Privacy policy

The controller of your data is MEDICAL ETHIC DIGITAL S.R.L., with registered office at Str. Lămâiței nr. 37, Corp A, Et. 1, Ap. 3, Sector 4, București, 040551, România, registered with the Trade Registry under no. J2023024647408, VAT number (CUI) 49325978.

For any question about your personal data you can write to us at contact@me-digital.ro. Full identification details are published on the Company details page.

We have not appointed a Data Protection Officer (DPO), as we do not fall under any of the situations that require one under Article 37 of Regulation (EU) 2016/679 (GDPR). Requests should be addressed directly to the email above.

Contact form. We collect your name, email address, optionally your phone number, the service you are interested in, and your message. We also retain the IP address and browser type (user agent) from which the message was sent, as a safeguard against abuse. The purpose is to reply to you and, where relevant, to prepare an offer. The basis is your consent, given by checking the box in the form, and the pre-contractual steps requested by you — Article 6(1)(a) and (b) GDPR.

Together with the message we record the exact moment you checked the box and the text you read at that time. We keep them so we can demonstrate consent, as required by Article 7(1) GDPR, and so you know exactly what you agreed to if the text is later changed.

Newsletter. We collect the email address, IP address and subscription source. The purpose is sending communications about automation and applied AI in business. The basis is consent — Article 6(1)(a) GDPR. You can unsubscribe at any time, with a single click on the link in the footer of every email we send you, or by writing to us. Unsubscribing takes effect immediately and does not require you to log in.

Traffic statistics. For each page visited we record the path accessed, the referring page, the browser and device type, the IP address, the approximate location (city, county, country) derived from the IP address, the visit duration, campaign parameters from the URL (utm_source, utm_medium, utm_campaign), and a session identifier kept for 30 minutes. The purpose is to understand how the site is used and to improve it. The basis is our legitimate interest in measuring and optimising our own site — Article 6(1)(f) GDPR.

The statistics are exclusively our own: we do not build behavioural profiles, we do not track visitors on other sites, we do not sell the data, and we do not use it for advertising. Details about the cookies used can be found in the Cookies policy.

Testimonials. If we ask you for a testimonial, we process the name, role, email address and content you submit, on the basis of consent — Article 6(1)(a) GDPR. The testimonial is made public only after our approval and with your agreement.

We do not sell or rent the data to anyone. We share it only with the providers the site's operation depends on, each strictly limited to its purpose:

• Resend — email delivery (notifications about messages received, subscription confirmations, newsletter).
• freeipapi.com — determining the approximate location from the visitor's IP address, at the moment the visit is recorded. The result is stored on our side, so the statistics dashboard makes no further external calls afterwards.
• Our infrastructure provider on which the site's server and database run.

We may also share data with public authorities, when required to by law.

• Contact-form messages: 3 years from the last interaction, so we can resume the conversation and demonstrate the business correspondence.
• Newsletter subscription data: until unsubscribed, plus a minimal record of the unsubscription, so we don't write to you again by mistake.
• Traffic statistics: 24 months.
• Published testimonials: for as long as they are displayed on the site, or until you withdraw your consent.

When a retention period expires, the data is deleted or irreversibly anonymised.

Under the GDPR, you have the following rights:

• the right of access to your data and to information about its processing;
• the right to rectification of inaccurate or incomplete data;
• the right to erasure of data ('the right to be forgotten');
• the right to restriction of processing;
• the right to data portability;
• the right to object to processing based on legitimate interest, including traffic statistics;
• the right to withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.

You can exercise any of these rights by writing to us at contact@me-digital.ro. We reply within 30 days at most.

If you are not satisfied with our response, you have the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP), B-dul G-ral. Gheorghe Magheru nr. 28-30, Sector 1, București, or to bring the matter before the courts.

The site is served exclusively over HTTPS. Access to the admin panel is protected by a password and two-factor authentication, with the account locked after repeated failed attempts. Access to the database is restricted to the server's internal network.

No technical measure offers an absolute guarantee, but we treat any security incident as a priority and will inform you if an incident affects your data, under the conditions set out by the GDPR.

Our services are aimed at companies and adults. We do not knowingly collect data from persons under 16. If we discover that we have received such data, we delete it.

We may update this policy when the way the site works or legal requirements change. The version in force is always the one published here, and the date of the last update is shown at the top of the page.