Privacy Policy

Identity of the data controller

The data controller responsible for processing your personal data is:

What data do we collect?

We collect only data that you voluntarily provide to us, primarily through our contact form:

• Last name and first name
• Email address
• Subject and content of your message
• Phone number (if provided)

We do not collect any browsing data or location data, and we do not use any tracking or audience analysis tools.

Why do we collect this data?

Your data is never used for commercial prospecting without your prior and explicit consent.

Legal basis for processing

The processing of your data is based on the following legal grounds in accordance with Article 6 of the GDPR:

• Your consent — when you fill in and submit our contact form
• Legitimate interest — to respond to your requests and manage our commercial relationship
• Legal obligation — to comply with our accounting and tax obligations

Retention period

Beyond these periods, your data is securely deleted or anonymised.

Sharing of data

Your personal data is never sold or transferred to third parties for commercial purposes. It may only be shared in the following cases:

• Hosting provider (Combell) — for the technical management of the site, under contract and in compliance with the GDPR
• Legal obligations — if a competent public authority requires it as part of a legal procedure

Data security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, destruction or disclosure:

• Secure connection via HTTPS protocol (SSL certificate)
• Secure hosting with Combell, a certified operator
• Access to data restricted to authorised personnel only
• No storage of sensitive data without necessity

Your rights

In accordance with the GDPR, you have the following rights regarding your personal data:

• Right of accessObtain a copy of the personal data we hold about you.
• Right of rectificationCorrect any inaccurate or incomplete information.
• Right to erasureRequest the deletion of your data, subject to our legal obligations.
• Right to objectObject to the processing of your data for prospecting purposes.
• Right to restrictionRequest the temporary suspension of the processing of your data.
• Right to portabilityReceive your data in a structured, commonly used and machine-readable format.
• Right to withdraw consentWithdraw your consent at any time, without affecting the lawfulness of prior processing.

To exercise these rights: info@medfit.be

We undertake to respond to your request within one month (Article 12 GDPR).

You also have the right to lodge a complaint with the Data Protection Authority (DPA).

Changes to this policy

We reserve the right to modify this privacy policy at any time, particularly in the event of legal or regulatory changes or changes in our practices. The last updated date at the top of this page will be amended accordingly.

Contact

For any questions regarding this policy or the processing of your personal data: