Privacy and Cookies Policy

We collect personal data that you voluntarily provide to us through our website, namely:

— Name and contact information (email address, phone number) when you fill out forms or register for courses;

— Professional information (professional qualifications, tax ID, clinical specialties) when enrolling in training programmes;

— Payment information, processed securely through third-party payment gateways (we do not store credit card details);

— Browsing data collected automatically through cookies (see section 7 below);

— Communications sent by email, contact form, or other channels.

We process your personal data for the following purposes and under the following legal bases:

— (a) Contract execution: course registration, enrolment management, invoicing, and certification — necessary for the performance of a contract to which you are a party (Art. 6(1)(b) GDPR);

— (b) Legitimate interest: sending relevant information about our courses and clinical training offers, market research, and quality improvement — where our legitimate interest does not override your rights and interests (Art. 6(1)(f) GDPR);

— (c) Legal obligation: issuing invoices and tax records, complying with regulatory requirements (Art. 6(1)(c) GDPR);

— (d) Consent: when you expressly consent to receive marketing communications via email or to the use of non-essential cookies (Art. 6(1)(a) GDPR).

We retain your personal data only for as long as necessary for the purposes for which it was collected:

— Enrolment and contractual data: retained for the duration of the contractual relationship and for the legally required periods thereafter (5 years for tax purposes);

— Marketing communications: retained until you withdraw your consent or object to processing;

— Browsing data (cookies): as specified in each cookie's description in section 7;

— Invoices and accounting records: retained for 10 years as required by Portuguese tax law.

We may share your personal data with the following categories of recipients:

— Third-party payment processors (Stripe, MB WAY, Multibanco references) for processing payments;

— IT service providers hosting our website and managing our communications (platforms such as Vercel, Redis);

— Regulatory and tax authorities, when required by law;

— Google Analytics for aggregated website analytics (anonymised browsing data).

Your data will not be sold, rented, or otherwise commercially transferred to third parties for their own marketing purposes.

When third-party service providers are used, we ensure they process your data under our instructions and in compliance with the GDPR.

Under the GDPR, you have the following rights regarding your personal data:

— Right of access: you may request confirmation as to whether we process your data and access the data processed;

— Right to rectification: you may request the correction of inaccurate or incomplete data;

— Right to erasure ("right to be forgotten"): you may request the deletion of your data, subject to legal obligations;

— Right to restriction of processing: you may request that we limit the processing of your data in certain circumstances;

— Right to data portability: you may request the transfer of your data to another controller in a structured, commonly used format;

— Right to object: you may object to the processing of your data for direct marketing purposes at any time;

— Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at info@clninstitute.pt. We will respond to your request within the legally required timeframe (30 days).

You also have the right to lodge a complaint with the Portuguese Data Protection Authority (CNPD — Comissão Nacional de Proteção de Dados) at www.cnpd.pt.

Our website uses cookies and similar technologies to improve your browsing experience, analyse traffic, and support our operations.

What are cookies? Cookies are small text files stored on your device by your web browser. They allow the website to recognise your device and store certain information about your preferences or past actions.

We use the following categories of cookies:

— Essential cookies: necessary for the website to function properly. These cookies do not require your prior consent and are always active. They include session cookies, authentication cookies, and language preference cookies.

— Analytics cookies: we use Google Analytics to collect anonymised information about how visitors use our website (pages visited, time spent, traffic sources). This helps us improve our content and user experience. These cookies are only placed with your prior consent.

— Marketing cookies: used to deliver relevant advertisements and measure the performance of advertising campaigns. These cookies are only placed with your prior consent.

Managing cookies: When you first visit our website, a cookie consent banner will appear allowing you to accept or decline non-essential cookies by category. You can change your preferences at any time by clicking "Cookie Settings" in the website footer or through your browser settings. Most browsers allow you to refuse or delete cookies. Please note that disabling essential cookies may affect the functionality of certain parts of the website.

Third-party cookies: Some pages may embed content from third-party services (e.g. YouTube videos). These services may set their own cookies over which we have no control. We recommend reviewing their respective privacy policies.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include:

— Encryption of data in transit using TLS/SSL protocols (HTTPS);

— Secure storage of data in access-controlled environments;

— Periodic security reviews and updates;

— Restricted access to personal data on a need-to-know basis.

Despite our best efforts, no data transmission over the internet can be guaranteed to be 100% secure. We encourage users to take appropriate precautions to protect their own data.

If you have provided your consent, we may send you information about our courses, clinical events, and other relevant offers by email. You may unsubscribe from these communications at any time by clicking the "unsubscribe" link in any email or by contacting us directly.

We do not use automated individual decision-making or profiling that produces legal effects concerning you.

We reserve the right to update this Privacy and Cookies Policy at any time. Changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

For significant changes that materially affect how we process your data, we will notify you through our website or by email where appropriate.