Privacy & Data Protection Policy
Official Data Fiduciary Notice pursuant to the Digital Personal Data Protection Act, 2023 (Act No. 22 of 2023) of the Parliament of India, governing the processing of personal data across the AWS Student Builder Group at Noida International University platform.
AWS SBG NIU at NIU
School of Engineering & Technology, Noida International University, Greater Noida.
Notice & Explicit Consent
Personal data is processed strictly for event credentials, verified certificates, and security telemetry.
Designated Redressal
Direct statutory redressal within 7 working days via aws.sbg.niu07@gmail.com.
1.Statutory Scope & Legal Framework
This Privacy Notice applies to all digital activities, web services, event registration forms, digital delegate pass generations, speed quiz arenas, certificate verifications, and online portals operated by the AWS Student Builder Group at Noida International University ("Community", "we", "us", or "Data Fiduciary").
This policy is formulated in strict accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000, and corresponding rules notified by the Government of India. As a Data Principal, you are entitled to statutory rights regarding the processing of your digital personal data.
2.Categories of Personal Data Collected
We process the following categories of digital personal data depending on your interaction with the platform:
Full name, academic/institutional email address, contact phone or WhatsApp number, college/university name, enrollment/student ID (where applicable), and designated delegate role (attendee, speaker, volunteer, sponsor).
Client Internet Protocol (IP) address, approximate geographical location (country, region, city derived from network routing), device type (desktop, mobile, tablet), operating system, browser user-agent, screen resolution, and interaction timestamps.
Participant response timestamps, speed quiz scores, rank shifts, anti-cheat tab-switching telemetry, and auditorium leaderboard standings.
Unique registration code, cryptographic issuance hash, issue date, track completion status, and public verification lookup logs.
3.Lawful Grounds of Processing (Section 4 & 6 of DPDP Act)
We process your personal data only under recognized lawful grounds:
- Explicit Consent (Section 6): Obtained via our mandatory DPDP Consent Gate upon initial website visit, and during event registration submission. You may withdraw consent at any time subject to academic certification obligations.
- Legitimate Academic Uses (Section 7): Generating authorized gate passes for campus entry, ensuring university auditorium physical safety, issuing verifiable academic participation certificates, and preventing unauthorized spoofing or quiz cheating.
4.Data Principal Statutory Rights
Under the DPDP Act 2023, you enjoy comprehensive rights as a Data Principal:
Request a clear summary of all digital personal data processed by us and identities of any service fiduciaries.
Request correction of outdated information, or permanent deletion of your data once event verification concludes.
Expeditious resolution of any complaints via our designated Grievance Officer within 7 working days.
Nominate any other individual to exercise your rights in the event of death or incapacity.
5.Security Safeguards & Data Storage
We implement industry-grade technical and organizational safeguards complying with Section 8(5) of the DPDP Act:
- End-to-end TLS 1.3 encryption across all public endpoints.
- Cloud database storage with automated AES-256 encryption at rest.
- Digital gate QR passes secured with cryptographic hash checks.
- Zero sale, rental, or trade of personal data to commercial third parties.
- Strict role-based access control (RBAC) restricted to authorized student group faculty coordinators and lead organizers.
6.Data Retention & Erasure Schedule
Registration and telemetry audit logs are retained solely for the duration necessary to satisfy the purpose for which they were collected:
- Certificate Verification Records: Retained permanently to enable lifetime credential verification on university and employer audits.
- Security & Telemetry Logs: Periodically pruned on a rolling basis.
- User-Requested Deletion: Any participant may submit a data erasure request to our Grievance Officer, and records will be purged within 7 business days.
In compliance with Section 10 and Section 13 of the Digital Personal Data Protection Act, 2023, the designated Grievance Officer for AWS SBG at NIU is: