GDPR Compliance

Last updated: June 23, 2026

General Data Protection Regulation

This page explains how fuchsia-tundra.com complies with the General Data Protection Regulation (GDPR) and your rights under this regulation.

Data Controller

For the purposes of GDPR, fuchsia-tundra.com is the data controller responsible for your personal information.

Legal Basis for Processing

We process your personal data under the following legal bases:

  • Contract performance: To provide course access and educational services
  • Legitimate interests: To improve our services and communicate relevant updates
  • Consent: For marketing communications (where required)
  • Legal obligation: To comply with applicable laws and regulations

Your GDPR Rights

Right to Access

You have the right to request a copy of the personal information we hold about you.

Right to Rectification

You can request correction of inaccurate or incomplete personal information.

Right to Erasure

You can request deletion of your personal data, subject to certain legal obligations that may require us to retain specific information.

Right to Restriction

You can request that we restrict processing of your personal information in certain circumstances.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used format and transmit it to another controller.

Right to Object

You can object to processing of your personal information based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects concerning you.

How to Exercise Your Rights

To exercise any of these rights, contact us at [email protected]. We will respond to your request within one month.

Data Protection Officer

For data protection inquiries, you may contact our privacy team at [email protected].

Complaints

If you believe we have not handled your personal information properly, you have the right to lodge a complaint with your local supervisory authority.

International Data Transfers

When we transfer personal data outside the European Economic Area, we ensure appropriate safeguards are in place, including:

  • Standard contractual clauses approved by the European Commission
  • Adequacy decisions for specific countries
  • Other legally recognized transfer mechanisms

Data Retention Periods

We retain personal data only as long as necessary for the purposes outlined in our Privacy Policy or as required by law. Course access data is retained indefinitely to honor lifetime access commitments.

Security Measures

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

  • Encryption of data in transit and at rest
  • Regular security assessments
  • Access controls and authentication mechanisms
  • Staff training on data protection

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach.

Updates to This Information

We may update this GDPR compliance information periodically. Material changes will be communicated through our website.