List of active policies

Full policy

Preamble

These Terms of Use (“Terms”) govern your access to and use of the online learning management system (“Platform”) operated by WaveVision GmbH, a company registered under Austrian law (GmbH).

WaveVision GmbH
Gassergasse 29/12,
1050 Wien,
Email: office@wavevision.at
Phone: +43 660 407 1406
Website: www.wavevision.at

Austria Company Register Number (Firmenbuchnummer): FN 618685g
Company Register Court: Handelsgericht Wien
VAT Identification Number (UID-Nummer): ATU80250309

By registering for an account on the Platform, you confirm that you have read, understood, and agree to be bound by these Terms, together with our Privacy Policy. If you do not agree to these Terms, you must not register for or use the Platform.

These Terms apply to individual users who access the Platform directly. If you are accessing the Platform through an arrangement with your employer, a medical device manufacturer, or another organisation, your access may be subject to additional or different terms agreed between that organisation and WaveVision.

Last edited: 12 August, 2026

1. Definitions

In these Terms, the following capitalised terms have the meanings set out below:

“Account” means the individual user account created by you on the Platform.
“Certification” means the formal credential issued upon successful completion of a Course, granted in cooperation with a partner scientific society.
“Documentation of completion” is a confirmation that the student successfully completed all course content. This is being issued by WaveVision, independently of any third party.
“Course” means a structured training programme made available on the Platform, comprising modules, Training Content, and assessments.
“Downloadable Material” means any materials that you are expressly invited to download as part of a Course.
“ESWT” means Extracorporeal Shockwave Therapy, a non-invasive medical treatment modality and the primary clinical domain addressed by the Training Content.
“ISMST” means the International Society for Medical Shockwave Treatment, WaveVision’s primary partner scientific society for certification. ISMST is a registered society at Ebelsberger Schlossweg 5, A-4030 Linz / Austria, shockwave@ismst.com
“Platform” means the WaveVision online learning management system, including all web-based interfaces, course environments, and associated services through which Training Content is delivered.
“Training Content” means all educational materials delivered through the Platform, including video modules (including recordings from WaveVision’s virtual reality training environment), text-based content, illustrations, simulations, interactive elements, and assessment questions.
“User” or “you” means the individual who has registered for an Account on the Platform to access Training Content and pursue Certification.

2. Eligibility and Registration

2.1. The Platform is open to healthcare professionals who wish to purchase and complete Courses. However, official ISMST Certifications will be issued by ISMST at their own discretion to users who have successfully completed the course and hold the necessary licenses and credentials to perform Focused Extracorporeal Shockwave Therapy (ESWT) within their specific jurisdiction. By registering, you acknowledge that if you lack the required professional qualifications in your country, you may still purchase and complete Courses for educational purposes, but you will not be eligible to receive an official ISMST Certificate upon completion.

2.2. WaveVision reserves the right to request evidence of your professional credentials before providing any ISMST Certificate. Failure to provide satisfactory evidence within 14 days upon request will result in the withholding of Certification, though your access to purchased Course content will remain unaffected. No refunds shall be issued on the basis that a user is ineligible for Certification, as Course access and educational content are provided regardless of certification eligibility.

2.3. You must provide accurate, current, and complete information during registration and keep your Account information up to date.

2.4. Each User must maintain their own individual Account. You may not create more than one Account, and you may not register on behalf of another person. Accounts are personal and non-transferable. You may not share, disclose, sell, or otherwise make available your login credentials (including username, password, access link, or any authentication factor) to any third party, nor permit any other person to access or use the course content, assessments, or certification materials through your Account. You are responsible for keeping your credentials confidential and for all activity occurring under your Account, and you must notify us without undue delay if you become aware of any unauthorised access or use.

2.5. WaveVision reserves the right to refuse registration or to disable any Account at its discretion, including where WaveVision reasonably believes that a User has violated these Terms.

3. Account Security

3.1. As set out in Clause 2.4, your Account and login credentials are personal and non-transferable. You are responsible for keeping your credentials confidential and for all activity that occurs under your Account, whether or not authorised by you.

3.2. Your credentials include your username, password, and any access link, one-time code, or other authentication factor issued to you. You must not disclose them to, or store them in a manner accessible by, any third party.

3.3. You must notify WaveVision without undue delay at office@wavevision.at if you become aware of, or reasonably suspect, any unauthorised use of your Account, any disclosure of your credentials, or any other breach of security.

3.4. WaveVision is not liable for any loss or damage arising from your failure to keep your credentials secure or from your disclosure of them to a third party.

