Legal
Privacy Policy
In short: this website uses no cookies and stores nothing on your device. It has no analytics, no advertising and no social media trackers, and loads nothing from other websites. The only personal data we receive is what you choose to write in the contact form, and we use it only to reply to you.
1. Who is responsible for your data
The data controller is Medical Energy Consulting srl (MEDENCO.EU), Via Paleocapa 6, 20121 Milano, Italia — VAT number 11715020969.
You can contact us about privacy using the contact form on this website or by post at the address above.
This policy covers the website www.medenco.eu. It is written in accordance with Regulation (EU) 2016/679 (GDPR), the Italian Personal Data Protection Code (Legislative Decree 196/2003, as amended) and the rules on cookies and similar technologies (Directive 2002/58/EC, art. 122 of the Code, and the Italian Data Protection Authority's guidelines on cookies of 10 June 2021).
2. Cookies: this website is cookie-free
This website does not use cookies of any kind. In detail:
- No technical cookies — not even session cookies. The site works without them, including the contact form.
- No analytics cookies — we do not use Google Analytics or any other statistics tool, on the site or in the background.
- No profiling or advertising cookies — we do not track you, build profiles or show ads.
- No third-party cookies — the website loads nothing from other websites: no Google Fonts, no Google Maps, no YouTube or other embedded videos, no social media buttons or plugins, no external scripts or CDNs. All text, images, fonts and code are served from www.medenco.eu itself, so no other company receives information about your visit through this website.
- No similar technologies — the website does not use local storage, session storage, IndexedDB, tracking pixels, web beacons or device fingerprinting. Nothing is saved on your device.
Because no cookies or similar technologies are used, there is no cookie banner and no consent to give: there is nothing to accept or refuse. The server is also configured to remove any cookie from its responses, so none can be set by accident.
If we ever decide to use cookies in the future, we will update this policy and, where required by law, ask for your consent before setting them.
3. Visiting the website
When you visit any website, your browser automatically sends some technical information to the server. Like every web server, the server hosting www.medenco.eu records this in standard access logs: IP address, date and time, the page or file requested, the response code, the referring page and the type of browser and operating system.
- Purpose: to deliver the website, keep it secure and investigate abuse or technical faults.
- Legal basis: our legitimate interest in running a secure website (art. 6.1.f GDPR).
- Who processes it: our hosting provider, which keeps these logs on our behalf for a limited time under its own security measures. We do not use them for statistics or to identify visitors, and we do not combine them with other data.
4. The contact form
If you write to us through the contact form, we receive the data you enter: your name, your email address, the subject and your message, plus the date and time of sending.
- Purpose: to reply to your request and, if you ask, to provide information about our services or partnership opportunities.
- Legal basis: steps taken at your request (art. 6.1.b GDPR). Name, email and message are needed to reply; the subject is optional.
- How it works: the form is sent over an encrypted connection (HTTPS) and delivered to us by email. The website does not save your message in a database.
- Anti-spam protection: to block automated spam, the server counts how many messages are sent from the same connection in one hour. For this it uses a temporary file named after a one-way code (hash) derived from the IP address — not the IP address itself — containing only the times of sending. Entries older than one hour are discarded.
- How long we keep it: in our mailbox for as long as needed to handle your request and any follow-up, and in any case no longer than 24 months. If the exchange leads to a contract, the related correspondence is kept for the period required by law (in Italy, generally 10 years for accounting and contractual documents).
Please do not include sensitive data (for example about health) in your message unless it is strictly necessary for your request.
5. Who receives your data
Your data is handled by our staff only to reply to you. It is not sold, rented or shared with third parties for their own purposes, and it is not used for marketing.
It is technically processed by the providers that run our website and email (hosting and email services), acting as data processors on our behalf. We do not transfer your data outside the European Economic Area; if a provider ever needed to, it would be only with the safeguards required by the GDPR (for example, the European Commission's standard contractual clauses).
We may disclose data to public authorities only when required by law.
6. No automated decisions
We do not use your data for automated decision-making or profiling.
7. Your rights
Under articles 15–22 of the GDPR you have the right to:
- access your data and receive a copy;
- have it corrected or completed;
- have it deleted;
- restrict its processing;
- receive it in a portable format;
- object to processing based on our legitimate interest.
To exercise your rights, write to us using the contact form or by post at the address in section 1. We will reply within one month.
You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Roma — www.garanteprivacy.it) or with the authority of the EU country where you live or work.
8. Security
The website is served only over encrypted connections (HTTPS). We collect as little data as possible, store no visitor data on the website itself and keep the server configuration up to date.
9. Minors
This website is addressed to businesses and professionals. It is not intended for children, and we do not knowingly collect data from people under 14.
10. Changes to this policy
We may update this policy, for example if the website changes. The date at the top shows the latest version.