GDPR Rights

Last Updated: January 2026

Introduction/Purpose

This GDPR Rights Policy outlines the rights of users regarding their personal data as governed by the General Data Protection Regulation (GDPR) and applicable Estonian data protection laws. The purpose of this policy is to inform users of their rights and how they can exercise them in relation to their personal data processed by learyan.

Scope and Applicability

This policy applies to all users of learyan and is relevant to all personal data processed by learyan in the context of its operations. This includes data collected through our website, services, and any interactions with our users.

Definitions

  • Personal Data: Any information relating to an identified or identifiable natural person.
  • Processing: Any operation or set of operations performed on personal data, including collection, storage, use, and deletion.
  • Data Subject: An individual whose personal data is processed by learyan.

Main Policy Content

Under the GDPR, users have the following rights regarding their personal data:

1. Right to Access

Users have the right to request access to their personal data held by learyan. This includes the right to obtain confirmation as to whether personal data concerning them is being processed, and if so, access to that data.

2. Right to Rectification

Users have the right to request the rectification of inaccurate personal data concerning them. They also have the right to complete incomplete personal data, including by means of providing a supplementary statement.

3. Right to Erasure (Right to be Forgotten)

Users have the right to request the erasure of their personal data when it is no longer necessary for the purposes for which it was collected or processed, or if they withdraw consent on which the processing is based.

4. Right to Restriction of Processing

Users have the right to request the restriction of processing of their personal data under certain conditions, such as when they contest the accuracy of the data or when the processing is unlawful.

5. Right to Data Portability

Users have the right to receive their personal data in a structured, commonly used, and machine-readable format and have the right to transmit that data to another controller without hindrance from learyan.

6. Right to Object

Users have the right to object to the processing of their personal data under certain circumstances, including for direct marketing purposes.

7. Rights Related to Automated Decision-Making

Users have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them.

User Rights and Obligations

To exercise any of the rights listed above, users must submit a request to [email protected]. Users must provide sufficient information to identify themselves and specify the right they wish to exercise. learyan will respond to requests within one month, in accordance with GDPR requirements.

Limitations and Disclaimers

While learyan strives to comply with all applicable data protection laws, the exercise of user rights may be subject to certain limitations. For example, learyan may refuse to comply with requests that are manifestly unfounded or excessive. In such cases, we will provide a justification for our decision.

Data Protection/Security

learyan implements appropriate technical and organizational measures to ensure a level of security appropriate to the risk of processing personal data. However, no method of transmission over the Internet or method of electronic storage is 100% secure. Therefore, while we strive to protect personal data, we cannot guarantee its absolute security.

Changes to Policy

learyan reserves the right to amend this GDPR Rights Policy at any time. Any changes will be posted on this page with an updated effective date. Users are encouraged to review this policy periodically to stay informed about how we are protecting their rights.

Contact Information

If you have any questions or concerns regarding this policy or your rights under the GDPR, please contact us at:

  • Company: learyan
  • Phone: +3720505297638
  • Email: [email protected]
  • Address: Tallinn Business Center, Narva mnt 5, Floor 3, Office 12, Tallinn, 10117, Estonia.

Governing Law and Jurisdiction

This policy shall be governed by and construed in accordance with the laws of Estonia. Any disputes arising from or in connection with this policy shall be subject to the exclusive jurisdiction of the courts of Estonia.