Privacy Policy

Introduction

This Website privacy Policy describes the data collection and use practices of Hitachi Solutions India (“Hitachi Solutions”, “we” or “our”) when you use our websites. Our Terms of Use (https://www.hitachi-solutions.com/terms_of_use/), are intended to be read side by side with this Privacy Policy and are herein incorporated by reference. We respect your privacy and are committed to protecting it. This Privacy Policy explains how we endeavor to maintain your privacy and share the data you provide to us through our websites. Please note, this Privacy Policy does not address your privacy related to every transaction with Hitachi Solutions or our representatives. Instead, this Privacy Policy applies to information we collect through our websites, in any email, text or other electronic communication between you and Hitachi Solutions related to our websites, or, when applicable, when you interact with our advertising on third-party websites.

This Privacy Policy does not apply to information that is collected by any third-party that we do not control or manage. Any information collected while using a third-party platform for social media, payment, registration is subject to the control of that third party and is not collected or maintained by Hitachi Solutions.

Our websites are not intended for children, and we do not knowingly collect personal information from children. If we learn we have collected or received personal information from a child without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child, please contact us using the information provided below.

Please read this Privacy Policy carefully to understand our policies and practices regarding your personal information and how we will treat it. If you do not agree with our policies and practices, do not continue to use our websites. By using our websites, you agree to this Privacy Policy. This Privacy Policy may change from time to time. Your continued use of our websites after we revise this Privacy Policy means you accept those changes, so please check the Websites periodically for updates.

What is Personal Information?

Personal information is information that identifies, relates to, describes, or is capable of being associated with, or could reasonably be linked, directly or indirectly, with an individual user or his/her device. Personal information does not include information that is publicly available.

What Personal Information Do We Collect?

Depending on how you use our websites, we may collect different types of personal information from you, including: (a) Information we obtain directly from you when you provide it to us; (b) Information (about you or your device) as you use our Website; or (iii) Information we collect from third-parties.

Depending on how you use our websites, this information may include:

Identifiers like your name, an alias, your postal address, an online identifier, your IP address, and/or an email address. These are various ways in which we identify you or your device when you visit our websites or communicate with us.
Commercial information like the products or services obtained, your employment status, records of payments, etc.
Internet activity information like your browsing history, search history, and your interactions with our websites, online services or advertisement. This information may be associated with one or more identifiers described above.
Location data including a general location of the geographic area associate with your IP address or, if you provide it to us, your actual address.
Professional or employment related information you may provide for purposes of employment consideration. Employment related information is subject to additional privacy disclosures that will be made at the point of collection.
Inferences we make about you that are drawn from any other personal information.

Information You Provide To Us

The information we collect on or through our websites may include:

Information that you provide by filling in forms on our websites that are controlled by us.
Records and copies of your correspondence (including email addresses, first name, last name), if you contact us.
Hitachi Solutions may collect personally identifiable information, such as your name, address, e-mail address and phone number when processing customer service requests.
If you purchase Hitachi Solutions products through our Websites, we may collect billing and shipping addresses directly or through a third party, telephone number and other information necessary to complete the transaction.
We may request and require personal data to better understand your needs and provide you with improved service.
Hitachi Solutions may also use your personally identifiable information to inform you of other products or services available from Hitachi Solutions and our affiliates.

Information we collect automatically

When using our websites, we may automatically collect information about you or your device. We may do this ourselves or with the assistance of third parties. This information relates to the way you interact with our website. The following is data we collect from your device automatically:

Device Information: We collect technical information about the device you use to access our websites like your device’s IP address and operating system. Additionally, in the case of mobile devices, your device type, and mobile device’s unique advertising identifier (such as the Apple IDFA or Android Advertising ID) and any other unique identifier that may be assigned to the mobile device.
Browser Data: We collect technical information about the browser you are using that is captured in order to serve content that can be rendered on your device.
Browsing Activities: We collect data about your browsing activity on our websites. For example, which pages you visited and when, what items were clicked on a page, how much time was spent on a page, and similar metrics.
Location Data: This is non-precise information related to your geography derived from your device’s IP address (e.g. laptop, desktop or mobile etc.). This does not reveal your precise geographic coordinates (i.e. your GPS latitude and longitude) – only country, state, city and zip/postal code level location data. We use this to assist in your navigation of Hitachi digital properties.

