Privacy Policy
Last updated: 14 October 2026
Kannadigaru.de ("we", "us") is a non-commercial community website for Kannadigas living in Germany. This policy explains what personal data we collect when you use the website and the discussion forum, on what legal basis, and how we use it.
1. Controller
The controller responsible for data processing on this website is:
Santhosh Basavarajappa, Maximilianstr. 49, 85399 Hallbergmoos, Germany.
Email: contact@kannadigaru.de. Full details are in our Impressum.
2. Data we collect
- Account data – when you register or sign in with Google we receive your name, email address and profile picture from Google. We store these to create and maintain your forum account. We do not receive or store your Google password.
- Forum content – topics, replies, likes and profile information you choose to post. Forum content is public and visible to all visitors.
- Newsletter data – the email address you provide when subscribing.
- Technical data – IP address, browser type and access time, kept in server logs for security and abuse prevention.
- Cookies & usage data – essential cookies to keep you logged in, and – only with your consent – analytics and marketing cookies (see sections 5–6).
3. Why we use it
To operate the forum, let you log in, display your posts, send notification emails you have subscribed to, and keep the site secure. Legal basis: performance of a contract (Art. 6(1)(b) GDPR) and our legitimate interest in running a safe community (Art. 6(1)(f) GDPR). Analytics and marketing are based on your consent (Art. 6(1)(a) GDPR).
4. Sign in with Google
Login is provided through Google OAuth. Google's handling of your data is described in the Google Privacy Policy. You can revoke our access at any time at myaccount.google.com/permissions.
5. Cookies and consent
When you first visit, a consent banner (managed by Complianz) lets you accept or decline non-essential cookies. Essential cookies load without consent as they are strictly necessary to provide the website (§ 25(2) TDDDG). All analytics and marketing technologies listed in section 6 are blocked until you give consent, and are only loaded after you actively agree. You can change or withdraw your consent at any time via the Cookie settings link in the footer, with effect for the future. Details of each cookie are listed in our Cookie Policy.
6. Analytics and marketing tools (consent-based)
The following services are only activated after you consent, via Google Tag Manager, and process data under Art. 6(1)(a) GDPR:
- Google Analytics 4 (GA4) – provided by Google Ireland Ltd., to understand how the site is used. We use Google Consent Mode and IP anonymisation. Google Privacy Policy.
- Google Tag Manager – used to manage the tags above; it does not itself store cookies but can load the tools listed here after consent.
- Meta Pixel (Facebook/Instagram) – provided by Meta Platforms Ireland Ltd., to measure and optimise campaigns. We and Meta act as joint controllers for the collection and transmission of this data; Meta's role is described in its Privacy Policy.
- LinkedIn Insight Tag – provided by LinkedIn Ireland Unlimited Company, for campaign measurement and analytics. See the LinkedIn Privacy Policy.
- Google Maps – provided by Google, to display maps. The map is only loaded after you consent.
7. Newsletter
If you subscribe to our newsletter, we process your email address to send you updates. We use the double opt-in procedure: after signing up you receive a confirmation email, and you are only added once you click the confirmation link. Our email service provider is Brevo (Sendinblue SAS, France), which processes the data on our behalf as a processor within the EU. Legal basis: your consent (Art. 6(1)(a) GDPR). You can unsubscribe at any time using the link in every email, with effect for the future.
8. International data transfers
Some of the providers above (Google, Meta, LinkedIn) may process data on servers outside the EU/EEA, including in the USA. Where this happens, the transfer is safeguarded by the EU Standard Contractual Clauses and/or the providers' certification under the EU–US Data Privacy Framework. You can request a copy of the relevant safeguards from us. These transfers only take place after you have given consent.
9. Recipients / sharing
We do not sell your data. It is shared only with: our hosting provider (Hostinger, EU data centres) to run the website; Google for authentication; Brevo for the newsletter; and, with your consent, the analytics/marketing providers in section 6.
10. Retention
Account data is kept while your account exists. Newsletter data is kept until you unsubscribe. Server logs are deleted after 30 days. If you delete your account, your personal data is removed; your public posts may remain in anonymised form to keep discussions readable.
11. Your rights
Under the GDPR you have the right to access, rectification, erasure, restriction, data portability, and to object to processing. Where processing is based on consent, you may withdraw it at any time with effect for the future. To exercise your rights, email contact@kannadigaru.de.
You also have the right to lodge a complaint with a data-protection supervisory authority. For our location, the competent authority is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA); you may also contact the authority in your place of residence.
12. Changes
We may update this policy; the latest version is always available on this page.
