Confidentiality Policy

PERSONAL DATA PROCESSING POLICY

OUR COMMITMENT TO YOUR PERSONAL DATA

We want to offer to implement the highest standards of confidentiality and transparency regarding the personal data that we process in our current activity.

The Personal Data Processing Policy describes the categories of your personal data that we process, the ways and purposes for which we collect it, the situations in which we transfer personal data, as well as the rights and options you have in this regard. At the same time, the Personal Data Processing Policy details how we process personal data in customer relationship management, most often to keep you up to date with the latest developments or events in your field of interest.

YOUR PERSONAL DATA CONTROLLER

The controller in relation to your personal data responsible for data protection on this website is SC MEDKORE ELYSIUM SRL.

When using and processing personal data, it strictly comply with the legal provisions in force on data protection. The right to use personal data and anonymous data belongs to the company SC MEDKORE ELYSIUM SRL within the limits provided by law, in compliance with the rights of data subjects described below.

This data protection statement applies only to this site and its sub-domains, and not to pages controlled or operated by third parties. Please check the data protection statements of web pages controlled or operated by third parties, as these web pages are not under our control and SC MEDKORE ELYSIUM SRL does not assume responsibility for their content and their data protection measures.

[1.] Data security

[1.1] For the protection of your data, SC MEDKORE ELYSIUM SRL has taken technical and organizational measures to protect this data in particular against loss, manipulation or unauthorized access. The measures adopted are checked regularly and are constantly adapted to the latest state of the art. In the event of a breach of the protection of your personal data, which is estimated to result in a major risk to your rights and freedoms, we will notify you immediately, as soon as possible within 72 hours.

[2.] Minor children data processing

[2.1] Please note that all processing of personal data relates exclusively to persons who have reached the age of 18. The use of systems and tools, as well as the results of data processing of users who do not have this minimum age is prohibited without the consent of parents/guardians. If, however, there is a processing of personal data, we will stop processing such data once we become aware of this fact.

[3.] Collection and processing of personal data

[3.1.] Data provided by you

Personal data is processed by us according to the legal provisions in force regarding the protection of personal data. If you correspond with us or fill in a data form on our website, please note that the data you provide on that form will be processed for the purposes described below (see paragraphs [5.] and [6.]).

[3.2.] Data we collect

If you visit our website, personal data is automatically recorded by using cookies. For more information on the Cookies used on our website, see point [7.] and Cookie-Richtlinie.The personal data we process is mainly your identification, transactional, financial, demographic, location or other personal data that we collect directly from you or from other sources when you become our customer, when you visit our website or when you use our services.

[4.] Partners

SC MEDKORE ELYSIUM SRL does not carry out all the processing of personal data in its own regime, but it benefits from support from professional partners, namely various opinion survey companies, for the purposes mentioned in this policy.

The partners are carefully selected and they undertake to ensure, through appropriate technical and organizational measures, the processing of your data in accordance with the legal provisions in force on data protection and with respect for your rights. Partners are prohibited from using personal data received for their own or commercial purposes or passing it on to third parties.

[5] Data processing for which consent is not required

More information on data processing for which consent is not required can be found in the following listing.

General contact form and product order form

Contact form (information material, types of treatments, special offers, appointment request, appreciation and criticism, others): When sending the respective contact form, your personal data will be processed in the categories * (data of the type of treatment, contact and identification data and the text of your request).
Purpose: The answer to your request
Basis: Legitimate interest in processing your questions individually and being able to answer them
Storage time: 12 months
Consequences of the refusal: if you do not provide this data, you will not be able to contact us and we will not be able to provide you with the requested information.

* Exact data fields: Request text, type of treatment, first name, last name, company name, street, postal code, locality, county, country, telephone, e-mail, contact form)

Requesting treatment information or appointment for treatment

If you request information about available treatments or want to schedule an evaluation or treatment. When sending the contact form, your personal data from the categories * (contact details, requested treatment) is processed for the purpose mentioned below.
Purpose: Preparation / appointment and evaluation/treatment.
Basis: Legitimate interest in processing your questions individually and being able to answer them.
Storage time: 12 months
Consequences of the refusal: if you do not provide this data, we cannot contact you and you will not be able to request an appointment or treatment.

* Exact data fields: treatment, first name, last name, phone number, e-mail.

