Corporate Preamble & Statutory Commitment
Konnet Solutions Private Limited (referred to herein as "Konnet", "Company", "we", "us", or "our") is committed to safeguarding personal, corporate, and technical data with zero-compromise integrity. As an enterprise IT infrastructure systems integrator, network builder, and managed services provider, we process data strictly in compliance with applicable data privacy statutes, including the Digital Personal Data Protection Act, 2023 (DPDP Act), the Information Technology Act, 2000 (Section 43A and SPDI Rules 2011), the General Data Protection Regulation (Regulation (EU) 2016/679 - GDPR), and directions issued by the Indian Computer Emergency Response Team (CERT-In).
Legal Framework & Definitions
In this Privacy Policy, unless the context otherwise requires, capitalized terms shall have the respective meanings ascribed below in concordance with the DPDP Act 2023 and internationally recognized privacy standards:
- "Data Principal" / "Data Subject": Means the natural person to whom the Personal Data relates, including website visitors, enterprise client representatives, procurement officers, job applicants, and authorized users of our portals.
- "Data Fiduciary" / "Data Controller": Means Konnet Solutions Private Limited, which alone or in conjunction with other entities determines the purpose and means of the processing of Personal Data.
- "Data Processor": Means any person or entity that processes Personal Data on behalf of a Data Fiduciary pursuant to a contractual Data Processing Agreement (DPA).
- "Personal Data": Means any data about an individual who is identifiable by or in relation to such data, whether directly or indirectly, including identifier tokens, names, contact telemetry, IP addresses, and corporate credentials.
- "Processing": In relation to Personal Data, means a wholly or partly automated operation or set of operations performed on digital personal data, such as collection, recording, organization, structuring, storage, adaptation, retrieval, consultation, use, alignment, combination, indexing, sharing, disclosure, restriction, erasure, or destruction.
- "Consent Manager": Means a person or platform registered with the Data Protection Board of India that serves as an accessible point of contact to enable a Data Principal to give, manage, review, or withdraw her consent through an interoperable platform.
- "Enterprise Client Telemetry": Means technical diagnostic metrics, network telemetry logs, SNMP traps, NetFlow headers, device configurations, and firmware health parameters captured during the performance of IT infrastructure design, implementation, and managed NOC/SOC services.
Dual Regulatory Roles: Data Fiduciary vs. Data Processor
Because Konnet delivers both public digital touchpoints and complex enterprise IT infrastructure engineering, our legal capacity operates across two distinct regulatory dimensions:
When you interact with our website (konnet.in), request an architectural consultation, download whitepapers, apply for employment, or establish a direct B2B vendor contract, Konnet acts as the Data Fiduciary and determines the lawful basis and security controls for your information.
When Konnet deploys, configures, or remotely monitors an Enterprise Client's routers, switches, firewalls, servers, or structured cabling under an executed Master Services Agreement (MSA) and Data Processing Addendum (DPA), Konnet acts strictly as a Data Processor. In such engagements, the enterprise client acts as the Data Fiduciary, and Konnet processes technical data solely upon the documented instructions of the client.
Categories of Data Collected
We collect only the minimum quantum of data necessary to provide engineering services, secure our networks, execute statutory mandates, and fulfill enterprise procurement requirements:
| Data Category | Specific Elements Collected | Collection Mechanism | Statutory Purpose |
|---|---|---|---|
| B2B Contact & Inquiry Data | Full legal name, corporate business email, direct telephone/mobile, company name, office location, job title, and project RFP specifications. | Direct submission via contact forms, consultation requests, and inbound correspondence. | Pre-contractual architectural evaluation, scheduling technical discovery calls, and proposal generation. |
| Automated Device & Session Telemetry | Public IP address, browser type and version, operating system identifier, referring URL headers, access timestamps, and geographic location at the city level. | Automated HTTP server logs, load-balancer diagnostics, and security firewall monitoring. | DDoS mitigation, CERT-In statutory log compliance, website performance optimization, and anomaly detection. |
| Recruitment & Candidate Credentials | Curriculum vitae (CV), educational qualifications, OEM professional certifications (e.g., CCIE, CCNP, NSE), previous employment records, and identity proofs. | Direct submission via our Careers portal or verified corporate recruiting channels. | Talent acquisition evaluation, background verification, and employment onboarding compliance. |
| Enterprise Client Operational Telemetry | Hardware serial numbers, MAC addresses, firmware versions, SNMP diagnostic telemetry, interface utilization rates, firewall rule identifiers, and system error logs. | Automated collector agents, NOC monitoring probes, and API integration with enterprise controllers. | Fulfilling SLA uptime guarantees, proactive fault remediation, and lifecycle asset management under executed MSAs. |
Lawful Grounds & Processing Purposes
Pursuant to Section 4 and Section 6 of the DPDP Act 2023 and Article 6 of the GDPR, Konnet processes Personal Data exclusively under the following recognized legal bases:
- Performance of Contract & Pre-Contractual Steps: Processing necessary to draft architectural proposals, execute hardware supply contracts, stage equipment in our staging lab, deploy campus network backbones, and deliver 24/7 SLA-backed managed NOC support.
