Data Protection Declaration

(Pursuant to Article 13 of EU Regulation 2016/679 – GDPR)

1. Data Controller

The data controller is:

Marius Pislea
MedStudy Services
Legal address: Via Baggi 36/D, 36027 Rosà (VI), Italy
Postal address: Via Zamenhof 817, 36100 Vicenza, Italy
VAT ID: IT04540950245
Email: info@eu-medstudy.com

2. Categories of Personal Data Collected

We may collect and process the following personal data:

• Identification data (e.g., full name)

• Contact data (e.g., email address, postal address)

• Payment data (handled via secure third-party processors)

• Data related to course access and usage

• Technical data (IP address, browser type, device information)

3. Purposes of Data Processing

Your data is processed for the following purposes:

• Managing user accounts and course access

• Fulfilling contractual obligations (e.g., course delivery, invoicing)

• Providing customer support and communication

• Legal and fiscal compliance

• Sending updates, marketing materials, or promotions (only with consent)

• Ensuring security and proper platform functionality

4. Legal Basis for Processing

We process your data in accordance with:

• Article 6(1)(b) – Contract performance

• Article 6(1)(c) – Legal obligations

• Article 6(1)(a) – Consent (for marketing and communications)

• Article 6(1)(f) – Legitimate interest (e.g., fraud prevention, analytics)

5. Data Retention

Your personal data is retained for the time necessary to fulfill the purposes above:

• User data: retained as long as your account is active

• Billing data: retained for 10 years in compliance with tax laws

• Marketing data: retained until consent is withdrawn

6. Data Sharing

We do not sell your personal data.
We may share your data with:

• Hosting providers and platform services

• Payment processors (e.g., Stripe, PayPal)

• Legal and regulatory authorities when required

• Professional advisors (e.g., accountant, legal counsel)

All third parties are compliant with GDPR.

7. Data Security

We adopt technical and organizational security measures to ensure that your personal data is protected against unauthorized access, loss, or unlawful processing.

8. Your Rights

You have the right to:

• Access your data

• Correct or delete inaccurate or outdated data

• Withdraw consent at any time

• Object to certain types of processing

• Request data portability

• Lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali)

Requests can be sent to:
Email: info@eu-medstudy.com

9. Automated Decision-Making

We do not use your data for automated decision-making or profiling.

10. Updates to this Declaration

This Data Protection Declaration may be updated. Any changes will be published on our website and, where necessary, communicated to you by email.