Information We Collect From Third Parties

We may obtain personal information from third parties and combine such information with the information that we collect through our websites. For example:

We may collect or use information made available to us through third-party platforms, online databases and directories, or other means. Note that this information may be governed by the privacy statement of the third party.
We may receive updated shipping information from a third-party provider.
We may receive various types of information, including identification information, contact information, and transactional information from our service providers, vendors, and Hitachi-affiliated entities.
We may collect information from unaffiliated third parties so that we can better understand you and provide you with information and offers that may interest you.

Disclosure to Third Parties

Hitachi Solutions may share data with trusted partners to help perform statistical analysis, send you email or postal mail, provide customer support, or arrange for deliveries. All such third parties are prohibited from using your personal information except to provide these services to Hitachi Solutions and they are required to maintain the confidentiality of your information. We do not sell, rent or lease our customer lists to third parties.

Third-Party Use of Cookies and Links

Some content or applications, including advertisements, on the Websites are served by third parties, including advertisers, ad networks and servers, content providers, and application providers. These third parties may use cookies alone or in conjunction with web beacons or other tracking technologies to collect information about you when you use our website. We do not control these third parties’ tracking technologies or how they may be used. If you have any questions about an advertisement or other targeted content, you should contact the responsible provider directly.

The Websites may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. When you visit a page that includes one of these sharing tools, the third-party company that operates the tool may be collecting information about your browser, device, and online activity through its own tracking technologies and subject to its own separate privacy policy. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our Websites, we encourage you to read the privacy notice of every website you visit.

How We Use Your Information

We may use, disclose, or share your information, including any personal information with third parties for the following business purposes.

To fulfil or meet the reason you provided the information, including disclosures based on your consent.
To provide, support, personalize, and develop our websites and services.
To create, maintain, customize, and secure your account with us.
To process your requests, transactions, and payments and prevent transactional fraud.
To provide you with support and to respond to your inquiries, including to investigate and address your concerns and monitor and improve our responses. For example, we may employ chatbots to assist with customer service requests.
To personalize your experience on our websites and to deliver content and product and service offerings relevant to your interests, including targeted offers and ads through our websites, third-party sites, and via email or text message (with your consent, where required by law).
To help maintain the safety, security, and integrity of our websites and services, databases and other technology assets, and business.
For testing, research, analysis, and product development, including to develop and improve our websites and services.
To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations.
As described to you when collecting your personal information.
To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by Hitachi Solutions about our users is among the assets transferred.

Your Choices Regarding Our Use of Your Information

Where and when applicable, your account provides you with access to much of your information and you can review and change your information by logging into your account. You should not change any information that would affect our contractual relationship with you.

In addition, we have created mechanisms to provide you with the following control over your information:

Email

You may opt-out of any commercial emails sent by us by unsubscribing from them.

Cookies

We use cookies, which are pieces of information that a website transfers to an individual’s computer hard drive for record keeping purposes, and similar tracking technologies on our website and when providing our websites. Cookies make using our websites easier by, among other things, saving your preferences for you.

We value your privacy and provide you with the option to manage your cookie preferences on our websites. To access the Hitachi Solutions Privacy Preference Center, please click the “Cookies Settings” link located at the bottom of the web page. There, you may review detailed information about the cookies we utilize by selecting the appropriate category headings and modify your settings as needed. Kindly note that restricting certain types of cookies may affect your experience on the site and limit the services available to you.

