CG SEMI PRIVATE LIMITED PRIVACY & COOKIES POLICY
A) HOW WE USE INFORMATION OBTAINED ON OUR WEBSITE
We collect or process your personal information when you visit our websites, social network services or applications we operate (together, our “Sites”) or when you contact us using the details available on it.
Our Sites may enable you to visit other websites, social network services or applications which are owned and operated by affiliates or partner companies to CG SEMI, including our distributors. Those websites, etc. will have their own privacy policies, and you should review those privacy policies when you visit websites, etc. operated by other companies, as those affiliates or partner companies will use your personal information as described in those policies.
In addition to this Policy, some products and services which are offered by CG SEMI have their own privacy policies which describe in more detail how your personal information is used in a particular context.
1. What personal information will we use and for how long?
Personal information “We Use” may request that you input certain information, for example when you fill in forms. The personal information we collect may include your name, email address, phone number, address and other information. In some circumstances, for example if you enter a promotion or competition, it may be necessary for you to provide some of this personal information in order for us to fulfil our obligations to you under the Terms and Conditions of the particular service.
We may collect personal information from sources other than directly from you. In particular we collect personal information from social media sites, for example if you post comments on our pages, like us on social media, or otherwise interact with us via social media (including by blogging, commenting or posting media). In some circumstances, we may also use third-party services to help us gather and analyse data.
We also collect personal data automatically through the use of cookies and similar technologies. You can find out more by reading the section entitled “Cookies Policy” below.
2. How do we use your personal information?
We use the personal information we collect from our Sites to:
address your requests, for example to enter you into any promotions we run, or to respond to any queries you may have, or to deliver news about our activities by way of e-mail or any other form of message. To the extent required by applicable law, we will only send marketing material about our activities with your consent, which you can withdraw at any time by contacting us using the details below or by using the 'unsubscribe' function in an email; comply with our legal and regulatory responsibilities, to respond to legal process or requests for information issued by government authorities or other third parties, to prevent and detect crime and fraud, or protect your, our or others' rights; and operate our Sites and to understand how our Sites are used so that we can improve it.
We use your personal information for these purposes in some cases to meet our contractual obligations to you or other legal obligations. If the purposes set out above are not strictly required for compliance with a legal or contractual obligation, we process it to meet our legitimate business interests in managing our business properly and effectively and in keeping our records accurate and up to date. We take steps, including by securing your personal data, to ensure that we do not use your personal data for purposes which are incompatible with those set out above, and will notify you about any material changes to these purposes.
You can object to our uses of personal information on the basis of our legitimate business interests at any time by contacting us using the details set out here.
C) HOW WE USE INFORMATION ABOUT OUR CUSTOMERS
CG SEMI Private Limited ("CG SEMI", "we", "us" or "our") collects and processes personal information when you purchase our products or services, enter into manufacturing, supply, engineering, testing, assembly, packaging, logistics or related commercial arrangements with us, or otherwise engage with CG SEMI, its affiliated entities, authorised representatives, channel partners or distributors.
1. Personal Information We Use
We collect personal information directly from you (for example, when you enter into a supply agreement, request a quotation, participate in technical discussions, or visit our facility) and from other sources described below.
We may be required by law or under contractual arrangements to collect certain personal information (for example, identification details, bank details, tax information, employment, health and safety information, or other compliance-related information) in order to provide our services and fulfil our obligations.
1.1 Information We Collect Directly From You
The categories of personal information we collect directly include:
- Personal and Professional Details – Name, designation, employer/company name, department, business role, professional qualifications, identification details (such as government-issued ID where required), tax identification numbers, and authorised signatory details.
- Contact Details – Business phone number, email address, office address, billing and shipping addresses.
- Transaction and Commercial Information – Details relating to purchase orders, contracts, invoices, payment information, banking details, credit and payment records, and correspondence related to commercial arrangements.
- Product and Technical Information – Information relating to semiconductor products, wafers, packages, components, lot identification numbers, serial numbers, traceability records, specifications, engineering change requests, yield data, quality reports, audit findings, and technical documentation shared in connection with our services.
- Facility Access and Security Information – Visitor records, access logs, CCTV recordings, and security screening information when you visit CG SEMI facilities.
- Marketing and Communication Preferences – Information about your preferences regarding receiving technical updates, product information, newsletters, event invitations and other communications from CG SEMI.
