GDPR Compliance

Our Commitment to Data Protection

bronze-savanna is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Canadian privacy laws.

Legal Basis for Processing

We process your personal data under the following legal bases:

• Contract Performance: Processing necessary to provide educational services you've enrolled in
• Legitimate Interests: Improving our services and website functionality
• Consent: Marketing communications and optional features
• Legal Obligation: Compliance with tax and financial regulations

Your Rights Under GDPR

Right to Access

You have the right to request a copy of the personal data we hold about you. We will provide this information in a commonly used electronic format.

Right to Rectification

You may request correction of inaccurate or incomplete personal data we hold about you.

Right to Erasure

You have the right to request deletion of your personal data in certain circumstances, including when the data is no longer necessary for the purposes for which it was collected.

Right to Restrict Processing

You may request that we restrict processing of your personal data in specific situations, such as when you contest the accuracy of the data.

Right to Data Portability

You have the right to receive your personal data in a structured, machine-readable format and to transmit that data to another controller.

Right to Object

You may object to processing of your personal data for direct marketing purposes or when processing is based on legitimate interests.

Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw that consent at any time.

How to Exercise Your Rights

To exercise any of these rights, please contact us at [email protected] with your request. We will respond within 30 days.

Data Protection Officer

For questions about data protection or to exercise your rights, contact our data protection team at:

[email protected]

International Data Transfers

Your personal data may be transferred to and processed in countries outside your country of residence. We ensure appropriate safeguards are in place for such transfers.

Automated Decision Making

We do not use automated decision-making or profiling that produces legal effects or similarly significant effects on you.

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and relevant supervisory authorities within 72 hours as required by GDPR.

Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority if you believe we have not handled your personal data appropriately.

Children's Data

We do not knowingly process personal data of individuals under 16 years of age without parental consent.

Data Retention Periods

We retain personal data only for as long as necessary to fulfill the purposes outlined in our Privacy Policy, unless a longer retention period is required by law.