How Fuchsius handles personal data.

01Document information

Owner

To be confirmed

Version

DRAFT

Effective Date

To be confirmed

Last Updated

To be confirmed

02Who this notice can cover

• Website visitors
• Business/contact enquiries
• Clients and client contacts
• Job applicants and talent-community members
• Mentorship applicants and participants
• Referral participants
• Event/webinar participants
• Suppliers and business partners
• Newsletter/news-alert subscribers

03Who is responsible

Controller Name

Fuchsius (Private) Limited

Registered Address

To be confirmed

Privacy Contact

To be confirmed

Dpo

To be confirmed

Rule

Do not publish DPO details unless a DPO is formally designated and the public contact is approved.

04Types of personal data

• Identity

  • Name
  • Job title
  • Organization
  • Role

• Contact

  • Email
  • Phone
  • Country
  • City

• Business enquiry

  • Project requirements
  • Company details
  • Timeline/budget if voluntarily provided

• Technical

  • IP address
  • Browser/device
  • Security logs
  • Request metadata

• Usage

  • Pages viewed
  • Interactions
  • Analytics events where enabled

• Recruitment

  • CV
  • Portfolio
  • Education
  • Employment history
  • Assessment/interview data

• Mentorship

  • Education
  • Skills
  • Projects
  • Progress/program administration

• Marketing preferences

  • Newsletter/news-alert preferences
  • Consent records

• Supplier/partner

  • Business contact and contract-administration data

05Why personal data may be used

• Respond to enquiries

  Lawful Basis

  To be confirmed

• Deliver contracted services

  Lawful Basis

  To be confirmed

• Recruitment

  Lawful Basis

  To be confirmed

• Mentorship/program administration

  Lawful Basis

  To be confirmed

• Security and fraud prevention

  Lawful Basis

  To be confirmed

• Website analytics

  Lawful Basis

  To be confirmed

• Newsletters/news alerts

  Lawful Basis

  CONSENT_OR_OTHER_APPROVED_BASIS

• Legal/compliance obligations

  Lawful Basis

  To be confirmed

06Who may receive data

• Cloud/hosting providers
• Email and communications providers
• Recruitment/application systems
• Analytics providers where enabled
• Payment providers where applicable
• Professional advisers
• Authorities where legally required
• Client/partner systems where necessary for service delivery

07International processing and transfers

Fuchsius may use service providers or infrastructure outside Sri Lanka where necessary.

Controls

To be confirmed

08How long data is kept

Personal data should be kept only as long as needed for the stated purpose and applicable legal or contractual requirements.

Schedule

Record: General enquiry · Retention: To be confirmed

Record: Unsuccessful job application · Retention: To be confirmed

Record: Talent community · Retention: To be confirmed

Record: Mentorship application · Retention: To be confirmed

Record: Security logs · Retention: To be confirmed

Record: Newsletter consent record · Retention: To be confirmed

09Privacy rights

Rights and deadlines depend on the applicable law and its commencement status.

Possible Requests

• Information about processing
• Access
• Correction
• Deletion/erasure where applicable
• Restriction or objection where applicable
• Withdrawal of consent where applicable
• Other rights provided by applicable law

Request Route

To be confirmed

Identity Verification

Use proportionate identity verification before disclosure or changes.

10Questions and complaints

Internal Route

To be confirmed

Regulator

Data Protection Authority of Sri Lanka

Regulator Url

https://www.dpa.gov.lk/