Privacy Policy

This Privacy Policy explains what personal data the meddins.com website (the “Website”) collects, for what purposes it is processed and how it is protected. Meddins is the controller of the personal data described in this Policy. For visitors from the European Economic Area, we process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR).

You can contact us about any personal data matter at [email protected].

We may collect the following categories of data:

• first and last name, phone number and email address — when you place an order or contact us;
• country, city and delivery address — to agree on delivery and ship your order;
• account data — if you register on the Website;
• technical data (IP address, browser type, cookies and similar technologies) — to keep the Website working properly;
• your choice in the professional status confirmation window — stored locally in your browser.

We process personal data for the following purposes and on the following legal bases:

• accepting and fulfilling orders, arranging delivery and contacting you about your order — performance of a contract (Art. 6(1)(b) GDPR);
• answering your requests and enquiries — performance of a contract or steps taken at your request before entering into one (Art. 6(1)(b) GDPR);
• maintaining your user account — performance of a contract (Art. 6(1)(b) GDPR);
• improving the Website and the quality of our service — our legitimate interests (Art. 6(1)(f) GDPR);
• analytics and non-essential cookies — your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time;
• complying with legal requirements — legal obligation (Art. 6(1)(c) GDPR).

Access to personal data is limited to authorised persons who are bound by confidentiality. We share data with third parties only to fulfil your order (for example, delivery services), with service providers that help us operate the Website, or where required by law.

Meddins is based in Ukraine, so your data may be processed outside the European Economic Area. Where this happens, we take measures to ensure that your data remains protected in line with this Policy and applicable law.

We apply organisational and technical measures to protect personal data against unauthorised access, alteration, disclosure or destruction.

Under the GDPR you have the right to:

• access your personal data and receive information about its processing;
• have inaccurate or outdated data corrected;
• have your data erased;
• restrict or object to the processing of your data;
• receive your data in a portable format;
• withdraw your consent at any time, without affecting the lawfulness of processing before withdrawal;
• lodge a complaint with the data protection supervisory authority in your country of residence.

To exercise these rights, email us at [email protected].

We keep personal data no longer than necessary to achieve the purpose of processing or for the period required by law. Once the purpose has been achieved or consent has been withdrawn, the data is deleted or anonymised.

The Website uses cookies that are necessary for it to work. Analytics cookies are used only if you accept them in the cookie banner. You can change your choice by clearing the Website data in your browser.

We may update this Policy from time to time. The current version is always available on this page together with the date of the last update.

For any questions about the processing of personal data, please contact us by email: [email protected].