Privacy policy

Version dated 7 August 2025

At med-a, we take the protection of your personal data very seriously and respect your privacy. This privacy policy describes how we collect, use and protect your personal information when you visit our website or use our services. Please read this statement carefully to understand what information we collect and how we use it.

Type of data collected

We may collect and store various types of personal data about you when you visit our website or use our services. This includes:

Surname, first name, address and other contact details
E-mail address and telephone number
IP address, browser type and operating system
Information about your use of the website, such as visiting times and click behaviour
Payment and billing information if you purchase products or services
Other information that you provide to us voluntarily, e.g. in comments or contact forms

In addition, we use cookies and similar technologies to analyse and improve your use of our website. Cookies are small text files that are stored on your device when you visit our website. Personal data may also be processed in the process. We only use cookies if you have given us your consent to do so, unless the cookies are absolutely necessary for the technical functionality of our website.

By using our Cookie Consent Tool, you have the option to manage and withdraw your consent to the use of cookies. However, if you withdraw your consent, this may affect the functionality of our website.

You can change your cookie settings at any time by clicking on the following link: Data protection settings. Please note that certain cookies are necessary for the proper functioning of our website and that the performance of our website may be impaired without these cookies.

Processing purposes

We only process your personal data for specific purposes that are in accordance with legal requirements. The purposes for which we process your personal data may be as follows:

To provide you with our services and process your requests
To process your orders and provide products or services
To provide you with important information about our services
To improve our website and services and personalise your experience with us
For carrying out statistical analyses and market studies
For the fulfilment of legal obligations

We only use your personal data for the above-mentioned purposes or for other purposes for which we have obtained your consent. We do not sell your personal data to third parties and do not pass it on without your express consent, unless we are legally obliged to do so.

Legal basis for the processing

Your personal data is processed on one of the following legal bases:

Consent: We only process your personal data on the basis of your express consent. You can withdraw your consent at any time by contacting us or changing your settings in your account.
Contract fulfilment: We process your personal data in order to conclude and/or execute a contract with you, including the processing of your order and the provision of services.
Legitimate interest: We process your personal data on the basis of our legitimate interest to improve our services and personalise your experience with us. In doing so, we always ensure that your interests, fundamental rights and freedoms are not impaired.
Legal obligation: We process your personal data in order to comply with our legal obligations, e.g. to fulfil tax or regulatory obligations.

Recipients of personal data

Your personal data may be passed on by us to the following recipients:

Third party service providers: We work with third parties to provide certain services, e.g. payment processing or shipping services. These third parties only have access to the personal data they need to provide the service. We ensure that these third-party providers comply with all required data protection standards.
Other companies within our group: We may share your personal data with other companies within our group in order to provide you with better services.
Government and legal authorities: We may disclose your personal information to governmental and legal authorities if required to do so by law or if we believe it is necessary to protect our rights, property or safety and that of others.
Recipients outside the European Union: In some cases, your personal data may be transferred to recipients outside the European Union. We ensure that the transfer only takes place in a lawful manner, e.g. by concluding standard contractual clauses or by using certifications such as the EU-US Privacy Shield.

Duration of data storage

We only store your personal data for as long as is necessary to fulfil the purposes for which it was collected, unless there are legal retention obligations that require longer storage. If your personal data is no longer required for the fulfilment of the purpose and there are no legal retention obligations, it will be deleted or anonymised.

In detail, we store

Contact details: If you contact us via a contact form or by e-mail, we will save your contact details for processing the enquiry and in the event that further questions arise until the enquiry has been dealt with and no further communication is required.
Order data: When you place an order, we store your order data for the processing of the order and for the statutory retention periods, after which the data is deleted.
Usage data: When you visit our website, usage data such as IP address, date and time of access, pages accessed, operating system and browser type are automatically logged. This data is used for the security and optimisation of our website and for statistical purposes and is deleted after 14 months.

Rights of the data subject

As a data subject, you have the right to information, rectification, erasure, restriction of processing, objection to processing and the right to data portability. If you wish to exercise your rights, you can contact us at any time. Our contact details can be found at the end of this privacy policy.

Right to information: You have the right to request information about what personal data we have stored about you and for what purpose it is processed.
Right to rectification: You have the right to have incorrect or incomplete personal data that we have stored about you rectified.
Right to erasure: You have the right to request the erasure of your personal data if it is no longer required, has been processed unlawfully or you have withdrawn your consent.
Right to restriction of processing: You have the right to request the restriction of the processing of your personal data if the accuracy of the data is disputed by you, the processing is unlawful or you have objected to the erasure of your data.
Right to object: You have the right to object, on grounds relating to your particular situation, at any time to processing of your personal data where the processing is based on a legitimate interest.
Right to data portability: You have the right to request the transfer of your personal data to another controller in a structured, commonly used and machine-readable format, provided that the processing is based on consent or a contractual relationship and is carried out by automated means.

Do you suspect that the processing of your data violates the GDPR? In this case, you have the right to lodge a complaint with the Austrian data protection authority to raise.

Contact information

If you have any questions, comments or requests in connection with our privacy policy and the processing of your personal data, you can contact us at any time.

Person responsible: Antonella Milosavljevic
Address: Maria-Tusch-Strasse 6/10, 1220 Vienna

E-mail address: info@med-a.at
Telephone number: +43 (0) 676 4706852

We always endeavour to process your enquiries quickly and efficiently. However, please understand that in some cases there may be delays due to legal deadlines or complex issues. If you are not satisfied with our handling of your enquiry, you have the right to lodge a complaint with the competent supervisory authority.

Borlabs (Cookie Consent Tool)

We use the Cookie Consent Tool from Borlabs to obtain the consent of our users for the use of cookies on our website. The tool collects personal data such as IP address and browser information to ensure that consent is given in a legally compliant and traceable manner. This data is processed in accordance with data protection laws, with Borlabs acting as a processor. The legal basis for the processing is the user's consent. You have the right to withdraw your consent at any time.

Elementor

This website was created with the WordPress plugin Elementor. Elementor may collect and process personal data such as IP addresses and browser information in order to analyse and improve the use of the website. Cookies may also be set through the use of Elementor. For more information about what personal data is collected by Elementor and how it is processed, please refer to Elementor's privacy policy at https://elementor.com/privacy-policy/.