You can also use your web browser to directly block all cookies, or just third-party cookies, through your browser settings. Using your browser settings to block all cookies, including strictly necessary ones, may interfere with proper site operation. Guidance on how to control cookies in popular browsers is contained here:

You can also find additional information on cookie controls and advertisement here:

Analytics

Google allows users to opt out of tracking by Google Analytics and Google Analytics Demographics and Interest Reporting services. You can adjust your settings in the Cookies Settings section of our website or download the Google Analytics Opt-Out Browser Add-on.

WEBSITE PRIVACY NOTICE

1. About This Notice

Hitachi Solutions India (“Company”, “we”, “us” or “our”) value(s) your privacy and is committed to safeguarding your personal data.

We process your Personal Data lawfully, fairly, transparently, and responsibly in accordance with India’s Digital Personal Data Protection (DPDP) Act, 2023, the rules made thereunder, and other applicable data protection laws. We implement appropriate technical and organisational safeguards to protect your Personal Data against unauthorised access, use, disclosure, alteration, loss, or misuse. This Notice is given to you under Section 5(1) of the Digital Personal Data Protection Act, 2023 (“DPDP Act”) read with Rule 3 of the Digital Personal Data Protection Rules, 2025 (“DPDP Rules”), and accompanies or precedes the request we make in Section 2 hereinbelow for your consent to process your personal data through this website and our related digital platforms.

This Notice is presented and is understandable independently of any other document, in accordance with Rule 3(a). It must be read together with our applicable website Privacy Policy (“Policy”), which sets out further details on: (a) the categories of data we collect on this website and our other platforms; (b) why we collect such data; (c) how we use such data; (d) what data we share with third parties; (e) how long we retain such data; and (f) your rights as a Data Principal under applicable law. In the event of any conflict between this Notice and the Policy on a matter required to be addressed by Rule 3, this Notice prevails.

2. Itemised Personal Data We Collect and Why (Section 5(1)(i); Rule 3(b)(i))

Against each of the purposes below, the Company collects the following itemized categories of your personal data, on the following legal basis, for the following goods, services or uses:

Purpose of Collection	Itemised Personal Data Collected	Goods / Services / Uses Enabled
Retail consumer enquiries	Contact details (name, email, phone); company/industry information; location data	Responding to and fulfilling your product/service enquiry as a retail customer
Business customer enquiries	Contact information and name of authorised representative; business email; business address and phone number; company/industry information; location data	Engaging with you as an authorised representative of a business customer; responding to commercial enquiries
Advertisement / media coverage requests	Contact information and name of authorised representative; business email; phone number and email address; location data; other information relevant to the request	Evaluating and responding to press, media and advertisement-related requests
Data grievance / complaint(s)	Name; email; phone number; and other information you choose to provide in your complaint	Receiving, logging, investigating and resolving your grievance or complaint in accordance with our Grievance Redressal SOP
Marketing communications	Name; email address; phone number; location data; information on your interaction with this website and our other platforms	Sending you product updates, newsletters and promotional communications, which you may opt out of at any time
Social media engagement	Full name / username; profile picture (where publicly available); country details (where indicated by you)	Engaging with you on our official social media handles
Website browsing	IP address; browser details; device operating system; referring website; general geographic location; browsing behaviour and interaction data; and, only where you separately consent, precise location data	Operating, securing, monitoring and improving the performance of this website
Career page / job applications	Name and contact details; CV/resume; educational qualifications; work experience and employment history; references; cover letter and any other information voluntarily submitted with the application; and, where provided, background-check consent status.	Evaluating your application, assessing suitability for the role applied for (and, where you consent, other current or future openings), and conducting recruitment-related communication with you

Where you apply for a role through our career page and are subsequently engaged by the Company, the data listed above will form part of, and continue to be processed under, our Employee Privacy Notice and internal HR data inventory, rather than under this Notice.

3. Cookies and Other Tracking Technologies

Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and allows us to improve our site. By continuing to browse the site, you are agreeing to our use of cookies.

The Company uses cookies and other tracking technologies to operate, secure and improve the performance of this website and your browsing experience. Non-essential cookies are placed only based on your consent. You may withdraw that consent and disable cookies at any time; please note that disabling certain cookies may affect the functioning of this website.

