PRIVACY POLICY
1. Introduction and Data Controller
The right to privacy, and specifically the right to the protection of personal data, is one of the core values of INTERNATIONAL SCHOOL OF DERMA S.L. (hereinafter “ISD”), with its registered office at Calle de Provençals 33, Sant Martí 08019 Barcelona.
The purpose of this policy is to explain how ISD will process any personal data that may be collected through the various forms found on ISD's website: https://internationalschoolofderma.com/, as well as those resulting from your relationship with ISD and your participation in our courses or activities. In this regard, we inform you that your personal data will be processed confidentially and only for the purposes explained in this Privacy Policy.
2. Commitment to Privacy
ISD is fully committed to complying with the General Data Protection Regulation of the European Union and the data protection laws in force at any given time, which is a priority for ISD. Therefore, ISD has decided to implement the following principles, with privacy being the foundation of all data processing activities:
●Transparency, fairness, and lawfulness in data processing are among our priorities, and whenever we collect personal data from you, we will duly inform you in the relevant privacy policy about the purposes of such processing.
●Data will always be collected for specified, explicit, and legitimate purposes and will not be processed in a manner incompatible with those purposes.
●We will always process data that is strictly adequate, relevant, and limited to what is necessary to carry out the specified processing. We will never compel you to provide personal data unless it is genuinely necessary to deliver the service you may request from us.
●Data will always be accurate and, where necessary, kept up to date. Whenever possible, we will provide you with simple means to control your personal data. Therefore, data will be retained in a manner that allows for the identification of the data subjects for no longer than necessary for the purposes of the personal data processing.
●We will process data in such a way that ensures appropriate security, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage, through the application of appropriate technical or organizational measures.
3. Data Controller
The data controller is INTERNATIONAL SCHOOL OF DERMA S.L. If you have any questions or concerns about the processing of your personal data, please contact us through the following channels:
●
DPO email: dpo@isd.eu.
●
Email to the following address: privacy@isd.eu
4. Purposes of the Processing and Legal Bases
The main purposes of processing your provided personal data will be:
●
Sending notifications for course enrollment: If you expressly request it, ISD will process your personal data to notify you when you can enroll in courses. We may contact you through the various channels for which you provide your information.
●
Managing the admission process of participants: ISD will process your personal data to manage the admission process for a course. This will include collecting the necessary information and documentation to evaluate compliance with the required admission criteria and the suitability of the candidate.
●
Website registration: Your personal data will be processed to manage your registration on ISD's website so that you can access and participate in certain courses, join the community of skin knowledge experts, or enroll in courses of your interest. All functionalities offered by the website are described in the Terms of Use.
●
Coupon verification: If applicable, we will process your information to verify discount coupons used during registration for any course organized by ISD. For this purpose, ISD may transfer your personal data to ISDIN S.A.
●
Responding to inquiries and complaints: ISD will process your personal data to respond to any inquiries related to courses, their development, and incident management. ISD will refer complaints received from students to IL3-UB for the preparation of the relevant reports.
●
Managing tuition payments:
●
Supporting IL3-UB with quality control surveys, follow-ups, and more.
●
Sending personalized commercial communications: To inform you about promotional activities, personalized course information through various channels, and similar courses organized by ISD in accordance with this privacy policy.
●
Providing online training and facilitating course content.
●
Publication of transfers of value for students receiving tuition discounts.
The legal basis for this processing is the explicit consent of the data subject derived from the clear affirmative action of using the form.
The legal basis for processing is the execution of a contract in which the data subject is a party or for pre-contractual measures taken at the request of the data subject.
The legal basis for processing is the execution of a contract in which the data subject is a party or for pre-contractual measures taken at the request of the data subject.
The legal basis for this processing is the legitimate interest of the controller.
The legal basis for processing is the explicit consent of the data subject derived from the clear affirmative action of using the form.
The legal basis for this processing is the legitimate interest of the data controller.
The legal basis for this processing is the legitimate interest of the data controller.
The legal basis for processing is the execution of a contract in which the data subject is a party or for pre-contractual measures taken at the request of the data subject.
The legal basis for processing is the execution of a contract in which the data subject is a party or for pre-contractual measures taken at the request of the data subject.
In some cases, it may be necessary to process your personal data to comply with legal obligations or in relation to any contractual relationship we may have with you. Additionally, we inform you that for data processing based on consent, you may withdraw your consent at any time without affecting the lawfulness of the processing carried out prior to its withdrawal.
5. Cookies and Similar Technologies
We inform you that we use cookies and other automated data collection technologies that allow us to provide you with a better user experience with our services. These technologies can be disabled as specified in the browser's cookie settings or in the application's preference settings. You can consult the Cookie Policy here .
6. Code of Good Practice in the Pharmaceutical Industry
The Code of Good Practice of Farmaindustria requires the annual publication of individual transfers of value to healthcare professionals. Transfers of value include any direct or indirect payments or compensations made in cash or in kind to a healthcare professional. These include registration fees, travel and accommodation expenses, honoraria for services provided, and related expenses.
The updates introduced respond to the Report issued by the Spanish Data Protection Agency (AEPD) on April 22, 2016, in which the Agency recognizes legitimate interest as a legal basis for transparency. Therefore, it will not be necessary to obtain the consent of healthcare professionals to publish individual data.
Consequently, the data related to the transfers of value derived from your relationships with ISD, made directly and/or indirectly, as well as those made by any other company within the ISDIN Pharmaceutical Division worldwide, are included in the processing of personal data under the responsibility of ISD. These data will be processed for the purpose of individually publishing the transfers of value made by ISD for your collaboration in scientific and professional meetings and/or the provision of services or others (fees and related expenses, including accommodation and transportation).
