DPDP Act 2023 • Responsible Data Governance

Notice of Personal Data Processing

Silicon Comnet Pvt. Ltd. is committed to transparent, lawful and secure handling of personal data across our website, cybersecurity services, training programmes and digital platforms.

NOTICE OF PERSONAL DATA PROCESSING

Silicon Comnet Pvt. Ltd.

Issued under Section 5(1) of the Digital Personal Data Protection Act, 2023, read with Rule 3 of the Digital Personal Data Protection Rules, 2025

Effective Date: 22 May 2026 │ Version: 2.0

Please read this notice carefully before giving your consent. This is a standalone notice issued by Silicon Comnet Pvt. Ltd. (“we”, “us”, or “our”) as required under Section 5(1) of the Digital Personal Data Protection Act, 2023 (“the Act”) and Rule 3 of the Digital Personal Data Protection Rules, 2025 (“the Rules”). It describes: (a) the personal data we collect; (b) the purposes for which it is processed; (c) how you may withdraw your consent; (d) how you may exercise your rights; and (e) how you may make a complaint to the Data Protection Board of India. This notice is complete on its own and does not require any other document to be read alongside it.

1. Identity of the Data Fiduciary [Section 5(1); Rule 3(b)]

Who is collecting your data

Organisation Silicon Comnet Pvt. Ltd.
CIN U72900DL2012PTC234926
Registered Office 16/8, 3rd Floor, Arya Samaj Road, Karol Bagh, New Delhi – 110005
Branch Office C-43, 2nd Floor, Sector 8, Noida, Uttar Pradesh
Website www.siliconcomnet.com
Privacy Email privacy@siliconcomnet.com
Contact Person (Rule 9) Gaurav Goswami, Principal Consultant | privacy@siliconcomnet.com | +91 931 142 5007

The Contact Person’s business contact information is published on our website and will be referenced in every response to a rights request, as required by Rule 9 of the Rules.

2. Personal Data Collected and Purposes of Processing [Rule 3(b)(i) and 3(b)(ii)]

What data we collect and why

We collect the following personal data for the following specified purposes. Each row constitutes a discrete processing activity for which consent is sought, unless otherwise noted.

Specified Purpose Personal Data Collected [Rule 3(b)(i)] Goods / Services Enabled [Rule 3(b)(ii)]
Cybersecurity Services Name, job title, company name, email, phone, postal address, GST/PAN (where applicable), payment details Vulnerability assessment, penetration testing, attack surface management, DLP, SOC/SIEM advisory, DPDP/ISO 27701 compliance consulting
Training & Certification (SiliconUniv) Name, email, phone, educational qualifications, certifications, assessment scores, payment details Enrolment in and delivery of SCFI, SCCNE, CEH v13 and EC-Council training programmes; issuance of certifications and learning materials
Inquiry & Consultation Name, email, phone, company name, nature of inquiry Responding to contact-form, email, phone, or LinkedIn inquiries; scheduling consultations; providing service quotations
Career Applications & Recruitment Name, email, phone, postal address, resume/CV, qualifications, work experience, expected salary, interview notes Evaluation of job applications; interview scheduling; hiring decisions; onboarding
Marketing & Communication Name, email address Newsletters, service updates, event invitations, whitepapers, blog notifications and promotional content about our cybersecurity services and Silicon Challenge events
Website Analytics IP address, browser type, device type, OS, referring URL, pages visited, click patterns, scroll depth, session recordings, cookie identifiers (_ga, _clck, _clsk) Analysis of website performance and user behaviour using Google Analytics and Microsoft Clarity to improve website usability and content relevance
Events & Webinars Name, email, phone, organisation, attendance and participation logs Managing registrations, attendance tracking, and follow-up for webinars, workshops, Silicon Challenge CTF competitions, and partner events (Fortinet, Palo Alto, EC-Council)

Note on Voluntary Provision (Section 7(a) of the Act): Where you voluntarily provide personal data — for example, by submitting an inquiry form or sending us your resume — the Act does not require consent; however, the above disclosure applies to all such data equally.

Consequence of not providing data: If you choose not to provide personal data required for a specified purpose, we may be unable to provide the corresponding service — for instance, we cannot respond to your inquiry, process your training enrolment, or consider your job application.

3. How to Withdraw Your Consent [Section 6(4)–(6); Rule 3(c)(i)]

You may withdraw at any time

Where we process your personal data based on your consent under Section 6(1) of the Act, you may withdraw that consent at any time. The ease of withdrawing consent is comparable to the ease with which consent was given (Section 6(4)).

You may withdraw consent through any of the following means:

Online Portal: siliconcomnet.com/privacy-preferences — manage and withdraw consent for each purpose individually.

Email: Write to privacy@siliconcomnet.com with subject line "Consent Withdrawal – [Your Name]" specifying the purpose(s) you wish to withdraw.

