Privacy and Cookies Policy

Name: Privacy Policy
Brand: Medical Device HQ

Effective date: 2026-07-21

Who we are

Welcome to the website of Medical Device HQ AB, Björkvägen 14, 22456 Lund, Sweden. Medical Device HQ AB is a Swedish company registered under Org. No.: 556736-4541 and VAT no: SE556736454101 (“us”, “we”, “our”, or “Medical Device HQ”). You can reach us at support@medicaldevicehq.com

Medical Device HQ operates the https://medicaldevicehq.com website (the “Website”). Through the Website, we provide services (the “Service”) described explicitly and comprehensively in the Terms of Service available at https://medicaldevicehq.com/terms-of-service-web-services. Our services also include webinars that we host or participate in, which may be offered through external webinar platforms.

Unless otherwise defined in this Privacy and Cookies Policy, the terms used in this Privacy and Cookies Policy have the same meanings as in our Terms of Service. Medical Device HQ acts as the controller of personal data collected and processed in connection with use of the Website, our webinars, and correspondence with us.

All our activities connected with the Website, webinars, and correspondence with us comply with the applicable data protection legislation, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (“GDPR”).

The main goal of this Privacy and Cookies Policy is to inform you how and for what purpose we process personal data in connection with your visit to and use of the Website, participation in our webinars, and correspondence with us.

Why we collect and process data

We collect and process your data to ensure and improve the functioning of the Website and to provide our services, including webinars that we host or participate in.

We collect and process your personal data, (i.e. information that identifies, or at least makes it possible to identify, you as a natural person) when you voluntarily decide to create an account on the Website, order the Service, register for or attend a webinar, decide to leave us your feedback regarding our Service, or email us.

Furthermore, we collect and process certain technical data generated as a result of your visiting the Website. Such data may also be considered personal data.

Providing personal data is generally voluntary, but may be necessary to use certain services or functionalities of the Website.

We may also receive personal data from third parties (for example, webinar partners or event organisers) where applicable.

What data we collect and process

We collect several different types of information for various purposes to provide and improve our Service. The types of information we collect and process depend on the types of Services we provide via the Website. We collect and process your personal data:

when you create an account,
when you register for and attend a webinar,
when you register and attend a Classroom Session,
when we enter into a contract (non-checkout/no form) or establish a business relationship,
to follow-up in relation to your prior interest in our Services,
when you leave a review or testimonial,
when you sign up for a newsletter,
to segment our users into relevant professional groups to personalise newsletters, updates, and educational materials,
to send campaigns to existing customers,
when you register and take an online course,
to verify the authenticity and validity of our certificates,
when you submit an inquiry through our contact forms,
when you apply to take part in the Validator Programme,
when we provide emailing support,
when you browse the Website,
when you sign up for the Professional Plan,
when you make a purchase on the Website,
to protect against and/or recover claims.

Account Creation:

When you ask us to create your account, we will collect and process the following personal data:

email address,
name and surname,
phone number,
address,
IP address.

Where your personal data is collected and processed for the purpose of creating your account, the legal basis is the need to perform the contract (legal basis under Article 6(1)(b) of the GDPR) and the legitimate interests in safeguarding our systems, preventing misuse, managing customer relationships, improving our services (legal basis under Article 6(1)(f) of the GDPR). Data will be processed until the account is deleted and/or there is our legitimate interest, in any case for no more than ten years from the deletion of the account.

Webinars:

When you register for a webinar that we host or participate in, we collect and process the following personal data:

name and surname,
email address,
company name and job title (if provided),
any questions or information you submit during registration,
webinar attendance information (e.g., whether you joined and for how long),
IP address and technical data necessary for access.

If we cooperate with another organisation on a webinar, we may receive your registration details from the webinar host, or we may share your registration details with the host, depending on how the webinar is organised. Each organisation involved will handle your information in line with its own privacy practices, which will be clearly indicated at the point of registration.

Where your personal data is collected and processed for the purpose of registering you for and delivering the webinar, the legal basis is the need to perform the contract (legal basis under Article 6(1)(b) GDPR) and our legitimate interests in managing and improving our webinar activities (legal basis under Article 6(1)(f) GDPR). Data will be processed for the duration necessary to deliver the webinar and for a period reflecting our legitimate interests, in any case no longer than ten years from the webinar date.