- Legitimate Uses & Operational Security: Processing necessary for maintaining enterprise cybersecurity, preventing network intrusions, protecting company assets, conducting forensic investigations following an incident, and enforcing legal contracts.
- Statutory & Regulatory Compliance: Fulfilling mandatory legal obligations under Indian and international law, including the Information Technology Act 2000, Section 70B CERT-In Cyber Security Directions (requiring maintenance of system logs for 180 days), Goods and Services Tax (GST) accounting rules, and court-issued legal subpoenas.
- Explicit Informed Consent: Where you have affirmatively consented to receive technical newsletters, event invitations, or technical whitepapers. You retain the absolute right to revoke such consent at any time without retroactive effect.
Enterprise Infrastructure & NOC/SOC Telemetry Governance
Konnet recognizes the sensitive nature of enterprise digital architecture. When managing client network switches, core firewalls, data center compute clusters, or cloud-managed SD-WAN controllers:
- Payload vs. Metadata Strict Segregation: Konnet's monitoring tools inspect only operational metadata, interface utilization, health metrics, and routing tables. We do not inspect, decrypt, store, or monetize user application payload data, confidential financial transactions, or proprietary client business content.
- Strict Non-Disclosure & Privilege: All infrastructure engineering personnel, network architects, and SOC analysts operate under legally binding Non-Disclosure Agreements (NDAs) and role-based zero trust credential management.
- Staging Lab Sanitization Protocols: Before equipment is deployed from our burn-in testing facility to enterprise production environments, all factory test scripts and temporary authentication keys are cryptographically purged.
Cookies & Tracking Technologies
Our digital portals utilize cookies—compact text files placed on your terminal device—to ensure navigational continuity, maintain authenticated sessions, and collect aggregated telemetry:
- Strictly Necessary Cookies: Essential for portal routing, CSRF token security validation, and server load distribution. These cookies cannot be disabled without impairing core site functionality.
- Performance & Analytical Cookies: Anonymized metrics that evaluate page latency, navigation paths, and error frequencies to optimize user interface responsiveness.
You may manage or block cookies through your browser preferences. However, disabling technical cookies may impact your navigation experience across certain protected enterprise portal pages.
Third-Party Disclosures & OEM Partner Transfers
Konnet strictly prohibits the sale, rental, monetization, or unauthorized trading of any personal or enterprise data. Disclosures are executed exclusively to vetted sub-processors under rigorous Data Processing Agreements:
- Tier-1 OEM Technology Partners: (e.g., Cisco Systems, HPE Aruba, Fortinet, Palo Alto Networks, Dell Technologies, CommScope, Schneider Electric) solely for registering hardware warranties, issuing enterprise software licenses, and escalating Tier-3 TAC support tickets upon explicit client authorization.
- Certified Cloud & Colocation Hosting Providers: Enterprise-grade data center facilities operating within the Republic of India compliant with ISO/IEC 27001, SOC 2 Type II, and MeitY empanelment standards.
- Law Enforcement & Statutory Authorities: Disclosures mandated by law pursuant to Section 69 / Section 70B of the Information Technology Act, 2000, valid judicial search warrants, or court orders.
Cross-Border Data Transfers
In accordance with Section 16 of the DPDP Act 2023 and Chapter V of the GDPR, Personal Data processed by Konnet is primarily stored and maintained on secure servers within the territorial boundary of India.
Where international data transfers occur (such as engaging global OEM Technical Assistance Centers for urgent firmware bug resolutions), Konnet ensures that the recipient jurisdiction is not restricted by the Central Government of India, and that transfers are governed by internationally enforceable Standard Contractual Clauses (SCCs), verified adequacy frameworks, and end-to-end encryption.
