Script24

Privacy policy

1. Controller

MEDINOW Sp. z o.o., Aleja Wojska Polskiego 33/9, 10-226 Olsztyn, Poland
Email: info@medinow.app · Phone: +48 576 851 416

2. What we process

  • Identity data: first and last name, date of birth, address, email, phone number, identity document number.
  • Health data: your answers about symptoms, conditions and medicines and, if you upload them, test results. These are special categories under Article 9 GDPR.
  • Order data: order number, amount, payment status. We do not receive full card details.

3. Purposes and legal bases

  • Carrying out the medical assessment - Article 6(1)(b) and, for health data, Article 9(2)(h) GDPR, together with your explicit consent under Article 9(2)(a).
  • Keeping medical records and accounting retention - Article 6(1)(c).
  • Handling complaints and defending legal claims - Article 6(1)(f).

4. Recipients

  • Stripe Payments Europe, Ltd. - payment processing.
  • Resend, Inc. - sending emails to you.
  • Cloudflare, Inc. - hosting this website.
  • Railway Corp. - running the application and database.

We do not sell your data and do not share it for advertising.

5. Transfers outside the EU

Some providers belong to groups established outside the European Economic Area. Where a transfer takes place it relies on the European Commission's standard contractual clauses or on an adequacy decision.

6. Retention

Medical records are kept for 20 years from the end of the calendar year of the last entry, as required by Polish law (Article 29 of the Polish Patients' Rights Act). Accounting records are kept for 5 years.

7. Your rights

You have the right of access, rectification, erasure, restriction, portability and objection, and you may withdraw consent at any time.

Limit on erasure: we may not delete medical records before the statutory period ends. Your user account, however, can be deleted at any time.

Write to info@medinow.app.

8. Complaint to a supervisory authority

You may complain to the President of the Polish data protection authority (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, Poland) or to the Data Protection Commission (DPC).

9. No automated decision-making

A human always reviews your request. We make no decisions based solely on automated processing and carry out no profiling within the meaning of Article 22 GDPR.

10. Cookies and analytics

This website sets no analytics or marketing cookies and embeds no tracking tools. The only data transmitted is what you submit through the order form.