Privacy Notice

Who is responsible

Sri Devaraj Urs Academy of Higher Education and Research (Deemed to be University), Tamaka, Kolar, is the data fiduciary for the Faculty Registry. It is written against the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023, as its Rules commence.

What we hold

• Identity and contact: name, photograph, official and personal email, mobile number, and date of birth and gender where recorded.
• Service: college, department, designation, date of joining, appointment type, reporting line, date and reason for leaving, clinical unit, and AEBAS attendance totals.
• Professional identifiers: council registration, AEBAS ID, ORCID, Scopus, Google Scholar, Vidwan and IRINS IDs.
• Your record: qualifications, experience, publications, awards, training, responsibilities and the proof you attach.
• Entries in NMC faculty filings and on the University, hospital and college websites, from which the Registry was first built.
• Security: sign-ins and the device, IP address and approximate location of each, and who changed what.

What we never hold

Aadhaar and PAN numbers are not stored. Any form that needs them is completed by hand. Patient-identifiable information must not be entered or attached.

Why we use it

Data is not sold and is not used for advertising.

• To meet duties to the National Medical Commission, UGC, NAAC, NIRF and other statutory councils and accreditation bodies. The DPDP Act treats employment and legal obligations as legitimate uses, and consent is not the basis for these.
• To run IQAC and ISO quality processes and to prepare institutional reports.
• To produce your CV in the formats boards ask for.
• To let those you report to see the record of the people in their team.

Who can see it

• You can see all of your own record.
• Those above you in the reporting tree can see your record, but cannot change it.
• Authorised IQAC, Registrar and college office administrators can see and verify all records.
• Statutory bodies receive what a filing requires, when the University submits it.
• Service providers host the system for the University and act only on its instructions: Supabase (database, Mumbai region) and Vercel (application hosting).

How long it is kept

Your record is kept for as long as you serve and afterwards for as long as regulators and University rules require. The period is set out in the Data Retention Schedule.

Your rights

• Access: download what the Registry holds about you from your record, at any time.
• Correction: correct any entry yourself. The earlier version stays in the history, because accreditation records must be traceable.
• Erasure: ask for data that is no longer needed to be erased. Statutory and accreditation records cannot be erased on request; if that applies, we will say why.
• Grievance: write to the Data Protection Officer. A grievance is addressed within one month. You may then approach the Data Protection Board of India.
• Nomination: name a person to exercise these rights on your behalf.

Cookies

The Registry uses only the cookies it needs to keep you signed in. See the Cookie Notice.

Who to contact

Data Protection Officer: Mr Girish Gowda, dpo@sduaher.ac.in, 1800-425-3245 (toll-free). Post: Sri Devaraj Urs Academy of Higher Education and Research, Tamaka, Kolar 563103, Karnataka.