Privacy Policy
PRIVACY & COOKIES POLICY
Mahindra United World College of India located at Village Khubavali, PO Paud Taluka Mulshi, Pune, Maharashtra 412 108, India (“we” “us” “our” “MUWCI” “College”) is committed to protecting the privacy and security of your Personal Data. Your privacy is important to us. This Privacy Policy (“Policy”) applies to all services offered by us to all individuals (“you”, “your” or “user”) when they access, browse, or use the Website, https://www.uwcmahindracollege.org/. This Policy shall be referred and read as an integral part of the Terms & Conditions of the Website.
This Policy explains how we collect, store, disclose, share, and use information that personally identifies when you visit our Website and how you can exercise your privacy rights.
Before using our Website, you are advised to carefully read this Policy and the Terms & Conditions of our Website. If you do not agree with the terms of this Policy or Terms & Conditions, please do not access this Website. By proceeding further and visiting and/or using our Website, you are consenting to process your Personal Data in the manner as set forth in this Policy.
- PERSONAL DATA THAT WE COLLECT
When you interact with us, we collect different types of information including your Personal Data from you based on the type of interaction.
We will process your Personal Data as (i) a (prospective) student; (ii) a (prospective) parent; (iii) alumni; (iv) a donor; (v) subscriber and (vi) a user of our Website.
“Personal Data” means any data about an individual who is identifiable by or in relation to such data.
“Processing”, “Processed”, “Process” in relation to Personal Data, means a wholly or partly automated operation or set of operations performed on digital Personal Data, and includes operations such as collection, recording, organisation, structuring, storage, adaptation, retrieval, use, alignment or combination, indexing, sharing, disclosure by transmission, dissemination or otherwise making available, restriction, erasure or destruction.
We endeavour to collect only such information that is necessary to perform our services for you or to respond to your enquiries.
- IDENTIFIERS INFORMATON
Website User: When you interact with us vide this Website, we collect the following Personal Data from you directly when you use the Website:
- Your First Name
- Your Last Name
- Your Email Address
- Your Mobile number
Donors: We collect Personal Data in course of your donation from you directly (first name, last name, email address, contact number, the cause you would like to support, affiliation, official mailing address (for tax benefit purpose), social security number (if applicable) tax identification number or PAN number, nationality and the country to claim tax benefit in).
Job Aspirant: We collect Personal Data when you apply for a job position with us and submit your resume for this purpose.
- ELECTRONIC INFORMATION
Website visitors: In the course of your visit of this website, we will automatically collect the following information:
- The selected page on our website (URL)
- Date and the time of your visit of this Website
- Your IP address of the device used to access the Website
- Name and version of your web browser
- The website (URL) you have visited before you accessed this Website
- Certain cookies (see point 2 below)
- Your navigation path on the Website
- The length of time you spent on the Website or subpage
- The subpage from which you left the Website
- The number of pages viewed
- The number of users who visited the Website
- The country, region or city from which the Website is accessed
- The IP address of the device used to access the Website
- GPS location of the User, if allowed by the User
- The device from which access was obtained, as well as the search term used, as applicable
- The name and URL of the accessed file
- The search queries used
- Your devices operating system (shown by the user agent)
- The browser you are using (shown by the user agent)
- The type of device, if access is obtained through a mobile phone
- The transmission protocol used
Electronic information is generally non-identifying in nature, but to process such usage information and to make it feasible for our legitimate business interests like promoting system security and stability, allowing for error and performance analysis, and serving internal statistical needs, we may associate the usage information with other information collected from you and such combination may be treated as your Personal Data. This data also enables us to optimize our online services.
You are under no obligation to provide the Personal Data that we ask you for. However, if you do not provide your Personal Data, you will not be able to make use of the features and functions of the Website.
We may use third-party service provider(s) to assist with some features of our Website. Our service provider(s) will receive your Personal Data on our behalf but will not be permitted to use it for any other purpose.
- COOKIES
This Website uses so-called cookies. A cookie is a small file that may be installed on your computer when you visit a website. Cookies are generally used to provide website visitors with additional functionality within the website. They may for example be created to keep track of your visit and support your navigation of the website, help you resume where you left off and/or remember your preferences and settings when you visit the website again. Cookies cannot access, read or modify any other data on your computer.
Most of the cookies used on this Website are so-called session cookies. They are automatically deleted once you leave the Website. On the other hand, persistent cookies remain on your computer until you delete them in your browser. We use persistent cookies to recognise you when you visit this Website the next time.
If you want to control the cookies installed on your computer, you can modify your browser settings so that it notifies you when a website wants to install a cookie or you can block cookies altogether. You can also delete cookies that have already been installed on your computer. Refer to the ‘Help’ function within your browser for more information on how to do these things.
