Privacy policy
What data this site takes in, what it is used for, how long it is kept, and how to ask for it to be gone.
Last updated:
Controller
Meddyg Sociedad Anónima is the controller of the personal data collected at www.meddyg.com. Any question about this policy reaches the address below and is answered the same way.
| Detail | Value |
|---|---|
| Controller | Meddyg Sociedad Anónima |
| Company ID | 3-101-753619 |
| Address | San Francisco, Heredia, Costa Rica |
| hola@meddyg.com |
Data
Three things are collected: what you write in the contact form, what you answer in the maturity self-assessment if you complete it, and the technical data any server records while serving a page.
- From the form: your name, your email, your organisation if you give it, the topic of interest and the message.
- From the self-assessment: your answers about how your organisation handles information, and your name, job title, organisation, country, email and, if you give it, phone number.
- From the link that brought you: if it was a campaign link (for example, one of our social media posts), its origin and the page it pointed to, which are attached to your message if you write to us.
- From the server: IP address, date and time, page requested and browser type.
No health data or patient information is requested. If you include any in a message, it is treated with the same confidentiality as the rest and deleted along with it.
Information travels encrypted and access is limited to whoever needs it to handle your request. This site is not directed at minors and does not ask them for information.
Purposes
| Purpose | Legal basis |
|---|---|
| Replying to what you write to us | Your own request |
| Preparing and sending you the self-assessment result, and contacting you about it if you ask | Your own request |
| Preventing automated submissions and abuse of the form | Legitimate interest in keeping the service available |
| Keeping the site running and secure | Legitimate interest |
| Measuring use of the site in order to improve it | Your consent |
None of this is used for automated decisions or profiling, and no marketing is sent to people who write through the form.
Recipients
Personal data is neither sold nor traded. Providers act on our behalf, each with access only to what its part requires:
- Hosting and infrastructure for the site and the form.
- Email delivery, so your message reaches us.
- Audience and site-usage measurement.
- Protection against automated submissions and abuse.
You can ask us for the specific list of providers at any time by writing to the contact address.
Transfers
Some of those services process information outside Costa Rica, mainly in the United States and on global delivery networks.
In those cases the transfer relies on contractual data-protection clauses and on the safeguards each provider publishes for international transfers.
Retention
| What | How long |
|---|---|
| Form messages and the related email | For as long as the conversation lasts, and up to 24 months after |
| Technical server logs | 14 days |
| Your answer to the cookie notice | Until you clear the site's data |
| Audience and usage measurement data | Up to 14 months |
Once the period is over, the data is deleted or anonymised.
Your rights
You can ask us at any time to access your data, correct it, delete it, restrict its use, object to the processing, or receive it in a portable format. You can also withdraw any consent you gave, without affecting what was done before you withdrew it.
To exercise any of them, write to the contact address. We answer within the period set by the applicable law, and you may be asked to prove your identity before we act on the data.
Depending on where you live, your law may grant you rights beyond those above. They are handled the same way and with no difference in treatment.
Contact
Write to us first: it is usually quicker and almost always enough. If you are not satisfied, you can turn to the data protection authority that covers you.
If this policy changes, the date in the header is updated. When a change affects something that requires your consent, you are asked again.