- Information Collected Automatically – Information collected via cookies and similar technologies when you visit our website or use digital platforms operated by CG SEMI, in accordance with our Website Privacy and Cookies Policy.
1.2 Information We Collect From Other Sources
We may collect information about you from:
- Affiliates and group entities of CG SEMI
- Channel partners, distributors, logistics partners and customs agents
- Credit reference agencies
- Regulatory authorities
- Market research or industry databases
- Publicly available sources
Categories of such information may include:
- Personal and professional details
- Contact details
- Commercial and credit-related information
- Compliance and regulatory documentation
- Product traceability or quality-related information
1.3 Other Information We Generate
In the course of our business relationship, we may generate additional information such as performance metrics, credit assessments, risk evaluations, compliance assessments, technical analyses, quality reports, and business intelligence insights derived from the data provided. Such processing may be partially automated.
1.4 Special Categories of Personal Data
In limited circumstances, we may process sensitive personal information where required by law or necessary for compliance, workplace safety, insurance, legal proceedings, or regulatory obligations (for example, incident reports involving injury at our facilities). Such information will be processed only:
- With explicit consent (where legally required),
- To comply with statutory obligations,
- To establish, exercise, or defend legal claims, or
- Where necessary for substantial public interest or safety compliance.
You may withdraw consent at any time where processing is based on consent.
2. How we use your personal information and the legal basis
CG SEMI uses personal information for the following purposes:
- To fulfil contractual obligations, including manufacturing, testing, assembly, packaging, delivery, invoicing, and after-sales support;
- To respond to enquiries, quotations, audits, and technical discussions;
- To manage supply chain, logistics, traceability, quality control, warranty administration, and product lifecycle management;
- To conduct research, process optimisation, yield improvement, and product development;
- To manage credit assessments, payment processing, and financial risk management;
- To comply with legal, tax, customs, export control, and regulatory obligations;
- To ensure facility security and safety;
- To detect, prevent, and respond to fraud, security breaches, IP violations, or regulatory non-compliance;
- To communicate business updates, subject to applicable marketing laws;
- To protect vital interests of individuals and ensure occupational health and safety;
- To exercise or defend legal rights.
Legal Basis for Processing
We process personal information on one or more of the following legal bases:
- Contractual necessity (performance of supply, manufacturing, service or commercial agreements);
- Legal obligation (including compliance with applicable Indian laws such as the Information Technology Act, 2000 and related rules, tax laws, labour laws, export control laws, and industry-specific regulatory requirements);
- Legitimate interests (including operational efficiency, product improvement, security, fraud prevention, and business management), subject to appropriate safeguards;
- Consent, where required under applicable law (for example, certain marketing communications or use of cookies).
You may object to processing based on legitimate interests, subject to applicable law.
3. Automated Decision Making
Certain evaluations, including credit assessments, compliance risk screening, vendor onboarding assessments, and fraud detection processes, may be conducted using automated tools.
Where such automated processing significantly affects you, and subject to applicable law, you may request further information or seek human review.
4. Information collection in connection with products and services
In the course of manufacturing, testing, assembly, packaging, or servicing semiconductor products:
- Each lot or unit may be assigned unique identification numbers for traceability.
- Quality control, testing data, failure analysis, and diagnostic information may be collected and recorded.
- Engineering change documentation, maintenance records, and audit logs may be retained.
Such information may be stored in CG SEMI's internal systems or those operated by authorised service providers, including systems located outside India, subject to appropriate safeguards and contractual protections.
This information is used for:
- Product traceability and quality assurance
- Yield analysis and defect management
- Warranty and reliability analysis
- Regulatory compliance and audit requirements
- Product safety actions, if required
- Research and development
Access to such information is restricted to authorised personnel, service providers, and business partners strictly on a need-to-know basis and subject to confidentiality obligations.
CG SEMI may share such information with its group entities, authorised partners, regulatory authorities, or service providers solely for the purposes described above and in accordance with applicable data protection laws.
D) HOW WE USE INFORMATION ABOUT OUR BUSINESS PARTNERS
We collects and processes personal information in the context of our business relationships with individuals and entities that interact with us in a professional capacity. Such entities include, without limitation, suppliers, vendors, contractors, consultants, customers, distributors, logistics providers, service providers, financial institutions, auditors, regulatory authorities, governmental bodies, industry associations, media representatives, and non-profit or international organisations.
