GDPR-Style Data Rights Notice

LynxHubs operates from Japan (JP). If you are in the EU/EEA or your situation otherwise triggers GDPR obligations, you may have specific rights as a data subject. This page provides a structured overview and explains how to contact us.

For full details about our data handling, see Privacy Policy.

We aim to align with these common data protection principles:

• Lawfulness, fairness, transparency — explain what we do and why
• Purpose limitation — use data for specific stated purposes
• Data minimization — request only what is needed for the inquiry
• Accuracy — correct inaccuracies when notified
• Storage limitation — keep data for no longer than needed
• Integrity and confidentiality — use reasonable security measures
• Accountability — keep internal practices consistent and reviewable

• Contact details (name, email; phone optional)
• Inquiry content (subject and message)
• Technical data (server logs, basic device/browser signals)
• Cookie preferences (required + performance categories)

Depending on context, processing may rely on:

• Consent (for example, submitting a form; enabling optional cookies)
• Legitimate interests (for example, responding to inquiries, operating and protecting the Website)
• Contract / pre-contract steps (for example, discussing a service scope)
• Legal obligations (for example, recordkeeping where required)

If you request details for a specific interaction, we can explain the basis we used.

Where applicable, you may have rights including:

• Right of access — request a copy of personal data we hold about you
• Right to rectification — request corrections
• Right to erasure — request deletion (subject to constraints)
• Right to restriction — request limited processing in some cases
• Right to data portability — request a portable copy of certain data you provided
• Right to object — object to processing based on certain interests
• Right to withdraw consent — where processing is based on consent

We keep personal data only as long as needed for the stated purposes and reasonable records. Retention depends on the nature of the inquiry and whether an engagement exists.

If you request deletion, we will review it in line with applicable requirements and operational constraints.

Where we use service providers for hosting or operations, we aim for appropriate contractual obligations: confidentiality, instruction-based processing, and reasonable security measures.

Provider locations may vary. Where data is processed outside your country, we aim for safeguards appropriate to the service and context.

If you believe your data rights have not been respected, contact us first so we can review and respond. Depending on your location and applicable law, you may also have the right to contact a supervisory authority.

We may update this notice to reflect changes in practices. The effective date indicates the current version.