GDPR Privacy Policy for RTO Policy India

1. Introduction to Our GDPR Compliance

Welcome to RTO Policy India (accessible from https://rtopolicy.sohojuttar.com/). Operating under the strategic oversight and leadership of our founder, Mizanur Rahman Hridoy, our platform is dedicated to providing premium, highly researched information regarding the Indian Motor Vehicles Act, Regional Transport Office (RTO) guidelines, vehicle hypothecation, and motor insurance policies.

While our primary content caters to the Indian demographic, the borderless nature of the internet means our digital portal is accessible to users residing in the European Economic Area (EEA) and the United Kingdom. Furthermore, to maintain the highest tier of global digital advertising compliance—specifically required by Google Ad Manager (AdX) and our premium financial advertisers—we have implemented strict data protection protocols aligned with the General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679). This policy outlines transparently how we collect, process, and secure your personal data.

2. Data Controller and Organization Details

For the purposes of the GDPR, RTO Policy India acts as the Data Controller of your personal data. This means that we determine the purposes and means of the processing of your personal data. If you have any questions about this GDPR Privacy Policy or our privacy practices, please contact our administrative team using the details provided below:

Corporate Headquarters:
RTO Policy India
Level 4, DLF Cyber City, Phase 2
Gurugram, Haryana 122002, India

3. The Categories of Personal Data We Collect

We believe in the principle of data minimization. We only collect data that is strictly necessary for the functioning, optimization, and monetization of our platform. The data we collect can be categorized as follows:

• Identity and Contact Data: If you voluntarily subscribe to our newsletters or contact us for support regarding traffic laws or insurance claims, we may collect your first name, last name, and email address.
• Technical Data: This includes your internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system, and platform.
• Usage Data: Information about how you use our website, including the pages you visit (such as specific e-challan guides or auto finance articles), the time spent on those pages, page interaction information (scrolling, clicks, and mouse-overs), and the methods used to browse away from the page.
• Tracking and Cookie Data: We use cookies and similar tracking technologies to track the activity on our platform and hold certain information. (Please refer to section 5 for details on advertising cookies).

4. Lawful Basis for Processing Your Data

Under the GDPR, we must have a valid lawful basis to process your personal data. We rely on the following bases:

• Consent: You have given explicit consent for processing your personal data for one or more specific purposes (e.g., consenting to advertising cookies or subscribing to a newsletter). You may withdraw this consent at any time.
• Legitimate Interests: Processing is necessary for the purposes of the legitimate interests pursued by us or by a third party, except where such interests are overridden by your fundamental rights and freedoms. This includes analyzing website traffic to improve our content on RTO rules and securing our platform against fraudulent activities.
• Compliance with a Legal Obligation: Processing is necessary for compliance with a legal obligation to which we are subject, such as responding to lawful requests by public authorities or defending against legal claims.

5. Data Usage, Monetization, and Google Ad Manager (AdX)

RTO Policy India provides completely free access to its vast database of legal and financial guides. To sustain our operations, we rely on premium programmatic advertising. We strictly utilize Google Ad Manager (AdX) as our primary monetization network. We do not use traditional, lower-tier networks like Google AdSense.

Because our content focuses on high-value sectors such as motor insurance and auto finance, AdX utilizes cookies to serve personalized advertisements that match your interests. Google and its partner networks may process your data to measure ad performance, prevent fraud, and build an advertising profile. If you are accessing our site from the EEA or the UK, we use a Consent Management Platform (CMP) integrated with the IAB Transparency and Consent Framework to ask for your explicit consent before any personalized advertising cookies are deployed on your device.

6. Your Comprehensive Data Protection Rights Under GDPR

If you are a resident of the European Economic Area (EEA), you possess significant rights regarding your personal data. RTO Policy India guarantees the facilitation of these rights for all our users globally:

• The Right to Access: You have the right to request copies of your personal data. We will provide this information in a structured, commonly used, and machine-readable format.
• The Right to Rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
• The Right to Erasure (“Right to be Forgotten”): You have the right to request that we erase your personal data under certain conditions, such as when the data is no longer necessary for the purposes for which it was collected, or if you withdraw your consent.
• The Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data under specific circumstances, such as when you contest the accuracy of the data.
• The Right to Object to Processing: You have the right to object to our processing of your personal data, particularly when it comes to direct marketing or when the processing is based on our legitimate interests.
• The Right to Data Portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
• Rights related to Automated Decision Making and Profiling: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

7. Data Retention Policy

We will only retain your personal data for as long as reasonably necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you. Technical usage data for analytics purposes is typically anonymized or deleted after 26 months.

8. International Data Transfers

As RTO Policy India operates globally and utilizes international server infrastructures, your personal data may be transferred to, and maintained on, computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those from your jurisdiction. Specifically, data may be transferred to our headquarters in India or to secure servers located in the United States (such as those managed by Google). Whenever we transfer your personal data out of the EEA, we ensure a similar degree of protection is afforded to it by ensuring that appropriate safeguards, such as Standard Contractual Clauses (SCCs) approved by the European Commission, are implemented.

9. Security Measures Designed to Protect Your Data

We have put in place appropriate technical and organizational security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way, altered, or disclosed. This includes SSL/TLS encryption for all data transmitted between your browser and our servers. In addition, we limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know. They will only process your personal data on our strict instructions and they are subject to a strict duty of confidentiality.

10. Exercising Your Rights and Contacting the DPO

We have appointed a Data Protection Officer (DPO) who is responsible for overseeing questions in relation to this GDPR privacy notice. If you have any questions about this notice, including any requests to exercise your legal rights under the GDPR, please contact the DPO using the details set out below.

We aim to respond to all legitimate requests within one calendar month. Occasionally it could take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

Contact our Data Protection Officer:

• Email for Data Rights Requests: support@rtopolicy.sohojuttar.com
• General Privacy Inquiries: info@rtopolicy.sohojuttar.com
• Advertising Data Compliance: business@rtopolicy.sohojuttar.com