If you choose to receive marketing communications in connection with the webinar, this will be based on your separate consent (legal basis under Article 6(1)(a) GDPR), which you may withdraw at any time.

Classroom Session Registration and Attendance:

When you want to register and attend a Classroom Session, we will collect and process the following personal data:

email address,
name and surname,
phone number,
address,
title,
user name,
nickname,
password,
image of user,
IP address.

Where your personal data is collected and processed for the purpose of Classroom Session registration and attendance, the legal basis is the need to perform the contract (legal basis under Article 6(1)(b) of the GDPR) and the legitimate interests in managing and administering Classroom Sessions, ensuring platform and participant security, preventing misuse, maintaining attendance records, improving our services (legal basis under Article 6(1)(f) of the GDPR). Data will be processed until the account is deleted and/or there is our legitimate interest, in any case for no more than ten years from the deletion of the account.

Entering into a Contract (non-checkout/no form) or establishing a business relationship:

When we enter into a contract outside of the check-out or form or establish a business relationship, we will collect and process the following personal data:

email address,
name and surname,
phone number,
address,
IP address.

Where your personal data is collected and processed for the purpose of entering into a contract outside of the check-out or form, or when we establish a business relationship, the legal basis is the need to perform the contract or take steps at your request prior to entering into the contract (legal basis under Article 6(1)(b) of the GDPR) and the legitimate interests in managing contractual and business relationships, maintaining appropriate records, safeguarding our systems and communications, preventing misuse (legal basis under Article 6(1)(f) of the GDPR). Data will be processed until the contract is terminated and/or there is our legitimate interest, in any case for no more than ten years from the termination of the contract.

Follow-up communications related to prior interest in our Services:

Where you have previously contacted us, requested information, participated in discussions, or otherwise expressed interest in our services, we may process your contact details (such as name and email address) to send follow-up communications related to our services.

These communications are limited in frequency and are intended to maintain contact, share relevant information, and, where appropriate, re-activate a prior business dialogue. Follow-up communications are sent within a defined time period and are not ongoing indefinitely.

The legal basis for this processing is our legitimate interest (Article 6(1)(f) GDPR), understood as maintaining and developing business relationships and ensuring that individuals who have previously expressed interest in our services remain informed about relevant updates or opportunities.

You have the right to object to this processing at any time under Article 21 GDPR. You may do so by contacting us at support@medicaldevicehq.com. If you object, we will cease sending follow-up communications without undue delay.

Personal data processed for this purpose will be retained only for as long as necessary to carry out the follow-up cycle or until you object, whichever occurs first.

Review or Testimonial:

When we enter into a contract under which you can provide us with a review or a testimonial, we will collect and process the following personal data:

email address,
name and surname,
phone number,
address,
IP address,
username,
nickname,
image of the user.

Where your personal data is collected and processed for the purpose of entering into a contract to provide us with a review or a testimonial, the legal basis is the need to perform the contract (legal basis under Article 6(1)(b) of the GDPR) and the legitimate interests in publishing and promoting authentic reviews and testimonials, preventing misuse or fraudulent submissions, improving our services (legal basis under Article 6(1)(f) of the GDPR). Data will be processed until the contract is terminated and/or there is our legitimate interest, in any case for no more than ten years from the last action performed.

Newsletter:

When you sign up independently for our newsletter, we will collect and process the following personal data:

email address,
name and surname,
IP address.

Where your personal data is collected and processed for standalone newsletter subscription purposes, the legal basis is your voluntary consent (legal basis under Article 6(1)(a) of the GDPR).

You may withdraw your consent at any time by clicking the “unsubscribe” link included in our emails or by contacting us at support@medicaldevicehq.com. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

Data will be processed until the consent is withdrawn.

Where communications are sent as part of a contractual relationship or programme participation (for example, the Validator Programme), a different legal basis may apply as described in the relevant section of this Privacy Policy.

Marketing Communications and CRM Segmentation:

Where you voluntarily provide information about your job role, professional function or area of responsibility (for example, when registering for an Online Course or applying to participate in the Validator Programme), we may use this information to better understand the professional profile of our users and to ensure that our communications are relevant to their professional interests.

