Privacy Policy
Gram Vikas is committed to protecting your personal data. This Privacy Policy explains our practices regarding the collection, storage, and use of your information. This policy is designed to comply with the Digital Personal Data Protection (DPDP) Act, 2023 (India), the General Data Protection Regulation (GDPR), and other applicable laws.
1. Definitions
- Data Principal: The individual to whom the personal data relates (You).
- Data Fiduciary:The entity which determines the purpose and means of processing personal data (Gram Vikas).
- Personal Data: Any data about an individual who is identifiable by or in relation to such data.
2. What Data is Collected?
We collect personal data when you voluntarily provide it to us through our website, social media, or email.
- Voluntary Information:: Name, email address, phone number, and mailing address provided when signing up for updates, volunteering, or making inquiries.
- Donation Information:We collect details necessary to process donations and issue tax-exempt receipts (e.g., PAN card details as required by Indian Tax laws).
- Technical Data: IP address, country of visit, browser type, device information, and site usage analytics collected via web servers.
- Cookies: We use cookies to enhance user experience, remember preferences, and analyze site traffic. You can manage cookie settings in your browser.
3. Grounds for Processing
Under the DPDP Act, we process your data based on:
- Consent: Your explicit, informed, and withdrawable consent provided at the time of data collection.
- Legitimate Uses:For specified purposes such as fulfilling legal obligations (e.g., reporting to government agencies) or responding to a medical emergency.
4. How We Use Your Data
We use your data for the following "Specified Purposes":
- Donor Management: Processing donations, issuing receipts, and sending acknowledgments.
- Engagement:Processing requests for volunteering, visits, and sharing updates about our programmes.
- Legal Compliance: Reporting to government agencies as required by the Foreign Contribution (Regulation) Act (FCRA), Income Tax Act, or other statutory requirements.
- Service Operations: Sharing data with trusted partners (hosting, security, data storage) who assist in our core operations. These partners are bound by confidentiality agreements.
Note: Gram Vikas does not sell, rent, or exchange your personal information with third parties for marketing purposes.
5. Data Storage and Transfer
Your data may be stored on secure servers within India or in other jurisdictions where our service providers operate. We ensure that any cross-border transfer of data complies with the regulations set by the Government of India under the DPDP Act.
6. Data Security
We employ robust organisational and technical measures to protect your data, including:
- SSL (Secure Sockets Layer) encryption for data transmission.
- Firewall infrastructure and intrusion detection systems.
- Regular vulnerability monitoring and protection against SQL injection and cross-site scripting.
While we strive for maximum security, no transmission over the internet is 100% secure. Gram Vikas cannot be held liable for security failures caused by unauthorised third-party actions beyond our reasonable control.
7. Your Rights (The Rights of Data Principals)
Under the DPDP Act, you have the following rights:
- Right to Access: You can request a summary of the personal data we hold about you and the processing activities undertaken.
- Right to Correction/Erasure:You may request to correct inaccurate data or ask us to delete your data when it is no longer necessary for the specified purpose.
- Right to Withdraw Consent: You may withdraw your consent at any time. Note that this may affect our ability to provide certain services (e.g., sending newsletters).
- Right of Grievance Redressal: You have the right to register a grievance with us regarding the processing of your data.
8. Consent Manager & Grievance Redressal
In compliance with the DPDP Act, if you have any questions, wish to exercise your rights, or have a grievance, please contact our Grievance Officer:
Email: media@gramvikas.org Address: Gram Vikas, Mohuda village, Ganjam, Odisha, 760002, India.
If your grievance is not resolved by us within the stipulated time, you may approach the Data Protection Board of India.