3.5. WaveVision may suspend or disable your Account and credentials at any time if, in its reasonable opinion, you have failed to comply with these Terms, including where it has reasonable grounds to believe that your credentials have been shared or that your Account has been accessed by a person other than you.

4. Licence to Use the Platform

4.1. Subject to your compliance with these Terms and payment of applicable fees, WaveVision grants you a limited, non-exclusive, non-transferable, revocable licence to access and use the Platform and the Training Content for your own personal professional development.

4.2. You may:

(a) access and view Courses on the Platform using a standard web browser;

(b) download Downloadable Material, store it on your personal device, and print copies of it, in each case for your own personal use, provided that such downloading and printing is not systematic or excessive; and

(c) use the knowledge gained from the Training Content in your own professional practice.

4.3. You must not:

(a) share, resell, redistribute, sublicense, rent, lease, transfer, broadcast, or publicly display any Training Content or other material from the Platform;

(b) screen-record, capture, photograph, re-stream, or otherwise reproduce video modules or virtual reality content from the Platform;

(c) copy, modify, adapt, or create derivative works of any Training Content or other material on the Platform, except as expressly permitted in Section 4.2;

(d) reverse engineer, decompile, disassemble, or otherwise attempt to derive the source code or underlying architecture of any component of the Platform;

(e) use any Training Content or other material from the Platform to build, train, improve, or validate artificial intelligence or machine learning models, datasets, or competing products or services;

(f) use any Training Content or other material from the Platform for any commercial purpose other than your own professional practice;

(g) authorise any third party to access or use the Platform through your Account; or

circumvent, disable, or otherwise interfere with any access control, digital rights management, or security features of the Platform.

4.4. You must retain and must not delete, obscure, or remove any copyright notices or other proprietary markings in the Training Content, including in any Downloadable Material.

4.5. Except as expressly permitted in Section 4.2, you must not download or save any material from the Platform to your personal device.

5. Training Content

5.1. Training Content on the Platform has been developed in cooperation with qualified medical doctors and Key Opinion Leaders in the field of Extracorporeal Shockwave Therapy.

5.2. Course curricula are aligned with the educational standards and guidelines of partner scientific societies, primarily the International Society for Medical Shockwave Treatment (ISMST).

5.3. Video content is produced using WaveVision’s proprietary virtual reality training platform. This content is designed to be viewed on standard 2D screens (e.g., laptops, tablets) and does not require the use of specialized Virtual Reality (VR) hardware or headsets unless explicitly stated for a specific module.

5.4. While AI tools have been used to assist in content refinement, all Training Content is subject to final human medical review. However, the User acknowledges that no system is infallible. WaveVision makes no guarantee that content is free from stylistic or technical nuances that differ from traditional medical literature.

5.5. WaveVision may update or modify Training Content where reasonably necessary to maintain security, legal compliance, scientific accuracy, partner certification requirements, technical functionality, or pedagogical quality. During an active paid access period, WaveVision will not materially reduce the core scope or functionality of a purchased Course except where such change is objectively justified. If a change materially and adversely affects a consumer user’s access to or use of a digital service supplied on a continuing basis, WaveVision will provide the notice and any rights of termination or other remedies required by mandatory law.

6. Educational Disclaimer

6.1. All Training Content on the Platform is intended exclusively for educational and professional development purposes. The Platform is not a substitute for professional medical judgment, clinical training, direct patient assessment, or any form of medical advice, diagnosis, or treatment recommendation.

6.2. WaveVision does not provide, recommend, or substitute for medical treatment, diagnosis, or clinical advice. WaveVision is not a healthcare provider.

6.3. Clinical responsibility for patient care and treatment decisions remains entirely with the treating practitioner. The completion of any Course or the obtaining of any Certification through the Platform does not guarantee specific clinical outcomes and does not relieve you of your professional duty to exercise independent clinical judgment.

6.4. Training Content reflects scientific knowledge and clinical practice at the time of its production. Despite WaveVision’s best efforts and the involvement of qualified medical professionals in content development and review, the Training Content may not reflect the very latest clinical developments, emerging research, or changes in guidelines.

6.5. You must always consult current primary literature, applicable clinical guidelines, and relevant regulatory requirements in your jurisdiction, and exercise your own professional judgment when making clinical decisions. You must not solely rely on the Training Content for any treatment or clinical decision.

6.6. All training scenarios, anatomical models, and patient visualisations presented on the Platform use synthetic, simulated, or non-identifiable materials. No real patient data is used in any Training Content.

