H First Privacy Policy (the “Privacy Policy”), and is made between H First (the “Company”) and the Company’s business customers (each, a “Customer”) and shall be effective as of May 25, 2018. With respect to the processing of personal data relating to data subjects located in the European Economic Area (including the United Kingdom as of the Effective Date of this Privacy Policy) by Privy solely on behalf of the End Customer, the terms of the Data Processing Addendum shall apply.

The following terms have the meanings given in the General Data Protection Regulation (EU) 2016/679 (“GDPR”):

“controller”, “personal data”, “processor”, “subprocessor”, “data subject” and “process”.

“Service” means the services provided to Customer by the Company in accordance with the H First Terms and Conditions (the “Agreement”).

Rights available to EEA Customers

You have several rights in relation to your personal data which are described in more detail below. You can exercise your rights at any time by contacting us at support@HFirst.in.

 

 

Accessing your data

You can ask us to:

  • Confirm whether we are processing your personal data

  • Give you a copy of that data

  • Provide you with other information about your personal data such as what data we have, what we use it for, who we disclose it to, whether we transfer it abroad and how we protect it, how long we keep it for, what rights you have, how you can make a complaint, where we got your data from and whether we carry out any automated decision making or profiling. We aim to give you all this information in this privacy policy, although if anything is unclear, please contact at support@HFirst.in.

 

You do not have to pay a fee for a copy of your information unless your request is unfounded, respective or excessive, in which case we will charge a reasonable amount in the circumstances. We will let you know of any charges before completing your request.

We aim to respond to you within 1 (one) month of receiving your request unless it is particularly complicated or you have made several requests, in which case we aim to respond within 3 (three) months. We will let you know if we are going to take longer than 1 (one) month in dealing with your request. If we have a lot of information about you we might ask you if you can tell us what exactly you want to receive. This will help us action your request more quickly.

 

Correcting your data

You can ask us to correct any data which is inaccurate or incomplete. This is free of charge.

If we have shared the data with anyone else, we will tell them about the correction wherever possible. We aim to deal with requests for correction within 1 (one) month, although it might take us up to 3 (three) months if your request is particularly complicated.

If we cannot action a request to correct your data, we will let you know and explain why this is.

 

Erasing your data

This right is sometimes referred to as “the right to be forgotten”. This is not an absolute right but you have the right to have your data erased, free of charge, in certain circumstances. 

You can ask for your data to be erased where:

  • it is no longer necessary for the purpose for which it was originally collected or processed;

  • we are processing your data based on your consent, and you withdraw that consent;

  • you object to the processing and we do not have an overriding legitimate interest for continuing;

  • your data has been unlawfully processed;

  • your data must be erased to comply with a legal obligation;

  • the data was processed to offer information services to a child.

 

There are some exceptions to this right. If one of these applies, we do not have to delete the data.

 

If we have shared your data with third parties, we will tell them about the erasure of your data unless this is impossible or would involve disproportionate effort.

 

Restricting the processing of your data

You can ask us to restrict the processing of your personal data in some circumstances, free of charge. This is not an absolute right. If processing is restricted we can store the data and retain enough information to make sure the restriction is respected, but we cannot further process your data.

 

You can restrict the processing of your personal data in the following cases:

  • if you contest the accuracy of your data, we will restrict processing until we have made sure the data is accurate;

  • if you object to our processing and we are considering this objection;

  • if the processing is unlawful but you do not want us to erase your data;

  • if we no longer need the personal data but you require the data to establish, exercise or defend a legal claim.

 

If we have disclosed the data to a third party, we will inform them about the restriction unless it is impossible or would require a disproportionate effort. We will tell you if we decide to lift a restriction on processing your data.

 

Objecting to the processing of your data

Objecting to the processing of your data is free of charge. It is not an absolute right but you can object to our processing of your data where it is:

  • based on the legitimate interests ground; or

  • for the purposes of scientific/historical research and statistics.

 

We will stop processing your personal data unless we have compelling legitimate grounds for the processing which override your interests and rights, or unless we are processing the data for the establishment, exercise or defense of legal claims.

 

You can require us to stop using your data for direct marketing purposes. We will stop as soon as we receive your request. There are no exemptions or reasons for us to refuse.

 

Data Portability

This allows you to obtain and reuse your personal data for your own purposes across different services. It applies where the following conditions are met:

  • you provided the personal data to us yourself;

  • we are processing the data either based on your consent or because it is necessary for the performance of a contract; and

  • the processing is carried out by automated means.

 

We will provide your data free of charge in a structured, commonly used and machine-readable form. We aim to provide your data within 1 (one) month of receiving your request unless it is particularly complicated or you have made several requests, in which case we aim to respond within 3 (three) months. If we are going to take longer than 1 (one) month we will let you know and explain why we need more time. If we consider that we cannot provide you with your data, we will contact you and explain why this is.

 

Automated decision making and profiling

You have the right not to be subject to a decision which is based on automated processing and which produces a legal (or similarly significant) effect on you.

We will tell you about any automated decision making that affects you. You have the right to:

  • request human intervention;

  • express your point of view;

  • ask for the decision to be explained; and

  • challenge the decision.

 

These rights are not absolute. They do not apply if the decision is:

  • necessary for us to enter into or perform a contract with you;

  • authorised by law (e.g. for fraud prevention); or

  • based on your explicit consent.