We inform you that the data related to these transfers of value will be published annually, both individually and in aggregate form by category, on the ISD website (https://internationalschoolofderma.com/).
Regarding your participation in activities involving transfers of value from ISD, you guarantee to ISD that you have obtained all necessary administrative, employment, or other authorizations and that you do not face any incompatibility or conflict of interest due to your position or professional status as a result of your participation.
7. Commercial Communications
ISD, in the context of its promotional activities, may provide registration or subscription resources for news or information regarding training activities organized by the entity. These resources will always be subject to your consent for them to be sent. If you have expressly authorized it, ISD will send you personalized information about its courses, activities, and training services according to your professional interests.
You may withdraw your consent to receive commercial communications at any time by clicking the link or button provided in each communication, or by expressing your wish to withdraw consent as indicated in the section on Exercising Rights and Claims.
8. Data Communication and International Transfers
Your personal data may be shared with IL3-UB for the following purposes:
●Management of the proportionate payment agreed with ISD for each course enrollment paid by participants and transferred by ISD.
●Management of the courses, including the validation of student documentation (including their academic records) and quality assessment controls.
●Issuance of course certificates and their respective modules.
●Legalization of certificates for participants from countries outside Spain.
●Conducting promotional activities for the courses on the website.
●Handling and responding to participant inquiries and complaints. In accordance with Section 4, complaints will be forwarded to IL3-UB for them to prepare the corresponding report.
Additionally, ISD may share your data with ISDIN, S.A. for internal administrative purposes such as verifying discount coupons used for registration in any course organized by ISD.
Finally, if expressly stated in the Terms and Conditions of the course in which you participate, the personal data and progress related to the student’s course may be communicated to partner entities to ensure appropriate monitoring and development of the academic activities of the students.
Your data will not be transferred or made available in any other way to third parties except for legal or contractual obligations. In some cases, certain service providers, such as data storage or web pages, will have access to your data but will not process the data for their own purposes.
ISD may process personal data outside the European Union (EU) or the European Economic Area (EEA). As such, it may be necessary to provide this data to international service providers, either to meet the requirements of the service you requested or to provide you with the service at the highest quality standards. In any case, ISD will ensure that these data processes are always protected with the appropriate safeguards, which may include:
●Standard contractual clauses approved by the EU: These are contracts approved by the European regulator that provide sufficient guarantees to ensure that the processing meets the requirements established by the European Data Protection Regulation.
●Third-Party certification.
Additionally, if applicable, we will adopt additional safeguards to the identified mechanisms to ensure a level of protection essentially equivalent to that established in the member states of the European Union.
9. Duration of Processing and Data Retention
ISD is committed to processing personal data for as long as it is genuinely useful and we can offer quality service through its processing. Data will be kept according to the following criteria:
●Based on the execution of contractual relationships: data will be kept as long as necessary for the execution of the measures requested or for the duration of the relationship.
●Based on your consent (e.g., for receiving commercial communications): Your data will be kept until you withdraw your consent.
●Based on your consent (e.g., for receiving commercial communications): Your data will be kept until you withdraw your consent.
In any case, even if you request the deletion of your data, we may retain and store them, under appropriate blocking, for the necessary period to comply with our legal obligations and to make them available to the relevant Authorities.
10. Exercise of Rights
In accordance with the processing of your personal data by ISD, you have certain rights, including:
●Right of Access: You are entitled to know what personal data of yours that we process and the purposes for which we process them.
●Right to rectification: Your data will always be yours, and as such, you can ask us to rectify your data at any time, if what we hold in our records were incorrect.
●Right of erasure: You may request that your personal data be erased from our filing system at any time. Nevertheless, as stated in the section above on data storage, please note that in certain circumstances compliance with current law may prevent the effective exercise of this right.
●Right to object: You may object to your data being processed for any of the purposes for which we process your data, in accordance with the applicable privacy policies in each case.
●Right to your data portability: Where reasonable and technically possible, you shall be entitled to request that any personal data you have provided to us directly be sent to another data controller. We shall send your data directly to the other said data controller if possible, but if not, we shall send it to you in a standard format.
To exercise these rights, please contact ISD at: privacy@isd.eu.
If you do not wish to exercise a specific right but need to make an inquiry or suggestion related to the processing of your personal data, you can also contact the provided addresses for the exercise of rights. Please note that in any case, you may file a complaint with the competent Data Protection Authority if you believe that we have not processed your data lawfully or have not addressed your requests or rights. In Spain, the competent authority is the Spanish Data Protection Agency (Agencia Española de Protección de Datos).
11. Confidentiality and Security in Data Processing
Your personal data is very important to us, and we are committed to treating it with the utmost confidentiality and discretion, as well as implementing all security measures that we consider appropriate and reasonable. In this regard, ISD declares and guarantees that it has established all technical means at its disposal to prevent the loss, misuse, alteration, unauthorized access, and theft of the data provided by users.
12. Social Networks
Social networks are an integral part of the daily life of many Internet users, and for them, we have created ISD profiles on these platforms. All users have the opportunity to join the pages or groups that ISD has on various social networks. However, you should be aware that unless we directly request your data (for example, through marketing actions, contests, promotions, or any other valid means), your data will belong to the corresponding social network. We therefore recommend that you carefully read their terms of use and privacy policies, as well as ensure that you configure your preferences regarding the processing of your data.
13. Contact ISD
If you have any questions or concerns about the processing of your personal data, please contact us through:
●
Email: privacy@isd.eu
●
The Data Protection Officer's mailbox: dpo@isd.eu