Privacy Policy
Last updated: October 21, 2024
01. Introduction
Content Management & Solutions (Pvt) Ltd (“us”, “we”, or “our”) operates https://www.cms.lk (hereinafter referred to as “Service”).
As a leading IT offshoring service provider to the US & EU for over 20 years, and being an ISO/IEC-27001:2013 certified organization; We understand the importance of privacy.
Our Privacy Policy governs your visit to https://www.cms.lk, and explains how we collect, safeguard and disclose information that results from your use of our website.
02. Consent
By using our website, you agree to our Privacy Policy and agree to its terms.
03. Information Collection and Use
We collect several different types of information for various purposes to provide and improve our Service to you.
04. Types of Data Collected
04.1 Personal Data
While using our website, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you (“Personal Data”). Personally identifiable information (PII) may include, but is not limited to:
0.1. Email address
0.2. First name and last name
0.3. Phone number
0.4. Cookies and Usage Data
0.5. Uploaded CV data
We may use your Personal Data to contact you based on “Contact-Us” requests, with newsletter subscriptions, marketing materials, job applications and other information that may be of interest to you. You may, however, visit our site anonymously.
You may opt-out of receiving any, or all, of these communications from us by contacting us at info@cms.lk
04.2 Usage Data
We may also collect information that your browser sends whenever you visit our website or when you access the website by or through any device (“Usage Data”).
This Usage Data may include information such as your computer’s Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Service that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers and other diagnostic data.
When you access Service with a device, this Usage Data may include information such as the type of device you use, your device unique ID, the IP address of your device, your device operating system, the type of Internet browser you use, unique device identifiers and other diagnostic data.
04.3 Tracking Cookies Data
We use cookies and similar tracking technologies to track the activity on our Service and we hold certain information. Please read our Cookie Policy for further details.
05. Use of Data
The information we collect from you may be used to improve our website, to contact you based on your request, send periodic newsletters based on you subscribing, other site features and to manage vacancy applications.
06. Retention of Data
We will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your Personal Data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.
We will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period, except when this data is used to strengthen the security or to improve the functionality of our Service, or we are legally obligated to retain this data for longer time periods.
Your application history for CV submissions is retained for 10 years along with your application history. This information would be used to fill future vacancies and propose to potential clients of available talent. You can request that your application history be removed from our systems by emailing info@cms.lk.
07. Transfer of Data
Your information, including Personal Data, may be transferred to – and maintained on – computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction.
If you are located outside Europe and choose to provide information to us, please note that we transfer the data, including Personal Data, to Europe and process it there.
Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer.
Content Management & Solutions (Pvt) Ltd will take all the steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy and no transfer of your Personal Data will take place to an organisation or a country unless there are adequate controls in place including the security of your data and other personal information.
08. Disclosure of Data
Content Management & Solutions (Pvt) Ltd and our affiliated partner companies are the sole owner of information collected on www.cms.lk. Your information will not be sold, traded or transferred to third parties. Access to this information is strictly restricted to authorized employees.
Under certain circumstances, we may be required to disclose your Personal Data if required to do so by law or in response to valid requests by public authorities.
09. Data Security
We take reasonable measures to protect all personal information with confidentiality. We have also taken security measures to protect your information against loss, misuse or alteration. All actions taken to comply with the GDPR will be carried out in accordance with the processes of the ISO/IEC 27001:2013 Information Security Management standard followed by Content Management & Solutions (Pvt) Ltd.
While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.
10. Service Providers
We may employ third party vendors to facilitate our website (“Service Providers”), provide Service on our behalf, perform Service-related services or assist us in analyzing how our Service is used.
These third parties might have access to your Personal Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.
A special note needs to be mentioned about the Cloud-based “Candidate Application Tracking System” or CATS used by CMS. CMS uses services of a 3rd party cloud-based leading platform to manage our CV pool – https://catsone.com/. Systems such as this are widely used by companies around the world and the vendor is bound to keep information safe & secure. When you upload a CV, it would be directly uploaded into https://catsone.com/ and only authorized CMS employees are able to access your CV information. “Terms of Use”, “Privacy Policy” and “Data Processing Policy” of the CATS system is detailed at https://catsone.com/policies-and-terms/.
This includes services such as Google Analytics, Google Maps API to name a few. Please refer to privacy policy statements of those services for more information. You can view the Google Privacy Policy here.
11. Rights to Personal data
11.1 CCPA Privacy Rights (Do Not Sell My Personal Information)
Under the CCPA, among other rights, California consumers have the right to:
Request that a business that collects a consumer’s personal data disclose the categories and specific pieces of personal data that a business has collected about consumers.
Request that a business delete any personal data about the consumer that a business has collected.
Request that a business that sells a consumer’s personal data, not sell the consumer’s personal data.
If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us at info@cms.lk
11.2 GDPR Data Protection Rights
We would like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:
The right to access – You have the right to request copies of your personal data.
The right to rectification – You have the right to request that we correct any information you believe is inaccurate. You also have the right to request that we complete the information you believe is incomplete.
The right to erasure – You have the right to request that we erase your personal data, under certain conditions.
The right to restrict processing – You have the right to request that we restrict the processing of your personal data, under certain conditions.
The right to object to processing – You have the right to object to our processing of your personal data, under certain conditions.
The right to data portability – You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us at info@cms.lk
Our CISO/DPO would be happy to assist you with your requests.
12. Changes to the Policy
We reserve the right to amend this privacy policy at any time. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.
13. Contact Us
If you have any questions about this Privacy Policy or want to exercise any of the above-mentioned data rights including partially or fully removing data submitted by you, please contact us by email: info@cms.lk