![269-logo-eng-header.png](https://static.super.website/fs/super-website/userFiles/mediconbg/images/269-logo-eng-header.png?v=1607588830)
General Data Protection Regulation
This Policy governs how Medicon Events EOOD, UIC 206262099 ("We", "Us", or "Our") processes personal data. "Personal Information" or "Personal Data" refers to any information that allows someone to identify you directly or indirectly. "Processing" of personal data means any collection, use, sharing, and storage of personal data.
PERSONAL INFORMATION WE COLLECT
The personal data of the following categories of data subjects are processed:
Participants - Participants are individuals who have personally registered to participate in an event organized by Medicon Events.
Corporate Clients - Corporate Clients are representatives of legal entities that use our event organization and execution services (for companies).
The following categories of personal data are processed:
- Event Video Recording
Personal data includes the on-site recorded video file. The data is processed to document the conducted event.
Collection method: - Automatically collected data
We do not receive personal data from third parties. - Identification Data
Personal data may include names, identifiers, ID card data, and other information necessary to provide the agreed-upon services. The identification data is necessary to identify the data subject for the purpose of contract conclusion and fulfillment of Medicon Events' services.
Collection method: - Data collected personally from the data subject
We do not receive personal data from third parties. - Website Behavior Data
Personal data includes visited pages, session duration, and other data. The data is collected to improve the user experience of our website visitors and attract new clients. The data subject may refuse the processing of personal data by using our cookie banner.
Collection method: - Automatically collected data
We do not receive personal data from third parties. - Order and Payment Data
Information about the order made, date of dispatch, and receipt of payment, transfer amount, payer, recipient, and other information contained in the payment order or similar document. The data is processed to track payment for our services and fulfill our financial obligations.
Collection method: - Data collected personally from the data subject
- Data collected through a third party
We do not receive personal data from third parties. - Social Media Behavior Data
User names, comments, likes, and reactions. We process user behavior data from social media to manage the Company’s profiles and pages on social media.
Collection method: - Data collected through a third party
We receive personal data from: - Social networks
- Accounting Data
The processed personal data includes data for the issuer and recipient of invoices, identifier, address, data on provided and received services, their value, data on completed payments, and any other information we are obliged to process concerning legal accounting requirements. The Company processes personal data to fulfill its legal obligation to maintain accounting records.
Collection method: - Data collected personally from the data subject
We do not receive personal data from third parties.
PURPOSE AND LEGAL BASIS FOR PROCESSING
The privacy policy describes the processing of personal data in connection with the following services:
- Event Organization and Execution (for Participants)
Medicon Events provides comprehensive event organization and execution services, seminars, and conferences, which may include assistance with accommodation and transportation. - Event Organization and Execution (for Companies)
Medicon Events provides comprehensive event organization and execution services, seminars, and conferences according to the client's request, which may include assistance with accommodation, transportation, hall rentals, event assistance, sound systems, and printing of promotional materials.
Personal data is processed for the following purposes:
- Purpose: Site Behavior Analysis
Legal Basis: Consent
Categories of Processed Data: - Data on Site Behavior
- Internal Accounting
Legal Basis: Legal obligation
The processing is necessary to fulfill our legal obligations under the Accounting Law and all other applicable laws.
Categories of Processed Data: - Order and Payment Data
- Accounting Data
- Event Organization and Execution
Legal Basis: Contract fulfillment
Personal data is processed for providing the following services: - Event Organization and Execution (for Participants)
- Event Organization and Execution (for Companies)
Categories of Processed Data: - Identification Data
- Order and Payment Data
- Managing Social Media Profile and Page
Legal Basis: Legitimate interest
The Company has a legitimate interest in spreading information about its activities and services. This information is shared on social networks, which are public and intended for communication. Data subjects are free to interact with the Company's profiles and pages without any obligation to do so. The activity has minimal impact on the rights and freedoms of data subjects.
Categories of Processed Data: - Social Media Behavior Data
DATA RETENTION PERIODS
Personal data is stored only as long as necessary to achieve the purpose for which it is processed. A complete list of the purposes for which we process personal data can be found above.
The appropriate retention period for personal data is determined based on the amount, nature, and sensitivity of the processed personal data, the potential risk of harm from unauthorized use or disclosure of personal data, whether the purposes of processing can be achieved by other means, as well as applicable legal requirements (such as relevant limitation periods).
Personal data is stored according to one or more of the following retention periods:
- For Establishing, Exercising, or Defending Legal Claims
We retain some data when necessary for establishing, exercising, or defending legal claims, such as defense against claims for breach of contract or non-compliance with applicable regulations. - With Automatic Deletion
Some data is stored for a predefined period, after which it is automatically deleted. Such data may include data collected through cookies or log files. - In Contractual Relations
Data is stored for the duration of the contractual relationship, provided there is no other basis for their retention. - In Case of a Legal Obligation
Data is stored for the period stipulated by law or regulation. - When Creating Backups (Backup)
To ensure data security, backups of data are created. Due to technical reasons, permanent deletion of data may be performed some time after the request for deletion has been made from working systems.
DATA SHARING
We share personal data with the following categories of third parties:
- Communication Service Providers
We share personal data with communication service providers to coordinate internally within the team and serve the Company’s clients. Categories of shared data: - Correspondence
- Courier Service Providers
Personal data is shared with courier service providers when necessary for the execution of services provided by Medicon Events. Categories of shared data: - Identification Data
- Cloud and Hosting Service Providers
We share personal data with cloud and hosting service providers to provide our Services and manage our business processes. Categories of shared data: - Identification Data
- Payment Service Providers
We share data with payment service providers, including banks and non-banking institutions, for the purpose of administering incoming and outgoing payments. Categories of shared data: - Order and Payment Data
- Streaming Service Providers
Personal data is shared with streaming service providers when the organized event is broadcast online. Categories of shared data: - Event Video Recording
- Accounting Service Providers
We share data with accounting service providers to fulfill our legal obligations for maintaining accounting records. Categories of shared data: - Order and Payment Data
- Accounting Data
- Data Analysis Service Providers
We share personal data with data analysis service providers, specifically for analyzing visitor behavior on our website. Categories of shared data: - Data on Site Behavior
- Revenue Authorities
We share data with revenue authorities such as the National Revenue Agency (NRA), National Social Security Institute (NSSI), etc., when necessary to fulfill our contractual or legal obligations. Categories of shared data: - Order and Payment Data
- Accounting Data
- Tour Operators and Carriers
Personal data is shared with tour operators and carriers to purchase plane, bus, or other tickets or use other transport services when instructed by the Client as the Data Controller. Categories of shared data: - Identification Data
- Hotels
Personal data is shared with hotels in the course of the services provided by Medicon Events when instructed by the Client as the Data Controller. Categories of shared data: - Identification Data
DATA SUBJECT RIGHTS
As a data subject, you have the following rights:
- Right to Information
You have the right to be informed about the personal data we process about you and how we process it.
You can obtain information through:
- This Policy
- Information we provide when you use our Services
- By submitting an inquiry to our contact email.
See how to contact us here. - Right of Access
You have the right to request access to the personal data we process about you.
To gain access to your personal data, you can contact us. See how to contact us here.
- Right to Rectification
You have the right to request rectification or updating of the data we process about you when it is inaccurate or incomplete.
You can request rectification of your personal data by contacting us.
- Right to Erasure
You have the right to request the deletion of your personal data when: - The personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
- You withdraw your consent, on which the processing is based, and there is no other legal basis for the processing;
- You object to the processing and there are no overriding legitimate grounds for the processing;