Depending on the context in which your data was collected, we may process this information for the following purposes:

segment our users into relevant professional groups,
personalise newsletters, updates, and educational materials,
provide information about products, services, or events that may be relevant to your professional role,
manage customer relationships within our CRM systems.

The legal basis for such processing depends on the context:

Where you have subscribed to receive marketing communications independently, the legal basis is your voluntary consent (Article 6(1)(a) GDPR).
Where communications are sent as part of a contractual relationship or programme participation (for example, the Validator Programme), the legal basis is Article 6(1)(b) GDPR (performance of a contract) and our legitimate interest under Article 6(1)(f) GDPR in managing and developing our professional education services.
In certain B2B contexts, limited CRM management activities may also be based on our legitimate interest (Article 6(1)(f) GDPR), provided your rights and interests do not override such interest.

You may object to the processing of your personal data for marketing purposes at any time (Article 21 GDPR). If you object, we will cease such processing without undue delay.

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Data will be retained only for as long as necessary for the relevant purpose or until you withdraw consent or object to processing, whichever occurs first.

We do not carry out automated decision-making producing legal effects or similarly significant effects based on this segmentation.

Marketing Communications to Existing Customers (Soft Opt-In):

Where you have purchased, registered for, or completed one of our courses or services, we may use your email address to send you information about similar courses, educational content, services, events, or related professional offers that may be relevant to your previous participation or purchase.

Such communications are sent on the basis of our legitimate interest (Article 6(1)(f) GDPR), understood as maintaining and developing our relationship with existing customers and informing them about similar professional education services that may be relevant to them.

Where required under applicable electronic marketing laws, these communications are sent in accordance with the “soft opt-in” principle. This means we may contact existing customers regarding similar services where:

we obtained the contact details in connection with a sale, registration, or negotiation for our services;
the marketing relates to our own similar services or products; and
you were given the opportunity to opt out of such communications both at the time your data was collected and in every subsequent communication.

You may object to receiving marketing communications at any time by clicking the “unsubscribe” link included in our emails or by contacting us at support@medicaldevicehq.com. If you object, we will stop sending such communications without undue delay.

Personal data processed for this purpose will be retained only for as long as necessary for the relevant marketing activities or until you object to such processing.

Online Course Registration and Participation:

When you want to register and participate in an Online Course, we will collect and process the following personal data:

email address,
name and surname,
phone number,
address,
user name,
nickname,
password,
image of the user,
title, job role, professional function or area of responsibility,
IP address

Where your personal data is collected and processed for the purpose of Online Course registration and participation, the legal basis is the need to perform the contract (legal basis under Article 6(1)(b) of the GDPR) and the legitimate interests in managing and delivering Online Courses, ensuring platform and participant security, preventing misuse, facilitating participant interaction, improving our services, maintaining training records and certificate records, including records necessary to verify certificates issued by Medical Device HQ (legal basis under Article 6(1)(f) of the GDPR). Data will be processed until the account is deleted and/or there is our legitimate interest, in any case for no more than ten years from the last action performed.

Certificate Verification:

We may process limited personal data relating to issued certificates for the purpose of verifying the authenticity and validity of certificates issued by Medical Device HQ, preventing fraud, protecting the integrity of our certification programmes, responding to certificate verification requests, and maintaining confidence in qualifications evidenced by our certificates.

For this purpose, we may process information contained in certificate records, including certificate identifiers, participant name, course information, certificate issue date, and certificate status.

The legal basis for this processing is our legitimate interest (Article 6(1)(f) GDPR), understood as maintaining the reliability and credibility of our certification programmes, preventing misuse of certificates, protecting our reputation, and enabling legitimate certificate verification.

When responding to certificate verification requests, we limit the information disclosed to what is necessary to confirm the authenticity and validity of the certificate. We do not disclose additional personal data unless authorised by the certificate holder or otherwise permitted by applicable law.

Data will be retained for as long as reasonably necessary to maintain certificate verification records, protect against fraud, comply with legal obligations, or establish, exercise, or defend legal claims.

Inquiry via Contact Form:

When you want to submit an inquiry through our contact form, we may collect and process the following personal data, depending on the form available on our Website:

email address,
name and surname,
country,
company name,
business address,
business email address,
IP address.

