Who we are
Geetanjali – The Literary Society of NIFTEM Kundli (“Geetanjali”, “we”) is a student club under the Student Activity Council of NIFTEM Kundli at the National Institute of Food Technology, Entrepreneurship and Management (NIFTEM), Kundli. We run this website for NIFTEM students, alumni, faculty and guests of our events.
Geetanjali is a student club, not a separately registered company, trust or society. For the purposes of India’s Digital Personal Data Protection Act, 2023, the club’s committee decides why and how the personal data on this site is used, and is the “Data Fiduciary”. The committee is guided by faculty coordinators, whose names are on the About page.
Address: Plot No. 97, Sector 56, HSIIDC Industrial Estate, Kundli, Sonipat, Haryana 131028, India.
Privacy contact: support@geetanjali.niftem.in.
What we collect
Different people give us different things. Here is everything, grouped by where it comes from.
| What | Where it comes from | What it is for |
|---|---|---|
| Account details | You, when you register. Some member records were created earlier by the society from its own member lists; you can claim yours. | NIFTEM ID (roll number), name, email address, optional department and a password. The password is stored only as a salted hash, so nobody can read it. Used to create your account, tell members apart and send account emails such as a password reset. |
| Sign in with Google (optional) | Google, only if you press “Continue with Google” | Your Google account ID, email address and name, to sign you in and link the account to your member record. We never see your Google password. To prove a Google account belongs to the right student we may ask for the phone number or email on the society’s member list; that phone number is used for this check only. |
| Profile (optional) | You | Photo, bio, pronouns, interests, skills and links to your own profiles. Shown according to the visibility you choose (see “Who can see it”). |
| What you do here | You, and committee members who record attendance | Event registrations and QR check-ins, points and certificates, rewards you claim, writing you submit, and comments or questions you post. |
| Guest registration | You, without an account | Name, roll number and, if you wish, a mobile number, to register you for one event and check you in. |
| Contact form | You; the IP address and browser are collected automatically | Name, email, subject and message, so we can reply. The IP address and browser details help us spot spam. |
| Security and technical records | Collected automatically | IP address and browser when you sign in, failed sign-in counters, error logs, and page views. A page view stores the page, the referring page, the browser type and one-way scrambled codes of the IP address and session. The original IP address cannot be recovered from those codes. We honour the Do Not Track and Global Privacy Control signals by not recording the visit at all. |
| Email delivery | Our mail system | A short log of emails the site sent (to whom, when, subject). For announcement emails, committee members can switch on open and click tracking; it is off unless they choose it, and every such email carries an unsubscribe link. |
What we do not collect: payment or bank details (nothing on this site costs money), government ID numbers, your location, your contacts or health information.
Why we use it
- To run the society: accounts, event registration and attendance, certificates, points and rewards, the publication of student writing and the blog.
- To talk to you: account and security emails, replies to your messages, and announcements about events you may care about. You can unsubscribe from announcements with the link in every one of them.
- To keep the site safe and working: blocking password guessing and spam, fixing errors, and counting how many people read what, so the committee knows what is useful.
- To meet our obligations: answering your requests and complaints, and responding to lawful requests from NIFTEM or the authorities.
We rely on your consent where we ask for it (registering, ticking a consent box on a form, publishing a profile or a piece of writing, accepting the optional cookie), and on what is needed for something you asked for (for example registering you for an event). You can withdraw consent at any time; see “Your rights”. We do not use your data for automated decisions about you, profiling or targeted advertising.
Who can see it
- Anyone on the internet: your name next to writing you published (unless you chose to publish anonymously), the blog posts and comments you post, your photo and name if you are on the committee and shown on the About page, and your profile only if you set it to Public.
- Signed-in members: profiles set to “Members only” (the default), and the members’ leaderboard with names and points.
- Committee and administrators (students and faculty coordinators who run the society): the account, registration, attendance and message data they need for their role. Their actions in the admin area are recorded in an audit log. Only people with a role on the committee are given admin access.
- Only you: your password hash (no one can read it), and your profile if you set it to Private.
Photos and videos taken at events may be published in the gallery or on our social media pages. If you appear in one and want it removed, write to us and we will take it down.
We do not sell, rent or trade personal data, and we do not give it to sponsors or partners. Partner offers you claim with your points are shown to you directly; the partner does not receive your details from us.
Services we rely on
- Hostinger hosts the website and its database and provides the mail service that sends our emails. All site data is stored with them, and their servers may be outside India.
- Google is contacted only if you press “Continue with Google” (sign-in) or “Show the map” (the map on the contact page). Until you do, nothing is sent to Google. Google handles that data under its own privacy policy.
