MEDELEM LTD — Privacy Policy

Last updated: 8 September 2026

1. Who we are

MEDELEM LTD operates medelem.com and is the controller of the personal data described below.
Address: Pere Toshev 2, 2800 Sandanski, Blagoevgrad, Bulgaria
Email: info@medelem.com

2. What we collect

When you browse the site. Our server records the technical data that accompanies any web request: IP address, browser and device type, the pages requested, the referring page and the time. Our security plugin keeps these records in order to detect and block attacks.

When you accept statistics cookies. Only after you agree, Yandex Metrica and Google Analytics collect information about your visit: pages viewed, time spent, approximate location derived from your IP address, device and browser characteristics, and a randomly generated visitor identifier. Neither tool loads before you consent, and you can withdraw consent at any time.

When you register a business account. First name, last name (optional), company name, business type, company address, city, postal code, country and region, telephone number, VAT or tax identification number (optional), email address, and a password you choose.

When you place an order. Billing and delivery details, the products ordered, and correspondence relating to the order.

When you contact us. The content of your message and your contact details, whether by email or through WhatsApp if you choose to start a chat.

3. Why we use it, and on what legal basis

• Creating and operating your business account and processing orders — performance of a contract, Art. 6(1)(b) GDPR.
• Verifying that an applicant is a business — legitimate interest, Art. 6(1)(f). We supply medical imaging consumables to businesses and institutions, not to consumers.
• Site security and blocking attacks — legitimate interest, Art. 6(1)(f).
• Invoicing, accounting and tax records — legal obligation, Art. 6(1)(c).
• Statistics through Yandex Metrica and Google Analytics — your consent, Art. 6(1)(a).
• Answering your enquiry — steps taken at your request prior to entering into a contract, Art. 6(1)(b), or legitimate interest.

4. Cookies

The site sets a small number of strictly necessary cookies that keep your language choice, your shopping cart and your consent decision. Statistics cookies are set only after you accept them. A full list, with names and lifetimes, is in our Cookie Policy. You can change or withdraw your choice at any time through the consent settings.

5. Who receives your data

• Our hosting provider, which operates the servers on which the site runs.
• Yandex, for Metrica statistics, only with your consent.
• Google, for Analytics statistics, only with your consent.
• Our email provider, for correspondence.
• Carriers, payment providers and customs agents, where an order requires it.
• Our accountants, and public authorities where the law requires disclosure.
• Cloudflare, which checks that people using our forms are not automated scripts.

We do not sell personal data and we do not share it for advertising purposes.

6. Transfers outside the European Economic Area

Yandex Metrica processes data on servers in the Russian Federation. Google Analytics processes data on servers in the United States. Both operate only if you accept statistics cookies, and both stop as soon as you withdraw that consent. Transfers to Google rely on the EU–US Data Privacy Framework and standard contractual clauses. If you prefer that no statistics data leaves the European Economic Area, decline statistics cookies.

Cloudflare, Inc., established in the United States, provides the anti-spam check on our forms. It receives your IP address and basic browser data on every page of this site, and it stores nothing on your device. This check is strictly necessary to keep the site usable, so it runs whether or not you accept cookies. Transfers to Cloudflare rely on the EU–US Data Privacy Framework and standard contractual clauses.

7. How long we keep it

• Account and order records: while the account exists, and afterwards for as long as Bulgarian accounting and tax law requires, up to ten years.
• Security logs: up to twelve months.
• Statistics data: for the retention period configured in each tool, up to twenty-four months.
• Correspondence: up to three years.

8. Your rights

You may request access to your data, correction of inaccurate data, erasure, restriction of processing, or a copy in a portable format. You may object to processing based on legitimate interest, and you may withdraw consent to statistics cookies at any time without affecting the lawfulness of processing before withdrawal.

Write to info@medelem.com. We answer within one month. If you believe we have handled your data unlawfully, you may lodge a complaint with the Bulgarian Commission for Personal Data Protection in Sofia, or with the supervisory authority of the country in which you live.

9. Automated decision-making

We do not make decisions about you by automated means, and we do not carry out profiling.

10. Children

The site is intended for businesses and institutions. We do not knowingly collect personal data from children.

11. Changes to this policy

When this policy changes we update the date at the top of the page. Material changes affecting how we use your data will also be announced on the site.