Institutional Privacy Policy | Dr. Sarvepalli Radhakrishnan College

1 Scope & Purpose of Data Processing

Dr. Sarvepalli Radhakrishnan College operates this official institutional web portal (https://dsr.college) to provide authoritative academic information and facilitate online admissions for its Teacher Education programmes: B.Ed. (One Year), B.Ed. (Two Year), Four-Year Integrated Teacher Education Programme (ITEP / B.A.B.Ed.), and D.El.Ed. (Two Year).

This Privacy Policy establishes our data protection practices regarding candidate personal data, educational credentials, and digital interactions. All information collected is processed exclusively for bona fide institutional evaluation, admission merit listing, enrollment verification, and statutory reporting.

2 Data Minimization & Information Collected

Under our strict principle of data minimization, the College collects only the information strictly necessary to verify candidate eligibility and process applications:

Applicant Identity: Full Name, Father's Name, Mother's Name, Date of Birth, and Gender as recorded on matriculation certificates.
Contact Coordinates: Active mobile phone number, email address, and permanent postal address for administrative notifications.
Statutory Category: Social category (General, EWS, OBC, EBC, SC, ST) strictly for applying governmental reservation quotas.
Academic Qualifications: Board, passing year, total marks, and percentage for Class 10 (Secondary), Class 12 (Higher Secondary), and Graduation (where applicable).
Verification Documents: Candidate passport-style photograph, specimen signature, and scanned mark sheets (Class 10 and Class 12).

Aadhaar / National ID Notice: In full compliance with national privacy principles and data minimization standards, National Identity numbers (Aadhaar) are not collected or stored during initial online registration. Original identity credentials are only verified in-person during final admission counseling.

3 Lawful Basis & Candidate Consent

Information is collected upon the voluntary submission of the applicant via our multi-step admission wizard. Before completing submission, each candidate must actively affirm the statutory declaration:

"I declare that all particulars and uploaded documents are true, complete and correct. I agree to receive official admission communications, accept the Institutional Admission Regulations, and agree to the Privacy Policy."

4 Payment Security & Zero Financial Credential Storage

Online application processing fees (₹500 standard institutional fee) are handled through authorized, RBI-licensed payment gateway aggregators operating under PCI-DSS Level 1 compliance (operated by Cashfree Payments India Pvt. Ltd.):

No Financial Data Storage: Dr. Sarvepalli Radhakrishnan College never collects, handles, or stores sensitive financial credentials, including credit/debit card numbers, CVV codes, net banking passwords, or UPI PINs. All financial credential exchanges occur strictly within the gateway's encrypted checkout modal.
Transaction Records: The College retains only cryptographically verifiable transaction metadata (Order ID, Payment Gateway Reference ID, transaction amount, timestamp, and status) required to issue the computer-generated application fee receipt.

5 Document Storage & Technical Safeguards

We employ layered security controls to safeguard applicant records against unauthorized access, alteration, disclosure, or destruction:

Cryptographic File Names

Uploaded documents are renamed with high-entropy cryptographic hashes, preventing predictable URL enumeration.

Execution Prevention

Upload directories strictly forbid script execution via server-level access rules and MIME-type validation whitelists.

Transport Encryption

All data in transit is encrypted using modern TLS (HTTPS) protocols to protect communications against eavesdropping.

Role-Based Access

Admission dossiers are accessible exclusively to authenticated institutional officers bound by confidentiality.

6 Data Retention & Disposal

Candidate records are retained in accordance with statutory educational record schedules:

Enrolled Students: Data of candidates granted admission is transferred to the permanent institutional student register.
Unenrolled Applicants: Applications not resulting in enrollment are retained through the conclusion of the academic cycle for audit reconciliation and subsequently purged or anonymized.

7 Cookies & Third-Party Services

The College portal utilizes only strictly necessary first-party session cookies:

PHPSESSID: Standard session identifier to preserve wizard state between application steps.
CSRF Verification Tokens: Cryptographic tokens to defend candidates against cross-site request forgery attacks.

No Advertising or Tracking Pixels: We do not employ third-party tracking pixels, behavioural marketing cookies, cross-site trackers, or commercial advertising networks.

Third-Party Service Integrations:

When interacting with specific functional services, client browsers may establish direct connections with authorized service providers:

Payment Aggregator (Cashfree Payments): Processes admission application fees under PCI-DSS Level 1 compliance when candidates invoke the payment checkout modal.
Official Recruitment Form (Google Forms): Career applications are collected via an official Google Form managed by the College Recruitment Committee.
Campus Navigation (Google Maps): External navigation links are provided to assist visitors traveling to our campus in Biharsharif, Nalanda.
Content Delivery Networks (Google Fonts, FontAwesome, Tailwind): Technical stylesheets, fonts, and icons are loaded from public CDNs to optimize page performance.

8 Candidate Rights, Correction & Contact Coordinates

Candidates may request review or correction of typographical errors in their submitted application details prior to the publication of the final merit list:

Institutional Privacy & Admission Desk

Dr. Sarvepalli Radhakrishnan College, Biharsharif, Nalanda, Bihar – 803101

principal.dsrc@gmail.com +91 9968008015 Mon – Sat, 9:00 AM – 5:00 PM