Privacy Policy

Last updated: 2 September 2026

1. Introduction

Medi-Invest NV places great importance on the protection of your personal data and your privacy. We process your personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (the “General Data Protection Regulation” or “GDPR”), Belgian implementing legislation, and any other applicable privacy regulations.

This privacy policy applies to all visitors of our website medi-invest.eu and to anyone who contacts us through our website, requests a demonstration, requests documentation, registers for an event, or subscribes to our newsletter.

2. Controller

For questions about this privacy policy or the processing of your personal data, please contact us at the email address above.

3. Data we process

We process only the personal data you actively provide to us through forms on our website, or data that is automatically generated during your visit.

3.1 Contact form

• Name (required)
• Email address (required)
• Phone number (optional)
• Practice or company name (optional)
• Country (required)
• Your message (free text field)
• The devices you tick in the optional “Which devices are you interested in?” field
• The page you opened the form from — for example the device your question is about, or the topic (e.g. “starting a practice”, “expansion”). You do not enter this yourself; it is derived from the link that brought you to the form.

3.2 Demo request

The contact details listed above, supplemented by the device or treatment for which a demonstration is requested.

3.3 Event registration

Name, email address, practice name, and the stated number of participants for the relevant event.

3.4 Documentation request

• Name (required)
• Email address (required)
• Phone number (optional)
• The page and section you requested the documentation from — for example the device the documents relate to. You do not enter this yourself; it is derived from the page on which you opened the form.

We do not ask for a practice name or country here: neither is needed to send you the documents.

3.5 Newsletter

Your email address only.

3.6 Technical data

When you use our website, we may automatically record: your language preference (based on browser settings or your choice), and UTM parameters present in the URL (e.g. utm_source, utm_medium, utm_campaign) passed by marketing campaigns. We do not collect IP addresses for identification purposes.

4. Purposes and legal bases

The table below summarises the purposes for which we process your data and the corresponding legal basis under Article 6 GDPR.

Where we rely on a legitimate interest, we have carried out a balancing test and concluded that our interest outweighs your privacy interest, taking into account the limited nature of the data processed and the reasonable expectations of data subjects in a B2B context.

What that interest is, specifically. For handling contact requests and sending documentation: giving you an answer to what you asked us. For commercial follow-up of a documentation request: our interest in following up with professional buyers who show interest in our equipment. For technical operation, error detection and campaign measurement: keeping the website working reliably and knowing which channels bring visitors.

For follow-up of a documentation request, we take into account that this concerns business contact details of someone who asked us for documentation about our equipment of their own accord, that we process no special categories of data and do not profile, and that a member of staff judges case by case whether getting in touch is worthwhile. You may object to this at any time; see section 9.

5. Recipients of your data

We share your personal data only with processors acting on our behalf, with whom we have entered into a data processing agreement. We never sell your data to third parties.

Sanity.io is used as a content management system for editorial content. No personal data of website visitors is stored in Sanity.

Vercel Analytics processes only anonymised core web statistics (Core Web Vitals) and falls outside the scope of the GDPR.

Our CRM system. What you enter in a contact or documentation request form is recorded in our own CRM system, which we host ourselves on European servers. That is where our sales team follows up on your request. We intend to move to Odoo as our CRM in time; when we do, we will update this policy before the migration.

6. International transfers

All processing described in the table above takes place within the European Economic Area (EEA) or is otherwise protected by appropriate safeguards (such as the European Commission’s Standard Contractual Clauses).

Our fonts are self-hosted on our own servers. No font requests are sent to Google Fonts or any other external CDN, meaning your browser’s IP address is not transmitted to third parties when pages load.

7. Cookies

We use cookies and similar technologies. For a full overview of the cookies we place, their purpose, and your choices, please refer to our cookie policy.

8. Retention periods

• Form submissions (contact, demo, documentation request, event): a maximum of 2 years after the last interaction, unless an ongoing business relationship justifies longer retention.
• Requests in our CRM system: for as long as there is a commercial relationship or an active sales process, and thereafter a maximum of 2 years after the last contact. If you request erasure or object to commercial follow-up, we act on that sooner — see section 9.
• Download links for requested documentation: the link in the email expires after seven days.
• Newsletter subscriptions: until you withdraw your consent or unsubscribe.
• Error logs (Sentry): a maximum of 90 days.
• Analytics data: in accordance with the retention period of the relevant provider (14 months by default for Google Analytics 4).

9. Your rights

Under the GDPR, you have the following rights:

• Right of access — You may request which personal data we process about you.
• Right to rectification — You may have inaccurate or incomplete data corrected.
• Right to erasure — You may request the deletion of your data (“right to be forgotten”), subject to statutory retention obligations.
• Right to restriction of processing — You may request a temporary restriction of processing in certain circumstances.
• Right to data portability — You have the right to receive your data in a machine-readable format, to the extent processing is based on consent or a contract.
• Right to object — You may object to processing based on legitimate interests. If you object to commercial follow-up, we stop it without weighing it up — and we record that in our CRM system, not only in our mailing list. You do not have to give a reason.
• Right to withdraw consent — Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before the withdrawal.

Send your request to info@medi-invest.eu. We will respond within 30 days. We may ask you to verify your identity before fulfilling your request.

10. Complaints

If you believe we are not processing your personal data in accordance with the GDPR, you have the right to lodge a complaint with the competent supervisory authority:

• Data Protection Authority (GBA/APD) — Belgium
  Rue de la Presse 35, 1000 Brussels
  www.dataprotectionauthority.be
• Dutch Data Protection Authority (AP) — Netherlands
  P.O. Box 93374, 2509 AJ The Hague
  www.autoriteitpersoonsgegevens.nl

11. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or destruction. All data is transmitted encrypted via TLS. Access to systems containing personal data is restricted to authorised employees on a need-to-know basis. We periodically review and improve our security measures.

12. Changes

We may update this privacy policy periodically, for example when our services change or new legal requirements apply. The date at the top of this policy indicates when it was last updated. For material changes, we will notify you via a notice on the website.