GDPR Addendum

GDPR Addendum (Effective January 1, 2026)

This GDPR Addendum applies to individuals located in the European Economic Area (EEA), the United Kingdom (UK), and Switzerland.

Data Controller:
My Mental Health University® (“MHU”) acts as the data controller for personal information collected through our website and online learning systems.

Lawful Basis for Processing:
We process your information based on one or more of the following lawful grounds under the GDPR:

• Your consent (e.g., subscribing or enrolling in courses)

• Contractual necessity (e.g., providing CE or educational services)

• Legal obligations (e.g., recordkeeping for CE compliance)

• Legitimate interests (e.g., improving operations or security)

Your Rights Under GDPR:

• Access, correction, deletion, or restriction of your personal data

• Data portability (to receive your data in a machine-readable format)

• Withdrawal of consent without affecting prior lawful processing

• Lodging a complaint with your local Data Protection Authority

To exercise your rights, contact contact@mymhuniversity.com with “GDPR Request” in the subject line.

Data Transfers:
By using MHU’s services, you consent to the transfer of your data to the United States, which may not offer the same level of protection as your home country. We use reasonable safeguards such as standard contractual clauses to protect your information.