Privacy Policy

INFORMATION ON THE PROCESSING OF PERSONAL DATA
FOR THE ONLINE TRAINING SERVICE

Before you provide us with your personal data in accordance with the European Regulation on the protection of personal data 2016/679 (hereinafter also “GDPR” or “Regulation”) and Legislative Decree June 30, 2003 No. 196 also known as Privacy Code (as amended by Legislative Decree August 10, 2018 No. 101) whose aim is to protect the rights and fundamental freedoms of individuals, in particular the right to the protection of personal data, it is necessary for you to read a series of information that can help you understand the reasons why your personal data will be processed, explaining what your rights are and how you can exercise them.

1. Data Controller

The Data Controller is Elemtiez Formation, with registered office in Av. 9 Avril, Jendouba 8100, Tunisia, contactable at the following e-mail address: contact@elemtiezformation.tn

2. Types of personal data collected

During the use of the online training service, the Data Controller may collect and process the following types of personal data:

• Personal data: name, surname, date of birth, gender, nationality.
• Contact details: e-mail address, telephone number, residence or domicile address.
• Access and usage data: access credentials (username and password), data related to training activities (courses attended, progress, evaluations).
  Payment data: information necessary for processing payments (e.g., credit card number, IBAN).

3. Purposes of processing and legal basis

Personal data will be processed for the following purposes:

• Provision of the training service: to allow registration and participation in online courses as well as to manage users’ accounts.
• Fulfillment of contractual obligations: to manage and execute the training contract entered into with the user.
• Communications: to send communications related to courses and the service, including notifications about updates and changes.
• Compliance with legal obligations: to comply with obligations under laws, regulations, and EU regulations.
• Service improvement: to collect feedback and analyze the use of the service in order to improve the quality of the training offer.
• The legal basis for processing is the performance of a contract to which the user is a party, the user’s explicit consent, as well as the fulfillment of legal obligations to which the Data Controller is subject.

4. Methods of processing

The processing of personal data is carried out using electronic and manual tools, in compliance with the principles of correctness, lawfulness, and transparency provided for by the GDPR. The Data Controller adopts adequate security measures to protect personal data from unauthorized access, disclosure, alteration, or destruction.

5. Data retention

Personal data will be retained for the time strictly necessary to achieve the above purposes. In particular:

• Data relating to registration and participation in courses will be retained for the duration of the contractual relationship and subsequently for a period of 10 years for administrative and legal purposes.
• Payment data will be retained for the time necessary to manage transactions and subsequently for a maximum period of 10 years in accordance with tax and accounting regulations.

6. Communication and dissemination of data

Personal data will not be disclosed but may be communicated to third parties in the following cases:

• To service providers necessary for the provision of the training service (e.g., e-learning platforms, payment services).
• To legal, tax, and accounting consultants for the fulfillment of legal obligations.
• To judicial or administrative authorities in compliance with legal obligations.

7. User rights

The user has the right to:

• Access their personal data.
• Request the rectification or deletion of data.
• Object to the processing of data or request its limitation.
• Request data portability.
• Withdraw consent to the processing of data, without affecting the lawfulness of the processing based on consent before its withdrawal.
• Lodge a complaint with the competent supervisory authority.
• To exercise these rights, the user can contact the Data Controller at the contact details provided in point 1 of this notice.

8. Changes to the privacy policy

The Data Controller reserves the right to modify this privacy policy at any time. Changes will be communicated to users by email or by notice on the website of the training service.

9. Contacts

For further information or requests regarding the processing of personal data, the user can contact the Data Controller at the following email address: contact@elemtiezformation.tn

Date: 15/11/2025