7. Certification

7.1. Certification and ISMST Membership. Upon successful completion of a Course, WaveVision will forward your relevant professional data to the International Society for Medical Shockwave Treatment (ISMST) for the purpose of certificate creation. Unless you actively opt-out during the registration or course completion process, your successful completion also triggers an automatic, one-year membership with the ISMST at no additional cost to you for the first year.

7.2. Certifications attest to the completion of a structured educational programme. They are not medical licences and do not independently authorise you to practise medicine, perform specific medical procedures, or provide clinical services in any jurisdiction.

7.3. Certifications are time-limited. The validity period, renewal requirements, and conditions for maintaining Certification are governed by the policies of the issuing scientific society. WaveVision will make reasonable efforts to inform you of the applicable validity period at the time of issuance, but it is your responsibility to verify the current policies of the issuing society.

7.4. The recognition, acceptance, and regulatory value of any Certification depends on the policies of your professional body, regulatory authority, and jurisdiction. WaveVision does not guarantee that any Certification will be recognised by any particular institution, authority, or employer.

7.5. WaveVision reserves the right to revoke any Certification that was obtained through fraud, cheating, impersonation, misrepresentation of professional credentials, or other material violation of these Terms.

7.6. WaveVision is not responsible for changes to ISMST’s or any other partner society’s certification policies, recognition frameworks, or membership requirements. WaveVision’s ability to offer Certification is contingent upon its ongoing partnership with third-party scientific societies. Should a partnership terminate, WaveVision reserves the right to substitute Certification with a comparable credential or provide a pro-rata refund for the Certification component of the fee, at its sole discretion.

7.7. Third-Party Terms. By accepting the optional ISMST membership, you agree to abide by the ISMST’s statutes and bylaws. WaveVision is not responsible for the internal governance, communications, or additional requirements of the ISMST. Your relationship with the ISMST regarding membership is governed solely by the ISMST’s own terms and conditions (https://shockwavetherapy.org/).

7.8. Refusal of Membership. If you choose to refuse or opt-out of the ISMST membership, you must do so via an informal email to office@wavevision.at. Please note that refusing membership does not affect your eligibility to receive the digital Certificate, provided all educational requirements are met.

8. Fees and Payment

8.1. Access to Courses on the Platform requires payment of the applicable fees as displayed on the Platform at the time of purchase. All fees are inclusive of applicable value-added tax (VAT) unless otherwise stated.

8.2. Payments are processed by Stripe, a third-party payment processor. By making a payment through the Platform, you agree to Stripe’s applicable terms of service and privacy policy. WaveVision does not store your full payment card details.

8.3. Your subscription or course access is activated upon successful receipt of payment. Access to the course is granted for a period of twelve (12) months from the date of enrolment, after which access to the course content will end automatically. If you wish to regain access after that period, you may purchase a new enrolment at the then-current rate.

9. Right of Withdrawal

9.1. If you are a consumer within the meaning of applicable European Union law, you have the right to withdraw from your purchase within fourteen (14) days of the date of purchase, without giving any reason.

9.2. However, by commencing access to a Course (including by starting the first module or accessing any Training Content), you expressly consent to the immediate provision of digital content and acknowledge that you thereby lose your right of withdrawal, in accordance with Article 16(m) of Directive 2011/83/EU (Consumer Rights Directive) and § 18(1)(11) of the Austrian Fern- und Auswärtsgeschäfte-Gesetz (FAGG). You acknowledge that the performance of the contract begins the moment you click ‘Start Course’ or otherwise access the first module of the Training Content. At this point, your right of withdrawal is waived in its entirety.

9.3. You will be asked to provide this explicit consent during the purchase and enrollment process.

9.4. To exercise your right of withdrawal (before commencing access to a Course), you must inform WaveVision of your decision by a clear statement in writing, sent to office@wavevision.at. You may use the model withdrawal form provided by the European Commission, but this is not mandatory.

9.5. If you validly withdraw, WaveVision will reimburse all payments received from you without undue delay and in any event within fourteen (14) days of the day on which WaveVision is informed of your decision to withdraw, using the same payment method you used for the original transaction.

10. Prohibited Conduct

10.1. You must not use the Platform in any way that is unlawful, illegal, fraudulent, or harmful, or in connection with any unlawful, illegal, fraudulent, or harmful purpose or activity.

