Privacy Statement for HRMS Platform

 

The Privacy Statement for Employees and Pensioners

 

Introduction:

The Central Bank of India (hereinafter referred to as "the Bank" or "We" or "Us") values and respects the privacy of its staff, pensioners, and ex-staff members (hereinafter referred to as "users"). The users can use the HRMS Mobile App to access various HR-related services and features without disclosing personal information. However, to utilize certain features or receive notifications and updates, you may be required to register or log in to the app. In such cases, users will need to provide certain information about himself/herself, which will be handled in accordance with our Privacy Statement. User can update the profile information in HRMS Intranet by himself/herself or through HR Admin, wherever available, or contact our HRMS support team for assistance.

 

The Bank is committed to ensuring the confidentiality and security of personal data collected via the HRMS mobile application in compliance with the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules") as amended from time to time and other applicable laws. This Privacy Statement outlines how user data is collected, used, disclosed, and protected.

Scope of Information Collection: The Bank may collect and process the following categories of personal data or information, with the consent of the User except for legitimate uses as permitted under applicable laws :

  1. General personal information: Employee ID, work location, device details, and contact information.
  2. Sensitive personal data: Financial details, passwords, and biometric data, or any other information in terms of SPDI Rules or other applicable laws
  3. System access data: Files, folders, camera, and audio recordings when authorized by the user.

Purpose of Data Collection: Personal data is collected and processed for:

1.      Managing HR services, including but not limited to, leave, payroll, benefits, and reimbursements etc.

 

2.      Communicating critical updates, notifications, and alerts.

 

3.      Ensuring compliance with legal and regulatory requirements.

Sources of Information collected will be subject to regular reviews to ensure accuracy and relevance.

A.    Information the Bank receives from the user on applications or other forms, such as name, address, and telephone number.

 

B.     Information about the user's transactions with the Bank, or its affiliates, or non-affiliated third parties, such as the account balances, payment history, and account activity.

 

C.     Information the Bank receives from a user's reporting agency such as credit bureau reports and other information relating to the creditworthiness

 

D.    Information the Bank receives about the from other sources, such as his employer and other third parties.

 

E.     Information received through or by any statutory and regulatory bodies

Direct Input: Information provided by the User directly through the App, such as login credentials, profile updates, and requests for HR-related services.

HRMS Database: Information stored in the Bank's HRMS database, including employee master data, employment history, and benefits information.

Payroll System: Information from the Bank's payroll system, including salary, allowances, and deductions.

Information provided by the user on our request or otherwise

Consent and Authorization: Except in the cases of legitimate uses as permitted by the applicable laws, the Bank ensures explicit user consent is obtained for processing personal data or sensitive personal data or information. Users will be informed of the purpose and scope of data collection prior to providing consent.

Third-Party Sharing: Subject to the applicable laws, user data may be shared with:

  1. Statutory and regulatory authorities.
  2. Auditors and legal advisors.
  3. Authorized third-party service providers.
  4. Other entities, only with the user's explicit or implied consent or as required by law.

5.      Under the orders of the court, tribunal, police and other competent national Statutory and Regulatory Authorities and International Authorities with whom India has tie up relations.

6.      With user's express or implied consent, to any other person

All third parties are contractually obligated to maintain data confidentiality and comply with applicable Indian data protection laws.

Data Retention: Personal data will be retained as long as necessary to fulfill its intended purpose or comply with legal and regulatory requirements. Post this period, the data will be securely deleted.

Security Measures: The Bank employs robust security protocols, including but not limited to:

  1. 128-bit encryption for data transmission.
  2. Firewalls, regular audits, and access controls.
  3. Employee training on data protection practices.

User Rights: Subject to the applicable laws of India, Users shall have the right to:

  1. Access, correct, or update their personal data.
  2. Withdraw consent for data processing wherever applicable.
  3. Request deletion of data where applicable.

 

Disclaimers and Liability Users are advised to safeguard their credentials, such as MPINs, and avoid sharing sensitive information.

 

 

Amendments to the Privacy Statement: The Bank reserves the right to modify this Privacy Statement and will notify users of significant changes through email or in-app alerts. Users are encouraged to periodically review this document.

 

Jurisdiction: This Privacy Statement is governed by the laws of India. Any disputes will be subject to the exclusive jurisdiction of Indian courts.

Miscellaneous:

Whenever the Bank hires other organizations to provide support services, the Bank will require them to conform to our policy standards and to allow us to audit them for compliance.

The Bank will always strive to keep user's files complete, up to date, and accurate. We will inform user how and where to conveniently access their HRMS account information (except when we are prohibited by law), and how to notify us about errors, which we will promptly correct. Users will also be notified about significant updates or corrections made to their records upon their request.

The Bank will continuously make the assessment to ensure that user's privacy is respected.

Grievance Redressal:

If the user wishes to review information provided application, can contact us to request a copy of the personal account information provided our HRMS Department registered email ID. It may also be possible for users to review and change contact information such as address, phone and e-mail information by signing on and updating their personal profile. To protect your privacy, proof of identity or other authentication is required.

If the user wishes to access or correct or delete any of the personal data held by the Bank, or if the has any questions concerning the Privacy Statement, he may contact the Bank via regular mail to: hrmsitsupport@centralbank.co.in

Contacting the user by the Bank

In providing the telephone, facsimile number, postal and e-mail address or similar details, the user agrees that the Bank may contact him by these methods to keep him informed about the Bank's products and services or for any other reason. If the user prefers not to be kept informed of the Bank's HR products and services, he should intimate the Bank at the mail hrmsitsupport@centralbank.co.in.

Internet Communications

In order to maintain the security of our systems, protect our staff, record transactions, and, in certain circumstances, to prevent and detect crime or unauthorized activities, the Bank reserves the right to monitor all internet communications including web and email traffic into and out of its domains.

Third party sites

This Privacy Statement does not extend to third party sites linked to this web site.

Effective Date: This Privacy Statement is effective from 01-01-2025

This Privacy Statement is not intended to, nor does it, create any contractual rights whatsoever or any other legal rights, nor does it create any obligations on the Bank in respect of any other party or on behalf of any party.