Privacy policy

Information about the changes regarding personal data

The implementation of the General Data Protection Regulation will enter into force on May 25, 2018. The Regulation's purpose is to enable natural persons to exercise more effective control over how their personal data is processed. As a data administrator, Desha Shakthi (Pvt) Ltd /the Company/ aims to provide an adequate level of protection of its clients' and partners' data by processing it only by permitted by law means and for legitimate purposes:

   •   to fulfill the Company's obligations under their contract with you
   •   to provide information based on your explicit consent

When processing your personal data, Desha Shakthi (Pvt) Ltd strives to apply the highest security standards (meeting the requirements of ISO/IEC 27001), to share the date with state bodies only (within their authority) and with their subcontractors, having good reputation.

To provide individuals with more effective control over their data, the Regulation gives them a number of rights, including:

   •   right of access and information, right of rectification, right "to be forgotten'', right to limit the processing, right to data portability, right to object to automated decision-making and the right to withdraw given consents for processing.
   •   the terms under which these rights may be exercised are set up in Art. 7 (3) and Chapter III (Articles 12 to 23) of the Regulation, as well as in the Company's internal documents on personal data protection.

Starting from the first quarter of 2018, Desha Shakthi (Pvt) Ltd has a DPO appointed whom you can contact at  info@desha-shakthi.com or by post: 26, 27th Lane, Inner Flower Road, Colombo 03. if any questions regarding the exercise of the rights for the protection of your personal data.

Your rights are our responsibility!