SAMS-STC Code of Conduct

The SAMS-STC Code of Conduct outlines the principles, standards, and behaviors expected from all participants using the SAMS-STC platform, including Job Posters, Social Sector Opportunity (SSO) Posters, Users (Jobseekers and Candidates), and any other stakeholders. Compliance with this Code is mandatory for maintaining access to and participation in SAMS-STC services.

A. General Guidelines for All Platform Participants

• Use of the SAMS-STC platform must align with the principles of fairness, transparency, and data protection laws, including the Digital Personal Data Protection Act, 2023.
• Participants must not share or use SAMS-STC platform content (e.g., job postings, resumes, social sector opportunities) for purposes unrelated to the services provided by the platform.
• Misrepresentation of identity, qualifications, or organizational affiliation is strictly prohibited.
• All participants must respect the rights of others, including privacy, intellectual property, and freedom from harassment or discrimination.
• Unauthorized data mining, scraping, or automated extraction of information from the SAMS-STC platform is forbidden.

B. Code of Conduct for Job Posters and SSO Posters Responsibilities:

Accurate and Lawful Job/SSO Descriptions:

Provide factual, detailed, and non-misleading information regarding job roles, requirements, benefits, and other opportunities posted.

Refrain from posting discriminatory job requirements unless directly relevant to the role and explicitly permitted by the law.

Confidentiality and Data Use:

Use candidate data only for filling specific job positions or opportunities for which the data was shared.

Seek explicit candidate consent for using resumes or profiles (RAJAs/GP-RAJAs) beyond the original purpose or extended timeframes.

2a. DPDP Act Compliance for Data Handling:

• Delete candidate data within 180 days after position is filled or recruitment ends
• Obtain separate explicit consent for sensitive personal data (health, disability, gender, religion, caste)
• Encrypt candidate data both in transit (TLS 1.2+) and at rest (AES-256)
• Restrict access to candidate data to authorized hiring team members only
• Notify SAMS-STC within 24 hours if you discover any data breach
• Respond to candidate rights requests (access, correction, deletion) within 15 days

Fair and Ethical Practices:

Avoid exploitative job conditions, unfair payment terms, or unsafe work environments.

Ensure clear disclosure regarding work conditions, including remote or hybrid roles, job timings, and work site location.

Prohibited Behaviors:

Creating independent offline databases from candidate resumes or profiles shared via SAMS- STC.

Using candidates' personal details for marketing or third-party solicitations without their explicit consent.

4a. Additional Prohibited Data Practices:

• Sharing candidate data with unauthorized third parties or sub-processors without SAMS-STC approval
• Using candidate data for purposes beyond recruitment (marketing, profiling, analytics)
• Retaining candidate data beyond 180-day period without justification
• Transferring data internationally without ensuring equivalent protections

Consequences: Violations result in immediate account suspension and potential legal action under DPDP Act.

Grievance Handling:

Respond promptly to candidate or job applicants' requests for updates, inquiries, or disputes through appropriate grievance mechanisms.

Code of Conduct for Users (Jobseekers and Candidates)

Responsibilities:

Truthful and Correct Information:

Submit accurate, complete, and verifiable information about education, experience, skills, and certifications.

Avoid falsifying qualifications in resumes, profiles, or during interviews.

Respect and Professional Behavior:

Ensure communication with Job Posters or potential employers is respectful and professional.

Comply with mutually agreed interview schedules and processes shared through the SAMS-STC platform.

Data Confidentiality:

Protect information shared with you by employers or SAMS-STC in connection with a job or opportunity.

Avoid unauthorized sharing of the contact details or proprietary information of employers, recruiters, or platform stakeholders.

Prohibited Activities:

Spamming or sending unsolicited applications/messages through unauthorized means.

Using the SAMS-STC platform for business promotions, advertising, or activities unrelated to securing employment.

4a. Data Protection Obligations for Candidates:

• Understand your consent choices - review what you're consenting to at registration
• Manage your consents - withdraw from GP-RAJA or marketing at any time through Settings
• Exercise your rights - request access, correction, or deletion of your data
• Report data misuse - if employer misuses your data, report immediately to support@samsstc.com
• Verify employer legitimacy - be cautious of suspicious job postings or data requests

Code of Conduct for SAMS-STC (Platform Responsibilities)

Responsibilities:

Fair and Transparent Platform Operations:

SAMS-STC will continuously adhere to the principles of fairness, transparency, and user- centricity.

Efforts will be made to ensure job postings and opportunities are free from unlawful or discriminatory biases.

Data Protection and Privacy:

Safeguard platform data from breaches or unauthorized access, in compliance with the DPDP Act, 2023.

Notify participants promptly of any breaches affecting their data within 72 hours of discovery.

