Privacy Policy

1. Who processes the data

The controller is Medalyx Group, Yekaterinburg, Russia.

Questions about data processing, withdrawal of consent and deletion requests should be sent to info@medalyxgroup.com. Full company registration details are available on request.

2. What data is collected

Through the commercial-offer request form you provide:

• organization name
• contact person's name
• phone number
• e-mail address
• business segment selected from the list
• your comment, if you wrote one
• the catalog items you ticked

The country code the request was sent from is stored alongside the request. It is derived by Cloudflare's infrastructure from the IP address; the IP address itself is not included in the request, but is processed by Cloudflare as the infrastructure operator.

The site uses no cookies and contains no advertising pixels. An anonymous visitor counter, Cloudflare Web Analytics, is active: it counts page views and load speed, writes no cookies, does not touch browser storage and does not track you across other sites. See section 5 for details.

Your browser's sessionStorage temporarily holds the list of catalog items you ticked, so it survives a language switch. That list contains no personal data and is cleared when you close the tab.

3. Why the data is needed

• to prepare and send you a commercial offer
• to contact you about your enquiry and clarify details
• to conduct business correspondence regarding your request

The data is not used for marketing mailings, is not passed to third parties for their own purposes and is not sold. No automated decision-making or profiling is applied.

4. Legal basis

Processing is based on your consent, given by ticking the corresponding box in the form before sending.

Consent may be withdrawn at any time by writing to info@medalyxgroup.com. Processing then stops and the data is deleted unless the law requires it to be retained longer.

5. Who receives the data

The request is delivered through third-party services, which means cross-border data transfer:

• Cloudflare, Inc. (USA) — website hosting and form request handling
• Cloudflare, Inc. (USA) — anonymous visit statistics (Cloudflare Web Analytics): page address, referrer, device type and load speed. The counter script is loaded from the domain static.cloudflareinsights.com
• Telegram Messenger — instant notification of a new request
• Google LLC (USA) — the mailbox the request arrives in

By submitting the form you consent to this transfer.

There are no other recipients. The site's own fonts, styles and scripts are loaded only from medalyxgroup.com.

6. How long the data is kept

The request and related correspondence are kept while work on your enquiry is ongoing, and thereafter within the period established by law for retaining business correspondence.

You may request earlier deletion by writing to info@medalyxgroup.com.

7. Your rights

You have the right to:

• obtain information about which of your data is being processed
• request correction of inaccurate data
• request blocking or deletion of your data
• withdraw your consent to processing
• lodge a complaint with the competent supervisory authority or court

To exercise any of these rights, write to info@medalyxgroup.com. A reply is sent within the period established by law, and no later than 30 days.

8. How the data is protected

• the site works over HTTPS only, the connection is encrypted
• no request database is kept on the site: the request goes straight to the messenger and the mailbox, no copy remains on the server
• access to the mailbox and messenger is limited to company staff

9. Changes to this policy

The current version is always available at this address. The date of the last update is shown at the top of the page. Material changes are not applied retroactively to data already collected.