Where your personal data is collected and processed for the purpose of submitting an inquiry through our contact form, the legal basis is the need to perform the contract or take steps at your request prior to entering into the contract (legal basis under Article 6(1)(b) of the GDPR) where inquiry relates to potential contract or the legitimate interests pursued by the controller for general inquiries (legal basis under Article 6(1)(f) of the GDPR). Data will be processed until the purpose of contact is achieved and/or there is our legitimate interest, in any case for no more than three years from the last action performed.

Validator Programme Application and Participation:

When you apply to become a course validator, we collect and process the following personal data:

name and surname,
work email address,
job role or professional function,
any information you voluntarily provide in your application response (e.g. motivation statement),
IP address and technical data related to submission.

We process this data for the purpose of:

evaluating your suitability as a validator,
administering and managing the Validator Programme,
granting access to course materials,
communicating with you in connection with validator activities,
sending related educational resources and relevant offers as part of the Validator Programme.

The legal basis for this processing is:

Article 6(1)(b) GDPR – taking steps at your request prior to entering into a contract and performance of the Validator Programme agreement; and
Article 6(1)(f) GDPR – our legitimate interest in managing and developing our educational programmes and professional community.

Participation in the Validator Programme includes receiving communications related to the course, validator activities, training resources, and relevant educational offers. You may unsubscribe from marketing communications at any time. Unsubscribing will not affect your participation in the Validator Programme, but you may no longer receive marketing-related updates.

Application data will be retained for 3 years from the date of submission unless a longer retention period is required to defend legal claims or comply with legal obligations.

We do not use validator application responses for automated decision-making or profiling.

Emailing Support:

When you require emailing support, we will collect and process the following personal data:

email address,
name and surname,
phone number,
IP address

Where your personal data is processed for the purpose of responding to your inquiry and providing support related to our services, the legal basis is Article 6(1)(b) GDPR (performance of a contract or taking steps at your request prior to entering into a contract).

We may additionally process certain correspondence and related data based on:

Article 6(1)(c) GDPR, where retention is necessary to comply with applicable legal obligations (for example accounting or regulatory requirements); or
Article 6(1)(f) GDPR, based on our legitimate interest in improving our services, ensuring IT security, preventing misuse.

Data will be processed until the purpose of contact is achieved, until consent is withdrawn, there is our legal obligation and/or legitimate interest, in any case for no more than three years from the last action performed.

Website browsing:

When you browse our Website, we collect and process certain technical data, including your IP address and information about your interaction with the Website.

Such data are processed for the purpose of ensuring the proper functioning and security of the Website, analysing usage and improving our services, optimising the content and structure of the Website.

We also take advantage of marketing and analytics services to analyze your behaviour for the purposes of optimizing the functioning of the Website and improving our advertising activities. In particular, we take advantage of technologies such as Meta Cookies, Google Analytics, Google Ads, and LinkedIn Insight Tag, and server-side tag management and analytics infrastructure (as the case may be from time to time).

Certain analytics and marketing-related data may be processed through server-side infrastructure before being transmitted to analytics, advertising, and marketing service providers. This infrastructure helps us manage, secure, and improve the reliability of our analytics and marketing integrations.

Where the processing is strictly necessary for the operation and security of the Website, the legal basis is our legitimate interest (Article 6(1)(f) GDPR), understood as the need to ensure the stability, security, and proper functioning of our online services.

Where we use non-essential cookies or similar tracking technologies (for example for analytics, advertising, or remarketing purposes), such technologies are deployed only on the basis of your consent in accordance with applicable ePrivacy rules.

The subsequent processing of personal data collected through such technologies may be based on your consent (Article 6(1)(a) GDPR) or our legitimate interest (Article 6(1)(f) GDPR) in analysing and improving our services, depending on the specific tool and context.

You may withdraw your consent to non-essential cookies at any time through the cookie settings available on our Website.

Data collected for website analytics and marketing purposes will be processed only for as long as necessary to achieve the relevant purpose or until you withdraw your consent, whichever occurs first.

Signing up for the Professional Plan:

When you want to register and participate in an Online Course, we will collect and process the following personal data:

email address,
name and surname,
phone number,
address,
IP address.

Where your personal data is collected and processed for the purpose of signing up for the Professional Plan, the legal basis is the need to perform the contract (legal basis under Article 6(1)(b) of the GDPR) and the legitimate interests in managing subscription relationships, safeguarding our systems, preventing misuse, maintaining records, improving our services (legal basis under Article 6(1)(f) of the GDPR). Data will be processed until the account is deleted and/or there is our legitimate interest, in any case for no more than ten years from the last action performed.

