Legal
Privacy policy
This policy explains what personal data we collect through the MedLux Group website, why we use it and what rights you have over it.
Last updated: 11 August 2026
1. Who we are
MedLux Group SRL, with its registered office at str. Boris Zavatin 102, Chișinău, Republic of Moldova, is the controller of the personal data collected through this website.
You can contact us at medlux.group@gmail.com or on +373 60 861 505 with any question about how your data is processed.
To be confirmed with the client: Add the company registration number (IDNO) and, if one is appointed, the data protection officer's details.
2. What data we collect
We collect only the data you voluntarily provide through the contact form: your full name, email address, phone number (optional) and the content of your message.
For technical and security purposes, the server temporarily records the IP address and browser type from which the enquiry was sent, in order to prevent abuse of the form.
We do not use analytics, advertising or tracking cookies. We do not build profiles and we do not make automated decisions based on your data.
3. Why we use it and on what basis
We use the data solely to respond to your enquiry, send you an offer and maintain the commercial communication relating to that request.
The legal basis is your consent, given by ticking the box in the form, together with our legitimate interest in responding to commercial enquiries we receive.
We do not use the data for unsolicited marketing and we do not send newsletters without separate consent.
4. Who we share it with
We do not sell or rent your personal data to any third party.
Messages sent through the form are delivered to our email inbox, hosted by Google (Gmail). The website is hosted by Vercel Inc. Both providers may process the data strictly for the purpose of providing their service.
We may disclose data to authorities only where the law expressly requires it.
To be confirmed with the client: If a CRM, newsletter service or analytics tool is added, list it here explicitly.
5. How long we keep it
We retain commercial correspondence for as long as necessary to act on the enquiry, and for the period required by applicable accounting and tax legislation where the enquiry leads to a contractual relationship.
If the enquiry does not proceed, we delete the message on request or, absent a request, within a maximum of 3 years.
To be confirmed with the client: Confirm the actual retention periods with the client's accountants.
6. Your rights
You have the right to access your data, to rectification, erasure, restriction of processing, objection and portability. You may withdraw your consent at any time, without affecting the lawfulness of processing carried out beforehand.
To exercise these rights, write to us at medlux.group@gmail.com. We respond within 30 days at the latest.
If you believe your rights have been infringed, you may contact the National Centre for Personal Data Protection of the Republic of Moldova.
7. Data security
The website uses encrypted HTTPS connections for all transmissions. Access to the mailbox receiving the enquiries is protected by two-step authentication.
We apply technical rate-limiting measures to prevent automated abuse of the form.
8. Changes
We may update this policy to reflect changes in our services or in legislation. The version in force is always the one published on this page, together with the date it was last updated.