Privacy Policy

Medicinalis GmbH is the controller responsible for processing personal data in connection with this website and correspondence addressed to us.

Email: medicinalis@medicinalis.eu
Telephone: +43 664 414 77 35

This policy explains how personal data is handled when you browse this corporate website or contact Medicinalis by email. Browsing does not require an account or the direct submission of personal data.

The website has no database, CRM, user accounts, login or authentication, contact forms or stored website inquiries. It does not offer ecommerce, a cart, online ordering, online payment or online contract formation.

The website is hosted by Webtasy, spletne storitve, d.o.o. (Domenca.com), Dunajska cesta 110, 1000 Ljubljana, Slovenia. In providing hosting and technical infrastructure, the hosting provider may process technical connection and server-log information necessary to securely deliver and operate the website, including your IP address, requested URL, date and time of access, browser or user-agent information, referrer where supplied, and technical status or error information.

This information is used as necessary for secure and reliable website delivery, troubleshooting and protection against misuse. It is not used by Medicinalis to build visitor profiles.

Contact buttons and email links open your own email application. Clicking a contact link does not submit an inquiry to this website. If you send an email, we process the information you voluntarily supply, such as your name, email address, organisation and message.

We use this information to respond to your request, provide requested product, professional or distribution information, take steps you request before a potential business relationship where applicable, and maintain necessary business correspondence.

Technical processing for website delivery, security and troubleshooting is based, where applicable, on our legitimate interests in operating a secure and reliable website under Article 6(1)(f) GDPR.

Email correspondence is processed under Article 6(1)(b) GDPR where necessary for a contract or steps requested before entering into a contract. Other appropriate business communication is based on our legitimate interest in responding to enquiries and maintaining business relationships under Article 6(1)(f) GDPR. Processing or retention required by law is based on Article 6(1)(c) GDPR. Consent is not the default basis for ordinary business email.

Where necessary, personal data may be received by website hosting and IT infrastructure providers, email and communication providers, professional advisers, or competent authorities where disclosure is legally required. Recipients receive information only as necessary for the relevant purpose or legal obligation. Providers processing data on our behalf are subject to appropriate data-protection arrangements where required.

If a service provider processes personal data outside the European Economic Area (EEA), Medicinalis will use a legally recognised transfer mechanism where required, such as an adequacy decision or appropriate safeguards, including standard contractual clauses. This does not mean that every visit or email involves a transfer outside the EEA.

Technical logs are retained only for the period reasonably necessary for security, troubleshooting and hosting operations, subject to the hosting provider configuration. Ordinary email enquiries are retained as long as necessary to respond and allow reasonable follow-up.

Business correspondence may be retained longer where necessary for contractual, accounting, regulatory or legal obligations, or to establish, exercise or defend legal claims. Data is deleted or anonymised when no longer required, unless statutory retention obligations apply.

The website does not use analytics, advertising or marketing cookies, behavioural tracking or social-media tracking pixels. Technically necessary browser or storage functions may be used only where required for secure or correct technical operation. No consent banner is currently shown because the implemented website does not intentionally use non-essential technologies requiring prior consent.

Fonts are self-hosted and delivered directly with this website. No third-party Google Fonts service is used, and no request is sent to Google to load these fonts.

The website does not use automated decision-making or profiling for visitors.

Subject to the applicable GDPR conditions, you have rights of access, rectification, erasure, restriction of processing and data portability. You may object to processing based on legitimate interests on grounds relating to your particular situation.

Where processing is actually based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing before withdrawal. To exercise your rights, contact us using the details below. We may request information reasonably necessary to verify your identity.

You have the right to lodge a complaint with a competent data-protection supervisory authority, in particular in the EU Member State of your habitual residence, place of work or the alleged infringement. The competent Austrian supervisory authority is the Österreichische Datenschutzbehörde (Austrian Data Protection Authority).

We may update this policy to reflect changes to website operation, data processing or legal requirements. The current version is available on this page. Any future non-essential technologies will be assessed and any required consent obtained before activation.

For privacy questions or requests concerning your personal data, contact Medicinalis GmbH at the address above, email medicinalis@medicinalis.eu, or call +43 664 414 77 35.