Technical & Organizational Security Measures (TOMs)
Pursuant to Section 8(5) of the DPDP Act 2023 and Rule 8 of the IT SPDI Rules 2011, Konnet maintains a comprehensive Information Security Management System (ISMS) engineered around ISO/IEC 27001:2022 standards:
- Cryptographic Controls: Transport Layer Security (TLS 1.3) with SHA-256 cipher suites for all data in transit; AES-256 military-grade encryption for all sensitive databases and configuration backups at rest.
- Identity & Access Governance: Strict Role-Based Access Control (RBAC), Least Privilege principle, and mandatory Multi-Factor Authentication (MFA) with hardware FIDO2 tokens for administrative systems.
- Continuous Vulnerability Assessment: Automated daily vulnerability scanning, quarterly external Penetration Testing (VAPT), and regular code reviews of proprietary tooling.
- NOC/SOC Isolation: Dedicated physical and logical micro-segmentation of our 24/7 Network Operations Control centers with 24/7 CCTV surveillance and biometric dual-factor entry locks.
Data Retention & Cryptographic Erasure Schedule
Konnet adheres to strict data minimization. Data is retained solely for the duration necessary to fulfill the statutory, contractual, and operational purposes for which it was collected:
- B2B Inquiry & RFP Records: Retained for a period of twenty-four (24) months from the last active interaction unless converted into an executed contract.
- Contractual & Financial Transaction Records: Retained for eight (8) statutory years following contract completion pursuant to the Companies Act 2013 and GST enactments.
- Network Security Logs & Telemetry: Retained for one hundred and eighty (180) days in compliance with statutory CERT-In Cyber Security Directions (Direction No. 20(3)/2022-CERT-In).
- Candidate Recruitment Records: Unsuccessful applicant records are securely erased within twelve (12) months unless explicit consent for future talent pool retention is granted.
- Secure Disposal Standards: Upon expiry of retention thresholds, digital media undergoes cryptographic sanitization conforming to NIST SP 800-88 Rev. 1 guidelines; physical records undergo cross-cut shredding under supervised chain-of-custody.
Data Principal Rights & DSAR Protocol
Under Section 11, 12, 13, and 14 of the DPDP Act 2023, every Data Principal possesses enforceable statutory rights regarding her digital personal data:
- Right to Access & Summary: You have the right to obtain a summary of personal data being processed by Konnet, the identities of all Data Fiduciaries and Processors with whom data has been shared, and related processing details.
- Right to Correction & Erasure: You have the right to request correction of inaccurate data, completion of incomplete entries, updating of obsolete records, and erasure of personal data that is no longer necessary for the purpose it was collected.
- Right of Grievance Redressal: You have the right to access readily available grievance redressal mechanisms regarding any act or omission of Konnet in fulfilling our legal obligations.
- Right to Nominate: You have the right to nominate another individual who shall, in the event of your death or incapacity, exercise your data rights.
- Right to Withdraw Consent: Where processing is predicated upon consent, you may withdraw consent with the same ease with which it was given, without affecting the legality of prior processing.
To exercise any statutory right, submit a signed request to privacy@konnet.co.in or our Data Protection Officer. Pursuant to the DPDP Act, we will verify your identity using two-factor authentication and provide a formalized determination within thirty (30) calendar days without levy of statutory fees.
Statutory Grievance Redressal & Data Protection Officer (DPO)
Pursuant to Rule 5(9) of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023, the designated Grievance Officer & Data Protection Officer (DPO) for Konnet Solutions Private Limited is detailed below:
Office of the Data Protection Officer
Konnet Solutions Private Limited • Legal, Risk & Compliance Directorate
Designated Officer
Grievance Redressal & Data Protection Officer
Direct Compliance Email
Corporate Headquarters Address
Konnet Solutions Pvt. Ltd., 102, Shiv Shakti Complex, Baner Rd, Baner, Pune, Maharashtra 411045, India.
Statutory Response SLA
Acknowledgment within 48 hours • Formal resolution within 30 days
Document Control & Policy Amendments
Konnet reserves the right to review, modify, or update this Privacy Policy periodically to reflect changes in infrastructure practices, OEM architecture, statutory amendments, or judicial precedents.
Material changes shall be communicated by updating the "Last Revised" timestamp at the top of this document, and where legally required under the DPDP Act, through prominent notices on our website or direct digital communications to registered enterprise administrators. Continued engagement with our digital services following the publication of revised terms constitutes valid legal acknowledgment.