Privacy Policy

MEDISOURCE Sarl, a limited liability company with registered office at 47 BIS B - Boulevard CARNOT - 13100 AIX EN PROVENCE, France, is the data controller of the personal data collected and processed via this Site (the “Data Controller”).

This Privacy Policy aims to provide you with comprehensive information on how the Data Controller collects and processes your personal data.

By accessing and using our Site you agree to be bound by this Privacy Policy, which may be changed or updated at any time without notice. Any changes will be posted on the Site, and we advise you to check it regularly.

I. PURPOSES OF THE PROCESSING AND NATURE OF THE DATA COLLECTED

We collect and process the personal data you voluntarily provide to us for you to access and use our online services, purchase products and to submit enquiries to our team.

We also collect and process data about our users' preferences and traffic (such as IP addresses, etc.). We automatically collect certain data when you visit the www.medcline.eu Site: for example, information about the origin of the connection, the type and version of your Internet browser, the duration of your connection, etc.

In this case, the lawful basis for processing your personal data is your consent.

Specifically, we process your personal data so that you may:

• Visit our Site;
• Create an account to buy products;
• Download our online resources;
• Helps us improving our services;
• Receive commercial and marketing offers.

To open an account on the Site, you must provide us with all relevant information necessary for you to enjoy the account services. In this case, the lawful basis for processing your personal data is your consent.

We also collect and process information relating to our contractual relationship with you: billing and delivery details, purchase history, services subscribed to, billing details, customer service activity, etc.

In this case, the lawful bases for processing your personal data are our obligation to fulfil a contract and our tax and statutory obligations.

We use cookies on this Site. A cookie is a small text file sent by a website to a user’s computer or device. Its function is to enable the site to function, to facilitate navigation (remember technical choices, past activity), to improve the use of the site and the service and to better understand the experience of users.  

Our Cookie Policy is availablehere.

We may also use cookies or trackers:

• To secure your browsing and to allow us to improve your user experience, in particular by recognising the username and password;
• To analyse traffic and data on the Site in order to measure the number of users of the Site, to make it easier to use and to ensure its ability to respond promptly to your requests.

Upon your option, we may also send commercial or marketing communications to you.In this case, the lawful basis for processing your personal data is your consent.

The Data Controller doesn't collect or process any special category data, such as data related to your racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, etc.

II. PROCESSING OF PERSONAL DATA

The Data Collector collects and processes your personal data in a fair and lawful manner, strictly in compliance with the applicable law.

MEDISOURCE has appointed a point of contact that can be reached at the following email address: contact@medcline.eu

III. RETENTION OF PERSONAL DATA

The Data Controller will make its best effort to prevent loss, misappropriation, intrusion, unauthorised disclosure, alteration or destruction of the personal data you provide to us.

In particular, we wish to highlight that:

• All personal data are stored on servers hosted by SHOPIFY.
• The Data Controller’s employees are subject to an obligation of confidentiality and non-disclosure of Personal Data.
• Access to your personal data is governed by a strict access control policy, reserved for authorised persons, under strict conditions.
• The Data Controller uses service providers who ensure an equivalent level of care, protection and safety in personal data processing.

The Data Controller stores your personal data in strict accordance with the following statutory provisions:

• We retain personal data relating to the Customer's account, orders and invoices as long as required by the applicable tax, accounting and civil regulations.
• We keep information relating to users who are not yet customers for 3 years from the last contact coming from the user.
• We retain personal data of inactive Customers for the purpose of sending information on our commercial and marketing offers for a period of 3 years after the last purchase.
• We are obliged to keep for 1 year the following Personal Data resulting from the creation, modification or deletion of User Content:
• Identification of the connection
• Nature of the operation
• Date and time of the operation
• Identification used by the person carrying out the operation.

Where the retention of personal is no longer justified by any legal obligation or on any other statutory basis, or where you request us to delete personal data in application of your rights, we will promptly and securely delete your personal data.

IV. ACCESS TO YOUR PERSONAL DATA

Depending on the purposes for which personal data are processed, members of the customer, support, administrative, accounting, technical, marketing & sales departments within the Data Controller’s organization may have access to personal data. Access to your personal data is strictly based on individual written authorisations.

The Data Controller may share personal data with data processors for the purpose of carrying out its business activities or provider services to users (e.g., couriers, etc.).

V. TRANSFER OF PERSONAL DATA

We mostly store your personal data in the territory of the European Union and of the United Kingdom.

If personal data are to be transferred to data processors located countries outside the European Union and the United Kingdom, the Data Controller first ensures that such transfer is lawful and that appropriate safeguards are in place.

VI. COMMUNICATIONS

We may send emails to you at the email address associated with your Account for reasons relating to our business relationship, namely, technical or security reasons, administrative reasons relating to your participation in our events, or to inform you of developments in our service offering.

VII. DATA PROTECTION RIGHTS

You are entitled to the following statutory rights:

• The right to access personal data held about them;
• The right to be informed about how and why their personal data is used;
• The rights to have their personal data rectified, erased or restricted;
• The right to object to the processing of their personal data;
• The right to portability of their personal data;
• The right not to be subject to a decision based solely on automated processing; and
• The right to file a complaint with the competent supervisory authority.

You can exercise your data protection rights by writing to contact@medcline.eu orat the following postal address: MEDISOURCE, 47 BIS B BOULEVARD CARNOT - 13100 AIX EN PROVENCE.  

You can also:

• Modify your personal data directly from your MEDISOURCE Account, if you have one; and/or
• Manage the submission of promotional communications (not related to a transaction) by simply clicking on the "unsubscribe" link at the bottom of emails sent by the Data Controller.

Sharing of Personal Data

The Controller discloses part of the personal data to third parties involved in the fulfilment of the orders or in the after-sale process. In these cases, the communication of personal data to suppliers is necessary to fulfil contractual obligations.

This is without prejudice to the disclosure of personal data where required by judicial authorities, other public entities for purposes of defense or public security or for the prevention, investigation or suppression of administrative or criminal offenses, and in all those in cases where disclosure or dissemination of Personal Data is required by the applicable law.

In all other cases, the disclosure or distribution of personal data is subject the unequivocal consent of the concerned user.