Privacy policy

Last updated: 5 October 2026

Who is responsible for your data?

The controller of the personal data collected through this website isS. Noureddin Rafiee, with tax identification number55409679B and address at Av. de los Reyes Católicos, 6, 28220 Majadahonda, Madrid, Spain. You can contact the controller about data protection at nouri.rafiee@gmail.com.

Which data are collected?

Only the data you choose to send through the contact form: your name, email address, role, specialty, institution, country, the program you are interested in and your message. Specialty, institution and message are optional; name, email, role and country are needed to be able to answer you. The website does not use cookies. Like any website, the server that hosts it records technical data of each visit (such as the IP address) in access logs, and the form's anti-abuse limit processes your IP address in a hashed form for one hour; this is done for security (legitimate interest, Article 6(1)(f) of the General Data Protection Regulation).

Please do not send patient data or clinical images. The Academy does not provide medical consultations, and any such information received will be deleted.

Why are they used, and on what legal basis?

• To answer your inquiry. Legal basis: your request to be answered (Article 6(1)(b) of the General Data Protection Regulation) and, for inquiries from institutions and professionals about academic collaboration, the legitimate interest of the Academy in replying (Article 6(1)(f)).
• To inform you about a program you registered interest in, for example when its format, dates or venue are announced. Legal basis: your consent (Article 6(1)(a)), given when you send the form and which you can withdraw at any time.

Your data are not used for any other purpose, are not used for automated decision-making and are not sold.

How long are they kept?

Data sent with an inquiry are kept for as long as needed to answer it and, if no relationship follows, are deleted after 12 months. Data sent when registering interest in a program are kept until you withdraw your consent or ask for them to be deleted, and in any case for no longer than 24 months after your last contact with the Academy. The copies held in email and in the automation platform follow the same periods.

Who receives them?

No one, except service providers that process data on the controller's behalf to operate this website and its email: the web hosting provider, and, when you send the form, an automation platform (n8n, hosted by Railway) that records your inquiry and sends two emails through Google's email service, a notification to Dr. Rafiee and a confirmation to you. Google and Railway are companies based in the United States, so your data may be transferred there; such transfers rely on the safeguards the regulation requires, such as the European Commission's standard contractual clauses or the EU-US Data Privacy Framework.

What are your rights?

You can request access to your data, their rectification or erasure, the restriction of their processing, their portability, and object to their processing. You can withdraw your consent at any time, without affecting the lawfulness of processing carried out before. To exercise these rights, write tonouri.rafiee@gmail.com.

If you believe your rights have not been respected, you can lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos) at aepd.es.

How are your data protected?

The form is sent over an encrypted connection, the data collected are limited to what is necessary, and access to them is restricted to the people who need it to answer you.

Changes to this policy

If this policy changes, the new version will be published on this page with its date. Substantive changes affecting data already collected will be communicated where appropriate.