- Instagram (Meta) is contacted only if you press the play button on an event’s Instagram reel or post, or if you have allowed Instagram posts in the cookie banner (they then load as you scroll to them). Until then, nothing is sent to Instagram. After that, Instagram handles the data under its own privacy policy and may set its own cookies. A reel that we host ourselves plays from this site and contacts nobody.
- NIFTEM, the institute we belong to. We may share information with the institute where rules require it or to deal with a complaint about misconduct, and we follow lawful requests from the authorities.
We use no advertising network, analytics company, social-media pixel or data broker. Links to our Facebook, Instagram, LinkedIn and other pages, and the “Open in Google Maps” link on an event, are plain links: nothing is shared with those services unless you click through. The fonts, icons and scripts this site needs are served from this site; see Credits & licences.
How long we keep it
We keep personal data only as long as it is useful for the reason we collected it. Automatic clean-up runs daily.
| Data | Kept for |
|---|---|
| Your member account and profile | Until you ask us to delete it We may also remove accounts that were created by mistake or used to abuse the site. |
| Writing you submitted and comments you posted | Until you withdraw them or delete your account Published pieces can be kept without your name if you choose that when you ask for deletion. |
| Your event registrations, attendance and points | Until you delete your account After deletion, counts such as "40 people attended" stay, with no name attached. |
| Guest registration details (name, roll number, optional mobile number) | 12 months after you register |
| Messages sent through the contact form | 24 months after you send them |
| The IP address and browser details stored with a contact message (to stop spam) | 90 days, then they are erased from the message |
| Sign-in history (date, IP address, browser), and the last IP address and browser kept on your account and in points entries | 90 days |
| Page-view statistics (page, referrer, browser, a scrambled one-way code of your IP address and session) | 180 days |
| Failed sign-in counters used to block guessing attacks | 7 days |
| Technical error logs | 90 days |
| The IP address and browser stored with committee actions in the audit log (who changed what) | 12 months, then they are erased from the entry; the entry itself stays |
| Records of what you agreed to (which policy version, and when) | While your account exists; 12 months for event guests and 24 months for contact-form senders, the same as the details they belong to |
| Email addresses that unsubscribed, or whose owner had their data erased, on a do-not-email list | Kept, so that we never email you again Only the address is kept, nothing else. |
| A log of emails the site sent (who, when, subject) | 30 days |
| In-site notifications that have been read or sent | 12 months |
| Your data requests and our replies | 24 months after the request is closed |
| Routine backups held by our hosting provider | Until the provider's rolling backups are overwritten Deleted data can remain in these backups for a while and is not restored into the live site. |
Cookies
We set the cookies needed to keep you signed in and to protect forms, and one optional cookie for a visitor counter that is off until you accept it. The full list, with names and lifetimes, is in the cookie policy. You can change your choice at any time with Cookie settings in the footer.
Your rights
- See a summary of the personal data we hold about you and who we have shared it with.
- Correct anything wrong or out of date. Most of it you can change yourself on your profile page.
- Delete your account and the personal data tied to it. Writing you published can be deleted, or kept without your name if you prefer.
- Withdraw consent: change the cookie choice in the footer, follow the unsubscribe link in any announcement email, set your profile to Private, or delete your account. Withdrawing does not undo what was lawfully done before.
- Nominate someone to exercise these rights for you if you die or cannot act for yourself.
- Complain. Write to us first at support@geetanjali.niftem.in. If we have not resolved it, you may complain to the Data Protection Board of India, where the law gives it that role.
Use the data request form. We answer within 30 days. To protect you, we check that the request really comes from you before we share or delete anything. If you are not signed in, we reply to the email address on your account.
Under 18
This site is for the NIFTEM community, which is mostly adults. India’s law treats anyone under 18 as a child. If you are under 18, you may use this site only with the permission of a parent or guardian, and you confirm that when you register or sign up for an event as a guest.
We do not track or profile children’s behaviour, and we do not show them advertising. A parent or guardian can ask us to see, correct or delete a child’s data at any time through the data request form or by email. If you believe a child has given us data without permission, tell us and we will delete it.
Keeping it safe
The site is served over HTTPS. Passwords are stored as salted hashes. Forms are protected against forgery, sign-in attempts are rate-limited, and sessions use secure, HttpOnly cookies. Admin access is limited to named committee roles and its use is logged. No system is perfectly secure; if a breach affects your data, we will tell you and the authorities as the law requires.
Changes to this policy
If we change this policy in a way that matters (for example, collecting something new), we will update the version and date at the top and tell signed-in members. Version 2026-10-18, last updated 18 October 2026.