GDPR Compliance
GDPR Compliance
GDPR Compliance Statement
General Data Protection Regulation (GDPR)
Kaapu Lights is committed to protecting your privacy and complying with the GDPR for users in the European Union.
1. Data Controller Information
Data Controller: Ponnuri Gopie Krishna (owner of Kaapu Lights)
Contact Email: info@kaapulights.in
Data Protection Officer (DPO): DPO, Kaapu Lights
Address: FF3, Aravindam -2, Yadavula Bazaar, Prasadampadu, Vijayawada - 521108, NTR District, Andhra Pradesh, India
2. Lawful Basis for Processing
We process personal data based on:
- Consent: When you explicitly agree to data processing (e.g., by registering).
- Contract: To fulfil our services (membership, community features).
- Legal Obligation: To comply with Indian laws and regulations.
- Legitimate Interests: For platform security, analytics, and improvement.
3. Your GDPR Rights
Right to Access
Request copies of your personal data.
Right to Rectification
Request correction of inaccurate data.
Right to Erasure ("Right to be Forgotten")
Request deletion of your data.
Right to Restrict Processing
Request restriction of processing.
Right to Data Portability
Request transfer of your data to another organization.
Right to Object
Object to certain types of processing.
Rights Related to Automated Decision Making
Rights regarding automated processing and profiling.
4. Data Processing Details
| Data Category | Purpose | Retention Period |
|---|---|---|
| Account Information (name, caste, gotram, etc.) | User identification and community networking | Until account deletion + 30 days |
| Profile Data (profession, bio, etc.) | Community interactions | Until account deletion |
| Payment/Donation Information | Transaction processing for membership/donations | 7 years for tax/accounting purposes |
| Activity Logs (IP, usage) | Security, analytics, improvement | 1 year |
5. Data Transfers
We may transfer data outside the EU only with appropriate safeguards, such as:
- Standard Contractual Clauses (SCCs)
- Adequacy Decisions (where applicable)
- Explicit consent for specific transfers
6. Data Breach Notification
In case of a data breach, we will:
- Notify supervisory authorities within 72 hours.
- Inform affected users without undue delay.
- Take immediate remedial actions.
7. Exercising Your Rights
To exercise your GDPR rights, you can:
- Submit a request through your account settings (if available).
- Email us at info@kaapulights.in with "GDPR Request" in the subject.
- Use our Data Subject Access Request form (available on request).
We will respond within 30 days, free of charge.
Data Protection Authority
You have the right to lodge a complaint with your local Data Protection Authority.
Our Lead Supervisory Authority: Data Protection Commission, Ireland (for EU/EEA users).
This GDPR policy is part of our overall commitment to transparency and data protection. For any questions, contact us at info@kaapulights.in.