Privacy Policy

Cogntix is dedicated to protecting the privacy of individuals and safeguarding personal data from misuse. In line with Sri Lankan data protection laws, as well as GDPR compliance for users within the European Union, we strive to ensure your personal data is handled securely and responsibly.

This policy outlines:

• How personal data is collected, processed, and used.
• Our data protection measures.
• Your rights as a data subject.

We work with hosting providers to secure our databases and prevent unauthorized access, data loss, or misuse. However, please note that data transmission over the internet, such as via email, may have security vulnerabilities, and it is not possible to ensure complete protection against third-party access.

Personal data includes any information relating to an identified or identifiable person. When using our website, you may voluntarily provide information such as your name, email, and other contact details. This data is collected and processed only with your consent and for specific purposes outlined below.

• Statistical Data: When you visit our website, non-personally identifiable data (e.g., pages viewed, date, and time) is stored for statistical analysis.
• Voluntary Data: Personal data, such as name, email, or address, is collected only when voluntarily provided. We do not share your personal data with third parties without your explicit consent.

Cogntix processes personal data in compliance with both Sri Lankan and GDPR regulations. In accordance with GDPR, the legal bases for processing are:

• Consent (Art. 6(1)(a) GDPR): When you provide clear consent for us to process your personal data for a specific purpose.
• Contractual Obligation (Art. 6(1)(b) GDPR): Processing is necessary to fulfill a contract with you or to take pre-contractual measures at your request.
• Legal Obligation (Art. 6(1)(c) GDPR): Processing is required to comply with applicable legal obligations.
• Protection of Vital Interests (Art. 6(1)(d) GDPR): Processing is necessary to protect someone's life or well-being.
• Legitimate Interests (Art. 6(1)(f) GDPR): Processing is necessary for our legitimate business interests, except where such interests are overridden by your privacy rights.

For certain activities, such as the recruitment process, we may process special categories of personal data (e.g., health information for assessing work eligibility), in line with Article 9 of the GDPR:

• Employment and Social Security Rights (Art. 9(2)(b) GDPR)
• Vital Interests (Art. 9(2)(c) GDPR)
• Healthcare Purposes (Art. 9(2)(h) GDPR)

We process these categories only with your explicit consent or when necessary for a legitimate purpose.

Personal data is stored only as long as necessary to fulfill the purpose for which it was collected or to meet legal retention requirements. After this period, your data will be securely deleted or anonymized.

As per GDPR, you have the following rights regarding your personal data:

• Access: Request access to your personal data.
• Correction: Request correction of any inaccurate or incomplete data.
• Deletion: Request deletion of your data when no longer necessary.
• Restriction of Processing: Request restriction of data processing under specific conditions.
• Data Portability: Request to transfer your data to another organization.
• Objection: Object to processing based on legitimate interests.

To exercise these rights, please contact us at the contact information provided below.

Cogntix reserves the right to update this privacy policy in response to changing legal, regulatory, or operational requirements. Any changes will be posted on this page, and users are encouraged to review it periodically.

For questions or to exercise your data rights, please contact us at:

hai@cogntix.com