This policy details how SC Info Med Expert SRL, as the administrator of the Medmarket.ro online platform (the "Operator" or "we"), handles the personal data of its users and clients, ensuring compliance with the General Data Protection Regulation (Regulation (EU) 2016/679 - GDPR) and relevant national laws.

 

1. Data Controller Information

 

RoleDetails

Data ControllerSC Info Med Expert SRL

Registration No. (ANSPDCP)19194 (as previously registered)

AddressStr. Trup Uricani 209, Miroslava, Iasi County, Romania

Contact Email: office@medmarket.ro

 

2. Commitment to Data Protection

 

We guarantee the security and confidentiality of the data submitted through the forms on the Medmarket.ro website. We commit not to disclose your personal data to unauthorized third parties and to use it strictly for the purposes outlined in this policy.

 

3. Definitions (As per GDPR)

 

• Personal Data: Any information relating to an identified or identifiable natural person ('Data Subject'); an identifiable natural person is one who can be identified, directly or indirectly (e.g., name, identification number, location data, online identifier).

• Processing: Any operation performed on personal data, such as collection, recording, organization, storage, adaptation, retrieval, use, disclosure, or erasure.

• Controller (Operator): The natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.1

   

• Processor: A natural or legal person, public authority, agency, or other body which processes personal data on behalf 2of the controller.3

   

• Consent: Any freely given, specific, informed, and unambiguous indication of the Data Subject's wishes by which he or s4he, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

   

 

4. Purposes and Legal Basis for Processing

 

We process your personal data based on the following legal grounds and for the specified purposes:

Purpose of ProcessingLegal Basis (GDPR Article 6)

Contractual FulfillmentExecution of a Contract (Art. 6(1)(b))

Legal ComplianceCompliance with a Legal Obligation (Art. 6(1)(c))

Marketing and Commercial ActivitiesConsent (Art. 6(1)(a))

Dispute Resolution & Debt RecoveryLegitimate Interest (Art. 6(1)(f))

Special Categories of DataExplicit Consent (Art. 9(2)(a))

Specific Purposes include:

1. Contract Execution: Processing orders, delivery, invoicing, managing returns, resolving customer complaints/requests, and pursuing debt recovery.

2. Legal Obligations: Communications and reporting to authorized state institutions, governmental agencies, or judicial bodies (e.g., tax authorities, consumer protection, criminal proceedings).

3. Recruitment: Evaluating candidates who apply for vacant positions.

4. Marketing: Informative newsletters, direct mailings, promoting products/services, and offering special deals, based strictly on your explicit consent. We do not promote SPAM.

5. Service Provision: Processing special categories of personal data (Art. 9(2) GDPR) where indispensable for providing specific goods or services (e.g., health data for certain medical devices, based on your explicit consent).

 

5. Your Rights as a Data Subject (GDPR Rights)

 

As a User or Client of Medmarket.ro, you benefit from the following rights regarding your personal data:

RightDescriptionHow to Exercise

Right to Information & AccessTo know if your data is being processed and to receive a copy of your personal data undergoing processing.Written request to office@medmarket.ro.

Right to RectificationTo have inaccurate personal data corrected or incomplete data completed.Via your online account or written request.

Right to Erasure ("Right to be Forgotten")To request the deletion of your personal data, under conditions provided by law (e.g., if data is no longer necessary for the purpose collected).Written request to office@medmarket.ro.

Right to Restriction of ProcessingTo request the marking of stored personal data with the aim of limiting its future processing (e.g., if you contest accuracy).Written request to office@medmarket.ro.

Right to Data PortabilityTo receive the personal data you provided to us in a structured, commonly used, and machine-readable format, and to transmit that data to another controller without hindrance.Written request to office@medmarket.ro.

Right to ObjectTo object at any time to the processing of your data, particularly for direct marketing purposes or processing based on legitimate interest.Written request to office@medmarket.ro. You can unsubscribe from newsletters using the link in the email footer.

Right to Withdraw ConsentTo withdraw your consent at any time, where processing is based on consent. Withdrawal does not affect the legality of processing prior to withdrawal.Via your online account settings or written request.

Right to Judicial RemedyThe right to lodge a complaint with the competent supervisory authority (ANSPDCP) or seek remedy through the courts.Contact the ANSPDCP (www.dataprotection.ro) or the relevant court.

 

6. Data Retention and Account Management

 

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected or to comply with applicable legal, accounting, or reporting requirements.

Any User who has explicitly provided data on the company's websites can access their account at any time via their login details to modify or partially or totally delete their data.

 

7. Disclosure to Third Parties and Categories of Recipients

 

We may disclose your personal data, based on your express and unequivocal consent or a legal obligation, to the following categories of recipients:

• State Authorities: Including, but not limited to, fiscal authorities, consumer protection authorities, and competent criminal investigation bodies, as required by law.

• Medmarket Marketplace Merchants: Other merchants involved directly or indirectly in supplying goods and services to you via the Medmarket platform.

• Service Providers: Marketing service providers, delivery companies, legal professionals, notaries, or bailiffs, when necessary for contractual fulfillment or legal requirements.

 

8. Financial Data Security

 

SC Info Med Expert SRL, through its websites or employees, does not request or store any details related to your bank card. All payment transactions are handled securely by specialized payment processors in compliance with industry standards.

 

9. Contact for Data Subject Rights

 

If you wish to exercise any of the rights listed above, please send us a written request detailing your issue and the action you require:

• Email: office@medmarket.ro

• Mail/Courier: Info Med Expert SRL, str. Trup Uricani 209, loc. Miroslava, Judetul Iasi, Romania.