NABUNAM · Transparenz

Empfänger - Verkäufer Kategorien

letzte Aktualisierung:

For transparency, we list below the categories of recipients that may process personal information on our behalf. This page complements the Privacy Policy.

Die ausführlichen Angaben werden in ihrer englischen Referenzfassung angezeigt.

Good to know
  • In accordance with applicable laws (EU/UK GDPR, Quebec’s Law 25, Canada’s PIPEDA, California’s CPRA), disclosure may be made by category of recipient.
  • Non-essential services (e.g., analytics/marketing) are only activated with consent.
  • Individuals may exercise their rights (access, correction, deletion, etc.).

Empfängerkategorien

Aufgaben, betroffene Informationen und Verarbeitungsmodalitäten.

Hosting / Infrastructure

Servers, databases, storage, backups, CDN/WAF

Datenarten
  • Credentials
  • Educational content
  • Technical logs
  • Usage metadata
Hauptregionen
  • Quebec/Canada (priority)
  • Backup/DR: depends on configuration
Übermittlungsmechanismen (außerhalb CA/QC/EU)
  • Local processing in Canada when available
  • Standard Contractual Clauses (SCC) / IDTA if transferred
  • Enhanced technical safeguards

DNS / Registrar

Domain name management and Anycast DNS

Datenarten
  • Administrative credentials
  • DNS metadata
Hauptregionen
  • EU + global Anycast
Übermittlungsmechanismen (außerhalb CA/QC/EU)
  • Contracts + technical safeguards

AI / LLM (inference)

AI-assisted educational features (inference)

Datenarten
  • Content submitted for inference
  • Pseudonymized technical identifiers
  • Logs
Hauptregionen
  • Canada (priority)
Übermittlungsmechanismen (außerhalb CA/QC/EU)
  • Contract/DPA
  • No use for advertising purposes
  • No reuse for training without an appropriate legal basis/contract

Transactional email delivery

Transactional emails (welcome, password reset, notices) and newsletter (with consent)

Datenarten
  • Email address
  • Subject line
  • Delivery status
  • Minimal template content
Hauptregionen
  • EU/US (depending on data center and regional options)
Übermittlungsmechanismen (außerhalb CA/QC/EU)
  • DPA + SCC/DPF (depending on entity)
  • Limited log retention
  • Tracking disabled by default

Messaging – direct inbound

Receiving emails sent to @nabunam.com (mailboxes)

Datenarten
  • Message content
  • Attachments
  • Metadata
Hauptregionen
  • EU + global Anycast DNS
Übermittlungsmechanismen (außerhalb CA/QC/EU)
  • Encryption in transit/at rest
  • DMARC/MTA-STS/TLS-RPT
  • Purge/archiving per policy

Tickets/support/form (app)

Submitting and tracking requests via the site

Datenarten
  • Submitted content
  • Attachments
  • History
Hauptregionen
  • QC-CA (OVH Beauharnois)
Übermittlungsmechanismen (außerhalb CA/QC/EU)
  • Local processing in Canada/Quebec
  • Role-based access
  • Purge by status (closed/inactive)

Internal messaging (app)

Exchanges between users within the platform

Datenarten
  • Messages
  • Attachments
  • Timestamps
Hauptregionen
  • QC-CA (OVH Beauharnois)
Übermittlungsmechanismen (außerhalb CA/QC/EU)
  • Local processing
  • Minimal email alert (link) without content
  • Purge at end of session + N months

Payment

Payment processing and billing

Datenarten
  • Credentials
  • Billing metadata
  • Payment tokens (tokenized)
Hauptregionen
  • EU/UK/US (depending on entity and payment methods)
Übermittlungsmechanismen (außerhalb CA/QC/EU)
  • DPA + SCC/DPF (depending on entity)
  • Retention aligned with legal obligations

Note: exact regions may vary depending on the chosen architecture (Canada/Quebec is prioritized when possible). Cross-border transfers may occur (e.g., redundancy, messaging) and are governed by recognized safeguard mechanisms.