10.2. In particular, you must not:

(a) introduce any virus, trojan, worm, logic bomb, spyware, or other malicious or technologically harmful code to the Platform;

(b) attempt to gain unauthorised access to the Platform, the servers on which the Platform is hosted, or any server, computer, or database connected to the Platform;

(c) attack the Platform via a denial-of-service attack, distributed denial-of-service attack, or any other means;

(d) use any automated tool, AI agent, LLM, bot, spider, scraper, or similar technology to access, index, or extract data or content from the Platform;

(e) impersonate any person or misrepresent your identity or professional qualifications;

(f) upload, transmit, or otherwise introduce any patient data, protected health information, or personally identifiable information of any third party to the Platform;

(g) interfere with or disrupt other Users’ access to or use of the Platform; or

use the Platform or any Training Content in any way that infringes the intellectual property rights or other rights of WaveVision, its licensors, or any third party.

10.3. WaveVision will report suspected criminal conduct to the relevant law enforcement authorities and will cooperate with those authorities, including by disclosing your identity where required by law or court order.

10.4. Violations of this Section 11 may result in immediate termination of your Account and access to the Platform without refund, without prejudice to any other rights or remedies available to WaveVision.

1`. Platform Availability

11.1. The Platform is provided as a cloud-based service. WaveVision will use commercially reasonable efforts to ensure that the Platform is available, but does not guarantee uninterrupted, timely, secure, or error-free operation. WaveVision aims for a Platform availability of 99% on an annual average, excluding planned maintenance windows.

11.2. WaveVision may suspend or restrict access to the Platform, or to specific features or Courses, at any time for maintenance, updates, security reasons, or any other operational purpose. WaveVision will use reasonable efforts to provide advance notice of planned maintenance, but this is not always possible, particularly in the case of urgent security updates.

11.3. WaveVision may modify Platform features or Courses for objective reasons including security, legal compliance, scientific updates, partner requirements, or technical improvements. Where you have purchased fixed-term access to specific content, WaveVision will not discontinue that content in a way that materially deprives you of the agreed service during the active term without providing an equivalent replacement, a proportionate refund, or any other remedy required by applicable law.

11.4. WaveVision is not liable for any interruption, suspension, or unavailability of the Platform caused by events or circumstances beyond its reasonable control, including but not limited to: internet connectivity failures, third-party service outages, natural disasters, pandemics, government actions, or acts of war or terrorism.

12. Third-Party Services

12.1. The Platform uses the following third-party services in the delivery of its functionality:

(a) ISMST: For certificate issuance and the administration of your one-year membership;

(b) Vimeo for hosting and delivery of video content;

(c) Stripe for processing payments; and

(d) Google Analytics for analytics and measurement services as described in the Privacy Policy and cookie settings.

(e) Sketchfab to host and display 3D models

12.2. Your use of the Platform may be subject to the terms of service and privacy policies of these third-party providers. WaveVision encourages you to review the applicable third-party terms.

12.3. WaveVision is not responsible for the availability, performance, accuracy, or practices of any third-party service provider. WaveVision does not endorse, warrant, or assume any liability with respect to third-party services.

12.4. Information about how you can manage your cookie and analytics preferences is available in our Privacy Policy.

13. Intellectual Property

13.1. WaveVision GmbH owns or is the exclusive licensee of all intellectual property rights in the Platform, including the software, user interface, design, layout, and overall look and feel of the Platform, as well as the virtual reality environment, biophysics simulation engine, and digital twin technology.

13.2. All Training Content produced or commissioned by WaveVision including text, video, illustrations, simulations, VR recordings, assessment questions, and AI-assisted materials is the intellectual property of WaveVision GmbH, unless otherwise indicated.

13.3. Where Training Content incorporates curricula, clinical guidance, or other materials provided by partner scientific societies (e.g., ISMST) or Key Opinion Leaders, WaveVision acknowledges the contribution of such partners. WaveVision holds the exclusive right to the digital implementation, presentation, and delivery of such content on the Platform.

13.4. The core Training Content on the Platform is device-neutral and is not sponsored by or affiliated with any specific medical device manufacturer. Where manufacturer-specific training modules are available, they are clearly identified as such and do not constitute endorsements by WaveVision of any particular product or manufacturer.

13.5. No right, title, or interest in any intellectual property is transferred to you under these Terms, except for the limited licence granted in Section 4.

13.6. All trademarks, service marks, trade names, and logos displayed on the Platform are the property of WaveVision or their respective owners and may not be used without the prior written consent of the rights holder.

14. Limitation of Liability

14.1. The Platform and Training Content are provided subject to the educational disclaimer in Section 6. Except where mandatory law provides otherwise, WaveVision does not warrant that the Platform will be uninterrupted or error-free at all times.

14.2. Nothing in these Terms excludes or limits liability that cannot lawfully be excluded or limited, including liability for death or personal injury caused by negligence, fraud, fraudulent misrepresentation, or mandatory consumer rights relating to conformity and remedies for digital content or digital services.

