Privacy Policy

1. Data Controller

The data controller responsible for the personal data collected through this website is Juan Manuel Fernández López, operating as a self-employed professional (autónomo) under the trading name Expert Clinical Trials, with tax ID (NIF) ES30260566H and registered address at San Francisco 1A, 1ºB, 13600 Alcázar de San Juan, Spain. For any question about this Privacy Policy or your personal data, you can contact us at info@expertclinicaltrials.com.

2. What Personal Data We Collect

Depending on how you interact with this website, we may collect:

• Contact form data: name, email address, phone number, company name and the content of your message, when you use our contact form.
• Account and order data: name, billing and delivery address, email address, phone number and order history, when you purchase a course or a digital product through our online store.
• Payment data: we do not collect or store your card details. Payments are processed directly by our payment providers (Stripe and/or PayPal), who process this data under their own privacy policies.
• Course access data: your progress, quiz results and certificates of completion, when you enrol in one of our online courses.
• Technical and usage data: IP address, browser type, pages visited and similar information collected automatically through cookies and analytics tools. See our Cookie Policy for details.

3. Purposes and Legal Basis for Processing

• To respond to enquiries submitted through the contact form — legal basis: legitimate interest in responding to enquiries about our services.
• To process and fulfil orders for courses and digital products, including invoicing — legal basis: performance of a contract.
• To provide access to purchased online courses and issue certificates — legal basis: performance of a contract.
• To comply with tax, accounting and other legal obligations — legal basis: legal obligation.
• To analyse and improve website performance and content, and for non-essential cookies — legal basis: consent, which you can withdraw at any time.

4. Who We Share Your Data With

We do not sell your personal data. We share personal data only with service providers acting on our behalf, including: our website and e-commerce platform provider (Odoo S.A.), payment processors (Stripe and/or PayPal), email service providers, and web analytics providers (such as Google Analytics). These providers process data under their own privacy policies and, where required, under data processing agreements with us.

5. International Data Transfers

Some of our service providers may process data outside the European Economic Area (EEA). Where this occurs, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses, to ensure your data remains protected in accordance with applicable data protection law.

6. Data Retention

We retain personal data only for as long as necessary for the purposes described in this policy: contact form enquiries are retained for a reasonable period to handle follow-up communication; order, invoicing and course enrolment data is retained for as long as required by applicable tax and accounting legislation (generally up to 6 years in Spain).

7. Your Rights

Under the General Data Protection Regulation (GDPR) and applicable Spanish data protection law, you have the right to:

• Access the personal data we hold about you.
• Request rectification of inaccurate or incomplete data.
• Request erasure of your data, where applicable.
• Request restriction of processing, in certain circumstances.
• Object to processing based on legitimate interest.
• Request portability of the data you provided to us.
• Withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, contact us at info@expertclinicaltrials.com. You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es) if you believe your data protection rights have been infringed.

8. Security

We apply reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, misuse or alteration, appropriate to the nature of the data processed.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The date of the latest update is shown below.

Last updated: July 2026