NABUNAM · 透明性

受領者 - 売り手カテゴリ

最新更新:

For transparency, we list below the categories of recipients that may process personal information on our behalf. This page complements the Privacy Policy.

名前のリスト(クライアント)を要求する 通知変更にサインアップ

詳細な開示事項は、参照版である英語で表示しています。

Good to know
  • In accordance with applicable laws (EU/UK GDPR, Quebec’s Law 25, Canada’s PIPEDA, California’s CPRA), disclosure may be made by category of recipient.
  • Non-essential services (e.g., analytics/marketing) are only activated with consent.
  • Individuals may exercise their rights (access, correction, deletion, etc.).

受領者の区分

役割、対象となる情報、取扱方法。

Hosting / Infrastructure

Servers, databases, storage, backups, CDN/WAF

データの種類
  • Credentials
  • Educational content
  • Technical logs
  • Usage metadata
主な地域
  • Quebec/Canada (priority)
  • Backup/DR: depends on configuration
移転の仕組み（CA/QC/EU域外の場合）
  • Local processing in Canada when available
  • Standard Contractual Clauses (SCC) / IDTA if transferred
  • Enhanced technical safeguards

DNS / Registrar

Domain name management and Anycast DNS

データの種類
  • Administrative credentials
  • DNS metadata
主な地域
  • EU + global Anycast
移転の仕組み（CA/QC/EU域外の場合）
  • Contracts + technical safeguards

AI / LLM (inference)

AI-assisted educational features (inference)

データの種類
  • Content submitted for inference
  • Pseudonymized technical identifiers
  • Logs
主な地域
  • Canada (priority)
移転の仕組み（CA/QC/EU域外の場合）
  • Contract/DPA
  • No use for advertising purposes
  • No reuse for training without an appropriate legal basis/contract

Transactional email delivery

Transactional emails (welcome, password reset, notices) and newsletter (with consent)

データの種類
  • Email address
  • Subject line
  • Delivery status
  • Minimal template content
主な地域
  • EU/US (depending on data center and regional options)
移転の仕組み（CA/QC/EU域外の場合）
  • DPA + SCC/DPF (depending on entity)
  • Limited log retention
  • Tracking disabled by default

Messaging – direct inbound

Receiving emails sent to @nabunam.com (mailboxes)

データの種類
  • Message content
  • Attachments
  • Metadata
主な地域
  • EU + global Anycast DNS
移転の仕組み（CA/QC/EU域外の場合）
  • Encryption in transit/at rest
  • DMARC/MTA-STS/TLS-RPT
  • Purge/archiving per policy

Tickets/support/form (app)

Submitting and tracking requests via the site

データの種類
  • Submitted content
  • Attachments
  • History
主な地域
  • QC-CA (OVH Beauharnois)
移転の仕組み（CA/QC/EU域外の場合）
  • Local processing in Canada/Quebec
  • Role-based access
  • Purge by status (closed/inactive)

Internal messaging (app)

Exchanges between users within the platform

データの種類
  • Messages
  • Attachments
  • Timestamps
主な地域
  • QC-CA (OVH Beauharnois)
移転の仕組み（CA/QC/EU域外の場合）
  • Local processing
  • Minimal email alert (link) without content
  • Purge at end of session + N months

Payment

Payment processing and billing

データの種類
  • Credentials
  • Billing metadata
  • Payment tokens (tokenized)
主な地域
  • EU/UK/US (depending on entity and payment methods)
移転の仕組み（CA/QC/EU域外の場合）
  • DPA + SCC/DPF (depending on entity)
  • Retention aligned with legal obligations

Note: exact regions may vary depending on the chosen architecture (Canada/Quebec is prioritized when possible). Cross-border transfers may occur (e.g., redundancy, messaging) and are governed by recognized safeguard mechanisms.

名付けリストを取得する

Clients (institutions) may obtain the named list of subprocessors and be notified of any addition or replacement (in accordance with Art. 28(2) GDPR and contractual clauses). Write to info@nabunam.com.

歴史を変える

  • September 4, 2025 — Publication of the minimal version (categories, regions, mechanisms).
← 帰宅