1. Personal Information We Use
We collect personal information directly from you, from the organisation you represent, and from other lawful sources. Certain personal information may be required by law (for example, for tax, regulatory, compliance, export control, labour, or customs purposes) or pursuant to contractual arrangements between CG SEMI and your organisation. Failure to provide such information may prevent or delay onboarding, contract execution, payment processing, regulatory filings, system access, or performance of contractual obligations. Where information is mandatory, we will inform you at the time of collection and specify the consequences of non-provision.
1.1 Information We Collect
The categories of personal information we collect include:
(a) Professional and Contact Details
Name, company name, department, division, designation/title, business address, telephone number, mobile number, email address, authorised signatory status, and related professional identifiers.
(b) Event, Meeting, and Travel Information
Information necessary to organise or facilitate business meetings, technical reviews, audits, conferences, training programmes, factory visits, or other corporate events hosted or attended by CG SEMI (for example, identification details for facility access, passport details where required for travel arrangements, visa-related information, and meal preferences including allergy information).
(c) System and Access Information
Information required to create, administer, and manage system accounts or credentials for CG SEMI's digital platforms, networks, enterprise systems, supplier portals, quality management systems, collaboration tools, or other secure applications made available to business partners.
(d) Compliance and Due Diligence Information
Information necessary for KYC, anti-bribery and anti-corruption checks, sanctions screening, conflict-of-interest declarations, financial standing verification, and other regulatory or internal compliance assessments.
1.2 Special Categories of Personal Data
In limited cases, we may process sensitive personal information, such as health-related information (for example, food allergies or medical conditions relevant to facility safety or event arrangements). Such information will be processed only with your explicit consent or where required by law, and strictly for the specific purpose for which it was collected.
2. How we use your personal information and the basis on which we use it
CG SEMI uses personal information for the following purposes:
- To fulfil contractual obligations with you or the entity you represent, or to take necessary steps prior to entering into a contract (including procurement, supply, manufacturing, engineering, consulting, logistics, or service arrangements);
- To communicate and coordinate with you in connection with projects, operations, audits, compliance reviews, negotiations, and general business administration;
- To organise and administer meetings, conferences, training sessions, factory visits, and other corporate events;
- To establish, grant, manage, monitor, and administer access to CG SEMI's IT systems, servers, networks, applications, supplier portals, and online collaboration platforms;
- To conduct due diligence, compliance screening, risk assessment, and internal governance processes;
- To comply with applicable legal and regulatory obligations, including cooperation with regulators, governmental authorities, and law enforcement agencies;
- To protect the vital interests of individuals, including workplace health and safety;
- To exercise and protect our legal rights, including detecting, preventing, and responding to fraud, corruption, intellectual property infringement, data security incidents, or violations of law.
Legal Basis for Processing
CG SEMI processes personal information on one or more of the following legal bases:
(a) Contractual Necessity
Where processing is necessary to perform a contract with you or your organisation, or to take steps prior to entering into such contract (for example, vendor onboarding, service delivery, or payment processing).
(b) Legal Obligation
Where processing is necessary to comply with applicable laws and regulations, including corporate, tax, labour, export control, customs, and anti-corruption laws.
(c) Legitimate Interests
Where processing is necessary for our legitimate business interests, such as managing commercial relationships, ensuring operational efficiency, maintaining system security, conducting compliance reviews, or executing joint projects, provided that such interests are not overridden by your fundamental rights and freedoms. Appropriate safeguards are implemented to protect personal data processed on this basis.
Where we rely on legitimate interests, you may object to such processing in accordance with applicable law.
(d) Consent
Where required by law, we will obtain your consent before processing certain types of personal information (for example, sensitive data or specific event-related information). You may withdraw your consent at any time, subject to legal or contractual limitations.
E) HOW WE USE INFORMATION ABOUT OUR EMPLOYEES
(INCLUDING EMPLOYEES OF OUR AFFILIATED OR GROUP COMPANIES)
We collect and processes personal information when you apply for employment with CG SEMI or any of our affiliated or group companies, during the course of your employment, or if you are engaged as a consultant, contractor, trainee, apprentice, intern, or contingent worker.
1. Personal Information We Use
We collect personal information directly from you, from affiliated/group entities employing you (where applicable), and from other lawful sources described below.
Failure to provide certain mandatory information may prevent us from processing your job application, issuing an employment offer, administering payroll and benefits, complying with statutory requirements, or maintaining your employment relationship.
