Privacy Policy.

Controller

OralAdvance Labs d.o.o., trading as Implant Studio Live Courses, is the controller. Contact support@implantstudio.co. See the Legal Notice.

Data we collect

• name, contact, country, course, practice, billing and VAT/tax details;
• professional background, qualification, registration and authority details;
• identity, degree, registration, good-standing, insurance, translation and authority-confirmation documents;
• payment status, Stripe references and billing details, but not full card details;
• agreement status, role decisions, document review, audit history, email-delivery status, attendance and correspondence;
• technical and security information.

Purposes and legal bases

• reservation, contract administration and training delivery: contract and pre-contract steps;
• professional, safety and insurance review: legal obligations and legitimate interests in lawful, safe delivery;
• tax review, invoicing, accounting and authority responses: legal obligation and contract administration;
• security, fraud prevention, complaints and legal claims: legitimate interests and legal obligations;
• optional marketing or publication: consent where required.

Treatment, attendance and role review do not depend on marketing consent. No solely automated decision confirms or refuses an operator role.

Storage and access

Credential documents use a time-limited link and a private Cloudflare R2 bucket. Objects are not public. Access is limited to specifically approved operations or legal staff through a protected dashboard. Review and operational events are logged. Do not email credentials unless we provide a specifically approved secure method.

Recipients and processors

Where necessary, data may be shared with the intended clinic, clinical director, competent or professional authority, insurer or adviser, legal and accounting advisers, and service providers including Cloudflare, Stripe, Resend and the selected external signature provider such as DocuSign or PandaDoc. Each receives only what is necessary. Legal VAT invoices are produced outside this website through Croatian accounting software.

International transfers

Providers or recipients may process data outside the EEA. Where required, transfers use an adequacy decision, approved contractual safeguards or another lawful mechanism.

Retention

Unsuccessful applicant credential documents are deleted within six months after the process closes unless a complaint, legal hold or mandatory rule requires longer. Booked-participant contract, payment, role, safety and accounting records are retained for applicable legal, insurance and claims periods. Data is deleted or anonymised when no longer needed.

Your rights

Subject to law, you may request access, correction, deletion, restriction, portability or objection, and withdraw consent without affecting earlier processing. Contact support@implantstudio.co. You may complain to the competent supervisory authority, including the Croatian Personal Data Protection Agency where competent.