Privacy Policy

1. General information

This Privacy Policy describes the principles of processing personal data of users of the website operated by:

Personal data controller: Rafał Sokołowski
operating under the business name: ClinicalTrials4U Rafał Piotr Sokołowski
Place of business: Zielonki Wieś
Contact e-mail address: contact@clinicaltrials4u.pl

The Administrator processes personal data in accordance with applicable legal regulations, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).

2. Scope of processed personal data

The Administrator processes the following personal data of users:

• user login,
• first and last name,
• e-mail address,
• phone number,
• home address,
• invoice details (in the case of purchases made as a business):
  • company name,
  • tax identification number (NIP),
• data relating to orders and purchased digital products.

The Administrator does not process personal data belonging to special categories (so-called sensitive data).

3. Purposes and legal bases for processing personal data

Personal data are processed for the following purposes:

1. 1. Performance of sales agreements for digital products (e-books, online training courses)
      – Article 6(1)(b) GDPR
   2. Creation and maintenance of a user account in the online store
      – Article 6(1)(b) GDPR
   3. Handling electronic payments
      – Article 6(1)(b) and (c) GDPR
   4. Issuing and storing accounting documents (invoices)
      – Article 6(1)(c) GDPR

4. User account

Creating a user account in the online store is required in order to purchase digital products.
The data provided during account registration are used exclusively for the purpose of fulfilling orders, managing the account, and complying with the Administrator’s legal obligations.

The user may request deletion of the account at any time, subject to data that must be retained under applicable law.

5. Recipients of data

Personal data may be transferred to entities supporting the Administrator in conducting its business, in particular:

• hosting service providers,
• payment operator Stripe,
• an accounting office handling tax settlements.

These entities process personal data on the basis of agreements or their own regulations compliant with the GDPR.

6. Data retention period

Personal data are retained for the following period:

• data related to orders and invoices – for the period required by tax regulations (generally 5 years),
• user account data – until the account is deleted by the user or the Administrator’s business activity is terminated.

7. Rights of data subjects

Users have the following rights:

• the right to access their personal data,
• the right to rectify them,
• the right to erasure of data (the right to be forgotten),
• the right to restriction of processing,
• the right to restriction of processing
• the right to lodge a complaint with the President of the Personal Data Protection Office.

To exercise their rights, users should contact the Administrator via the e-mail address.

8. Online payments

Payments are processed via a payment operator Stripe.
The Administrator does not store users’ payment card data – such data are processed directly by the payment operator.

9. Cookies

The service uses cookies for the purpose of:

• proper functioning of the website,
• handling the purchasing process and user accounts.

Cookies necessary for the functioning of the website are stored automatically.
If additional analytical or marketing tools are used, the user may be asked to give appropriate consent.

10. Data security

The Administrator applies appropriate technical and organizational measures to protect personal data, in particular server security, an SSL certificate, and secured access to the administrative panel.

11. Changes to the Privacy Policy

The Administrator reserves the right to introduce changes to this Privacy Policy in the event of changes in legal regulations or the manner of data processing.
The current version of the document is always available on the website.