Privacy Policy
Last updated: February 2026
1. Data Controller
The Data Controller is Dr. Fabio Gorni,
located at Via dei Gracchi 8, 20149 Milan, Italy.
VAT Number: 08324930158
Email: eventi@medideas.it
2. Data Collected
The website collects the following categories of personal data:
- Contact data: name, surname, email address, phone number, voluntarily provided through contact and registration forms.
- Navigation data: IP address, browser type, pages visited, time spent, automatically collected through technical cookies and, with consent, analytical cookies (Google Analytics 4).
- Fiscal data: tax code, VAT number, billing address, provided during the course registration process.
3. Purpose of Processing
Personal data is processed for the following purposes:
- Responding to course information requests
- Managing course registrations and related payments
- Sending communications about courses and events
- Anonymous statistical analysis of web traffic (with consent)
- Legal compliance and tax obligations
4. Legal Basis
Data processing is based on:
- Consent of the data subject (Art. 6.1.a GDPR) for analytical cookies and promotional communications
- Contractual performance (Art. 6.1.b GDPR) for managing course registrations
- Legitimate interest (Art. 6.1.f GDPR) for responding to contact requests
- Legal obligation (Art. 6.1.c GDPR) for tax compliance
5. Data Retention
Personal data is retained for the time strictly necessary for the purposes for which it was collected, and in any case within the limits established by applicable regulations. Fiscal data is retained for 10 years as required by law.
6. Data Sharing
Personal data is not sold to third parties. It may be shared with:
- Technical service providers (hosting, email) necessary for the website's operation
- Google Analytics (with consent) for statistical purposes
- Competent authorities when required by law
7. Data Subject Rights
In accordance with the GDPR, data subjects have the right to:
- Access their personal data
- Request rectification or erasure of data
- Restrict or object to processing
- Request data portability
- Withdraw consent at any time
- Lodge a complaint with the Data Protection Authority
To exercise these rights, contact: eventi@medideas.it
8. Security
We adopt appropriate technical and organizational measures to protect personal data from unauthorized access, loss, or destruction. The website uses encrypted HTTPS connections.
9. Changes
We reserve the right to update this policy. Changes will be published on this page with an indication of the last update date.