Privacy Policy
Last updated: October 2025
Data Controller
This Privacy Policy describes how Diamond Incision Academy S.R.L. (“the Company”, “we”, “us”, or “our”) collects, uses, stores, and protects personal data through its website www.diamondincision.com, the Diamond Incision App, and any related digital services or e-learning platforms.
Controller:Diamond Incision Academy S.R.L.Registered office: Centro Direzionale Isola G1, Scala D, Piano 21, Int. 145 – 80143 Naples, ItalyTax Code / VAT Number: 10812301215Email: info@diamondincision.comCertified email (PEC): diamondincisionacademy@pec.itLegal representative: Dr. Dario Martusciello, President of the Board of DirectorsCategories of Personal Data Collected
We may collect the following categories of personal data:
- Identification data: name, surname, date of birth, gender, nationality.
- Contact data: email, phone number, address, professional details.
- Account data: username, password, and access credentials for the Academy or App.
- Professional and educational information: medical license, specialization, training participation, certificates.
- Payment and billing data: where applicable for course enrollment or purchases.
- Technical data: IP address, device ID, browser type, operating system, cookies, and usage logs.
- Communication data: messages, feedback, or inquiries sent via forms, email, or chat.
- Visual and biometric data: photos or videos submitted for academic or verification purposes (if applicable).
Purposes and Legal Basis of Processing
Personal data is processed for the following purposes and according to the relevant legal bases:
| Purpose | Legal Basis (Art. 6 GDPR) |
|---|---|
| a) Managing access to the website, app, and e-learning platform | Contract performance |
| b) User registration and account creation | Contract performance |
| c) Processing payments and invoices | Legal obligation / Contract |
| d) Providing academic, educational, and medical training services | Contract performance |
| e) Sending operational communications (e.g., confirmations, updates) | Legitimate interest |
| f) Sending newsletters, marketing materials, and promotional offers | Consent |
| g) Ensuring platform security and preventing misuse | Legitimate interest |
| h) Complying with legal obligations (tax, commercial, health-related) | Legal obligation |
| i) Managing technical support and customer care | Contract performance |
| j) Using cookies and analytics to improve the user experience | Consent (where required) |
Data Retention
Personal data is retained only for as long as necessary to achieve the purposes described above:
- User accounts and academic records: up to 10 years after the last interaction.
- Marketing data: until withdrawal of consent.
- Billing and legal data: up to 10 years, in compliance with Italian law.
- Cookies and analytics: as specified in the Cookie Policy below.
International Data Transfers
Some of our service providers may process data outside the European Economic Area (EEA). In such cases, transfers will occur only when:
- The European Commission has recognized the recipient country as providing adequate protection, or
- Standard Contractual Clauses (SCCs) approved by the European Commission are in place.
Data Security
We implement appropriate technical and organizational measures to ensure the confidentiality, integrity, and availability of personal data, including:
- Data encryption (in transit and at rest);
- Access control and authentication;
- Regular system monitoring and penetration testing;
- Staff training and confidentiality agreements.
User Rights (Data Subjects)
Under the GDPR, users have the following rights:
- Access: to obtain a copy of your personal data.
- Rectification: to correct inaccurate or incomplete information.
- Erasure: to request deletion (“right to be forgotten”).
- Restriction: to limit certain processing operations.
- Portability: to receive your data in a structured, commonly used format.
- Objection: to processing based on legitimate interest or direct marketing.
- Withdraw consent: at any time, without affecting prior lawful processing.
To exercise these rights, contact us at privacy@diamondincision.com or via PEC at diamondincisionacademy@pec.it.
You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali) or any competent supervisory authority in your country of residence.
Automated Decision-Making and Profiling
We do not perform automated decision-making that produces legal or significant effects on individuals.
Any profiling activities (e.g., segmentation for marketing) are based on explicit consent and may be revoked at any time.
Minors
The services of Diamond Incision Academy are intended for professionals aged 18 or older.
We do not knowingly collect personal data from minors. If you believe that a minor has provided us with personal data, please contact us to request deletion.
Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in law or technology. All updates will be published on our website with a new “last updated” date. Users are encouraged to review this Policy regularly.
Contact Information
For any questions or requests regarding data protection, please contact:
Diamond Incision Academy S.R.L.Centro Direzionale Isola G1, Scala D, Piano 21, Int. 14580143 Naples, ItalyEmail: privacy@diamondincision.comPEC: diamondincisionacademy@pec.it