Privacy Policy

Last updated: 11 August 2026

1. Introduction

Medi-Invest NV places great importance on the protection of your personal data and your privacy. We process your personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (the “General Data Protection Regulation” or “GDPR”), Belgian implementing legislation, and any other applicable privacy regulations.

This privacy policy applies to all visitors of our website medi-invest.eu and to anyone who contacts us through our website, requests a demonstration, registers for an event, or subscribes to our newsletter.

2. Controller

For questions about this privacy policy or the processing of your personal data, please contact us at the email address above.

3. Data we process

We process only the personal data you actively provide to us through forms on our website, or data that is automatically generated during your visit.

3.1 Contact form

• Name (required)
• Email address (required)
• Phone number (optional)
• Practice or company name (optional)
• Country (required)
• Your message (free text field)
• The devices you tick in the optional “Which devices are you interested in?” field
• The page you opened the form from — for example the device your question is about, or the topic (e.g. “starting a practice”, “expansion”). You do not enter this yourself; it is derived from the link that brought you to the form.

3.2 Demo request

The contact details listed above, supplemented by the device or treatment for which a demonstration is requested.

3.3 Event registration

Name, email address, practice name, and the stated number of participants for the relevant event.

3.4 Newsletter

Your email address only.

3.5 Technical data

When you use our website, we may automatically record: your language preference (based on browser settings or your choice), and UTM parameters present in the URL (e.g. utm_source, utm_medium, utm_campaign) passed by marketing campaigns. We do not collect IP addresses for identification purposes.

4. Purposes and legal bases

The table below summarises the purposes for which we process your data and the corresponding legal basis under Article 6 GDPR.

Where we rely on a legitimate interest, we have carried out a balancing test and concluded that our interest outweighs your privacy interest, taking into account the limited nature of the data processed and the reasonable expectations of data subjects in a B2B context.

5. Recipients of your data

We share your personal data only with processors acting on our behalf, with whom we have entered into a data processing agreement. We never sell your data to third parties.

Sanity.io is used as a content management system for editorial content. No personal data of website visitors is stored in Sanity.

Vercel Analytics processes only anonymised core web statistics (Core Web Vitals) and falls outside the scope of the GDPR.

An email provider and CRM system will be selected at a later date. Once integrated, this policy will be updated with the relevant information.

6. International transfers

All processing described in the table above takes place within the European Economic Area (EEA) or is otherwise protected by appropriate safeguards (such as the European Commission’s Standard Contractual Clauses).

Our fonts are self-hosted on our own servers. No font requests are sent to Google Fonts or any other external CDN, meaning your browser’s IP address is not transmitted to third parties when pages load.

7. Cookies

We use cookies and similar technologies. For a full overview of the cookies we place, their purpose, and your choices, please refer to our cookie policy.

8. Retention periods

• Form submissions (contact, demo, event): a maximum of 2 years after the last interaction, unless an ongoing business relationship justifies longer retention.
• Newsletter subscriptions: until you withdraw your consent or unsubscribe.
• Error logs (Sentry): a maximum of 90 days.
• Analytics data: in accordance with the retention period of the relevant provider (14 months by default for Google Analytics 4).

9. Your rights

Under the GDPR, you have the following rights:

• Right of access— You may request which personal data we process about you.
• Right to rectification— You may have inaccurate or incomplete data corrected.
• Right to erasure— You may request the deletion of your data (“right to be forgotten”), subject to statutory retention obligations.
• Right to restriction of processing— You may request a temporary restriction of processing in certain circumstances.
• Right to data portability— You have the right to receive your data in a machine-readable format, to the extent processing is based on consent or a contract.
• Right to object— You may object to processing based on legitimate interests.
• Right to withdraw consent— Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before the withdrawal.

Send your request to info@medi-invest.eu. We will respond within 30 days. We may ask you to verify your identity before fulfilling your request.

10. Complaints

If you believe we are not processing your personal data in accordance with the GDPR, you have the right to lodge a complaint with the competent supervisory authority:

• Data Protection Authority (GBA/APD)— Belgium
  Rue de la Presse 35, 1000 Brussels
  www.dataprotectionauthority.be
• Dutch Data Protection Authority (AP)— Netherlands
  P.O. Box 93374, 2509 AJ The Hague
  www.autoriteitpersoonsgegevens.nl

11. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or destruction. All data is transmitted encrypted via TLS. Access to systems containing personal data is restricted to authorised employees on a need-to-know basis. We periodically review and improve our security measures.

12. Changes

We may update this privacy policy periodically, for example when our services change or new legal requirements apply. The date at the top of this policy indicates when it was last updated. For material changes, we will notify you via a notice on the website.