Medentic logo
Back to legal

Privacy policy

This policy explains what limited categories of data are processed when you use the public medentic.org website, on what basis, and with whom that data may be shared.

Effective from: June 6, 2024Last updated: March 14, 2026

1. Data controller

The data controller for the public medentic.org website is Medentic LLC, UIC 207854560, with registered office and registered address at Bulgaria, Ruse 7000, 4 "Tsar Ferdinand" Street, Floor 4, Office 20.

Privacy contact details:

No Data Protection Officer (DPO) has been designated.

2. Scope of this policy

This policy applies only to the public medentic.org website.

It does not govern data processing in separate products, client environments, services, commercial relationships, recruitment processes, contractual workflows, or other Medentic systems that may be covered by separate notices, contracts, or policies.

3. What data we may process

3.1. Technical data when the website loads

When the website loads, hosting and infrastructure systems may process technical data such as:

  • IP address;
  • date and time of the request;
  • requested URL;
  • referrer;
  • browser type, operating system, and basic device information;
  • data required for security, caching, delivery, and diagnostics.

This data is processed to operate the website, maintain network security, prevent abuse, and provide technical support.

3.2. Usage data through Vercel Analytics

The website uses Vercel Web Analytics. According to Vercel's official documentation, this service works with anonymized and aggregated metrics and does not use cookies in its standard operation.

The processing is intended to understand overall website usage, such as visits, page load patterns, and general traffic trends, without building profiles of individual visitors.

3.3. Embedded Google Maps

Parts of the website may load an embedded Google Maps element to show location and directions.

When such an element loads, Google may receive technical information such as IP address, browser and device data, as well as information related to the loaded page and interaction with the map. That processing is carried out by Google under its own terms and policies.

3.4. Communication by email or phone

If you contact us by email or phone, we may process:

  • your name, if you provide it;
  • email address;
  • phone number;
  • the content of your message or inquiry;
  • information needed to respond to you.

As of the last update of this policy, the public medentic.org website does not appear to provide user accounts, online checkout, customer logins, file upload forms, or a self-service booking system.

4. Legal bases

We process data on the following GDPR bases where applicable:

  • Article 6(1)(f) GDPR - legitimate interests, for example in security, technical support, basic analytics, and responding to general inquiries;
  • Article 6(1)(b) GDPR - taking steps at your request before a potential contractual relationship, where your inquiry relates to a service, partnership, or business contact;
  • Article 6(1)(c) GDPR - where processing is necessary to comply with a legal obligation.

5. Recipients and processors

To the extent necessary for the website to operate, data may be processed by:

  • Vercel - for hosting, content delivery, infrastructure, and analytics;
  • Google - when embedded Google Maps is loaded;
  • email, telecommunications, and IT service providers where needed for correspondence, security, and support.

Where such providers process data outside the European Economic Area, Medentic relies on applicable transfer mechanisms where required, such as standard contractual clauses or other lawful safeguards used by the relevant provider.

6. Retention

We keep personal data only for as long as necessary for the purposes for which it was collected, unless a longer retention period is required by law.

More specifically:

  • technical logs and infrastructure data are usually kept for a limited operational period;
  • aggregated analytics data may be retained for longer to the extent that it does not identify specific individuals;
  • email or phone correspondence is kept for as long as reasonably necessary to handle the inquiry, maintain communication records, and protect Medentic's legitimate interests.

7. Your rights

Subject to applicable law, you have the right to:

  • access your personal data;
  • correct inaccurate data;
  • request erasure;
  • request restriction of processing;
  • object to processing based on legitimate interests;
  • data portability, where applicable;
  • lodge a complaint with a competent supervisory authority.

To exercise your rights, you may contact hi@medentic.org. We may request additional information to verify your identity where necessary.

8. Complaints

If you believe your data is being processed unlawfully, you may lodge a complaint with the Commission for Personal Data Protection in the Republic of Bulgaria or another competent supervisory authority under applicable law.

9. Changes to this policy

We may update this policy when the website, the services used on it, or applicable requirements change. The current version will always be published on this page.