Privacy Policy

1. Controller

Kiran Gaonkar
Krifteler Weg 2
65760 Eschborn
Germany
Email: official@kathamandira.in

2. Website hosting

This website is delivered using Firebase Hosting, a Google service. When the website is requested, technically necessary connection data are processed, in particular the IP address of the requesting device, in order to deliver the website securely and reliably and to protect the service against misuse.

This processing is carried out on the basis of Article 6(1)(f) GDPR. Our legitimate interest is the secure, reliable and efficient provision of this website. To the extent Google processes personal data on our behalf in connection with Firebase, the applicable Firebase data-processing and security terms apply.

3. Static delivery of content

Public website content is generated as static files before publication and then delivered through hosting. A normal visit to the website does not cause the visitor's browser to read our Firestore content database. The contact form invokes a server-side Firebase HTTPS function only when you actively submit the form.

4. Cookies, local storage and consent

The public website currently uses no analytics, advertising or marketing tracking and does not set non-essential cookies. When you actively select a website language, the selected value (EN or DE) is stored locally in your browser under the key 'km-language' so that the website can remember the language you expressly requested. This preference is not used for tracking and is not sent to us as a separate analytics event. We treat this storage as necessary to provide the language preference expressly requested by you within the meaning of Section 25(2) no. 2 TDDDG. Because no technology requiring consent is currently used, the website does not display a consent banner. If this changes, consent will be obtained where legally required before the relevant technology is activated and this policy will be updated.

5. Social media presences: YouTube, Instagram and Facebook

Katha Mandira maintains official presences and publishes content on YouTube, Instagram and Facebook. This section also applies when this Privacy Policy is linked directly from one of those profiles. If you visit or interact with a Katha Mandira social-media presence, for example by following or subscribing, viewing or reacting to content, commenting, sharing or sending us a message, the respective platform processes personal data in accordance with its own privacy information. Depending on your interaction, we may receive or be able to view information such as your profile or account name, publicly visible profile information, comments, reactions, messages and other information you intentionally provide to us. We process information made available to us for operating our social-media presences, publishing and moderating content, communicating with our community and responding to enquiries. Where applicable, this processing is based on Article 6(1)(f) GDPR and our legitimate interests in public communication, operating Katha Mandira's media presences and responding to users; Article 6(1)(b) GDPR applies where communication concerns a contract or pre-contractual measures requested by you. YouTube is a Google service. Facebook and Instagram are Meta services. The platforms may independently process information about your use of their services, including device, usage and interaction data, and may provide us with aggregated statistics or insights about our audiences and content. For Facebook Page Insights and comparable Meta features, Meta and the page operator may have responsibilities under the applicable joint-controller arrangements; Meta primarily determines and performs the underlying platform processing. Please use the privacy information and privacy controls provided by Google/YouTube and Meta for details about their processing and your choices. Our website itself does not currently embed automatically loading YouTube, Instagram or Facebook players, feeds, pixels or social-media plugins. A connection from this website to those services is therefore made only when you intentionally follow an external link. The fact that we maintain social-media profiles does not mean that Katha Mandira controls all data processing carried out independently by the platform providers.

6. Contact form and email

If you use our contact form, we process the email address and message you provide and, if you choose to provide them, your name and subject. The submission is transmitted to a server-side Firebase HTTPS function and sent by authenticated email to our Katha Mandira mailbox hosted by Zoho. Contact-form messages are not stored by us in a Firestore contact-message database. The message is retained in our business email mailbox as needed to handle and answer your enquiry. If your enquiry concerns a contract or steps requested by you before entering into a contract, processing is based on Article 6(1)(b) GDPR. For other enquiries, processing is based on Article 6(1)(f) GDPR and our legitimate interest in responding to enquiries and communicating about Katha Mandira. The same legal bases apply when you contact us directly by email.

7. Recipients and international processing

Firebase Hosting and Cloud Functions for Firebase are provided by Google and are used to deliver the website and securely transmit contact-form submissions. Zoho Mail is used as our business email service and receives contact-form messages for handling and replying to enquiries. When you use our social-media presences, Google/YouTube and Meta/Facebook/Instagram may process personal data as described in their respective privacy information. Personal data may therefore be processed by these service providers and their subprocessors in accordance with their applicable terms. Where processing or a transfer takes place outside the European Economic Area and appropriate safeguards are legally required, the respective provider's applicable transfer mechanisms apply.

8. Retention

Personal data are retained only for as long as necessary for the relevant purpose or as required by law. Technical connection data processed in connection with Firebase services are subject to the applicable retention rules of the service provider. Contact-form messages and direct email enquiries are retained in our business mailbox only for as long as necessary to handle the enquiry, unless statutory retention obligations, the establishment or defence of legal claims, or another legal basis require further storage. Content and communications that you publish or send through YouTube, Instagram or Facebook are also subject to the respective platform's retention and deletion rules. Where we separately process information received through a social-media interaction, we retain it only for as long as necessary for the relevant communication or purpose, subject to applicable legal obligations.

9. Your rights

Subject to the applicable legal requirements, you have rights of access, rectification, erasure, restriction of processing and data portability. Where processing is based on Article 6(1)(e) or (f) GDPR, you also have the right to object on grounds relating to your particular situation. Any consent given may be withdrawn at any time with effect for the future. For processing carried out by a social-media platform, you may also exercise your rights directly with the relevant provider; where a request concerns processing for which we are responsible, you may contact us using the details stated in this Privacy Policy.

10. Automated decision-making

We do not use automated decision-making or profiling on this website. Social-media platforms may use automated systems for their own services as described in their respective privacy information; such independent platform processing is not controlled by Katha Mandira.

11. Right to complain

You have the right to lodge a complaint with a data-protection supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement. The data-protection supervisory authority responsible for us in Hessen is:

The Hessian Commissioner for Data Protection and Freedom of Information (HBDI)
Wilhelmstraße 7
65185 Wiesbaden
Germany
Email: poststelle@datenschutz.hessen.de
https://datenschutz.hessen.de/

12. Changes to this policy

We update this privacy policy when the website, our YouTube, Instagram or Facebook presences, the services we use or the applicable legal requirements change. The version published on this page is the current version.