1.1 Information We Collect Directly From You
The categories of personal information we collect include:
(a) Recruitment and Application Information – Curriculum Vitae (CV), application forms, educational records, professional qualifications, employment history, references, interview records, assessment results, and related documentation.
If you do not provide this information, we may not be able to process your application.
(b) Right to Work and Identity Information – Government-issued identification documents (e.g., Aadhaar, PAN, passport), visa or work permit details (where applicable), proof of address, and background verification documents.
Failure to provide such information may prevent us from offering or continuing employment.
(c) Basic Personal and Employment Details – Name, date of birth, nationality, gender, employee identification number, department, designation/title, reporting structure, date of joining, length of service, compensation details (salary, bonus, allowances), tax deductions, statutory contributions, education and work history.
(d) Contact Details – Residential address, email address, telephone number, emergency contact details, and names of family members (where required for benefits, insurance, or statutory compliance).
(e) Payroll and Statutory Information – Bank account details, PAN, tax information, provident fund (PF), Employee State Insurance (ESI), gratuity, professional tax, and other statutory or social security details required under applicable Indian laws.
(f) Benefits and Welfare Information – Insurance enrollment details, nominations, dependent information, benefit participation records, and reimbursement claims.
(g) Diversity and Compliance Information – Information required to comply with applicable labour, diversity, equal opportunity, or anti-discrimination laws (where mandated).
(h) Health and Medical Information – Medical fitness certificates, health declarations, occupational health assessments, accident reports, and information required for workplace safety compliance, medical insurance, or statutory obligations.
(i) Family and Dependent Information – Information necessary for benefits administration, insurance coverage, relocation assistance, or statutory nominations.
1.2 Information We Collect From Other Sources
We may collect information about you from:
- Former employers or professional references;
- Background verification agencies (subject to applicable law);
- Publicly available professional platforms (e.g., LinkedIn) where relevant for recruitment or professional verification;
- Insurance providers or third-party administrators managing employee benefits;
- Internal reporting mechanisms, including grievance or whistleblowing systems;
- Regulatory or statutory authorities, where required.
1.3 Information Collected in Case of Deputation / Secondment
Where you are seconded to or from a CG SEMI group entity or affiliate, we may collect or share relevant employment, payroll, immigration, performance, compliance, and benefits-related information necessary to administer your assignment in accordance with contractual and legal requirements.
1.4 Information Generated During Employment
During your employment or engagement, CG SEMI may generate additional personal information, including:
(a) Performance and Appraisal Data – Performance evaluations, feedback, promotion records, training records, competency assessments.
(b) Disciplinary and Investigation Records – Information relating to misconduct investigations, disciplinary proceedings, grievance handling, and compliance reviews.
(c) IT and System Usage Information – Information relating to your use of CG SEMI's systems, email accounts, devices, networks, applications, and security systems, subject to internal IT and monitoring policies.
(d) Attendance and Access Records – Biometric attendance records (where applicable), access card logs, CCTV footage, and facility entry records for security and safety purposes.
1.5 Special Categories of Personal Data
Certain categories of information, such as health or medical information (including allergies or medical conditions), biometric data (where applicable), or other sensitive personal data, are processed only:
- With your explicit consent (where required);
- To comply with employment, labour, or occupational health and safety laws;
- For insurance, medical care, or statutory benefit administration; or
- As otherwise permitted under applicable law.
2. How we use your personal information and the legal basis
CG SEMI uses employee personal information for the following purposes:
- To process recruitment applications and make hiring decisions;
- To administer employment contracts and manage employment relationships;
- To process payroll, compensation, benefits, reimbursements, and statutory deductions;
- To manage workforce planning, performance management, promotions, transfers, and training;
- To administer IT systems, grant system access, and ensure cybersecurity;
- To comply with labour laws, tax laws, social security laws, and other regulatory requirements;
- To ensure workplace health, safety, and security;
- To conduct internal investigations, enforce company policies, and protect company assets;
- To protect vital interests of employees or others in emergency situations;
- To exercise or defend legal rights.
Legal Basis for Processing
We process employee personal information on one or more of the following legal bases:
(a) Contractual Necessity – Processing necessary to perform your employment contract or engagement agreement, or to take steps prior to entering into such agreement.
