Privacy Policy.

Controller

OralAdvance Labs d.o.o., trading as Implant Studio Live Courses, is the controller. Contact support@implantstudio.co. See the Legal Notice.

Data we collect

• name, contact, country, course, practice, billing and VAT/tax details;
• professional background, qualification, registration and authority details;
• identity, degree, registration, good-standing, insurance, translation and authority-confirmation documents;
• payment status, Stripe references and billing details, but not full card details;
• agreement status, role decisions, document review, audit history, email-delivery status, attendance and correspondence;
• technical and security information.

Purposes and legal bases

• reservation, contract administration and training delivery: contract and pre-contract steps;
• professional, safety and insurance review: legal obligations and legitimate interests in lawful, safe delivery;
• tax review, invoicing, accounting and authority responses: legal obligation and contract administration;
• security, fraud prevention, complaints and legal claims: legitimate interests and legal obligations;
• optional marketing or publication: consent where required.

Treatment, attendance and role review do not depend on marketing consent. No solely automated decision confirms or refuses an operator role.

Storage and access

Credential documents use a time-limited link and a private Cloudflare R2 bucket. Objects are not public. Access is limited to specifically approved operations or legal staff through a protected dashboard. Review and operational events are logged. Do not email credentials unless we provide a specifically approved secure method.

Recipients and processors

Where necessary, data may be shared with the intended clinic, clinical director, competent or professional authority, insurer or adviser, legal and accounting advisers, and service providers including Cloudflare, Stripe, Resend and the selected external signature provider such as DocuSign or PandaDoc. Each receives only what is necessary. Legal VAT invoices are produced outside this website through Croatian accounting software.

International transfers

Providers or recipients may process data outside the EEA. Where required, transfers use an adequacy decision, approved contractual safeguards or another lawful mechanism.

WhatsApp enquiry replies

If you separately choose WhatsApp replies, DIA uses Meta WhatsApp and Kapso to send an automated acknowledgement and help answer your enquiry or arrange a call. Your number, consent record and conversation are processed for this purpose. A virtual assistant may reply; you can ask for a person or reply STOP. Call times remain subject to team confirmation. Please do not send patient records or payment details in WhatsApp.

Retention

Unsuccessful applicant credential documents are deleted within six months after the process closes unless a complaint, legal hold or mandatory rule requires longer. Booked-participant contract, payment, role, safety and accounting records are retained for applicable legal, insurance and claims periods. Data is deleted or anonymised when no longer needed.

Your rights

Subject to law, you may request access, correction, deletion, restriction, portability or objection, and withdraw consent without affecting earlier processing. Contact support@implantstudio.co. You may complain to the competent supervisory authority, including the Croatian Personal Data Protection Agency where competent.

Optional Google Analytics

With your permission, Google Analytics measures page visits and successful course enquiries. It stays off until you choose Allow analytics. We do not send form contents, names, email addresses or phone numbers to Analytics. URL query strings are excluded. Advertising personalization and Google signals are disabled.

Your choice is stored in this browser. Google Analytics uses _ga cookies, which may last up to two years. You can decline or withdraw permission using Analytics choices on the public course pages; withdrawing clears Analytics cookies in this browser. Google may process measurement data on servers outside your country. See Google’s Privacy Policy for its processing information.