(Platform clinicalresearch.education)
This Privacy Policy entail the following:
- Intended for the site https://clinicalresearch.education/ ( “Site”)
- Is an integral part of Site and Services;
- Is for who interact whit ite or services, or simply consulting the Site.
DATA CONTROLLER
Consorzio per Valutazioni Biologiche e Farmacologiche (CVBF)
Via Suppa, 14
70122 Bari – Italy
VAT/Tax ID: 01897720189
Email: info@cvbf.net
DATA PROTECTION OFFICER (DPO)
Sergio Cannavò
Email: dataprotection@cvbf.net
CATEGORIES OF PERSONAL DATA PROCESSED
CVBF may collect and process the following categories of personal data through the platform:
Registration and Account Data
First name, Last name. Email address, Company Name, Role
Training and Course Participation Data
In the context of course delivery and certification, CVBF may process:
- Enrollment information, Course access records, Learning progress and completion status
- Assessment results, where applicable, Certificates issued, Metadata relating to participation in training activities
Such data is processed to ensure proper delivery of the training services and to document course completion.
Payment-Related Information Access to certain courses may require payment.
Payments are processed through third-party payment service providers (Satispay). CVBF does not collect or process users’ banking details, credit/debit card numbers, or other financial information used to execute the payment transaction.
CVBF may receive limited transaction information strictly necessary to confirm successful payment (e.g., payment status, transaction ID).
Particular data could be processed if freely given by you sending a e-mail requestion.
The computer systems and software procedures used to operate the Site automatically collect certain personal data during their normal operation. Such data, whose transmission is implicit in the use of Internet communication protocols, is commonly referred to as ‘Browsing Data
Billing and Invoicing Data First name and last name or company name, VAT number / Tax ID, SDI code and/or PEC address, Billing email, Country, Province (for Italy), City, ZIP code, Address.
PURPOSES OF PROCESSING AND LEGAL BASIS
Personal data are processed for the following purposes:
1. Platform registration and access to educational services
Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
2. Management of training activities, progress tracking, and issuance of certificates
Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
3. Administrative, accounting, and invoicing obligations
Legal basis: legal obligation (Art. 6(1)(c) GDPR).
4. Service communications and similar educational offers
CVBF may use contact details provided during registration or purchase to send communications regarding similar educational services, courses, events, or initiatives offered by CVBF ( “Soft Spam”) .
Legal basis: legitimate interest ( Art 6(1)(f) GDPR) of CVBF in promoting similar services to existing users, in accordance with applicable legislation (including Art. 130 Italian Privacy Code).
Users may object at any time through the unsubscribe link included in communications or by contacting CVBF.
DATA RETENTION
Personal data will be retained for:
Platform account data: for the duration of the account and up to 24 months after inactivity.
Training and certification records: up to 5 years.
Administrative and accounting documentation: 10 years as required by law.
In case of legal disputes: for the duration of proceedings.
PROVISION OF DATA
Provision of data is necessary for registration and participation in educational services. Failure to provide required data will prevent access to the platform and related services.
RECIPIENTS OF PERSONAL DATA
Personal data may be processed by:
authorized CVBF personnel
service providers acting as data processors (e.g., hosting providers, IT service providers, payment processors, accounting consultants), where necessary.
Subjects, bodies or authorities, autonomous data controllers, to whom it is mandatory to communicate personal data under the provision of law or orders to the authorities.
INTERNATIONAL DATA TRANSFERS
Where personal data is transferred outside the European Economic Area (EEA), appropriate safeguards will be applied in accordance with applicable data protection laws.
Some of the service providers used by the Controller (including email and cloud service providers or for live training sessions) may be established outside the European Economic Area. In such cases, personal data may be transferred outside the EEA in accordance with Articles 44–49 of the GDPR.
DATA SECURITY
CVBF adopts appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction, in accordance with Article 32 of Regulation (EU) 2016/679 (GDPR).
CVBF operates in compliance with internationally recognized standards including ISO/IEC 27001 (Information Security Management Systems) and ISO 9001 (Quality Management Systems).
In addition, CVBF adheres to the Code of Conduct of EUCROF, demonstrating its commitment to high standards of integrity, regulatory compliance, and ethical conduct in the provision of scientific and educational services.
These measures reflect CVBF’s ongoing commitment to safeguarding personal data and ensuring continuous improvement of its organizational and technical security controls..
RIGHTS OF DATA SUBJECTS
Users may exercise their rights under Articles 15–22 GDPR, including:
right of access, rectification, erasure, restriction of processing, data portability objection to processing.
Requests may be sent to the DPO dataprotection@cvbf.net.
Users also have the right to lodge a complaint with the competent supervisory authority.
UPDATES TO THIS NOTICE
This information notice may be updated periodically. Where required by applicable law or where significant changes affecting users’ rights or the processing of personal data are introduced, users will be informed through appropriate communication channels, including email notifications or platform notices. Users are encouraged to review this notice regularly.