Terra Cinzenta (PVT) LTD (the 'Company' or 'we'), a legally registered entity in the Democratic Socialist Republic of Sri Lanka, operates in full compliance with the local regulatory requirements.
We are committed to safeguarding the rights and freedoms of individuals whose data we process. The adherence to data protection principles is essential to our data processing activities, ensuring that we achieve our business objectives in a responsible and compliant manner.
The Notice describes the processing of PD collected on the website terracinzenta.com.
All processes for processing PD in the Company are described in the Privacy Policy.
The Privacy Notice (hereinafter referred to as "Notice") refers to the provisions of the applicable local legislation, including:
Please read this Notice carefully to understand how the Company collects and uses your personal information.
If you have any questions about this Notice or need clarification regarding the processing of your PD, please contact the personal data protection officer at privacy@terracinzenta.com.
If there are any updates to the Notice, the revised version will be posted on our website at terracinzenta.com/privacy-notice.
We adhere to the fundamental principles of PD processing by implementing the following measures to ensure the security of PD:
We may share your PD with third parties when it is necessary to fulfill the purposes of the PD processing.
| Information about third parties | Country of establishment | Purpose of transfer | Categories of personal data subjects | Role of the service provider | Legal basis |
|---|---|---|---|---|---|
| Web-site Administrator Services Provider | USA |
Site analytics Site administration Processing information from the forms on the site |
Site visitors Site visitors Representatives of prospective counterparties |
Processor | Contract |
Our decision-making processes do not depend entirely on automated processing of PD to make decisions that could have legal consequences or affect the rights and legitimate interests of the data subject.
We may transfer PD to third parties in jurisdictions with specific data protection legislation. Where such legislation is absent, we conclude contracts requiring compliance with Law No. 9 PDPA ensuring that only the necessary and proportionate amount of PD is processed.
When transferring PD, we include provisions for its protection in our contracts and monitor third parties to ensure compliance with data processing principles and security measures.
We consistently ensure that third parties uphold an adequate level of PD protection by entering contracts that define their responsibilities regarding the processing and safeguarding of PD. When sharing your PD with any third party with whom we have a contractual relationship, we require confirmation of the security measures these entities implement to protect the PD we disclose.
We do not share PD with public authorities or other third parties without a lawful request. Access to PD by third parties is granted through specific procedures monitored by the Company.
We retain your PD only for the period necessary to fulfil the purposes that justify its processing. In determining the retention period, we consider factors such as the quantity, nature, and sensitivity of the PD being processed.
We do not process sensitive PD related to ideological, political, or trade union views or activities; intimate or racial origin; or administrative or criminal proceedings and sanctions.
We process PD of the indicated categories of data subjects for predefined purposes:
| Data Subjects | Purposes of PD processing | List of processed PD | Storage Period | Legal basis |
|---|---|---|---|---|
| Representatives of prospective counterparties | Communication with representatives of potential counterparties (presales) | Full name, company's name, job position, work email, phone number, messenger user number/ name | 2 years after the last contact | Consent |
| Site visitors | Site analytics for terracinzenta.com | Cookies | 1 month after the end of session | Consent |
We guarantee the fulfilment of your following rights as a data subject.
You can withdraw your consent to the processing of your PD at any time. Once we receive your withdrawal, we will stop processing your data, unless there is a legal obligation that requires us to continue processing it.
We hereby provide the following details regarding the processing of your personal data (PD):
Data subjects have the right to access their personal data.
Data subjects can request the correction of inaccurate or incomplete personal data.
Data subjects have the right to request the deletion of their personal data when it is no longer necessary for the purposes for which it was collected, or if they withdraw consent (where processing is based on consent) or object to processing in certain cases. To exercise these rights, you need to contact the data protection officer at: privacy@terracinzenta.com. We process and respond to requests from the data subjects within a reasonable period, typically within one month. This time frame may be extended by up to two additional months. In this case we will notify the data subject about the reasons for the delay within one month.
Data subjects can request the restriction of processing of their personal data in certain situations.
Data subjects have the right to receive their personal data in a structured, commonly used, and machine-readable format.
Data subjects have the right to object to the processing of their personal data in certain situations, such as when data is being processed for direct marketing purposes or based on legitimate interests or public interest tasks.
Where processing is based on the consent of the data subject, Data subjects have the right to withdraw their consent at any time.
Data subjects must be informed about the collection and processing of their personal data.
Data subjects have the right to file complaints with the relevant regulatory authority (such as the Data Protection Authority) if they believe their rights under the PDPA have been violated or their personal data has been misused.
Data subjects have the right to request a review of any decision made solely through automated processing, if that decision has, or is likely to have, a significant and lasting impact on the data subject's rights and freedoms under any applicable law.
We take the security of the PD under our control very seriously and have implemented a comprehensive set of organizational and technical measures to protect PD, comply with applicable laws, and ensure that data is processed securely and responsibly. These measures include:
Any doubts regarding this Notice shall be escalated to the data protection officer.
Email: privacy@terracinzenta.com