Making a purchase on the Website:

When you want to make a purchase on the Website, we will collect and process the following personal data:

email address,
name and surname,
phone number,
address,
nickname,
IP address.

Where your personal data is collected and processed for the purpose of making a purchase on the Website, the legal basis is the need to perform the contract (legal basis under Article 6(1)(b) of the GDPR) and the legitimate interests in managing transactions, safeguarding our Website and payment systems, preventing misuse or fraud, maintaining records, improving our services (legal basis under Article 6(1)(f) of the GDPR). Data will be processed until the account is deleted and/or there is our legitimate interest, in any case for no more than ten years from the last action performed.

Protection against claims and recovery of claims:

We may process your personal data to assert or defend against possible claims related to the collection or processing of your personal data and such processing is based on a legitimate interest (Article 6(1)(f) GDPR), understood as the possibility to assert or defend against claims.

The data will be processed until the statute of limitations for the respective claims has expired.

What we can do with your data

We work with some third parties and they may have access to some of the information about you that we collect and process. The recipients of your personal data may include:

entities authorised by law on the basis of a proper request (courts, state authorities);
entities providing auditing, accounting, IT, hosting, analytics, tag management, marketing, communication, and legal services, including Google, Meta, LinkedIn, Stape Europe OÜ, and similar service providers engaged by us from time to time;
subcontractors with whom we cooperate.

Your information, including personal data, may also be transferred to — and maintained on — computers located outside of the European Economic Area, where the data protection laws may differ from the GDPR.

If we provide personal data beyond the European Economic Area, and in particular to any third countries, such provision will take place on the basis of appropriate legal mechanisms, such as Adequacy Decisions of the Commission (EU), applicable standard contractual clauses, EU–US Data Privacy Framework (if applicable), and, where required, supplementary safeguards in accordance with applicable case law, or other similar legal instruments specified in the GDPR.

To ensure that you have adequate control over your personal data transferred outside the European Economic Area, you will have the right to obtain a copy of your personal data transferred to third countries at any time.

Your rights concerning data

You have the following rights under the GDPR:

The right to request access to your data and to receive a copy of your data: whenever possible, you can access, update or request deletion of your personal data;
The right to rectify (correct) your data: you have the right to have your information rectified if that information is inaccurate or incomplete;
The right to erasure: you have the right to erasure regarding data that is no longer required for the original purposes or that is processed unlawfully;
The right to restriction of processing: you have the right to restriction of processing regarding data which is pending decision on erasure or, in justified cases, you do not want them to be erased;
The right to data portability: you have the right to be provided with a copy of the information we have regarding you in a structured, machine-readable and commonly used format;
The right to object: you have the right to object at any time to the processing of your personal data based on our legitimate interests (Article 6(1)(f) GDPR). Where your personal data is processed for marketing purposes, including follow-up communications related to our services, you have the right to object at any time and without providing any justification. If you object to processing for marketing purposes, we will cease such processing without undue delay;
The right to withdraw consent: you also have the right to withdraw your consent at any time where we relied on your voluntary consent to process your personal information;
The right to lodge a complaint about our collection and use of your personal data with the competent supervisory authority, in particular the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten – IMY).

To exercise your rights described above, you may send appropriate requests to the following email address: support@medicaldevicehq.com, send them to our correspondence address given above, or submit them in person at our registered office. Bear in mind that, before responding to your request regarding exercising your rights, we may ask you for proof of your identity. If you want to withdraw your consent to data processing, you can also click on the hyperlink entitled “unsubscribe” in the content of the email correspondence.

Withdrawal of your consent to data processing has no impact on the legality of data processing that had taken place under the consent granted before the effective withdrawal thereof.

Security of Data

The security of your data is important to us, but remember that no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security.

Cookies

We use cookies and similar technologies on our Website. Some of these technologies may involve the processing of personal data, such as IP address, device information, and information about your interaction with the Website.

Where such technologies are strictly necessary for the operation and security of the Website, they are used on the basis of our legitimate interest (Article 6(1)(f) GDPR).