Please note, however, that disabling cookies might affect your online experience and/or prevent you from taking full advantage of our Website.
- PURPOSE FOR WHICH WE PROCESS YOUR PERSONAL DATA
We collect your Personal Data for the following purposes:
- To provide you with our services:
- To make this Website and its services available to you and to further optimize and develop this Website
- To communicate with you
- To confirm incoming donations
- To provide you with relevant information regarding our educational programs (e.g. newsletters)
- To ensure that your donation is used either for the support of student scholarship or College corpus or any cause as determined by the College
- To respond to an enquiry or concern raised by you
- To notify you about changes to our Website or any services that we provide through it
- For our internal business purposes to:
- Create usage statistics of this Website
- Assess and improve your user experience on the Website
- Be able to recognize, prevent and investigate attacks on this Website
- Protect our rights and legitimate interests.
- Comply with legal and regulatory obligations
- Enforce any legal right or claim
- BASIS FOR PROCESSING YOUR PERSONAL DATA
We use your Personal Data only if we have a legal basis for doing so. In case, we wish to use your Personal Data for purposes other than certain legitimate uses, we shall seek specific consent from you in a separate process prior to Processing your Personal Data for such additional purposes.
We shall also use your Personal Data for legal and regulatory purposes, such as:
- To ensure compliance with our legal obligations and to also comply with our obligations towards public authorities;
- To enforce our terms and conditions;
- To enforce any legal right or claim;
- For legal and compliance reasons, such as the prevention, detection, or investigation of a crime, loss prevention or prevention of fraud;
- For our internal and external audit requirements and for information security purposes;
- As otherwise described to you at the time of collection of your Personal Data.
- SHARING/DISCLOSURE OF PERSONAL DATA
As far as this is necessary for the purposes set out above, we will share your Personal Data with the following recipients who either have a need to know and who will Process it for us based on our instructions and for no other purpose:
Service providers: We may need to collaborate with service providers for the provision of services and technical support. These external Service who shall process your Personal Data on our behalf subject to appropriate safeguards only in so far as it is necessary for them to provide their services to us. Our prior authorisation is required before they are permitted to transfer responsibility for Processing Personal Data to a third-party.
Scholarship Donors: We shall share your Personal Data with scholarship donors when you apply for scholarship during your academic year at the College.
We shall disclose your Personal Data to authorized staff of receiving functions and departments of the College. All our employees and contractors are required to follow our data protection and security policies when handling Personal Data.
We only share your Personal Data to recipients that have an adequate level of data protection by implementing appropriate technical and organizational security measures, or we take measures to ensure that all recipients provide an adequate level of data protection as prescribed by applicable law. We do not sell your Personal Data to anyone.
Courts and Public authorities: We will share your Personal Data when required for the following purposes:
- To comply with legal obligations and respond to requests from government agencies, including law enforcement agencies and other public authorities.
- To prevent or detect or investigate offences or cyber incidents or for the prosecution or punishment of offences.
- To raise or defend against legal claims.
- To protect our users and our systems.
-
ACCURACY OF YOUR PERSONAL DATA
Notwithstanding the obligation on us to put in place all necessary means to maintain the accuracy of your Personal Data, you agree to provide us with accurate Personal Data at all times and you will notify us promptly upon any changes to your Personal Data.
-
SECURITY MEASURES
We implement appropriate technical and organizational measures in relation to the information and Personal Data that is processed by us. We take reasonable measures to protect all Personal Data from unauthorised processing or accidental disclosure, acquisition, sharing, alteration, misuse, destruction or loss or unauthorised access and modification that compromises the confidentiality, integrity, and availability of such data.
While we endeavour to always protect our systems, this Website, operations and information against unauthorized access, use, modification, and disclosure, due to the inherent nature of the Internet, we cannot guarantee that any information, during transmission or while stored on our systems, will be absolutely safe and secure from intrusion by others.
- YOUR RIGHTS IN CONNECTION WITH YOUR PERSONAL DATA
We respect your right to access and control your Personal Data, and we will respond to requests to exercise your rights under applicable laws and, where applicable, will correct, update, or erase your Personal Data.
Please note that applicable law might require that we cannot comply with every request. We will be required to retain your Personal Data due to legitimate business/ regulatory/ statutory retention requirements despite your request for erasure or withdrawal of consent.
You have the following rights:
- Right to access information about your Personal Data: At any point, you can contact the Data Protection Officer for a summary of your Personal Data we hold about you, the processing activities undertaken with respect to such Personal Data, the identities of all those data fiduciaries/controllers and data processors with whom your Personal Data has been shared by us along with a description of the Personal Data so shared, and any other information related to your Personal Data and its Processing.