[6] Data processing for which consent is required

SC MEDKORE ELYSIUM SRL processes personal data for the following purposes:

Requesting a treatment offer

When sending the contact form, your personal data in the categories * (contact and identification data, requested treatment) is processed by the sales and medical team.
Purpose: The answer to your request
Basis: Legitimate interest in processing your questions individually and being able to respond credibly to the request
Storage time: 12 months

Consequences of refusal: if you do not agree with this processing, we will not receive data about you and we will not be able to provide you details about the desired treatment.

Newsletter subscription

The data indicated at the respective registration in the categories *(contact and identification data) will be used only for sending the newsletter. When sending the newsletter, we will use the e-mail address provided by you and finally we need your confirmation that, as the holder of the e-mail address, you agree to receive them (so-called Double Opt-In function). You can revoke the subscription at any time using the unsubscribing option available at [email protected]
Purpose: Sending information about offers, news, products, event invitations
Basis: Consent
Storage time: As long as the newsletter is sent, until unsubscribing.

Consequences of refusal: if you do not agree with this processing, you will not receive the newsletter.

* Exact data fields: Addressing form, first name, last name, e-mail, telephone number

Confirmation of the appointment and reminder via SMS

Evaluation report for choosing the most appropriate treatment and checking the non-inclusion in the list of contraindications for each treatment. Categories of data: Relevant medical history, lifestyle information and other treatments performed on the body part we want to treat.

When you buy a product from the SC MEDKORE ELYSIUM SRL store, as part of the buying and selling process, the following data will be collected from you: name, address and email.

When you access the store, you will automatically receive the address of your computer’s Internet Protocol (IP) to provide us with information that helps us learn about your browser and operating system.

E-mail marketing (if applicable): with your permission, we may send you e-mails about our store, new products and other updates.

WordPress

The website and store of SC MEDKORE ELYSIUM SRL online is created on WordPress and WooCommerce. They offer us an on-line e-commerce platform that allows us to sell our products and services.

Your personal data is stored through the WordPress data storage mechanism, databases and the general WordPress application. Your data is stored on a secure server behind a firewall.

[7.] Cookies and Social Plug-ins

[7.1] We collect data automatically by using Cookies. A cookie is a small text file that saves your internet settings. Almost every web page uses this technology. It is downloaded by your internet browser the first time you access a web page. The next time you access this web page with the same device, the saved cookies and information are either sent back to the web page that created them (First Party Cookie) or to another web page to which they belong (Third Party Cookie). Thus, the web page acknowledges that you have visited the page with this browser once before, and in some cases, the posted content varies.

[7.2] For more information on the Cookies used on our website, see Cookie-Richtlinie.

[8.] The rights of data subjects

You can exercise the following rights regarding the processing of personal data:

[8.1] Right to information You can request confirmation of the processing of your personal data and of the way it is used.

[8.2] Right of correction If we process incomplete or incorrect personal data, you can request that it be corrected or supplemented at any time.

[8.3] Right of deletion You may request the deletion of your personal data if the purpose for which it was collected no longer exists, if its processing breaches the legal provisions, if its processing excessively affects your interests or if the processing is based on your consent, which you revoked. Please note that there may be other reasons to prevent the immediate deletion of your data, for example, mandatory archiving periods, pending actions, claims, the exercise or defence of legal rights, etc.

[8.4] Right to limit processing

You have the right to request a limitation on the processing of your personal data in the following cases:

– you challenge the correctness of your data, this occurring for a period, which allows us to verify the correctness of your data,

– the processing of your personal data contravenes the legal provisions, but you oppose their deletion and request a limitation on the use of this data,

– we no longer need your personal data for the intended purpose, but you still need this data for the purpose of enforcing, exercising or defending some legal claims, or

-you have challenged the processing of your personal data.

[8.5] Right of transmission of data You may ask us to provide you with your personal data which you have provided to us in a structured, customary and technically legible format, to the extent that we process such data under the consent or for the execution of a contract between us, the processing being done through automated processes.

[8.6] Right of challenge If we process your personal data for the performance of public interest tasks, for the exercise of public authority or if we refer to the need to defend a legitimate interest, you may challenge the processing of such data, to the extent that there is a overriding legitimate interest concerning your personal data. You may revoke your consent for being sent advertisements at any time without giving any reason.

[8.7] Right of complaint If you believe that we have infringed Austrian or European law in the processing of your personal data, thereby infringing your rights, please contact us so that we can clarify your questions. You have also the right to contact the Romanian Data Protection Authority or a European Supervisory Authority.

These rights can be exercised directly against SC MEDKORE ELYSIUM SRL by a notification to the e-mail address [email protected].