GDPR Compliance

Last Updated: September 24, 2026

plateau-ibis is committed to protecting the privacy and personal data of individuals in accordance with the General Data Protection Regulation (GDPR). This page outlines how we comply with GDPR requirements and your rights under this regulation.

Legal Basis for Processing

We process your personal data under the following legal bases:

  • Consent: When you provide explicit consent for specific processing activities
  • Contract Performance: When processing is necessary to fulfill our contractual obligations to you
  • Legal Obligation: When we must process data to comply with legal requirements
  • Legitimate Interests: When processing is necessary for our legitimate business interests, provided your rights are not overridden

Your GDPR Rights

Under GDPR, you have the following rights regarding your personal data:

Right to Access

You have the right to request access to the personal data we hold about you. We will provide you with a copy of this data in a structured, commonly used format.

Right to Rectification

You have the right to request correction of inaccurate or incomplete personal data we hold about you.

Right to Erasure

You have the right to request deletion of your personal data under certain circumstances, such as when the data is no longer necessary for the purpose it was collected.

Right to Restrict Processing

You have the right to request restriction of processing of your personal data in specific situations, such as when you contest the accuracy of the data.

Right to Data Portability

You have the right to receive your personal data in a structured, machine-readable format and transmit it to another controller.

Right to Object

You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.

Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw that consent at any time.

Data Protection Measures

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

  • Encryption of personal data during transmission and storage
  • Regular security assessments and audits
  • Access controls and authentication mechanisms
  • Employee training on data protection practices
  • Incident response procedures for data breaches

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected or as required by law. Course enrollment data is typically retained for seven years after course completion to comply with regulatory requirements.

International Data Transfers

Our primary data processing operations are based in Canada. If we transfer personal data outside of the European Economic Area, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission.

Data Protection Officer

For questions regarding GDPR compliance or to exercise your rights, you may contact us at:

Email: [email protected]
Subject Line: GDPR Inquiry

Supervisory Authority

You have the right to lodge a complaint with a supervisory authority, particularly in the EU member state of your residence, place of work, or place of alleged infringement if you believe our processing of your personal data violates GDPR.

Response Timeframe

We will respond to all valid requests under GDPR within one month of receipt. In complex cases, we may extend this period by two additional months and will inform you of such extension.

Updates to This Policy

We may update this GDPR compliance statement from time to time to reflect changes in our practices or legal requirements. Significant changes will be communicated through our website.