4. Third-Party and Vendor Disclosures (Rule 3(b))

We may share the personal data listed at Section 2 with the following categories of recipients, strictly for the purposes stated above:

Hitachi group entities, including [entity], for internal administration, coordination of enquiries and, where applicable, group-level reporting;
Information technology and platform vendors that host, maintain and secure this website and our customer-relationship-management systems;
Marketing, analytics and communications vendors engaged to deliver the purposes at Section 2;
Professional advisors (legal, audit, and compliance) on a need-to-know basis; and
Regulators, courts, law enforcement and the Data Protection Board of India, where disclosure is required or permitted by law.

Where any such recipient is a Data Processor, the Company enters into a Data Processing Agreement with that processor before transfer commences, in accordance with Section 8(2) of the DPDP Act. The Company’s obligations under the DPDP Act in respect of any personal data processed by such a processor on our behalf are non-delegable under Section 8(1); engaging a processor does not transfer our compliance responsibility.

5. Cross-Border Transfer of Personal Data

Some of the recipients listed in Section 4 may be located outside India, including Hitachi group entities in Japan and other jurisdictions in which our global partners operate. Such transfers are permitted under Section 16 of the DPDP Act, save to the extent the Central Government has, by notification, restricted transfer to a specific country or territory.

This Notice will be updated to reflect the applicable conditions, including any country-specific notification issued under Rule 15, once published. Contractual safeguards with a recipient do not, by themselves, authorise a transfer to a country that is not notified as permitted once Rule 15 takes effect.

6. Retention

We retain the personal data listed at Section 2 only for as long as necessary to fulfil the purpose for which it was collected, or as required under applicable law (including the Income Tax Act, the Companies Act, and sector-specific retention obligations), whichever is longer. Independently of the above, personal data, associated traffic data and processing logs are retained for a minimum of one year in accordance with Rule 8(3) of the DPDP Rules, for the purposes specified therein (including responding to lawful requests and the prevention, detection, investigation or prosecution of offences), even where the original purpose of collection has been fulfilled earlier.

7. Your Rights as a Data Principal

Subject to the DPDP Act and DPDP Rules, and to the extent the relevant provisions are in force, you have the following rights in relation to your personal data:

Right	Statutory Basis	What It Means
Right to access information about processing	Section 11, read with Rule 14	You may request a summary of the personal data we hold about you and the processing activities we carry out.
Right to correction, completion, updating and erasure	Section 12, read with Rule 14 and Rule 8(3)	You may request correction of inaccurate or misleading data, completion of incomplete data, updating of data, and erasure of data that is no longer necessary for the purpose for which it was collected, subject to any longer retention period required by law.
Right to grievance redressal	Section 13, read with Rule 9 and Rule 14	You may raise a grievance directly with our Grievance Officer. We must respond within a period not exceeding ninety (90) days of receipt, and we implement appropriate technical and organisational measures to ensure grievances are resolved within that period. You must exhaust this process, or allow the 90-day period to lapse without a response, before approaching the Data Protection Board of India (Section 13(3)).
Right to nominate	Section 14	You may nominate another individual to exercise your rights under the Act in the event of your death or incapacity.
Right to withdraw consent	Section 6(4)	You may withdraw consent at any time, with the ease of withdrawal comparable to the ease with which it was given. Withdrawal does not affect the lawfulness of processing carried out before withdrawal, and you bear the consequences of withdrawal, including possible loss of access to a good, service or feature that depended on that data. See Section 8 for how withdrawal is actioned, including our duty to cease processing within a reasonable time.

8. How to Exercise Your Rights (Rule 3(c))

You may exercise any of the rights described in Section 7 or withdraw your consent at any time by contacting our India Privacy Team at [email protected]. The process for withdrawing consent will not be more difficult than the process used to provide consent, and the ease of withdrawal will be comparable to the ease with which consent was given.

