1. General Provisions

This Privacy Policy defines the procedure for processing and protecting personal data of users of the mediglobus.com website (hereinafter referred to as the “Website”), operating in the field of medical tourism, in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR).

2. Definitions

• Personal Data: any information relating to an identified or identifiable person visiting the website.
• Processing of Personal Data: any operations with personal data, including collection, recording, storage, use, transfer, and deletion, required to carry out our activities.
• User: any individual visiting the Website and providing their personal data.

3. Collection and Processing of Personal Data

To perform its activities and provide services, MediGlobus obtains information in two ways: automatically and directly from the User.

When visiting our website, we automatically receive the following information:

• data about your geolocation and device (IP address, connection type, device used to access: mobile phone, computer, tablet),
• information about specific actions and time spent on our website, including entry/exit page URLs,
• data about the operating system, type of browser used (including language settings),
• cookies for analytical purposes. You may disable cookies at any time in your browser settings.

This technical information is used by the Company to optimize Platform performance, tailor the service to each User’s individual needs, ensure full functionality, as well as conduct analytics and improve service quality.

Data received directly from the User. When contacting us or our patient support service, we may collect your contact, demographic, and medical data necessary for providing services.

When contacting the MediGlobus patient support department, the following data may be collected:

• personal information (name, surname, citizenship, gender, date of birth, number or copy of an identity document),
• contact details (phone number, email address, country and/or city of residence),
• medical data (general health information, diagnoses, medical reports, test results, medical histories, medical prescriptions, previously visited clinics, and similar information).

This data may be collected through contact forms on the website, telephone conversations with MediGlobus representatives, emails, or other electronic communication methods.

4. Purposes of Data Processing and Legal Grounds

Personal data is processed for the purpose of:

• providing information and services in the field of medical tourism;
• organizing medical consultations and treatment;
• communicating with Users;
• marketing communications;
• improving the Website and user experience;
• fulfilling legal obligations of MediGlobus.

5. Transfer of Personal Data to Third Parties

To provide services in full, personal data may be transferred to the following categories of third parties:

• partner medical institutions and specialists for treatment arrangements;
• transportation and logistics companies for organizing travel or other services;
• other partners involved in providing services to the User.

Data is transferred only if appropriate agreements are in place to ensure personal data protection.

MediGlobus may disclose personal data to other third parties for security purposes or to comply with applicable legislation, to the extent required for compliance with court or law enforcement agency requests, to prevent unlawful use of the Website, or in other legally provided cases.

Please note that the third parties listed above are independent controllers of their own databases and of the personal data transferred to them as part of contractual relationships.

6. User Rights The User has the right to:

• receive information about their personal data processed by the Company;
• request correction of inaccurate or incomplete data;
• request deletion of personal data if there are legal grounds for this;
• restrict the processing of their data in certain cases;
• object to the processing of personal data.

7. Data Retention Periods

Personal data is stored on secure servers located in the USA and Germany. To ensure data security in compliance with GDPR, we adhere to high standards of data protection.

We process and retain your personal data only as long as necessary for the purposes defined in this Privacy Policy unless otherwise required by law. In some cases, data may be retained longer if justified by our legitimate interests, such as fraud prevention, or for fulfilling legal requirements, including tax reporting, accounting, and audits.

8. Data Protection

The operator takes necessary technical and organizational measures to protect personal data from unauthorized access, modification, disclosure, or destruction. To ensure an appropriate level of data protection during joint processing with our Partners, we apply Standard Contractual Clauses approved by the European Commission.

Despite taking all reasonable measures to keep received data secure, no electronic system can guarantee 100% protection from breaches or hacks. If you believe your interaction with our site is unsafe, please contact us immediately at privacy@mediglobus.com

9. Changes to the Privacy Policy

The Company reserves the right to make changes to this Privacy Policy. It is recommended to review this page regularly to stay informed about the current version of the Policy.

10. Contact Information

For questions related to the processing of personal data, please contact us at: privacy@mediglobus.com