Privacy Policy

1. Introduction

This Privacy Policy explains how we collect, use, and protect personal data when you use the Indo-French Innovation Network (the 'Platform'). Our mission is to enable collaboration between Startups, Corporates, Investors, and Academia from India and France while respecting your privacy and complying with applicable data protection laws. The Platform processes personal data in accordance with the Digital Personal Data Protection Act, 2023 (India) (‘DPDP Act’) for users located in India, and the General Data Protection Regulation (GDPR) for users located in the European Union, including France.

2. Data Controller/Data Fiduciary

For the purposes of the Digital Personal Protection Act, 2023, IFCCI acts as the Data Fiduciary in respect of personal data processed through the Platform. For the purposes of the General Data Protection Regulation (GDPR), IFCCI acts as the Data Controller in respect of personal data of users located in the European Union.

3. What Data We Collect

We collect:

  • Identity and contact details (name, email, phone), persona and organization affiliation.
  • Professional profile data (role, sector, expertise), optional profile photo.
  • Verification data for Org Admins: Letter of Authorization (LoA), organization license/registration number.
  • Content you create (opportunities, success stories, events).
  • Directory participation choices and messages (connection requests share sender’s email with recipient).
  • Technical data (IP address, device/browser type, cookies).
  • We do not collect sensitive data (e.g., racial, political, health, or sexual orientation).

Each category of personal data is collected and processed solely for the specific purposes set out in Clause 4 of this Privacy Policy and shall not be processed in a manner incompatible with those purposes, except as permitted under applicable law.

4. Why We Collect Your Data

  • To enable registration and authentication.
  • To facilitate collaboration and matchmaking between ecosystem players.
  • To provide business services, including advisory and funding support.
  • To personalize your experience and share relevant news, events, and resources.
  • To ensure security and compliance.

Activities involving personalization, communications, or promotional outreach shall be undertaken only after obtaining explicit consent from the Data Principal, where required under applicable law.

For users located in India, we process personal data in accordance with the Digital Personal Data Protection Act, 2023.

We process personal data:

  • With your consent, which you may withdraw at any time; or
  • Where permitted under the law, including where processing is necessary to provide services requested by you, to comply with legal obligations, or in other situations where the law allows us to rely on deemed consent.

If you withdraw your consent, certain features of the Platform may no longer be available.

5. Cookies & Tracking

We use essential cookies for authentication and security, functional cookies for preferences, and analytics cookies (often anonymized).

You can manage cookies via your browser settings.

For users located in India, cookies that involve the processing of personal data are used only after obtaining valid consent in accordance with the Digital Personal Data Protection Act, 2023, except where such cookies are strictly necessary for core functionality.

You may manage or withdraw your cookie consent at any time through the Cookie Settings available on the Platform. Further details regarding the use of cookies are set out in our Cookie Policy.

6. Data Sharing

We share personal data only to the extent necessary to operate the Platform and provide its services. This may include sharing personal data:

  • with other users, where you choose to participate in collaboration, networking, or directory features;
  • with authorised platform administrators for verification, moderation, and support purposes;
  • with third-party service providers who assist us with hosting, technology, analytics, or operational support; and
  • with governmental or regulatory authorities where disclosure is required under applicable law.

We do not sell personal data.

Where personal data is shared with third-party service providers, such providers process the data only on our instructions and are required to implement appropriate security and confidentiality safeguards. IFCCI remains responsible for the protection of personal data shared in accordance with applicable law.

7. International Transfers

Personal data may be processed in India and, where relevant, in other jurisdictions, including the European Union.

For users located in India, any transfer of personal data outside India is carried out in accordance with Section 16 of the Digital Personal Data Protection Act, 2023 and subject to such conditions and restrictions as may be notified by the Government of India.

For users located in the European Union, cross-border transfers are carried out in accordance with applicable GDPR requirements.

8. Security

We implement reasonable technical and organisational safeguards to protect personal data against unauthorised access, disclosure, alteration, or loss. These safeguards are designed having regard to the nature of the personal data processed and the risks associated with such processing.

We regularly review and update our security measures to maintain an appropriate level of protection in accordance with applicable law.

9. Data Storage and Retention

We store personal data only as long as it is necessary to fulfil the stated purposes or legal requirements for which it was collected, as described in the Privacy Policy.

Personal data is deleted or anonymised when it is no longer required for those purposes, or when consent is withdrawn, unless retention is required or permitted under applicable law, including for legal, regulatory, audit, or compliance purposes.

We take reasonable steps to ensure that personal data is securely deleted or anonymised in accordance with applicable legal and technical standards.

10. Your Rights

We respect the rights you have in relation to your personal data and are committed to enabling you to exercise those rights in accordance with applicable law. The rights available to you depend on where you are located.

Users located in India

If you are located in India, you have rights under the Digital Personal Data Protection Act, 2023. These include the right to obtain confirmation and information about whether we process your personal data, to request correction or erasure of personal data that is inaccurate or no longer required, and to withdraw consent where the processing of your personal data is based on consent.

You also have the right to seek grievance redressal by contacting the Grievance Officer appointed by IFCCI. In addition, you may nominate another individual to exercise your rights on your behalf in the event of death or incapacity, in accordance with applicable law. If a grievance is not resolved to your satisfaction, you may approach the Data Protection Board of India.

Users located in the European Union

If you are located in the European Union, you have rights under the General Data Protection Regulation (GDPR). These include the right to access your personal data, to request correction of inaccurate or incomplete data, and to request deletion of your personal data in certain circumstances. You may also have the right to restrict or object to the processing of your personal data, to request data portability where applicable, and to withdraw your consent at any time where processing is based on consent.

EU users also have the right to lodge a complaint with a competent supervisory authority, including the Commission Nationale de l’Informatique et des Libertés (CNIL) in France.

Exercising your rights

Requests to exercise your rights may be submitted using the contact details provided in this Privacy Policy. We may need to verify your identity before responding to a request, and we will respond within the timeframes prescribed under applicable law.

11. Children

The Platform is intended for use by individuals who are of legal age. We do not knowingly collect or process personal data of children.

If we become aware that personal data of a child has been collected inadvertently or without appropriate consent, we will take reasonable steps to delete such data in accordance with applicable law.

12. Updates

We may update this Privacy Policy from time to time to reflect changes in legal requirements, our practices, or the features of the Platform.

Where changes are material, we will notify users through the Platform or by other appropriate means. Continued use of the Platform after such updates constitutes acknowledgement of the updated Privacy Policy, subject to applicable law.

13. Grievance Redressal (India)

In accordance with Digital Personal Data Protection Act, 2023, IFCCI has appointed a Grievance Officer to address grievances of Data Principals located in India in relation to the processing of personal data on the Platform.

Grievance Officer: Munam Qadri

Email: admin@indofrenchinnovation.org

Grievances shall be acknowledged and addressed within such period as prescribed under applicable law.