Privacy policy
This policy explains what personal data we collect when you visit this website or contact us, why we collect it, how long we keep it and what rights you have. We keep it short because we collect very little.
1. Who we are
[Legal entity name], company ID [IČO], registered office [address], registered in [commercial register / trade licence register] ("we", "us") is the controller of your personal data.
Contact for all privacy questions: [e-mail]@indiaconnext.com. We have not appointed a data protection officer because the law does not require one for the processing we do.
2. What we collect and why
| Situation | Data | Purpose | Legal basis (GDPR) |
|---|---|---|---|
| You visit the website | IP address, date and time, page requested, browser type (server logs kept by our hosting provider) | Delivering the website securely and preventing abuse | Art. 6(1)(f), our legitimate interest in running a secure website |
| You e-mail or call us | Name, e-mail, phone, company, job title and whatever you tell us | Answering you and discussing a possible programme | Art. 6(1)(b), steps before a contract at your request; otherwise Art. 6(1)(f) |
| You book a call | Name, e-mail, chosen time, optional note | Scheduling the call | Art. 6(1)(b) |
| Your company takes part in a programme | Names, roles and contact details of participants, travel dates, dietary or access needs you choose to share | Preparing and running the programme | Art. 6(1)(b) for the contract with your company; Art. 6(1)(f) for participants who are not party to it |
| We need to keep records | Contracts, invoices and related correspondence | Accounting and tax obligations | Art. 6(1)(c), legal obligation |
We do not ask for special categories of data (such as health or religion). If you tell us about access or dietary needs for a programme, we use that information only to arrange the programme and delete it afterwards.
3. Cookies and tracking
This website uses no cookies, no analytics and no advertising or social media trackers. Fonts are served from our own server, so your visit is not shared with a font provider.
4. Who receives your data
- Our team in Hyderabad, India, when we prepare a programme for your company. They receive only what they need to organise meetings and logistics.
- Companies and organisations you meet during a programme (for example capability centres, providers, Invest Telangana), but only participants' names and roles, and only with your company's agreement on the programme.
- Service providers who process data on our behalf: website hosting ([Microsoft Azure, EU region]), e-mail ([provider]), calendar booking ([provider]), accounting ([provider]). Each works under a data processing agreement.
- Authorities, where the law requires it.
We do not sell your data and do not pass it to providers for their own marketing.
5. Transfers outside the EU
India has no adequacy decision from the European Commission. When we share programme data with our team in India, we do so under the European Commission's standard contractual clauses (Art. 46(2)(c) GDPR) and share only what the programme requires. You can ask us for a copy of the safeguards at the address in section 1. If any service provider in section 4 processes data outside the EU, the same safeguards or an adequacy decision apply.
6. How long we keep your data
- Server logs: up to [30] days, as set by our hosting provider.
- Enquiries that do not lead to a programme: 24 months after our last contact, so we can pick up the conversation, then deleted.
- Programme data: for the duration of the programme and 3 years after it ends, for possible claims, unless a longer period applies below.
- Contracts and accounting records: as long as tax and accounting laws require (in the Czech Republic typically 10 years for VAT records).
7. Your rights
You have the right to:
- access the data we hold about you and get a copy,
- have inaccurate data corrected,
- have your data erased where we no longer need it or process it unlawfully,
- restrict processing while a complaint is resolved,
- receive data you gave us in a machine-readable format (portability),
- object at any time to processing based on our legitimate interest (Art. 6(1)(f)); we then stop unless we have compelling grounds or need the data for legal claims.
Write to the address in section 1. We answer within one month. You can also lodge a complaint with a data protection authority, in the Czech Republic the Office for Personal Data Protection (Úřad pro ochranu osobních údajů, uoou.gov.cz), or with the authority in your EU country.
8. Automated decisions
We make no decisions about you based solely on automated processing, including profiling.
9. Visitors and clients outside the EU
We apply this policy to everyone, including visitors and clients in the United States. If a US state privacy law gives you additional rights, write to the address in section 1 and we will handle your request under that law.
10. Changes
If we change how we process personal data, we update this page and the effective date at the top.