Privacy Policy

1. Controller

Kiran Gaonkar
Krifteler Weg 2
65760 Eschborn
Germany
Email: official@kathamandira.in

2. Website hosting

This website is delivered using Firebase Hosting, a Google service. When the website is requested, technically necessary connection data are processed, in particular the IP address of the requesting device, in order to deliver the website securely and reliably and to protect the service against misuse.

This processing is carried out on the basis of Article 6(1)(f) GDPR. Our legitimate interest is the secure, reliable and efficient provision of this website. To the extent Google processes personal data on our behalf in connection with Firebase, the applicable Firebase data-processing and security terms apply.

3. Static delivery of content

Public website content is generated as static files before publication and then delivered through hosting. A normal visit to the website does not cause the visitor's browser to read our Firestore content database. The contact form invokes a server-side Firebase HTTPS function only when you actively submit the form.

4. Cookies, local storage and consent

The public website currently uses no analytics, advertising or marketing tracking and does not set non-essential cookies. When you actively select a website language, the selected value (EN or DE) is stored locally in your browser under the key 'km-language' so that the website can remember the language you expressly requested. This preference is not used for tracking and is not sent to us as a separate analytics event. We treat this storage as necessary to provide the language preference expressly requested by you within the meaning of Section 25(2) no. 2 TDDDG. Because no technology requiring consent is currently used, the website does not display a consent banner. If this changes, consent will be obtained where legally required before the relevant technology is activated and this policy will be updated.

5. YouTube and Instagram

Katha Mandira publishes content on YouTube and Instagram. These services are currently not embedded as automatically loading players, feeds or social-media plugins. Video preview images may be downloaded during our publishing process and served locally from our own hosting. A connection to YouTube or Instagram is made only when you intentionally follow an external link to the relevant service. The privacy terms of the respective provider then apply.

6. Contact form and email

If you use our contact form, we process the email address and message you provide and, if you choose to provide them, your name and subject. The submission is transmitted to a server-side Firebase HTTPS function and sent by authenticated email to our Katha Mandira mailbox hosted by Zoho. Contact-form messages are not stored by us in a Firestore contact-message database. The message is retained in our business email mailbox as needed to handle and answer your enquiry. If your enquiry concerns a contract or steps requested by you before entering into a contract, processing is based on Article 6(1)(b) GDPR. For other enquiries, processing is based on Article 6(1)(f) GDPR and our legitimate interest in responding to enquiries and communicating about Katha Mandira. The same legal bases apply when you contact us directly by email.

7. Recipients and international processing

Firebase Hosting and Cloud Functions for Firebase are provided by Google and are used to deliver the website and securely transmit contact-form submissions. Zoho Mail is used as our business email service and receives contact-form messages for handling and replying to enquiries. Personal data may therefore be processed by these service providers and their subprocessors in accordance with their applicable data-processing terms. Where processing or a transfer takes place outside the European Economic Area and appropriate safeguards are legally required, the respective provider's applicable transfer mechanisms apply.

8. Retention

Personal data are retained only for as long as necessary for the relevant purpose or as required by law. Technical connection data processed in connection with Firebase services are subject to the applicable retention rules of the service provider. Contact-form messages and direct email enquiries are retained in our business mailbox only for as long as necessary to handle the enquiry, unless statutory retention obligations, the establishment or defence of legal claims, or another legal basis require further storage.

9. Your rights

Subject to the applicable legal requirements, you have rights of access, rectification, erasure, restriction of processing and data portability. Where processing is based on Article 6(1)(e) or (f) GDPR, you also have the right to object on grounds relating to your particular situation. Any consent given may be withdrawn at any time with effect for the future.

10. Automated decision-making

We do not use automated decision-making or profiling on this website.

11. Right to complain

You have the right to lodge a complaint with a data-protection supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement. The data-protection supervisory authority responsible for us in Hessen is:

The Hessian Commissioner for Data Protection and Freedom of Information (HBDI)
Wilhelmstraße 7
65185 Wiesbaden
Germany
Email: poststelle@datenschutz.hessen.de
https://datenschutz.hessen.de/

12. Changes to this policy

We update this privacy policy when the website, the services we use or the applicable legal requirements change. The version published on this page is the current version.