Privacy Policy
Last updated: 2026-07-02 · Version 2026-07-02
This policy explains what personal data India to Germany ("we", "us") collects, why, the legal basis, who we share it with, and your rights under the EU General Data Protection Regulation (GDPR).
1. Who is responsible (Controller)
The controller for the data processed on this website is:
2. What we collect, why, and the legal basis
| Data | Purpose | Legal basis |
|---|---|---|
| Name, email & message — contact form only | To answer your enquiry. Sent to our inbox via our email provider (EmailJS); we do not store it in any database or mailing list | Your consent / steps prior to a contract, Art. 6(1)(a)/(b) |
| Usage & device data via Google Analytics (cookies, IP) | To understand how the site is used and improve it. Loaded only after you accept in the cookie banner | Your consent for analytics cookies — Art. 6(1)(a) |
| Aggregated usage stats via Vercel Analytics (no cookies) | Privacy-friendly, cookieless page-view counts. Active only after you accept | Your consent — Art. 6(1)(a) |
| Server/CDN logs (IP, request data) via our host | Security, abuse prevention, delivering the site | Legitimate interests — Art. 6(1)(f) |
| Local storage (checklist progress, saved pages) | Remembering your preferences on your device | Stays in your browser, not sent to us |
Providing your data is voluntary. The contact form is the only place you can submit personal data, and you can browse the entire site without submitting any. We do not run a newsletter or any lead-capture form, and we do not sell or rent your data.
3. Who we share data with (recipients / processors)
- EmailJS — transmits the contact-form message to our inbox on our behalf.
- Google — Google Analytics (analytics cookies / measurement), only after you consent.
- Vercel — hosting/CDN (serves the site, keeps short-term security logs) and Vercel Analytics (cookieless usage stats, only after you consent).
We have data-processing agreements in place with our processors as required by Art. 28 GDPR.
4. International transfers
Some providers (e.g. Google, EmailJS and Vercel) may process data outside the EU/EEA, including in the USA. Where they do, transfers are protected by appropriate safeguards — the EU–US Data Privacy Framework and/or the European Commission's Standard Contractual Clauses (Art. 46 GDPR).
5. How long we keep it (retention)
- Contact-form messages (in our email inbox): until your request is handled, then deleted, at the latest within 24 months, unless you ask us to delete it sooner.
- Google Analytics data: per Google's retention settings (we set this to 14 months or less). Vercel Analytics keeps only aggregated, cookieless counts.
- Server logs: a short period for security, then deleted or anonymised.
6. Your rights under the GDPR
You have the right to:
- Access your data (Art. 15) and receive a copy (portability, Art. 20)
- Rectify inaccurate data (Art. 16) and request erasure (Art. 17)
- Restrict or object to processing (Art. 18, 21)
- Withdraw consent at any time (Art. 7(3)) — this does not affect prior processing
- Lodge a complaint with a supervisory authority (Art. 77), e.g. your local Landesdatenschutzbehörde
To exercise any right, email india2germany.app@gmail.com.
7. Cookies & consent
We set only strictly necessary storage to run the site, which needs no consent. Analytics — Google Analytics (cookies) and cookieless Vercel Analytics — run only after you accept in our cookie banner. Nothing analytics-related loads until you opt in, and declining is just as easy as accepting. You can change or withdraw your choice at any time via the “Cookie settings” link in the footer, and manage cookies in your browser settings. We do not use advertising cookies.
8. Children
This site is not directed at children under 16, and we do not knowingly collect their data.
9. Changes
We may update this policy; the version date above will change. We will reflect any material changes here before they take effect.
Questions? Contact us or email india2germany.app@gmail.com.