PRIVACY POLICY

Mahindra & Mahindra Limited having its registered office at Gateway Building, Apollo Bunder, Colaba, Mumbai 400 001, Maharashtra, India (“we” “us” “our” “Company”) is committed to protecting the privacy and security of your Personal Data. Your privacy is important to us.

This Privacy Notice (“Notice”) explains how we collect, receive, store, share, handle and use your Personal Data that personally identifies you for the sole purpose of recording and sharing your testimony of your experience of using Mahindra Genuine Products and how you can exercise your privacy rights. This may include the use of your full name, image, video, voice, and statements for the Company’s promotional and marketing campaign related to Mahindra Genuine Products, across their digital and print media channels.

This Notice shall be referred to and read as an integral part of the Terms and Conditions. Before participating in this marketing and promotional campaign, you are advised to carefully review this Privacy Notice including the Terms and Conditions. If you do not agree with the terms of this Notice or the Terms and Conditions, please do not participate in this campaign.

1. PERSONAL DATA THAT WE COLLECT AND THE PURPOSE FOR WHICH WE PROCESS IT

“Personal Data” means any data about an individual who is identifiable by or in relation to such data.

“Processing”, “Processed”, “Process” in relation to personal data, means a wholly or partly automated operation or set of operations performed on digital personal data, and includes operations such as collection, recording, organisation, structuring, storage, adaptation, retrieval, use, alignment or combination, indexing, sharing, disclosure by transmission, dissemination or otherwise making available, restriction, erasure or destruction.

We endeavour to collect only such information directly from you that is reasonably necessary for the purpose of recording your testimony of your experience of using Mahindra Genuine Products which includes the following Personal Data.

We collect the following Personal Data from you directly:

• Name
• Image (Photograph)
• Business name/location

There is no obligation to provide your Personal Data that we ask you for. However, if you do not provide your Personal Data, you will not be able to participate in this marketing and promotional campaign.

We will process your personal data for the following purposes:

• to participate in the marketing and promotional campaign of Mahindra Genuine Products
• to record and publish your testimony across the Company’s social media handles including the Company’s website, brochure, catalogues, presentations and marketing materials.
• to communicate with you
• to respond to an enquiry or request made by you on her behalf to exercise her rights
• to protect our rights and legitimate interests
• to ensure compliance with legal and regulatory obligations
• to comply with obligations to public authorities
• to enforce any legal right or claim

We endeavour to process only such information that is reasonably necessary for the above-mentioned purposes or to respond to your enquiries.

If we wish to collect and process your Personal Data for purposes other than those mentioned above, we shall seek your consent prior to collecting and processing your Personal Data for such additional purposes.

We shall process your Personal Data provided by you either:

• on the basis of your consent; or
• on the basis of our prevailing legitimate interest to achieve the purpose(s) set out above; or
• on the basis of the necessity to comply with legal obligations to which we are subject.

2. YOUR RIGHTS IN CONNECTION WITH YOUR PERSONAL DATA

We respect your right to access and control your Personal Data, and we will respond to requests to exercise your rights under applicable laws for information and, where applicable, will correct, update, or erase your Personal Data.

Please note that applicable law might require that we cannot comply with every request. We will be required to retain your Personal Data due to legitimate business/ regulatory/ statutory retention requirements despite your request for erasure.

You have the following rights:

• Right to access information about your Personal Data: At any point, you can contact us for a summary of your Personal Data we hold about you, the processing activities undertaken with respect to such Personal Data, the identities of all those persons with whom your Personal Data has been shared by us along with a description of the Personal Data so shared, and any other information related to your Personal Data and its processing.
• Right to request correction: If your Personal Data is incomplete, inaccurate or misleading, or out of date, you can inform us about the same, and your Personal Data will be corrected, completed, or updated, as the case maybe.
• Right to request erasure: If you believe that we should discontinue the use of your Personal Data, you have the option to request the deletion of your Personal Data, unless retention is necessary for compliance with any law for the time being in force.
• Right of grievance redressal: We are committed to protecting your Personal Data collected by us. However, in case of any act or omission regarding the performance of our obligation in relation to your Personal Data or in the exercise of your rights under applicable law, we encourage you to contact us using the contact details provided in paragraph 3.
• Right to nominate: In the event of death or incapacity to exercise these rights, you can nominate any other individual to exercise such rights.
• Right to withdraw your consent to process Personal Data: You can withdraw/revoke your consent at any time, to the processing of your Personal Data for which consent was sought earlier. You can withdraw your consent easily by contacting us using the contact details given below in paragraph 3. The withdrawal of consent previously granted for the processing does not affect the lawfulness of the processing until the withdrawal.

For exercising any of the abovementioned rights, you can write to us at desale.saurabh@mahindra.com. You are required to furnish proof of your identity before you can exercise these rights. We may not be able to process any requests made in the event you fail to identify yourself or if we are unable to authenticate you as our customer. We shall not charge for fulfilling any of the above requests.

3. ANY MORE INFORMATION

If you have questions or comments regarding this Notice or want to exercise any of your rights or express your grievances regarding the processing of your personal data, please contact us using the contact details given below: