SPDI Rules 2011 · DPDP Act 2023

Privacy

What this website collects, what it does not, and who to ask. Written against the SPDI Rules 2011, in force today, and the DPDP Act 2023 as its Rules commence.

In short. This website does not track you. No analytics, no tag manager, no advertising pixel, and no cookie that identifies or profiles a visitor.

What this site collects

This portal carries one form, and links out to registration forms for events when they are open.

Applying to collaborate. The form at Apply for collaboration asks for your organisation, location, contact name, email, telephone and what you want to work on. It is sent by your own mail client to the Foundation — the details are not submitted to this website, and nothing is stored here.

Registering for an event. Where an event takes registrations, the Register button leads to a form hosted by someone else, and that is where your details go. Each event page names the provider and lists what the form asks for before you leave this site. Those providers process what you enter under their own terms and may hold it outside India. We use it only to run the event you registered for — to confirm your place, to tell you if anything changes, and to know who attended. If you would rather not use the form, write to the Foundation instead and we will register you by hand.

Our host records ordinary web-server information for every request — IP address, time, page requested, browser user-agent. That is the technical minimum needed to serve a page. It is not combined with anything else and is not used to profile anyone.

Documents and photographs

Much of this portal is Jalappa Foundation for Innovation & Incubation's published record: notifications, committee constitutions, accreditation evidence, reports and photographs of academic and campus events. If you appear in a photograph and want it withdrawn, write to the address below.

Why we may process personal data

Where you give information voluntarily, the ground is your consent, given at the point of collection and withdrawable by writing to the officer below. Where academic, examination, admission and employment records are held, that is to discharge duties placed on the institution by the UGC, the NMC and the other statutory councils — a legitimate use under the DPDP Act, for which consent is not the basis.

How long it is kept

Only as long as the purpose requires, or as long as a regulator requires it to be kept — whichever is longer. Academic and examination records follow the periods the awarding and recognising bodies prescribe. This website holds no database, so nothing you do on these pages creates a record here to retain.

How it is protected

This portal is a set of static pages with no database and no application server, so there is no store of visitor data on it to breach. Every request is served over HTTPS with HTTP Strict Transport Security set, plain HTTP is redirected, and no advertising network, analytics service or tracking pixel is loaded.

Children

This site is not directed at children and asks nothing of them. Where the data of a person under eighteen is processed, it is processed under the conditions the DPDP Act sets for children, including verifiable parental consent where the Act requires it. No tracking or behavioural advertising is undertaken here, for anyone.

Your rights

Under the DPDP Act 2023 you may ask what personal data is held about you, ask for it to be corrected or erased where it is not required to be retained, and nominate someone to act for you. Records the UGC, the NMC or another regulator requires Jalappa Foundation for Innovation & Incubation to keep cannot be erased on request; where that applies you will be told why.

Who to contact

Data Protection Officer — Mr Girish Gowda
Email: dpo@sduaher.ac.in
Telephone: 1800-425-3245 (SDUAHER toll-free)
Post: Sri Devaraj Urs Academy of Higher Education and Research, Tamaka, Kolar — 563103, Karnataka.

This is the contact for any question about your personal data and for the rights above. Under DPDP Act s.8(9) it is the published point of contact for data principals; under SPDI Rule 5(9) a grievance is answered within one month.

Student grievances that are not about data protection have their own statutory channel through the Grievance & Ombudsperson page.

Making a request

Write to the officer above with enough detail to identify you and the record — your name, the capacity in which your data is held, and what you are asking for. Proof of identity may be requested, so that a record is not disclosed to the wrong person.

If you are not satisfied

Raise it first with the Data Protection Officer, who is required to respond. If that does not resolve it, the DPDP Act 2023 provides for a complaint to the Data Protection Board of India.

If something goes wrong

In the event of a personal data breach, the Data Protection Board and every affected data principal will be notified in the form and within the time the DPDP Act and its Rules require.

Last reviewed 2026-08-30 · registrar@sduaher.ac.in