(b) Legal Obligation – Processing necessary to comply with applicable laws and regulations, including Indian labour laws, tax laws, social security laws, occupational safety laws, and other statutory requirements.
(c) Legitimate Interests – Processing necessary for CG SEMI's legitimate business interests, such as workforce administration, performance management, security, compliance, and operational efficiency, provided such interests are not overridden by your fundamental rights.
(d) Consent – Where required by law, we obtain your consent before processing certain categories of personal data. You may withdraw consent at any time, subject to statutory or contractual limitations.
Where processing is based on legitimate interests, you may object in accordance with applicable law.
G) TRANSFERRING YOUR PERSONAL INFORMATION INTERNATIONALLY
CG SEMI is incorporated in India and may process personal information within India and, where necessary, transfer it to other countries.
In the course of our operations, your personal information may be transferred to:
- CG SEMI's affiliated or group entities located outside India;
- Customers, suppliers, technology partners, or service providers located in other jurisdictions;
- Cloud hosting providers or enterprise system operators whose servers may be located outside your country of residence.
Such transfers may occur for purposes including manufacturing coordination, supply chain management, IT system administration, enterprise resource planning (ERP), technical collaboration, compliance, or corporate governance.
Where personal information is transferred outside your country of residence, CG SEMI implements appropriate safeguards in accordance with applicable data protection laws, which may include:
- Contractual data protection clauses;
- Intra-group data transfer agreements;
- Confidentiality obligations;
- Information security controls and access restrictions.
If you require further information regarding cross-border data transfers or the safeguards implemented, you may contact us using the details provided below.
H) HOW LONG DO WE RETAIN YOUR PERSONAL INFORMATION
CG SEMI retains personal information only for as long as necessary to fulfil the purposes for which it was collected, including the purposes described in this Privacy Policy, and to comply with applicable legal, regulatory, contractual, and statutory obligations.
When determining appropriate retention periods, we consider:
- The duration of our business or employment relationship;
- Statutory record retention requirements under applicable laws (including labour, tax, corporate, and industry regulations);
- Audit, accounting, and compliance obligations;
- Limitation periods for legal claims;
- The need to resolve disputes, enforce agreements, or respond to complaints.
Once personal information is no longer required, it will be securely deleted, anonymised, or archived in accordance with our internal data retention and information security policies.
I) YOUR RIGHTS
Subject to applicable law (including the Digital Personal Data Protection Act, 2023, where applicable), you may have certain rights in relation to your personal information. These may include the right to:
- Request access to your personal information;
- Request correction or updating of inaccurate or incomplete information;
- Request erasure of your personal information, where legally permissible;
- Request restriction of processing in certain circumstances;
- Object to processing based on legitimate interests, where applicable;
- Request transfer of your personal information in a structured, commonly used, and machine-readable format (where legally applicable);
- Withdraw consent at any time where processing is based on consent.
You may contact us using the contact details provided below to exercise these rights. We may request additional information to verify your identity before processing your request.
If you believe that your personal information is inaccurate or outdated, we encourage you to inform us so that we may update our records.
If you are not satisfied with our response, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.
J) UPDATES TO THIS PRIVACY POLICY
CG SEMI may update or modify this Privacy Policy from time to time to reflect changes in legal requirements, business practices, operational processes, or technological developments.
Where changes materially affect how we process personal information or significantly impact your rights, we will provide appropriate notice through our website or other suitable communication channels prior to such changes taking effect.
The revised version will indicate the date of the latest update.
K) CONTACT DETAILS FOR PRIVACY INQUIRIES
We are CG SEMI Private Limited, with registered address at Plot No. 712 & 713, Sanand GIDC II, Hirapur, Overhead tank, Sanand, Ahmedabad, Gujarat – 382170, India.
If you have any questions regarding how CG SEMI collects, processes, uses, or protects your personal information, or if you wish to exercise your rights, you may contact us through the contact details or designated grievance redressal mechanism provided on our official website.
Important:
This contact channel is intended exclusively for inquiries relating to personal data protection and privacy matters. For general business inquiries, commercial requests, procurement matters, or product-related questions, please contact the relevant CG SEMI department through the official contact information available on our website.
If you believe that CG SEMI has not adequately addressed your privacy-related concern, you may have the right to file a complaint with the appropriate data protection authority in accordance with applicable law.
Feel free to get in touch
Whether it's a business inquiry, a partnership discussion, or a general question, we'd love to hear from you.