Digital Personal Data Protection Act, 2023 (Act No. 22 of 2023)

Data Privacy & Protection Policy

Official statement on digital personal data processing, affirmative consent requirements, and Data Principal statutory rights under the Government of India DPDP Act 2023.

1. Data Fiduciary Identity & Scope

This portal is operated by the District CSR Facilitation Cell, District Collectorate, Sri Sathya Sai District, Government of Andhra Pradesh ("District Administration"), acting as the Data Fiduciary under Section 2(i) of the Digital Personal Data Protection Act, 2023.

This policy governs all digital personal data collected, stored, or processed through this web portal for corporate social responsibility (CSR) project proposals, single-window clearances, and partner registration.

2. Personal Data Collected & Lawful Purpose

In accordance to the DPDP Act 2023, notice is hereby provided that we collect the following personal data elements when an Expression of Interest (EoI) or proposal is submitted:

  • Personal Identifiers: Contact Person Full Name, Official Email Address, Contact Phone Number.
  • Corporate Identifiers: Company / Foundation Name, Sector Preference, Financial Outlay Estimates, and Project Location Preferences.
  • Technical Audit Data: Consent Timestamp and Submission Reference Identifiers.

Specified Purpose: Personal data is processed exclusively for verifying corporate credentials, facilitating single-window government clearances, field inspection scheduling, MoU execution, and communicating official district CSR project updates.

3. Consent & Free Affirmative Action

In accordance to the DPDP Act 2023, submission of personal data on this portal requires free, specific, informed, unconditional, and unambiguous consent signified through a clear affirmative action (checking the statutory consent box prior to form submission).

* Note: Personal data will never be sold, rented, monetized, or shared with third-party advertisers or un-authorized private entities.

4. Statutory Rights of Data Principals

As a Data Principal under the DPDP Act 2023, you enjoy the following enforceable rights:

Right to Access
Obtain a summary of your personal data processed by the Collectorate and information regarding processing activities.
Right to Correction & Updating
Request correction of inaccurate personal data, completion of incomplete fields, or updating of details.
Right to Erasure & Consent Withdrawal
Withdraw consent at any time and request permanent erasure of your personal data from the database.
Right to Nominate
Nominate an authorized individual to exercise your rights in the event of death or incapacity.

5. How to Withdraw Consent or Request Data Erasure

To exercise your Right to Erasure or Withdraw Consent under the DPDP Act 2023, you may submit a request through any of the following channels:

  1. Written Email Request: Email our designated Data Protection Officer at nodal-csr@ap.gov.in or collector-sssai@ap.gov.in specifying your proposal reference ID.

Upon receipt of a valid request, the District Administration shall within a reasonable time permanently erase your personal data from active databases and instruct Data Processors accordingly.

6. Security Safeguards

We implement appropriate technical and organizational measures to safeguard personal data against unauthorized access, disclosure, or breach. User login credentials are protected using salted bcrypt password hashing algorithms, and data transmissions are encrypted via SSL/TLS protocols.

7. Data Protection Officer (DPO) & Grievance Redressal

If you have any questions, concerns, or grievances regarding the processing of your personal data or wish to exercise your statutory rights, please contact our designated officer:

Sri M. Ramanaiah, I.A.S

Joint Collector & Data Protection Grievance Redressal Officer

District CSR Facilitation Cell, Collectorate Complex, Puttaparthi, AP - 515134

Official Email: nodal-csr@ap.gov.in

Helpline: +91 8555 280001 / 280002

DPDP Officer Designated

In accordance with the DPDP Act 2023, grievances will be responded to within 30 business days. If you remain unsatisfied, you may appeal to the Data Protection Board of India.