Privacy Policy
Last updated: September 2026
R3D srl (“we”) is the data controller for AD7prep. This policy explains what personal data we collect and how we use it, in line with the EU GDPR.
1. Data we collect
Account data: first name, last name, email, password (stored hashed), preferred language and target ICT profile. Consent records: your Terms, Privacy and Marketing choices with timestamps. Usage data: your sessions, answers, confidence ratings and results. Payment data: handled by our payment provider; we store only subscription status and identifiers, never card details.
2. How we use it
To provide and personalise the Service, track your progress, manage your subscription, provide support, and — only with your consent — send occasional marketing updates.
3. Legal bases
Contract (providing the Service), consent (marketing), and legitimate interest (security and improvement of the Service).
4. Marketing
Marketing emails are sent only if you opted in. You can withdraw consent at any time from your account or via the unsubscribe link.
5. Sharing
We share data only with processors that help us run the Service (hosting, payments, email delivery), under appropriate agreements. We do not sell your data.
6. Retention
We keep account and usage data while your account is active and as required by law. You can request deletion at any time.
7. Your rights
You have the right to access, rectify, erase, restrict and port your data, and to object to processing. Contact [email protected] to exercise these rights or to lodge a complaint with your supervisory authority.