14.3. Subject to Section 14.2, WaveVision shall not be liable for indirect or consequential loss, except to the extent such exclusion is not permitted by applicable law.

14.4. Subject to Section 14.2, WaveVision’s aggregate liability for direct loss arising out of paid use of the Platform shall not exceed the greater of (i) the fees paid by you for the affected Course or subscription term giving rise to the claim, and (ii) any minimum amount required by mandatory law.

14.5. WaveVision’s total aggregate liability to you for all claims arising out of or in connection with these Terms or your use of the Platform shall not exceed the total fees paid by you to WaveVision in the twelve (12) months immediately preceding the event giving rise to the claim.

14.6. Nothing in these Terms excludes or limits WaveVision’s liability for: (a) death or personal injury caused by WaveVision’s negligence; (b) fraud or fraudulent misrepresentation; or (c) any other liability that cannot be excluded or limited under applicable law.

14.7. The limitations and exclusions of liability in this Section 14 extend to WaveVision’s officers, employees, agents, affiliates, and subcontractors.

14.8 WaveVision acts as a facilitator for society certifications (ISMST, etc.). WaveVision is not liable for delays, errors in certificate generation, or membership processing failures caused by partner societies.

14.9 WaveVision provides the Platform as a technology and delivery infrastructure for educational content. While WaveVision collaborates with qualified medical professionals, Key Opinion Leaders, and partner scientific societies in the development and review of Training Content, WaveVision does not independently verify or guarantee the clinical accuracy, completeness, or currency of all information presented. The substantive medical and scientific content reflects the expertise and judgment of the contributing authors and reviewers, and WaveVision shall not be held liable for any errors, omissions, or inaccuracies in such content, except to the extent caused by WaveVision’s own wilful misconduct or gross negligence. Users are solely responsible for independently verifying any clinical information before applying it in practice, in accordance with Section 6 of these Terms.

15. Indemnification

15.1. To the extent permitted by applicable law, you are responsible for losses suffered by WaveVision only to the extent they result from your unlawful use of the Platform, your intentional or grossly negligent breach of these Terms, or your infringement of third-party rights. This Section does not apply to consumers except to the extent liability arises under mandatory law.

16. Amendments

16.1. WaveVision may amend these Terms at any time. The date of the most recent revision is indicated at the top of these Terms.

16.2. If WaveVision makes changes that it considers to be material, it will notify you by email or by a prominent notice on the Platform at least thirty (30) days before the changes take effect.

16.3. Your continued use of the Platform after the effective date of any amended Terms constitutes your acceptance of the amended Terms. If you do not agree to the amended Terms, you must stop using the Platform.

16.4. The current version of these Terms is always available on the Platform.

17. Governing Law and Jurisdiction

17.1. These Terms shall be governed by and construed in accordance with the laws of the Republic of Austria (Österreichisches Recht), without regard to its conflict-of-law provisions.

17.2. Any disputes arising out of or in connection with these Terms shall be subject to the exclusive jurisdiction of the competent courts in Vienna, Austria.

17.3. The application of the United Nations Convention on Contracts for the International Sale of Goods (CISG) is expressly excluded.

17.4. The foregoing choice of governing law and jurisdiction is without prejudice to any mandatory consumer protection provisions in your country of residence that cannot be derogated from by contractual agreement. If you are a consumer habitually resident in a Member State of the European Union, you also enjoy the protection afforded to you by the mandatory provisions of the law of your country of residence.

18. General Provisions

18.1. Severability. If any provision of these Terms is found by a competent court or authority to be invalid, unlawful, or unenforceable, that provision shall be deemed modified to the minimum extent necessary to make it valid and enforceable, or if modification is not possible, it shall be severed from these Terms. The remaining provisions shall continue in full force and effect.

18.2. Entire Agreement. These Terms, together with the Privacy Policy and any applicable order or subscription confirmation, constitute the entire agreement between you and WaveVision with respect to your use of the Platform, and supersede all prior or contemporaneous communications, proposals, and agreements, whether oral or written, relating to the subject matter hereof.

18.3. No Waiver. The failure of WaveVision to enforce any right or provision of these Terms shall not constitute a waiver of that right or provision. Any waiver of any provision of these Terms will be effective only if in writing and signed by WaveVision.

18.4. Assignment. WaveVision may assign or transfer its rights and obligations under these Terms, in whole or in part, to any third party without your prior consent. You may not assign or transfer your rights or obligations under these Terms without the prior written consent of WaveVision.

18.5. Language. These Terms are drafted and binding in English.

18.6. Headings. The section headings in these Terms are for convenience of reference only and shall not affect the interpretation of these Terms.