Unsubscribe Link: Click “Unsubscribe” in any marketing email to withdraw consent for marketing communications instantly.

Cookie Preferences: Click “Cookie Preferences” in our website footer to withdraw cookie-based consent for analytics at any time.

Phone: +91 931 142 5007 — Monday to Friday, 10:00 AM – 6:00 PM IST.

Important — Effects of Withdrawal (Section 6(5) and 6(6)):
Withdrawal does not affect the lawfulness of any processing carried out before withdrawal.
Before processing your withdrawal, we will inform you of the consequences (e.g., inability to continue delivering a particular service).
Upon withdrawal, we will — and will cause our Data Processors to — cease processing your personal data for the withdrawn purpose within a reasonable time.

4. Your Rights as a Data Principal [Sections 11–14; Rule 3(c)(ii); Rule 14]

Your rights under the DPDP Act, 2023

You have the following rights under the Act. To exercise any right, use the means listed at the end of this section.

4.1 Right to Access Information (Section 11)

You may request: (a) a summary of the personal data we hold about you; (b) a description of our processing activities; (c) the identities of all Data Fiduciaries and Data Processors with whom your data has been shared and a description of that sharing; and (d) any other information prescribed under Rule 14(2).

4.2 Right to Correction and Erasure (Section 12)

You may request: (a) correction of inaccurate, incomplete, or outdated personal data; and (b) erasure of personal data that is no longer necessary for the purpose for which it was collected, subject to any legal obligation requiring retention. Where we deny a request, we will provide written reasons.

4.3 Right to Grievance Redressal (Section 13; Rule 14(3))

You may file a grievance with us about any aspect of our processing of your personal data. We will acknowledge your grievance within 48 hours and resolve it within a maximum of 30 (thirty) days from the date of receipt, as prescribed under Rule 14(3). You must exhaust this mechanism before approaching the Data Protection Board.

4.4 Right to Nominate (Section 14; Rule 14(4))

You may nominate one or more individuals to exercise your rights under the Act in the event of your death or incapacity. Nomination is made in the manner prescribed under Rule 14(4).

How to exercise your rights:

Email: privacy@siliconcomnet.com

Phone: +91 931 142 5007 — Monday to Friday, 10:00 AM – 6:00 PM IST

Identity verification: You will be asked to provide your name and the email address or mobile number associated with your account (Rule 14(1)(b) and Rule 14(5)).

5. Grievance Officer [Section 13; Rule 14(3)]

How to raise a complaint with us

If you have a complaint or concern regarding the processing of your personal data, you may contact our Grievance Officer directly:

Grievance Officer
Name & Designation: Gaurav Goswami – Principal Consultant
Organisation: Silicon Comnet Pvt. Ltd.
Address: 16/8, 3rd Floor, Arya Samaj Road, Karol Bagh, New Delhi — 110005
Email: grievance@siliconcomnet.com
Phone: +91 931 142 5007 │ Monday–Friday, 10:00 AM – 6:00 PM IST

Your grievance will be acknowledged within 48 hours of receipt. We will resolve it within 30 (thirty) days from the date of receipt, as required under Rule 14(3) of the Rules. If your grievance is not resolved within this period, or you are not satisfied with our response, you may file a complaint with the Data Protection Board of India (see Section 6 below). Exhaustion of this grievance mechanism is a statutory prerequisite before approaching the Board (Section 13(3) of the Act).

6. How to Complain to the Data Protection Board of India [Section 13(2)–(3); Rule 3(c)(iii)]

If you are not satisfied with our response

If you are not satisfied with our response, or your grievance is not resolved within 30 days, you have the right to file a complaint with the Data Protection Board of India in the form and manner prescribed by the Board. The Board’s complaint mechanism is accessible at:

Board Website: [To be updated once the Board’s operational portal is published by the Central Government]

Note: Approaching the Board is available only after first filing a grievance with us and either receiving an unsatisfactory response or not receiving a response within 30 days (Section 13(3)). We will cooperate fully with any inquiry by the Board under Sections 27–28 of the Act.

7. Additional Information [Rule 3(c)]

Where to find full operational details

This notice addresses only what is prescribed under Rule 3 of the DPDP Rules, 2025, and is sufficient for the purpose of obtaining your informed consent. For additional information, including data retention periods, security safeguards, cross-border transfer details, children’s data protections, and our Cookie Policy, please visit our full Privacy Policy at siliconcomnet.com/privacy-policy.

Language availability (Section 5(3) of the Act): This notice is available in English. You may request a version in any of the 22 languages listed in the Eighth Schedule to the Constitution of India by writing to privacy@siliconcomnet.com.

— End of Notice —

© Silicon Comnet Pvt. Ltd. | CIN: U72900DL2012PTC234926 | www.siliconcomnet.com