NABUNAM · Trasparenza

I destinatari - Categorie venditori

Ultimo aggiornamento:

For transparency, we list below the categories of recipients that may process personal information on our behalf. This page complements the Privacy Policy.

Le informazioni dettagliate sono presentate nella versione di riferimento in inglese.

Good to know
  • In accordance with applicable laws (EU/UK GDPR, Quebec’s Law 25, Canada’s PIPEDA, California’s CPRA), disclosure may be made by category of recipient.
  • Non-essential services (e.g., analytics/marketing) are only activated with consent.
  • Individuals may exercise their rights (access, correction, deletion, etc.).

Categorie di destinatari

Ruoli, informazioni interessate e modalità di trattamento.

Hosting / Infrastructure

Servers, databases, storage, backups, CDN/WAF

Tipi di dati
  • Credentials
  • Educational content
  • Technical logs
  • Usage metadata
Regioni principali
  • Quebec/Canada (priority)
  • Backup/DR: depends on configuration
Meccanismi di trasferimento (fuori da CA/QC/UE)
  • Local processing in Canada when available
  • Standard Contractual Clauses (SCC) / IDTA if transferred
  • Enhanced technical safeguards

DNS / Registrar

Domain name management and Anycast DNS

Tipi di dati
  • Administrative credentials
  • DNS metadata
Regioni principali
  • EU + global Anycast
Meccanismi di trasferimento (fuori da CA/QC/UE)
  • Contracts + technical safeguards

AI / LLM (inference)

AI-assisted educational features (inference)

Tipi di dati
  • Content submitted for inference
  • Pseudonymized technical identifiers
  • Logs
Regioni principali
  • Canada (priority)
Meccanismi di trasferimento (fuori da CA/QC/UE)
  • Contract/DPA
  • No use for advertising purposes
  • No reuse for training without an appropriate legal basis/contract

Transactional email delivery

Transactional emails (welcome, password reset, notices) and newsletter (with consent)

Tipi di dati
  • Email address
  • Subject line
  • Delivery status
  • Minimal template content
Regioni principali
  • EU/US (depending on data center and regional options)
Meccanismi di trasferimento (fuori da CA/QC/UE)
  • DPA + SCC/DPF (depending on entity)
  • Limited log retention
  • Tracking disabled by default

Messaging – direct inbound

Receiving emails sent to @nabunam.com (mailboxes)

Tipi di dati
  • Message content
  • Attachments
  • Metadata
Regioni principali
  • EU + global Anycast DNS
Meccanismi di trasferimento (fuori da CA/QC/UE)
  • Encryption in transit/at rest
  • DMARC/MTA-STS/TLS-RPT
  • Purge/archiving per policy

Tickets/support/form (app)

Submitting and tracking requests via the site

Tipi di dati
  • Submitted content
  • Attachments
  • History
Regioni principali
  • QC-CA (OVH Beauharnois)
Meccanismi di trasferimento (fuori da CA/QC/UE)
  • Local processing in Canada/Quebec
  • Role-based access
  • Purge by status (closed/inactive)

Internal messaging (app)

Exchanges between users within the platform

Tipi di dati
  • Messages
  • Attachments
  • Timestamps
Regioni principali
  • QC-CA (OVH Beauharnois)
Meccanismi di trasferimento (fuori da CA/QC/UE)
  • Local processing
  • Minimal email alert (link) without content
  • Purge at end of session + N months

Payment

Payment processing and billing

Tipi di dati
  • Credentials
  • Billing metadata
  • Payment tokens (tokenized)
Regioni principali
  • EU/UK/US (depending on entity and payment methods)
Meccanismi di trasferimento (fuori da CA/QC/UE)
  • DPA + SCC/DPF (depending on entity)
  • Retention aligned with legal obligations

Note: exact regions may vary depending on the chosen architecture (Canada/Quebec is prioritized when possible). Cross-border transfers may occur (e.g., redundancy, messaging) and are governed by recognized safeguard mechanisms.