18.7. Data Portability. Upon written request to office@wavevision.at, and subject to your rights under the GDPR, WaveVision will provide you with a digital export of your learning history, assessment results, and earned Certifications in a structured, commonly used, and machine-readable format.

19. Contact

If you have any questions about these Terms, please contact us:

WaveVision GmbH
Gassergasse 29/12
1050 Wien, Austria

Email: office@wavevision.at
Phone: +43 660 407 1406
Website: www.wavevision.at

Full policy

1. Introduction and Scope

This Privacy Policy explains how WaveVision GmbH (“WaveVision”) collects, uses, stores, and discloses personal data in connection with the WaveVision online learning management system (the “Platform”). It applies to all personal data processed through the Platform, including account registration, course enrolment, certification, payment, and technical operation.

This policy covers the Platform only. The WaveVision marketing website (wavevision.at) is governed by a separate privacy policy.

Controller

The controller responsible for data processing under Article 4(7) of the General Data Protection Regulation (EU) 2016/679 (“GDPR”) is:

WaveVision GmbH
Gassergasse 29/12,
1050 Wien, Austria

Firmenbuchnummer: FN 618685 g
Firmenbuchgericht: Handelsgericht Wien
UID-Nummer: ATU80250309

E-Mail: office@wavevision.at
Telefon: +43 660 407 1406
Website: www.wavevision.at

For questions or requests relating to data protection, contact: office@wavevision.at.

2. Categories of Personal Data Processed

2.1 Account and Identity Data

When you register for an account on the Platform, WaveVision collects and processes:

• Full name
• Email address
• Login credentials (password or authentication tokens)
• Professional credentials and licence evidence (where required for certification eligibility; see Terms of Use §2.2)
• Country and jurisdiction of professional practice

Authentication is handled by the Platform’s built-in account system. Login credentials are stored as salted password hashes in the Platform database, together with session identifiers. No third-party identity provider or single-sign-on service is used.

2.2 Learning Data

As you use the Platform, WaveVision processes data relating to your educational activity:

• Course enrolment records
• Module progress and completion status
• Quiz and assessment results and grades
• Documentation of completion issued by WaveVision (see Terms of Use §1)

2.3 Certification Data

Where you complete a course and are eligible for certification:

• Professional data forwarded to ISMST for certificate issuance (see Terms of Use §7.1)
• Certification status and validity
• ISMST membership status (automatic one-year membership unless you opt out; see Terms of Use §7.1, §7.7, §7.8)

2.4 Payment and Billing Data

When you purchase a course or subscription:

• Transaction records and purchase history
• Invoice data (name, address, amounts, VAT)
• Subscription status and renewal dates

WaveVision does not store your full payment card details. Payments are processed by Stripe, which handles card data directly (see Terms of Use §8.2).

2.5 Technical and Usage Data

When you access the Platform, the following data is collected automatically:

• IP address
• Device type, operating system, and browser version
• Pages visited and actions taken on the Platform
• Date and time of access
• Server log data
• Usage statistics collected without cookies and with anonymised IP addresses (see Section 3 — Analytics)

2.6 Communications

If you contact WaveVision for support or other enquiries:

• Content of your correspondence (email to office@wavevision.at)
• Metadata (date, time, sender address)

2.7 Special-Category Data

The Platform does not process patient data, health data of third parties, or any special-category data within the meaning of Article 9 GDPR. Users are expressly prohibited from uploading any patient data, protected health information, or personally identifiable information of third parties to the Platform (see Terms of Use §6.6, §11.2(f)).

A user’s own professional credential data (e.g., evidence of a medical licence) is not health data; it is processed as account and identity data under Section 2.1 above.

3. Purposes and Legal Bases

WaveVision processes your personal data for the following purposes, each paired with its legal basis under Article 6(1) GDPR:

Purpose	Legal basis	Details
Account creation and platform access	Art. 6(1)(b) — performance of contract	Necessary to provide the service you registered for.
Course delivery, progress tracking, issuing documentation of completion	Art. 6(1)(b) — performance of contract	Core service delivery.
Forwarding professional data to ISMST for certificate issuance	Art. 6(1)(b) — performance of contract	The certification is part of the purchased course (Terms §7.1).
Automatic one-year ISMST membership (opt-out)	See counsel note below	Triggered automatically unless you opt out (Terms §7.1, §7.8).
Payment processing via Stripe	Art. 6(1)(b) — performance of contract	Processing the transaction for the purchased course.
Invoice retention and tax compliance	Art. 6(1)(c) — legal obligation	Austrian §132 BAO and §212 UGB require retention of financial records.
Analytics (Matomo, self-hosted, cookieless)	Art. 6(1)(f) — legitimate interest	Understanding how the Platform is used in order to improve it. Matomo runs on WaveVision’s own infrastructure (stats.wavevision.at) in cookieless mode: no cookie or other identifier is stored on your device, your IP address is anonymised before storage, and the data is not shared with third parties. You may object at any time (see Section 7).
Server logs, security, and fraud prevention	Art. 6(1)(f) — legitimate interest	Protecting the Platform and its users from unauthorised access and abuse.
Responding to support enquiries	Art. 6(1)(b) — performance of contract; Art. 6(1)(f) — legitimate interest	Answering questions about your account or the service.
Marketing emails (if applicable)	Art. 6(1)(a) — consent	Only with your explicit prior consent; you may withdraw at any time.

4. Recipients and Third Parties

WaveVision shares your personal data with the following recipients, each for a specified purpose:

Recipient	Role	Purpose	Location	Transfer basis
ISMST (International Society for Medical Shockwave Treatment, Ebelsberger Schlossweg 5, A-4030 Linz, shockwave@ismst.com)	Separate controller (see note)	Certificate issuance, one-year membership administration	Austria (intra-EU)	Not applicable (intra-EU)
Stripe, Inc. (stripe.com)	Processor	Payment processing	US / IE	EU–US Data Privacy Framework
Vimeo (vimeo.com)	Processor	Video content hosting and delivery	US	EU–US Data Privacy Framework
Sketchfab (sketchfab.com)	Processor	3D model hosting and display	US	Standard Contractual Clauses
Google LLC (Google Fonts)	Processor	Delivery of web fonts (IP address transmitted on page load)	US	EU–US Data Privacy Framework
Hetzner Online GmbH	Processor	Platform infrastructure and hosting	Germany / Finland (EU)	Not applicable (intra-EU); Data Processing Agreement
MailerLite (mailerlite.com)	Processor	Email marketing and newsletters (consent-based only)	Lithuania (EU)	Not applicable (intra-EU); Data Processing Agreement

Web analytics on the Platform is performed by Matomo, self-hosted on WaveVision’s own infrastructure (stats.wavevision.at). Analytics data therefore remains with WaveVision and is not disclosed to any third-party analytics provider.

5. International Transfers

Some of WaveVision’s processors are based in the United States. Where personal data is transferred outside the European Economic Area, WaveVision relies on the following safeguards:

• EU–US Data Privacy Framework (DPF): Where the US recipient is certified under the DPF (adequacy decision of 10 July 2023), the transfer is permitted under Article 45 GDPR.
• Standard Contractual Clauses (SCCs): Where the recipient is not DPF-certified, WaveVision uses the European Commission’s Standard Contractual Clauses (Commission Implementing Decision (EU) 2021/914) as the transfer mechanism under Article 46(2)(c) GDPR.

Certification status (verified against the vendors’ published framework statements, June 2026): Stripe, Inc. and Vimeo are certified under the EU–US DPF. Sketchfab does not claim DPF certification and relies on Standard Contractual Clauses; executed SCCs must be in place for this transfer. Google LLC (relevant only to web-font delivery) is DPF-certified.

6. Retention Periods

WaveVision retains your personal data only for as long as necessary to fulfil the purposes described in this policy, or as required by law:

Data category	Retention period	Basis
Account and identity data	For the duration of your account, plus 3 years after account closure	Contractual necessity; general limitation period under §1486 ABGB for post-termination claims
Learning data (progress, results, completion records)	For the duration of your account, plus 3 years after account closure	Terms §10.2; contractual and legitimate interest
Certification records	For the validity period of the certification, archived in line with the ISMST certificate validity	Coordination with ISMST validity periods
Financial and invoice data	7 years from the end of the relevant financial year	Austrian §132 BAO, §212 UGB (statutory retention obligation)
Server and access logs	90 days after collection	Legitimate interest in security and incident investigation
Analytics data	Collected without cookies and with IP addresses anonymised before storage; retained as usage statistics on WaveVision’s own infrastructure	Legitimate interest (see Section 3)
Support correspondence	For the duration of the enquiry, plus a reasonable retention period	Legitimate interest

After the applicable retention period expires, personal data is securely deleted or anonymised.