To verify and process your withdrawal request, we may ask you to provide the identifier associated with your consent, such as your registered email address, account number, or application reference number. We will request only the information reasonably necessary to verify your identity and process your request. Withdrawal of consent will not affect the lawfulness of any processing carried out on the basis of your consent before its withdrawal.

Withdrawing your consent may mean that we are no longer able to provide a particular product, service, or feature that depends on the processing of personal data for which you have withdrawn your consent. Any consequences arising from the withdrawal of consent will be borne by you, as the Data Principal.

Once you withdraw your consent, we will, within a reasonable period, cease processing your personal data for the purpose to which the withdrawal relates and will cause any Data Processor processing such personal data on our behalf to cease processing it, unless such processing is required or permitted under the DPDP Act, the DPDP Rules, or any other applicable law, including applicable statutory retention requirements.

The period for giving effect to the withdrawal of consent is separate from the ninety (90) day period referred to below, which applies to our response to grievances.

You may withdraw your consent for one or more specific purposes. For example, you may withdraw your consent to receive marketing communications without withdrawing consent for other purposes. Withdrawal of consent for one purpose will not affect the processing of your personal data for another purpose for which you have separately provided consent or where such processing is otherwise permitted under applicable law.

Where applicable, our consent withdrawal mechanism will allow you to identify the specific purpose or purposes for which you wish to withdraw your consent. The Company maintains an effective mechanism, on an ongoing basis, to redress the grievances of Data Principals, as required under Section 8(10) of the DPDP Act.

If you have a grievance about any act or omission of the Company in relation to your personal data, or the exercise of your rights under the DPDP Act, you may submit it to our India Privacy Team — the contact person published under Section 8(9) of the DPDP Act and Rule 9 of the DPDP Rules — using the contact details at Section 10 below. There is no fee for raising a grievance directly with us.

The process is as follows:

Step 1 — Submit your grievance in writing (by email), describing the act or omission and the outcome you are seeking. We will ask for the same identifier referred to at Section 8.1 to verify your identity. We will ask for the same identifier referred to earlier in this section to verify your identity.

Step 2 — We will acknowledge and investigate your grievance.

Step 3 — We must respond to you within a period not exceeding ninety (90) days from the date of receipt, as required by Rule 14(3). This response period is published on [our website/grievance portal], and we maintain a logged, ticketed grievance-tracking system with escalation to ensure grievances are resolved within it.

Step 4 — If you are not satisfied with our response, or if you do not receive a response within the 90-day period, you may then approach the Data Protection Board of India (see Section 9 below).

You must exhaust this grievance redressal process with the Company before approaching the Data Protection Board of India, as required by Section 13(3) of the DPDP Act.

9. Complaint to the Data Protection Board of India (Rule 3(c)(iii))

If you are not satisfied with our response to your grievance under Section 8 above, or if you do not receive a response within the ninety (90) day period referred to there, you may make a complaint to the Data Protection Board of India in the manner and accompanied by such fee, if any, as may be prescribed by the Board. The Board’s own timeline for resolving a complaint is not fixed by the DPDP Act and is a matter for the Board’s own process — the ninety (90) days period referred to at Section 8 applies only to our response, not to the Board’s. You cannot approach the Board without first having given the Company the opportunity to redress your grievance under Section 8.

10. Grievance Officer / Data Protection Officer

For any questions or grievances relating to this Notice or the processing of your personal data, you may contact our Grievance Officer / Data Protection Officer using the details below:

Name: India Privacy Team
Email: [email protected]
Address: Hitachi Solutions India Private Limited, 10th Floor, Block 5, DLF IT Park, 1/124, Shivaji Garden, Mount Poonamallee Road, Ramapuram, Chennai-600089, Tamil Nadu

11. Updates to This Notice

We may update this Notice from time to time to reflect changes in our processing activities or in applicable law. Where such changes are material, we will take reasonable steps to bring them to your attention before they take effect, including through this website.