NABUNAM · Transparencia

Categorías de recipientes - Vendor

Última actualización:

For transparency, we list below the categories of recipients that may process personal information on our behalf. This page complements the Privacy Policy.

Las menciones detalladas se presentan en su versión inglesa de referencia.

Good to know
  • In accordance with applicable laws (EU/UK GDPR, Quebec’s Law 25, Canada’s PIPEDA, California’s CPRA), disclosure may be made by category of recipient.
  • Non-essential services (e.g., analytics/marketing) are only activated with consent.
  • Individuals may exercise their rights (access, correction, deletion, etc.).

Categorías de destinatarios

Funciones, información afectada y modalidades de tratamiento.

Hosting / Infrastructure

Servers, databases, storage, backups, CDN/WAF

Tipos de datos
  • Credentials
  • Educational content
  • Technical logs
  • Usage metadata
Regiones principales
  • Quebec/Canada (priority)
  • Backup/DR: depends on configuration
Mecanismos de transferencia (fuera de CA/QC/UE)
  • Local processing in Canada when available
  • Standard Contractual Clauses (SCC) / IDTA if transferred
  • Enhanced technical safeguards

DNS / Registrar

Domain name management and Anycast DNS

Tipos de datos
  • Administrative credentials
  • DNS metadata
Regiones principales
  • EU + global Anycast
Mecanismos de transferencia (fuera de CA/QC/UE)
  • Contracts + technical safeguards

AI / LLM (inference)

AI-assisted educational features (inference)

Tipos de datos
  • Content submitted for inference
  • Pseudonymized technical identifiers
  • Logs
Regiones principales
  • Canada (priority)
Mecanismos de transferencia (fuera de CA/QC/UE)
  • Contract/DPA
  • No use for advertising purposes
  • No reuse for training without an appropriate legal basis/contract

Transactional email delivery

Transactional emails (welcome, password reset, notices) and newsletter (with consent)

Tipos de datos
  • Email address
  • Subject line
  • Delivery status
  • Minimal template content
Regiones principales
  • EU/US (depending on data center and regional options)
Mecanismos de transferencia (fuera de CA/QC/UE)
  • DPA + SCC/DPF (depending on entity)
  • Limited log retention
  • Tracking disabled by default

Messaging – direct inbound

Receiving emails sent to @nabunam.com (mailboxes)

Tipos de datos
  • Message content
  • Attachments
  • Metadata
Regiones principales
  • EU + global Anycast DNS
Mecanismos de transferencia (fuera de CA/QC/UE)
  • Encryption in transit/at rest
  • DMARC/MTA-STS/TLS-RPT
  • Purge/archiving per policy

Tickets/support/form (app)

Submitting and tracking requests via the site

Tipos de datos
  • Submitted content
  • Attachments
  • History
Regiones principales
  • QC-CA (OVH Beauharnois)
Mecanismos de transferencia (fuera de CA/QC/UE)
  • Local processing in Canada/Quebec
  • Role-based access
  • Purge by status (closed/inactive)

Internal messaging (app)

Exchanges between users within the platform

Tipos de datos
  • Messages
  • Attachments
  • Timestamps
Regiones principales
  • QC-CA (OVH Beauharnois)
Mecanismos de transferencia (fuera de CA/QC/UE)
  • Local processing
  • Minimal email alert (link) without content
  • Purge at end of session + N months

Payment

Payment processing and billing

Tipos de datos
  • Credentials
  • Billing metadata
  • Payment tokens (tokenized)
Regiones principales
  • EU/UK/US (depending on entity and payment methods)
Mecanismos de transferencia (fuera de CA/QC/UE)
  • DPA + SCC/DPF (depending on entity)
  • Retention aligned with legal obligations

Note: exact regions may vary depending on the chosen architecture (Canada/Quebec is prioritized when possible). Cross-border transfers may occur (e.g., redundancy, messaging) and are governed by recognized safeguard mechanisms.