Cookie Policy

1. Scope and responsibility

“Medein”, “we”, “us”, and “our” refer to the organisation operating this brand website and deciding why the website and its public content are provided. Where the GDPR applies, Medein is the controller for the purposes and means it determines. Hosting and security providers may act as processors and may be independently responsible for processing they determine, as described in their own notices. Questions or rights requests may be submitted through our Contact page.

2. What cookies and similar technologies are

Cookies are small text files stored on a browser or device. Similar technologies include local storage, session storage, pixels, tags, and scripts that store information on, or access information from, a device. Session technologies expire when the browser session ends. Persistent technologies remain for a stated period or until the visitor deletes them.

3. Categories and EU/EEA legal basis

Article 5(3) of the EU ePrivacy Directive generally requires prior consent before information is stored on, or accessed from, a visitor’s device. The narrow exception covers technology strictly necessary to transmit a communication or provide a service explicitly requested by the visitor. A GDPR legitimate-interest or contract basis does not by itself authorise non-essential device storage or access.

No optional storage requiring consent is currently enabled. Where Medein controls personal-data processing needed to deliver and secure this public website, it relies on its legitimate interests under GDPR Article 6(1)(f), subject to necessity, balancing, transparency, and visitor rights. If consent-based technology is introduced later, consent must be freely given, specific, informed, unambiguous, recorded, and as easy to withdraw as to give under GDPR Articles 6(1)(a) and 7.

4. Current device-storage inventory

This inventory reflects the independent Sites-hosted deployment reviewed on 27 August 2026. Security configuration, browser state, or a hosting update can affect whether a strictly necessary security cookie appears. Medein will update this inventory before introducing a new purpose, provider, or optional technology.

5. Hosting and third-party services

No separate third-party analytics, advertising, or social-media SDK is configured in the Medein application. Normal links to external websites do not send a visitor to those websites until the visitor follows the link.

6. Data, purposes, and retention

Device-storage purposes and durations are listed in the inventory above. Website delivery and security may involve IP address, approximate location inferred from IP, request time, requested URL, referrer when supplied, browser and device headers, response status, and security signals. These data are used to deliver content, diagnose availability, prevent abuse, and protect the website. Hosting and security logs are retained only for the periods established by the applicable provider configuration and agreement and as necessary for those purposes; available details may be requested through the Contact page.

Medein does not intentionally use website storage to collect patient information, medical records, health information, genetic data, or other special-category data. Do not submit such information through this public website.

7. Your choices and withdrawal

• Clear this site’s browser storage to remove the Medein notice acknowledgement.
• Use browser settings to inspect, block, or delete cookies and local storage.
• Contact Medein to ask about the current technologies or exercise an applicable data-protection right.

There is currently no optional cookie consent to withdraw. If Medein introduces a consent-based technology, it will be blocked until a valid choice is made, rejection will be as easy as acceptance, and an equally easy way to withdraw consent will remain available without affecting processing that occurred before withdrawal. Blocking strictly necessary security technology may prevent the protected website from working correctly.

8. International transfers

Hosting and security providers may process technical data outside the visitor’s country, including outside the EEA. Where the GDPR restricts a transfer, the responsible controller must use an applicable safeguard, such as an adequacy decision or the European Commission’s Standard Contractual Clauses, and supplementary measures where required. Provider notices describe their respective transfer practices. Contact Medein to request available information about safeguards relevant to Medein’s processing.

9. Your data-protection rights

Where the GDPR applies, you may have rights of access, rectification, erasure, restriction, portability, and objection, plus the right to withdraw consent when consent is the legal basis. You may lodge a complaint with the supervisory authority in the EEA country where you live, work, or believe an infringement occurred. Requests relating to Medein may be submitted through our Contact page. You may also contact a provider directly about processing for which that provider is independently responsible.

10. Changes and contact

We will review this inventory when the hosting configuration, providers, purposes, or retention periods change. Material changes will be identified by a revised date. The notice acknowledgement is not used to authorise a changed purpose, provider, or technology, and a fresh valid choice will be requested where law requires it.

Questions or requests concerning this Policy can be submitted through the Medein Contact page. Do not include confidential research, patient, health, genetic, or other sensitive information in a general website inquiry.