7. Data Subject Rights

Under the GDPR, you have the following rights in relation to your personal data:

• Right of access (Article 15): You may request confirmation of whether WaveVision processes your personal data and, if so, access to that data and related information.
• Right to rectification (Article 16): You may request correction of inaccurate personal data or completion of incomplete data.
• Right to erasure (Article 17): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent.
• Right to restriction of processing (Article 18): You may request that WaveVision restrict the processing of your personal data in certain circumstances.
• Right to data portability (Article 20): You may request to receive the personal data you have provided to WaveVision in a structured, commonly used, and machine-readable format, and to transmit that data to another controller. In accordance with Terms of Use §19.7, WaveVision will provide a digital export of your learning history, assessment results, and earned certifications upon written request.
• Right to object (Article 21): You may object to the processing of your personal data where WaveVision relies on legitimate interest as the legal basis.
• Right to withdraw consent (Article 7(3)): Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing before the withdrawal.

How to exercise your rights

Submit your request by email to: office@wavevision.at

WaveVision will respond to your request without undue delay and in any event within one month. If the request is complex or if WaveVision receives a large number of requests, this period may be extended by a further two months, in which case WaveVision will inform you of the extension.

Where the Platform provides self-service tools for managing your data (e.g., profile editing, account deletion), you may also use those features directly.

Right to lodge a complaint

If you believe that WaveVision’s processing of your personal data infringes the GDPR, you have the right to lodge a complaint with the competent supervisory authority:

Österreichische Datenschutzbehörde (Austrian Data Protection Authority) Barichgasse 40–42, 1030 Wien, Austria E-Mail: dsb@dsb.gv.at Website: www.dsb.gv.at

8. Cookies and Tracking Technologies

The Platform uses cookies and similar technologies. Essential cookies (such as the Moodle session cookie and the cookie recording your consent choice) are strictly necessary for the Platform to function and do not require consent. Non-essential cookies — set by third-party content embedded in courses (videos, 3D models) — are only activated with your prior consent; until then, embedded content is shown as inactive placeholders.

The Platform’s web analytics (self-hosted Matomo) operates without cookies and stores no identifier on your device (see Section 3).

For a detailed description of the cookies used, their purposes, and how to manage your preferences, please refer to the Cookie Policy.

9. Automated Decision-Making

WaveVision does not subject you to decisions based solely on automated processing, including profiling, which produce legal effects concerning you or similarly significantly affect you within the meaning of Article 22 GDPR. Course assessments are evaluated against defined criteria and do not involve profiling or automated decision-making.

10. Security

WaveVision implements appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include, but are not limited to:

• Encryption of data in transit (TLS/HTTPS)
• Access controls and authentication requirements
• Regular security updates and monitoring
• Contractual obligations on processors to maintain equivalent security standards

No method of electronic transmission or storage is completely secure. While WaveVision takes reasonable precautions, it cannot guarantee absolute security.

11. Changes to This Policy

WaveVision may update this Privacy Policy from time to time to reflect changes in data processing practices, legal requirements, or the services offered.

Where changes are material, WaveVision will notify you by email or by a prominent notice on the Platform at least thirty (30) days before the changes take effect, consistent with the amendment process described in the Terms of Use §17.

The date of the most recent revision is indicated at the top of this document. The current version is always available on the Platform.

12. Contact

For any questions about this Privacy Policy or the processing of your personal data, please contact:

WaveVision GmbH Gassergasse 29/12, 1050 Wien, Austria Firmenbuchnummer: FN 618685 g Firmenbuchgericht: Handelsgericht Wien UID-Nummer: ATU80250309 E-Mail: office@wavevision.at Telefon: +43 660 407 1406 Website: www.wavevision.at

Full policy

Before enrolling in this course, please ensure that you are legally permitted to perform Extracorporeal Shockwave Therapy (ESWT) in your country, state, province, or other applicable jurisdiction.

By enrolling in this course, you confirm that:

• You are authorized to use ESWT within the scope of your professional practice, or you are undertaking this training solely for educational purposes and will not perform ESWT unless legally permitted to do so.
• You accept full responsibility for ensuring compliance with all applicable laws, regulations, professional standards, and licensing requirements.
• Neither the course provider nor the ISMST can be held responsible for any participant’s failure to comply with local legal or regulatory requirements.
• You understand and agree that you bear sole responsibility for the assessment, diagnosis, treatment, and follow-up care of your patients. Neither the course provider, its instructors, nor the ISMST shall be liable for any clinical decisions, treatments, outcomes, or consequences arising from the application of information presented in this course.
• You understand that ISMST Certificates are issued exclusively by the ISMST and are subject to the ISMST’s certification requirements. Participants who complete the course but do not qualify for an ISMST Certificate will still receive a Certificate of Completion from the course provider.

By proceeding with your registration, you acknowledge and agree to the above declaration.