GDPR Compliance

Our Commitment to GDPR

corviqen-core is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR). This page outlines your rights and how we handle your personal information.

Legal Basis for Processing

We process your personal data under the following legal bases:

  • Consent: When you voluntarily provide information through our forms or enrollment processes
  • Contract Performance: When necessary to deliver the educational programs you've enrolled in
  • Legitimate Interests: For improving our services and communication, provided it doesn't override your rights
  • Legal Obligation: When required to comply with applicable laws

Your GDPR Rights

Right to Access

You have the right to request a copy of the personal data we hold about you. We will provide this information in a structured, commonly used, and machine-readable format.

Right to Rectification

If your personal information is inaccurate or incomplete, you have the right to request correction or completion of your data.

Right to Erasure

Also known as the "right to be forgotten," you can request deletion of your personal data under certain circumstances, such as when it's no longer necessary for the purposes it was collected.

Right to Restrict Processing

You have the right to request that we restrict processing of your personal data in specific situations, such as when you contest the accuracy of the data.

Right to Data Portability

You can request to receive your personal data in a structured format and have it transmitted to another controller where technically feasible.

Right to Object

You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.

Right to Withdraw Consent

Where we process your data based on consent, you have the right to withdraw that consent at any time. This does not affect the lawfulness of processing before consent was withdrawn.

Right to Lodge a Complaint

You have the right to lodge a complaint with your local supervisory authority if you believe our processing of your personal data violates GDPR.

Data Controller

The data controller responsible for your personal information is:

corviqen-core
42 Kensington Gardens
London, W2 4BH
United Kingdom

Data Protection Officer

For any questions regarding data protection or to exercise your GDPR rights, please contact our data protection team at: info at corviqen-core.space

Data Storage and Transfer

Your personal data is stored securely within the European Economic Area (EEA). If data is transferred outside the EEA, we ensure appropriate safeguards are in place through standard contractual clauses or other GDPR-compliant mechanisms.

Data Retention Periods

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

  • Program enrollment data: Duration of program access plus 3 years
  • Communication records: 2 years from last contact
  • Website analytics: 26 months
  • Legal compliance records: As required by applicable law

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.

Exercising Your Rights

To exercise any of your GDPR rights, please contact us with your request. We will respond within one month of receiving your request. In complex cases, we may extend this period by two additional months and will inform you of any such extension.

Identity Verification

To protect your privacy, we may request additional information to verify your identity before processing requests related to your personal data.

Updates to GDPR Practices

We regularly review our data protection practices to ensure ongoing compliance with GDPR. Any significant changes will be communicated through our website and, where appropriate, directly to affected individuals.