Data Protection Notice (GDPR)
In accordance with the General Data Protection Regulation (GDPR), MedBoost informs you about the processing of your personal data.
1. Data Controller
As MedBoost, we process your personal data in the capacity of data controller under the GDPR.
2. Personal Data Processed
| Data Category | Data |
|---|---|
| 👤 Identity Information | First name, last name |
| 📧 Contact Information | Email address, phone number, WhatsApp messages |
| 🔒 Transaction Security | IP address, browser information, cookie data |
| 💼 Customer Transactions | Website URL, clinic name, service requests |
| 📈 Marketing | Pages visited, site usage data |
3. Purposes of Personal Data Processing
Your personal data is processed for the following purposes:
- Receiving and evaluating your service requests
- Providing SEO analysis and audit services
- Contacting you and providing information
- Analyzing and improving website performance
- Fulfilling legal obligations
- Improving service quality
4. Legal Basis (GDPR Art. 6)
Your personal data is processed based on the following legal grounds under Article 6 of the GDPR:
5. Transfer of Personal Data
Your personal data may be transferred to the following third parties for the purposes stated above:
| Recipient | Purpose | Country |
|---|---|---|
| Google LLC | Website analytics (GA4) | USA |
| Cloudflare Inc. | Web hosting and security | USA |
| Meta Platforms Inc. | WhatsApp communication | USA |
⚠️ International transfers: The service providers listed above are based in the USA. Data transfers are carried out under appropriate safeguards in accordance with GDPR Chapter V, including Standard Contractual Clauses (SCCs) where applicable.
6. Data Retention Period
Your personal data is retained for as long as necessary to fulfill the purposes of processing. Contact data is kept for the duration of the service relationship and subsequently for any legally required retention periods.
7. Your Rights Under the GDPR
Under Articles 15-22 of the GDPR, you have the following rights:
- 1 Right of access to your personal data (Art. 15)
- 2 Right to rectification of inaccurate data (Art. 16)
- 3 Right to erasure / "right to be forgotten" (Art. 17)
- 4 Right to restriction of processing (Art. 18)
- 5 Right to data portability (Art. 20)
- 6 Right to object to processing (Art. 21)
- 7 Right not to be subject to automated decision-making (Art. 22)
- 8 Right to withdraw consent at any time (Art. 7(3))
- 9 Right to lodge a complaint with a supervisory authority (Art. 77)
8. How to Exercise Your Rights
✉ Contact address: info@medboost.net
You can submit a written request along with information to verify your identity. Your requests will be processed free of charge within 30 (thirty) days at the latest.
9. Changes
This data protection notice may be updated due to changes in legal regulations and our data processing activities. The current version will always be published on this page.