The data we collect, why we collect it, and the rights you have.
The controller of the personal data collected on the website www.habibamed.com is:
Data Protection Officer (DPO)
For any question about the protection of your personal data, you can contact our data controller at contact@habibamed.com
In the course of our activity as a training centre, we collect various categories of personal data:
Payment security
Bank details are never stored on our servers. They are processed directly by our PCI-DSS-certified payment providers.
Your personal data is collected and processed for specified, explicit and legitimate purposes:
| Purpose | Description | Legal basis |
|---|---|---|
| Enrolment management | Handling requests, course enrolments, educational follow-up | Performance of the contract |
| Billing | Issuing quotes and invoices, managing payments | Performance of the contract |
| Communication | Responding to your requests, information about our courses | Legitimate interest |
| Newsletter | Sending news, updates and special offers | Consent |
| Website improvement | Browsing statistics, user experience optimisation | Legitimate interest |
| Video usage measurement | Viewing time, sections watched and number of sessions per episode, to improve the course content. Linked to your account and deleted with it | Legitimate interest |
| Legal obligations | Retention of invoices, tax returns | Legal obligation |
Data minimisation principle
We only collect the data strictly necessary for each purpose. No unnecessary data is requested.
In accordance with the General Data Protection Regulation (GDPR), each processing of data relies on a specific legal basis:
Your data is kept for a limited period, depending on its purpose and on legal obligations:
| Type of data | Retention period | Rationale |
|---|---|---|
| Customer data (training) | 5 years after the last course | Educational follow-up, certificates, guarantee |
| Prospect data | 3 years after the last contact | CNIL recommendation |
| Invoices and accounting documents | 10 years | Legal obligation (French Commercial Code) |
| Browsing data | 13 months maximum | CNIL recommendation for cookies |
| Consents (proof) | 5 years after withdrawal | Proof of consent |
Right to be forgotten
When these periods expire, your data is automatically deleted or irreversibly anonymised.
Your personal data may be disclosed to the following recipients, strictly in line with the purpose of the processing:
| Provider | Role | Location |
|---|---|---|
| Vercel | Website hosting | USA (standard contractual clauses) |
| Payment provider | Transaction processing | European Union |
| Google Analytics | Browsing statistics | USA (consent required) |
Transfers outside the EU
For transfers to countries outside the European Union, we ensure that appropriate safeguards are in place (standard contractual clauses, adequacy certification).
In accordance with the GDPR and the French Data Protection Act (loi Informatique et Libertés), you have the following rights over your personal data:
| Right | Description | How to exercise it |
|---|---|---|
| Access | Obtain a copy of your personal data | Email contact@habibamed.com |
| Rectification | Correct inaccurate or incomplete data | Email or customer area |
| Erasure | Request the deletion of your data | Email (subject to legal conditions) |
| Restriction | Temporarily suspend the processing of your data | Email with justification |
| Portability | Receive your data in a structured format | Email (CSV or JSON format) |
| Objection | Object to processing on legitimate grounds | Email or unsubscribe link |
Response time
We undertake to respond to your request within 1 month at most. This period may be extended by 2 months for complex requests.
Where processing is based on your consent, you may withdraw it at any time:
We implement appropriate technical and organisational measures to protect your personal data:
In the event of a breach
In the event of a data breach likely to result in a risk to your rights, we will inform you within 72 hours in accordance with the GDPR.
This privacy policy may be updated to reflect changes in our practices or in legal requirements.
Tip
We invite you to check this page regularly. The date of the last update is shown at the top of the document.
For any question about this privacy policy, to exercise your rights, or to make a complaint:
Message subject
To help us process your request, please write "Data protection" in the subject line of your email and specify the right you wish to exercise.