COLOMBO PORT CITY ECONOMIC COMMISSION - PRIVACY POLICY

This Privacy Policy describes how Colombo Port City (hereinafter referred to as the CPC , us, or we) processes your personal data.

This Privacy Policy applies to You if you are an e-resident of the Colombo Port City, who has given your consent to transmit personal data from Your e-residency application to CPCEC. In addition, this Privacy Policy applies to You, if you have visited our website https://wwww.portcitycolombo.gov.lk/

1. CATEGORIES OF PERSONAL DATA, PURPOSES AND LEGAL BASES FOR PROCESSING, AND RETENTION OF PERSONAL DATA.
1.1 I AM AN E-RESIDENT
If You are an e-Resident, we process the personal data on your e-Residency application that has been submitted to us by you. Such personal data includes:
  • Name;
  • Gender, date of birth, personal identification number;
  • Contact data (email address, telephone number);
  • Country and city of residence;
  • Citizenship;
  • Location of issuing e-residency, date of the decision to grant e-residency, date of expiry of the e-resident’s Digital-ID;
  • Reasons for having submitted the application
WE PROCESS YOUR PERSONAL DATA FOR THE FOLLOWING PURPOSES:
  • To send You e-Residency communications, personalized offers, and information to inform you about e-Residency and CPC e-Services and about the latest updates and developments, also to assist you in starting and operating a business in CPC;
  • To send you personalized offers and value proposals that will help you start and manage your CPC based company;
  • To help establish contact with service providers according to the e-Resident’s interests;
  • To develop the e-Residency program through each e-Residents’ profiles and through the creation of timelines for the use of the service to fulfil the purposes of the programme (including asking for feedback);
  • To understand better which the focus groups and countries of e-Residency are;
  • To measure and analyze the effectiveness of e-Residents’ lifecycle, motivation and needs to further develop and improve the application process, services and value offerings for e-Residents;
  • To improve e-Residency as a service and to improve our communication.
  • To analyze the need for different pick-up location, also to offer alternatives for e-Residents to pick up their respective documents.

The legal basis for such processing is the consent that you have given us when you applied for e-Resident Digital-ID. You have the right to withdraw your consent at any time by contacting us on the contact details below. The withdrawal of consent does not affect the lawfulness of the processing based on consent before its withdrawal.

We may also process your personal data to fulfil our legal obligations and to protect our legal rights ( including but not limited to file claims, to protect ourselves from claims), in which case the legal basis for such processing is our legitimate interest that overrides your interests and fundamental rights and freedoms which require protection of personal data.

1.2. I AM A VISITOR TO THE COLOMBO PORT CITY WEBSITE.

If you are a visitor to the Colombo Port City website https://www.portcitycolombo.gov.lk/ ,we may collect some personal data automatically via cookies on our website.

ACCESS TO PERSONAL DATA AND TRANSMISSION OF PERSONAL DATA.

Only members of the CPC e-Residency programme team who have a justified need for processing your personal data have access to your personal data. We share your personal data with third parties only if needed to the justified extent and only if we have a legal basis for such transmission.

2. We use third party service providers that may have access to your personal data. These service providers shall be considered as data processors. For example, such data processors include cloud service providers, email service providers, data analytics service providers etc. We use only data processors who provide sufficient guarantees that they apply appropriate technical and organizational measures in order to ensure the protection of your personal data. We have signed appropriate data processing agreements with the service providers who shall remain responsible for their actions in respect of the processing of your personal data.

WE MAY ALSO TRANSMIT YOUR PERSONAL DATA TO THE FOLLOWING THIRD PARTIES WHO ACT AS INDEPENDENT CONTROLLERS WITH REGARD TO YOUR PERSONAL DATA:
  • To third parties who possess information that is necessary to reply to data subject’s inquiry (e.g., Embassies, Sri Lanka Ministry of Foreign Affairs, other Sri Lankan government authorities), in which case the legal basis for the transmission of your personal data is our legitimate interest to the extent permitted by the Data Protection Laws of Sri Lanka.
  • To third parties who protect our legal rights (e.g., our legal consultants), in which case the legal basis for the transmission of personal data is our legitimate interest to the extent permitted by the Data Protection Laws of Sri Lanka
  • To third parties who audit us, in which case the legal basis for the transmission of personal data is our legitimate interest to the extent permitted by the Data Protection Laws of Sri Lanka.
  • To third parties to whom we are obligated to transmit personal data in accordance with laws of Sri Lanka (e.g., supervisory authorities), in which case the legal basis for transmission is the fulfilment of our obligations arising from law.

Should you require more detailed information as regards the data processors or independent third parties who might process your personal data, please contact us on the contact details below.

3. TRANSMISSION OF PERSONAL DATA OUTSIDE CPC

Our data processors (e.g., cloud service providers) may process your personal data outside the CPC Area. Usually we do not transmit your personal data outside the CPC, however in the event it becomes necessary, we transmit data only if we have a legal basis to do so, including to data recipients: (i) who are located in a country where sufficient level of personal data protection is ensured in the assessment of the CPC Commission or (ii) on the basis of an agreement which meets the CPC requirements for the transmission of personal data to personal data processors located outside the CPC.

Should you require more detailed information as regards transferring your personal data outside the CPC (e.g., the names of the recipients and the exact legal basis for any such transfer), please contact us on the contact details below.

4. RETENTION OF PERSONAL DATA

We retain your personal data until it is necessary depending on the purposes for which we collected the data.

We retain personal data of e-Residents until you withdraw your consent. If you do not withdraw your consent, we retain the personal data of e-Residents for as long as necessary toe cooperate with the other governing bodies of CPC to carry out the purposes of the e-Residency programme.

We retain personal data of people who have contacted our support team indefinitely.

5. SECURITY

We implement sufficient technical and organizational security measures to protect your personal data, taking into account: (i) the level of technology, (ii) the costs of implementation, (iii) the nature, scope, context, and purposes, and (iv) the possible risks to You that may arise from data processing.

6. YOUR RIGHTS

With regard to your personal data, you have all the rights prescribed by legal acts, on the terms and conditions and to the extent established therein:

  • The right to request access to your personal data (including to receive a copy of your personal data);
  • The right to request the rectification of your personal data;
  • The right to request the deletion of personal data;
  • The right to withdraw your consent, if we process your personal data on the basis of your consent.

If You wish to exercise the rights specified above or should you have any questions about the processing of your personal data, please contact us on the contact details provided below.

If you believe that your rights have been violated or your personal data have not been processed in accordance with this Privacy Policy, we kindly recommend you contact us on the contact details provided below.

7. AMENDMENT OF THE PRIVACY POLICY

If our personal data processing practices shall change or we need to change the Privacy Policy due to changes in the applicable Data Protection Laws of Sri Lanka or guidelines or practices of competent authorities, we have the right to unilaterally amend this Privacy Policy. If the amendments affect you significantly, we shall notify you by email before the amendments are effected.

8. CONTACT DETAILS

If you have any questions concerning the processing of your personal data or if you wish to exercise your rights with regard to your personal data, please contact us using the following contact details:

Email Address: inquiries@portcity.gov.lk

Telephone Number: (+94) 11 7560 006