Privacy Policy

 

Last updated: 26/07/2025

 

This Privacy Policy applies to all users who access and use the e-learning platform www.medica-spa-academy.com from any country worldwide. We are committed to protecting your privacy and handling your personal data with transparency and responsibility, in accordance with applicable data protection laws, including the GDPR, CCPA/CPRA, LGPD, and others.

1. Data Controller

Medica S.p.A.
Via Degli Artigiani, 7 - 41036
Medolla (MO) - ITALY
VAT/Tax ID: 01604300366
Phone: +39 0535 51159
Fax: +39 0535 52605
Email: info@medica-spa.com

2. Personal Data We Collect

We collect only the personal data you voluntarily provide through our forms. This includes:

• First name
• Last name
• Email address
• Country of residence
• Profession
• Password

Note: Passwords are encrypted and cannot be viewed in plain text, even by us.

3. Purpose of Data Processing

We use your personal data for the following purposes:

• To create and manage your user account
• To provide access to learning content and services
• To communicate service-related updates and support
• To manage the Platform from a technical and administrative perspective
• To respond to technical support or assistance requests

4. Legal Basis for Processing (GDPR)

We process your data based on:

• Contract performance (Art. 6(1)(b) GDPR): to provide the services you request
• Legal obligations (Art. 6(1)(c) GDPR), if applicable

5. How We Process Your Data

Your data is processed electronically and securely. We implement appropriate technical and organizational measures to prevent unauthorized access, loss, or disclosure.

6. Data Retention

We retain your data as long as your account is active. If you delete your account, we will erase or anonymize your data, unless we are legally required to retain it longer.

7. Data Sharing

We do not sell or publicly share your data. Data may be shared only with trusted service providers (e.g., hosting, software vendors) who assist in operating the Platform and act as data processors under contractual agreements.

8. Your Rights (Worldwide)

Depending on your country or region, you may have the right to:

• Access your personal data
• Correct or update your data
• Delete your data ("right to be forgotten")
• Restrict or object to data processing
• Data portability
• Lodge a complaint with a local authority

To exercise these rights, please email us at: info@medica-spa.com

9. Additional Information for California Residents (CCPA/CPRA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including:

• The right to know what personal data we collect, use, and disclose
• The right to request deletion of your data
• The right to opt out of any sale or sharing of personal data (note: we do not sell your data)
• The right to correct inaccurate data

You may exercise these rights by contacting us at info@medica-spa.com and specifying “California Privacy Request” in the subject line.

10. Additional Information for Brazilian Users (LGPD)

If you are located in Brazil, we comply with the Lei Geral de Proteção de Dados (LGPD). You have the right to:

• Confirm the existence of processing
• Access your data
• Correct incomplete, inaccurate, or outdated data
• Request anonymization, blocking, or deletion
• Withdraw consent

To exercise your LGPD rights, contact us at info@medica-spa.com with the subject “LGPD Request”.

11. International Data Transfers

Your data may be stored and processed in countries outside your own. If data is transferred outside the EEA or other jurisdictions with data protection laws, we ensure that appropriate safeguards (e.g., Standard Contractual Clauses) are in place.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We recommend reviewing it regularly. Continued use of the Platform after updates indicates acceptance of the new terms.