GDPR Information

General Data Protection Regulation Compliance

This page provides additional information for individuals located in the European Economic Area (EEA) and the United Kingdom regarding their rights under the General Data Protection Regulation (GDPR). This information supplements our main Privacy Policy.

Data Controller

nebula-magpie acts as the data controller for personal information collected through this website. Our contact details are:

nebula-magpie
250 University Avenue, Suite 800
Toronto, ON M5H 3E5
Canada

Email: [email protected]

Legal Basis for Processing

Under the GDPR, we must have a valid legal basis to process your personal data. The legal bases we rely on include:

• Consent: Where you have given explicit consent for us to process your personal data for specific purposes, such as receiving marketing communications.
• Contractual Necessity: Where processing is necessary to fulfill our contractual obligations to you, such as processing enrollment requests and delivering educational services.
• Legitimate Interests: Where processing is necessary for our legitimate business interests, such as improving our services and website functionality, provided these interests do not override your rights.
• Legal Obligation: Where we are required to process data to comply with applicable laws.

Your Rights Under GDPR

If you are located in the EEA or UK, you have the following rights regarding your personal data:

• Right of Access: You have the right to request a copy of the personal data we hold about you.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data.
• Right to Erasure: You have the right to request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.
• Right to Restriction: You have the right to request restriction of processing of your personal data in certain circumstances.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller.
• Right to Object: You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

Exercising Your Rights

To exercise any of these rights, please contact us using the contact information provided above. We will respond to your request within one month, although this period may be extended by two further months where necessary, depending on the complexity of your request. We may ask you to verify your identity before processing your request.

International Data Transfers

As we are based in Canada, personal data collected from individuals in the EEA or UK may be transferred to and processed in Canada. Canada has been recognized by the European Commission as providing an adequate level of data protection. Where data is transferred to other jurisdictions, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. The specific retention period depends on the nature of the data and the purposes for which it is processed.

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects individuals.

Right to Lodge a Complaint

If you believe that we have not complied with our obligations under applicable data protection laws, you have the right to lodge a complaint with a supervisory authority. For individuals in the EEA, this would be the data protection authority in the EU member state where you reside or work, or where the alleged infringement occurred.

Changes to This Information

We may update this GDPR information from time to time to reflect changes in our practices or applicable laws. We encourage you to review this page periodically.