MEDAI® – Digital Health Technology & R&D

1. General information

The data controller is: MEDAI sp. z o.o., ul. Prof. dr Mieczława Michałowicza 12, 43-300 Bielsko-Biała, Poland. NIP: 5472217169, REGON: 385526755, KRS: 0000827308, D-U-N-S®: 851446750. Contact: info@medai.pl

This document sets out the principles for processing personal data, use of cookies, use of the website and protection of user privacy. MEDAI processes data in accordance with Regulation (EU) 2016/679 (GDPR).

2. Scope of application

This policy applies to data processed in connection with use of the MEDAI website, communication with the administrator, traffic analysis and use of digital services or R&D projects. It covers all domains and language versions of the MEDAI brand (including medai.pl, medai.es, medai.fi, medai.tr, medai.dk, medai.nu, medai.me.uk). It does not apply to third-party websites.

3. Categories of data collected

Contact data: name, email address, organisation name, message content. Technical data (collected automatically): IP address, browser type, operating system, device type, language settings. Analytics data: pages visited, time on site, traffic source, statistical data — for statistical purposes only.

4. Purposes of processing

Personal data may be processed for: handling enquiries, business communication, ensuring correct operation of the website, traffic analysis and service quality improvement, IT security, fulfilment of legal obligations, research and development activities.

5. Legal basis for processing

Data is processed on the basis of: Art. 6(1)(a) GDPR – user consent; Art. 6(1)(b) GDPR – contract performance; Art. 6(1)(c) GDPR – legal obligation; Art. 6(1)(f) GDPR – legitimate interest (IT security, site analysis, service development).

6. Cookies

The website uses cookies – small text files stored on the user's device enabling correct operation, saving settings and analysing traffic. Cookie management is done via browser settings; disabling cookies may limit functionality.

7. Analytics tools

The website may use Google Analytics 4 (GA4) provided by Google LLC, USA, for statistical purposes only. More info: https://policies.google.com/privacy

8. Recipients of data

Data may be shared with IT service providers, hosting operators, analytics tool providers and legal/accounting entities — solely on the basis of appropriate agreements. MEDAI does not sell personal data.

9. Transfer of data outside the EEA

In some cases, data may be transferred outside the European Economic Area using the European Commission's standard contractual clauses.

10. Data retention period

Data is retained for the period necessary to fulfil processing purposes. Contact data — until the end of communication; analytics data — in accordance with analytics tool settings; legally required data — for the period required by applicable law.

11. User rights

The user has the right to: access, rectification, erasure, restriction of processing, data portability, objection and withdrawal of consent. Requests: info@medai.pl

12. Right to lodge a complaint

If you believe that processing of your data violates data protection regulations, you have the right to lodge a complaint with the competent data protection supervisory authority.

13. Data security

MEDAI applies appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction and unauthorised modification.

14. Intellectual property

Content on the website (texts, graphics, research materials, project names) may be protected by intellectual property rights. Trademarks may belong to MEDAI sp. z o.o. or cooperating entities.

15. Data in R&D activities

MEDAI conducts R&D activity in digital technologies. Statistical or technical data on website use may be used for statistical analysis, testing of technological solutions, service quality improvement and algorithm research — solely in aggregated, anonymised or pseudonymised form.

16. Limitation of liability

Content on the website is informational and does not constitute medical, legal or financial advice. MEDAI is not liable for the consequences of using it without consulting a specialist.

17. Policy changes

This privacy policy may be updated periodically. The current version is always available on the MEDAI website.

18. Contact

For matters concerning personal data: MEDAI sp. z o.o., info@medai.pl

19. Compliance with international regulations

MEDAI operates internationally and seeks to comply with applicable data protection regulations in various jurisdictions.

In particular, data processing takes into account:

GDPR (European Union)

UK GDPR (United Kingdom)

other data protection regulations applicable in countries where the MEDAI website or services are available.

20. Users in the United Kingdom

For users located in the United Kingdom, data is processed in accordance with:

UK GDPR and the Data Protection Act 2018.

Users have rights under these regulations, including the right of access, rectification, erasure and restriction of processing.

21. Users in Turkey

For users located in Turkey, data is processed taking into account:

Turkish Personal Data Protection Law (KVKK – Law No. 6698).

Users have the right to obtain information about data processing and to request rectification or erasure in accordance with applicable regulations.

22. Users from other countries

The MEDAI website may be accessible to users from various countries worldwide.

By using the website, the user acknowledges that their data may be processed in accordance with this privacy policy and the laws applicable to the data controller.

In the event of discrepancies between local regulations and this policy, the regulations applicable to the relevant jurisdiction shall apply to the extent required by law.