Your data and the GDPR
The Europe-India Chamber of Commerce & Industry is based in France, so the EU General Data Protection Regulation (GDPR) applies to everything we do with personal data. This page explains your rights and how we meet our obligations.
Who is responsible
The Europe-India Chamber of Commerce & Industry (EUICCI), Paris, France, is the controller of the personal data described on this page and in our privacy notice. For any data protection question or request, write to contact@euicci.com with "GDPR" in the subject line.
Our principles
- Only what we need. We ask for the minimum: your name, email, the type of enquiry and your message. We never ask for passport scans, bank details or health information through the website.
- Clear purpose. We use your data to answer you and, only with your agreement, to make an introduction.
- No selling, no advertising. We do not sell personal data, and we do not use advertising trackers or social media pixels.
- Consent first for analytics. Google Analytics runs only if you press Accept in the cookie banner.
- Limited retention. We keep conversations for no longer than 24 months after our last exchange.
Your rights
Under the GDPR you have the right to:
| Right | What it means |
|---|---|
| Access | Get a copy of the personal data we hold about you |
| Rectification | Have inaccurate or incomplete data corrected |
| Erasure | Have your data deleted when we no longer need it or you withdraw consent |
| Restriction | Ask us to limit how we use your data while a question is resolved |
| Portability | Receive data you gave us in a structured, commonly used format |
| Objection | Object to processing based on our legitimate interests |
| Withdraw consent | Change your mind at any time, for example with the Cookie settings link in the footer |
We do not make decisions about you based solely on automated processing.
How to make a request
- Email contact@euicci.com with "GDPR" in the subject line.
- Say which right you want to use, and give the email address or phone number you used with us.
- We may ask you to confirm your identity before acting on the request.
We reply within one month. For complex requests the GDPR allows this to be extended by up to two further months, and we will tell you if that happens. Requests are free of charge.
Legal bases we rely on
| Processing | Legal basis |
|---|---|
| Answering your message (form, email, WhatsApp) | Steps you asked us to take, and our legitimate interest in responding |
| Introductions to employers, partners or advisers | Your consent, asked before each introduction |
| Website analytics (Google Analytics) | Your consent, through the cookie banner |
| Bot protection (Cloudflare Turnstile) and security logs | Our legitimate interest in keeping the site and its forms secure |
Service providers
We use a small number of providers who process data on our behalf, under contracts that require them to protect it:
| Provider | Purpose |
|---|---|
| Cloudflare | Website hosting, security and bot protection |
| Resend | Delivering contact form messages to our inbox |
| Google (Google Analytics) | Visitor statistics, only with your consent |
| WhatsApp (Meta) | Conversations you choose to start on WhatsApp, under WhatsApp's own terms |
Transfers outside the EU
Some of these providers may process data outside the European Economic Area, including in the United States. Where that happens, transfers rely on the European Commission's adequacy decision for the EU–US Data Privacy Framework or on standard contractual clauses approved by the Commission.
Security
The site runs entirely over HTTPS, with strict security headers. Forms are checked by Cloudflare Turnstile and verified on our server before any message is sent. Access to our inboxes is limited to the people who answer them.
If something goes wrong
If we become aware of a personal data breach that poses a risk to you, we will notify the CNIL within 72 hours, as the GDPR requires, and inform you directly where the risk is high.
Complaints
If you are not satisfied with our answer, you can complain to the French data protection authority, the CNIL, or to the data protection authority in the EU country where you live or work.