2a. SAMS-STC's DPDP Compliance Commitments:

• Designate Data Protection Officer - accessible at dpo@samsstc.com
• Maintain data retention schedules - delete data per specified timelines
• Provide 48-hour pre-deletion notice - before deleting data due to inactivity
• Process rights requests within 30 days - for access, correction, deletion
• Conduct annual security audits - verify platform security measures
• Monitor processor compliance - ensure third-party processors meet DPDP standards
• Notify Data Protection Board within 72 hours of discovering breach
• Maintain breach register - document all incidents for compliance

Avoiding Conflict of Interest:

SAMS-STC will not endorse specific job positions, recruiters, or jobseekers to prevent biased platform operations.

Support and Grievances:

SAMS-STC will designate a Grievance Officer to handle complaints and disputes raised by stakeholders.

Ensure grievances are acknowledged within 48 hours and resolved within 30 days.

Prohibited Conduct for All Users

The following actions are strictly prohibited across the SAMS-STC platform:

• Unlawful Communication: Posting obscene, defamatory, or threatening content, or participating in racial, communal, or anti-national activities.
• Data Misuse: Mining or scraping of data for creating unauthorized lists, databases, or directories.

Creating independent candidate databases from RAJAs/GP-RAJAs or using data for purposes beyond recruitment.

• Unauthorized Access: Gaining access to accounts, servers, or proprietary information without authorization.
• Impersonation and Misrepresentation: Falsely claiming to represent another individual, organization, or SAMS-STC itself.
• Harmful Practices: Using bots, hacks, or any automation that disrupts the platform's functionality or security infrastructure.

Violations of these prohibited behaviors will result in immediate suspension or termination of accounts, and where necessary, legal action may be initiated.

E1. DATA PROTECTION AND PRIVACY COMPLIANCE

• Personal Data Responsibility

All users must handle personal data of others responsibly:

• Candidates shall not share personal data of other candidates
• Employers shall not share candidate data with unauthorized parties
• Violations reported to Data Protection Ofgrievance@samsstc.com
• Willful violations result in account termination and potential legal action

Data Breach Reporting Obligation (Mandatory)

If any user becomes aware of data breach or unauthorized access, user MUST report immediately:

• Email: grievance@samsstc.com with subject "URGENT: Data Breach Report"
• Include: Nature of breach, data affected, number of people impacted, evidence/screenshots
• Timeline: Report within 24 hours of discovery

SAMS-STC Response: Investigation initiated within 24 hours of receiving report.

User Cooperation: Users must cooperate fully with investigation, provide requested information, and preserve evidence.

Consent and Transparency

• Users shall not trick or manipulate others into sharing data
• Users shall honor consent withdrawal requests immediately
• Users shall not share data for purposes outside original consent
• Users shall respect privacy preferences (e.g., "no recruiter contact", "opt-out of GP-RAJA")

Reporting Data Protection Violations

Report violations through:

• Email: grievance@samsstc.com
• In-Platform: Use "Report" button for specific content/users
• Subject Line: "Data Protection Violation Report"

Response Timeline: All reports reviewed within 5 business days Consequences: Repeat violators face:

• First violation: Warning and compliance education
• Second violation: Temporary account suspension (30 days)
• Third violation: Permanent account termination and potential legal action

Reporting Violations

How to File a Complaint:

If any participant observes an individual or organization violating this Code of Conduct, they are encouraged to report their concerns using the designated grievance process.

Contact Information:

• Email: grievance@samsstc.com
• Data Protection Officer: Kafil Akhtar
• Phone: +(011) 4081 9900; 4165 3612
• Address: SAMS Social Talent Connect Pvt Ltd, 1/1B Choudhary Hetram House, Bharat Nagar, New Friends Colony, New Delhi – 110 025

Complaints or grievances will be acknowledged within 48 hours, and the resolution process will be completed within 30 days, unless an extension is required due to the nature of the complaint.

Investigation Process:

SAMS-STC commits to conducting fair and impartial investigations.

Participants under investigation will be notified and provided an opportunity to clarify their position.

Consequences of Violations:

Consequences may range from account suspension, termination, or legal action based on the severity of the violation.

• Repeat offenders may be permanently barred from accessing SAMS-STC services.
• 3a. DPDP Violation Consequences:
• For data protection violations specifically:

• Minor violations: Warning + mandatory DPDP compliance training
• Moderate violations: Temporary suspension (30-90 days) + compliance audit
• Severe violations: Permanent termination + report to Data Protection Board + potential legal action
• Data breach caused by negligence: Full liability for damages, legal costs, regulatory penalties

Acknowledgment

By accessing or using the SAMS-STC platform, all participants agree to comply with this Code of Conduct and any associated policies, including the Terms of Service, User Terms and Conditions, and Privacy Policy.

Failure to adhere to this Code may result in suspension, termination, or further legal action to ensure the integrity and ethical use of the SAMS-STC platform.

By accessing the platform, participants specifically acknowledge:

• Understanding of DPDP Act 2023 obligations
• Responsibility to protect personal data of others
• Obligation to report data breaches immediately
• Consequences of data protection violations
• Right to contact Data Protection Officer for concerns: grievance@samsstc.com