- Right to request correction: If your Personal Data is incomplete, inaccurate or misleading, or out of date, you can inform the Data Protection Officer about the same and your Personal Data will be corrected, completed, or updated, as the case may be.
- Right to request erasure: If you believe that we should discontinue the use of your Personal Data, you have the option to request the deletion of your Personal Data after the stated purpose is completed, generally after completing the course curriculum offered by the College, unless retention is necessary for compliance with any law for the time being in force.
- Right of grievance redressal: We are committed to protecting your Personal Data collected by us. However, in case of any act or omission regarding the performance of our obligation in relation to your Personal Data or in the exercise of your rights under applicable law, we encourage you to contact the Data Protection Officer using the contact details provided in paragraph 11.
- Right to nominate: In the event of death or incapacity to exercise these rights, you can nominate any other individual to exercise such rights.
- Right to restriction of processing: To request us to restrict the processing of your Personal Data where you believe such data to be inaccurate, our processing is unlawful or we no longer need to process such data for a particular purpose, but where we are not able to delete the data due to a legal and other obligation or because you do not want us to delete it.
- Right to object: In certain circumstances, to object for legitimate reasons to the processing of your Personal Data or to revoke consent previously granted for the processing where such revocation does not affect the lawfulness of the processing until the revocation. You have the right to request that we stop processing your data where our processing is based on our overriding legitimate interest. Upon receiving the request, we will contact you and let you know if we are able to comply or if we have legitimate grounds to continue to process your data.
- Right to data portability: Where our processing is based on our overriding legitimate interest or your consent, you have the right to receive the data concerning you, which you have provided and to request that we transfer some of your data to another data fiduciary/controller, where technically feasible and where required under applicable law. We will comply with your request, where it is feasible to do so, within one month of receiving your request.
- Right to withdraw your consent to process your Personal Data: You can withdraw/revoke your consent at any time, to the Processing of your Personal Data for which consent was sought earlier. You can withdraw your consent easily by contacting the Data Protection Officer using the contact details given below in paragraph 11. The withdrawal of consent previously granted for the Processing of Personal Data does not affect the lawfulness of the Processing until the withdrawal.
- Right to lodge a complaint: You have the right to lodge a complaint with the competent authority.
For exercising any of your rights, you can contact the Data Protection Officer using the contact details provided in paragraph 11. We will need you to furnish proof of your identity before you can exercise these rights. M&M may not be able to process any requests made in the event you fail to establish your identity or if M&M is unable to authenticate your identity.
It is important that the Personal Data we hold about you is accurate and updated. Please write to the Data Protection Officer if the Personal Data given to us changes during the period for which we hold it.
- HOW LONG DO WE KEEP YOUR PERSONAL DATA?
We will retain your Personal Data which we have collected for as long as we reasonably consider it necessary for achieving the abovementioned purposes and as is permissible under applicable law. This is determined on a case-to-case basis.
We will delete your Personal Data whenever you request us to do so. However, we may archive and/or retain your Personal Data for as long as there are statutory retention obligations or potential legal claims are not yet time barred.
- SAFEGUARDING PRIVACY OF CHILDREN
We do not knowingly collect or solicit Personal Data from minors below 18 years of age without verifiable parental consent. Further, we do not undertake tracking and behavioural monitoring of minors or targeted advertising directed at minors except where processing is restricted to tracking and behavioural monitoring for the educational activities of the College or in the interests of safety of minors enrolled with the College.
If we learn that we have collected Personal Data from a minor without verifiable parental consent, we will erase such Personal Data.
If you believe that a minor below 18 years of age may have provided us their Personal Data, please contact us using the contact details provided in paragraph 11.
- OUR CONTACT DETAILS
If you have questions or comments regarding this Policy or want to exercise any of your rights or express your grievances regarding the Processing of your Personal Data, please contact us using the contact details given below:
Data Protection Officer
Mahindra United World College of India
Village Khubavali, PO Paud
Taluka Mulshi, Pune,
Maharashtra 412 108, India
Phone: +91 97644 42751 – 54
email id: [email protected]
- GRIEVANCE REDRESSAL
If you have any grievances against our Processing of your Personal Data, you may lodge your grievance with the Data Protection Officer as per details provided in paragraph 11 above.
If you are not satisfied with the resolution provided you may log your complaint with the Data Protection Board of India following the procedure prescribed by them.
- CHANGES TO THIS PRIVACY POLICY
We reserve the right to change this Policy at our sole discretion at any time. Any material changes to this Policy will be posted on this page. We encourage you to review this Policy regularly for such changes. The updated Privacy Policy will take effect as soon as it has been updated.
This Policy was last updated as of 28th March, 2025.