These rules define and regulate how the owner of the website medex.hr uses and protects all information that users and visitors provide when using the website. We respect the privacy of our users and visitors. All data collected from this website is not made available to third parties, except in cases where such an obligation is regulated by law. Personal data is any information that relates to an identified or identifiable natural person. Specifically, personal data includes all information that establishes identity (for example, first and last name, personal identification number, email address, home address, etc.). The processing of personal data refers to any action or set of actions performed on personal data, whether by automated means or not, such as collecting, recording, organizing, storing, adapting or modifying, retrieving, reviewing, using, disclosing via transmission, publishing or otherwise making available, classifying or combining, blocking, deleting, or destroying, as well as performing logical, mathematical, and other operations with such data.

We collect personal data for the purpose of:

- responding to your inquiries and processing your requests as efficiently as possible
- ensuring the provision of the requested service
- promoting our services
- conducting statistical data analysis
- enabling the sending of newsletters, promotional materials, offers, and contacting you
- improving the quality of content, functionality, and services.

The owner of this website processes personal data for the purposes stated above based on legitimate interest. Legitimate interest exists when the data of users and visitors of this website is used for marketing activities, contacting for commercial purposes, or for the purpose of improving our own services, distributing informational and commercial messages to users’ addresses in electronic or written form.

We collect the following data you provide to us:

- first and last name
- phone/mobile
- email.

Disclosure of Information
Personal Data

We may disclose the data you provide: - For the purpose of fulfilling an agreed transaction with you or carrying out our business operations (e.g., to our company employees or designated service providers, such as software service providers) - If required by law enforcement authorities or legal representatives for the purpose of administrative and criminal proceedings, as prescribed by law and regulations - To acquirers or potential acquirers of our business or a key part of our business. We reserve the right to transfer data (including your personal data) to third parties in the event of a sale, merger, liquidation, or transfer of all or nearly all of our company’s assets, provided that the third party agrees to comply with the conditions of our privacy statement and that the third party uses your personal data only for the purposes for which you provided it to us. You will be notified in the event of such a transfer and will have the opportunity to opt out. If any personal data we hold about you is not accessible through our website/application, you may send us your request free of charge. In the case of any request regarding this Privacy Statement, and for the exercise of any of your rights, or if you have a complaint, please contact us via our official email: medex@medex.hr

You may also contact the competent data protection authority: The Croatian Personal Data Protection Agency, Martićeva ulica 14, HR-10000 Zagreb, email: azop@azop.hr. If you wish to object to the processing of your personal data based on legitimate interest, and no direct method of objection is available, please contact us via the following address: medex@medex.hr

Non-personal data We may share non-personal data with third parties, where this information is combined with similar information from other users of our website. For example, we may inform third parties about the number of unique users visiting our website, the demographic distribution of our website users, or the activities visitors engage in on our website. Third parties to whom we may provide this information may include potential or actual advertisers, advertising service providers (including website tracking services), commercial partners, sponsors, licensees, researchers, and other similar parties.

Data Deletion In accordance with applicable personal data protection regulations and the General Data Protection Regulation (GDPR), upon your request, you will be provided access, processing restriction, transfer, correction, and deletion of personal data. If you wish to exercise these rights, please contact us via email: medex@medex.hr

If you submit any such request, we will make reasonable efforts to verify your identity and prevent unauthorized processing of personal data. Right to be forgotten – How you can control the personal data you have provided to us We want you to have control over our use of your personal data, also known as the right to be forgotten.

You can exercise control in the following ways:

- you may request a copy of the personal data we hold about you;
- you may inform us of any changes to your personal data or request that we correct any personal data we hold about you;
- you may request that we delete the personal data we hold about you, or block or restrict the processing of your personal data, or object to certain ways in which we use your personal data; and
- you may request that the personal data you have provided to us be transferred to a third party.

We use personal data solely based on your consent. We process such data on the basis of legitimate interest or public interest. You are entitled to withdraw the given consent at any time and have the right to object to the use of your personal data in accordance with the provisions of the law governing the use of personal data. We will not verify the accuracy of the data provided and rely on you to ensure that your personal data is complete, accurate, and up to date. You may contact us without delay to notify us of any changes or inaccuracies regarding your personal data. Data retention Medex metal products will retain your personal data for the minimum period necessary to successfully fulfill the stated purpose for collecting such data. Personal data will be retained longer only if legally required or if necessary for the purpose of ongoing or potential future legal proceedings, or if it may help prevent fraud. If you wish to object to the processing of your personal data based on legitimate interest, and no direct method of objection is available, please contact us via: medex@medex.hr