MEDICZA INTERNATIONAL ACADEMY

1. Introduction

Welcome to Medicza International Academy Pvt. Ltd. (“Medicza”, “we”, “our”, or “us”). We value your privacy and are committed to protecting your personal data in compliance with the Digital Personal Data Protection Act, 2023 (India) and the General Data Protection Regulation (EU) 2016/679 (GDPR) applicable in Germany and the European Union.

This Privacy Policy explains how we collect, use, store, and share personal data from students, employees, partners, and users of our services, both in India and Germany.

---

2. Scope

This Privacy Policy applies to:

• Students enrolled in our language and training programs (online/offline)
• Healthcare professionals recruited or trained for German placements
• Employees, contractors, and job applicants
• Users visiting our websites, LMS platforms, mobile apps, or social media pages
• Partners, clients, and institutional collaborators

---

3. Data We Collect

We collect the following categories of data:

A. Personal Identification Information

• Full name, date of birth, gender, nationality, passport number
• Contact details (address, phone number, email ID)
• Identification documents (Aadhaar, PAN, Passport, Visa, etc.)

B. Educational & Professional Information

• Academic certificates, qualifications, transcripts
• Employment history, professional licenses, registration details

C. Course & Recruitment Data

• German language level, exam results, performance records
• Placement preferences, interview data, feedback, employer communication

D. Financial Data

• Payment records, invoices, and banking details (if provided)

E. Technical Data

• IP address, device type, browser information, LMS/app usage data, cookies

F. Sensitive Personal Data (if applicable)

• Health-related information (only for relocation or insurance assistance)
• Visa and residence permit details

---

4. Purpose of Data Processing

We collect and process data for the following legitimate purposes:

• To provide and manage educational and recruitment services
• To process admissions, course enrollments, and payments
• To assist in visa, recognition, and placement procedures in Germany
• To communicate updates, exam schedules, and administrative information
• To comply with legal and governmental requirements in India and Germany
• For internal analytics, service improvement, and quality assurance

---

5. Legal Basis for Processing (GDPR)

Under the GDPR, data processing by Medicza is based on one or more of the following:

• Consent (Article 6(1)(a))
• Contractual necessity (Article 6(1)(b))
• Legal obligation (Article 6(1)(c))
• Legitimate interests (Article 6(1)(f))

---

6. Consent

By submitting your data, you consent to the collection, processing, and transfer of your information as described in this Privacy Policy. You may withdraw your consent at any time by contacting us (see Section 13).

---

7. Data Storage & Transfer

• Data is securely stored on encrypted servers located in India and/or the European Union (Germany).
• Data transfers between India and Germany are protected under Standard Contractual Clauses (SCCs) and in compliance with GDPR Chapter V.
• Access to personal data is restricted to authorized staff only.

---

8. Data Retention

We retain personal data only as long as necessary to:

• Fulfill the purpose of processing
• Comply with legal and tax obligations
• Support legitimate business interests

After the retention period, data is securely deleted or anonymized.

---

9. Data Sharing and Disclosure

We may share data with:

• German partner institutions, employers, or recruitment agencies
• Governmental bodies (for visa, recognition, or compliance purposes)
• Service providers (payment gateways, IT, CRM, LMS) under confidentiality agreements
• Legal authorities if required by law

We never sell or trade your personal data.

---

10. Your Rights (GDPR & Indian Law)

You have the right to:

• Access your personal data
• Request correction or deletion
• Withdraw consent at any time
• Request data portability (GDPR Art. 20)
• Lodge a complaint with your Data Protection Authority

For EU citizens: You may contact the Data Protection Authority (Datenschutzbehörde) in your region.

For Indian citizens: You may contact the Data Protection Board of India under the DPDP Act, 2023.

---

11. Data Security

We use appropriate technical and organizational measures (TOMs) such as:

• Encryption and secure data transmission (HTTPS, SSL)
• Access control and authentication
• Regular audits, backups, and employee confidentiality training

---

12. Cookies & Tracking

Our website and LMS may use cookies for:

• Analytics and performance tracking
• Personalizing user experience
• Security and session management

You can disable cookies in your browser settings.

---

13. Contact Us (Data Protection Officer)

Data Protection Officer (DPO):

Medicza International Academy Pvt. Ltd.
No. 2nd Floor, Sahana Complex,
141, Siva Subramaniam St,
near Gateway Hospital, R.S. Puram,
Coimbatore, Tamil Nadu, 641002, India

Email: info@medicza.com

Phone: +91 9944861199
+49 15159851130

For EU-related data processing:

Medicza Germany (Representative Office)
Dudenhöfer Straße 17, Seligenstadt, Germany
Email: dpo@medicza.de

---

14. Updates to This Policy

We may update this Privacy Policy periodically.

• The latest version will always be available on our website.
• We encourage users to review this policy regularly.

---

15. Governing Law

• For Indian operations: Governed by Indian Law under the DPDP Act, 2023.
• For German/EU operations: Governed by EU GDPR and German Federal Data Protection Act (BDSG).