Where we use non-essential cookies or similar technologies (including for analytics, marketing, or tracking purposes), these are used only on the basis of your consent (Article 6(1)(a) GDPR).

Detailed and up-to-date information about the cookies used on our Website, including their purposes, categories, and retention periods, is provided in our Cookie Policy (EU), which is managed through our consent management platform (Complianz).

Cookie Consent Management

Your preferences regarding cookies are managed through our cookie consent tool. You can give, refuse, or withdraw your consent to non-essential cookies at any time via the cookie settings available on our Website.

Some third-party providers whose services we use (such as analytics or advertising partners) may also collect data via cookies or similar technologies and may act as independent or joint controllers of your personal data, depending on the specific service and context.

Social media plug-ins, online marketing services and services rendered by third parties

Online marketing services:

The following online marketing services are used only on the basis of your consent provided through our cookie banner:

Meta Cookies:

Our Website uses cookies provided by Meta Platforms Inc., 1601 S. California Ave. Palo Alto, CA 94304, USA.

Meta uses cookies and obtains information about you visiting our Website, including information about your device and your activity, without any further action on your part. It happens regardless of whether you have a Facebook account and are logged in.

Detailed information on the Meta Cookies and the way your data is collected and processed can be found here: https://www.facebook.com/privacy/policies/cookies/

Google Analytics:

Our Website uses Google Analytics, a web analytics service offered by Google Ireland Ltd. (Gordon House, 4 Barrow Street, Dublin, Ireland). Google Analytics uses the data collected to track and monitor the use of our Service. This data is shared with other Google services. Google may use the collected data to contextualise and personalise the ads of its own advertising network.

You can opt out of having made your activity on the Service available to Google Analytics by installing the Google Analytics opt-out browser add-on. The add-on prevents the Google Analytics JavaScript (ga.js, analytics.js, and dc.js) from sharing information with Google Analytics about visits activity.

For more information on the privacy practices of Google, please visit the Google Privacy Terms web page: https://policies.google.com/privacy?hl=en

Google Ads:

Our Website uses Google Ads, an online advertising programme offered by Google Ireland Ltd. (Gordon House, 4 Barrow Street, Dublin, Ireland). Google Ads uses the data collected to enable interest-based advertising. It allows us to customise search ad campaigns for users who have visited our Website.

We may combine data collected via Google Analytics 4 with Google Ads, including the import of Analytics audiences and measurement data, in order to personalise advertising, create remarketing lists, and evaluate the performance of our advertising campaigns.

You can find more information on data protection in the context of Google Ads at: https://policies.google.com/technologies/ads?hl=en

LinkedIn Insight Tag:

Our Website uses a marketing tool available through and provided by LinkedIn Corporation, 605 W Maude Ave, Sunnyvale, CA 94085, USA, which is LinkedIn Insight Tag. The LinkedIn Insight Tag is a source code fragment added to our Website.

This tool makes it possible to track your behavior and activity when you are redirected to our Website, having seen or clicked on a LinkedIn ad. This process is designed to evaluate the effectiveness of LinkedIn and our advertisements for statistical and market research purposes and may help to optimise future advertising efforts. Information gathered using this tool allows LinkedIn to provide you with personalised ads when using LinkedIn.

The LinkedIn Insight Tag establishes a direct connection with LinkedIn servers when you visit our Website. LinkedIn is therefore informed that you visited our Website and may assign this information to your LinkedIn account.

The data collected using the LinkedIn Insight Tag tool is anonymous with respect to us and cannot be used to identify you. The data is, however, stored and processed by LinkedIn, which means that they can be linked to the respective LinkedIn account. LinkedIn can use the data for its own advertising purposes, according to the LinkedIn Privacy Policy and the LinkedIn user’s profile settings. LinkedIn has ultimate control of any data gathered through this tool. However, you can opt out of LinkedIn’s use of the LinkedIn Insight Tag by adjusting the settings available on your LinkedIn account.

Behavioral Remarketing:

Medical Device HQ uses remarketing services to advertise on third-party websites to you after you have visited our Website. We and our third-party vendors use cookies to inform, optimise and serve ads based on your past visits to our Website.

Scheduling and meeting management (Calendly):

We use Calendly Inc. to enable users to schedule meetings and appointments via our Website. When you choose to book a meeting, Calendly may collect and process personal data such as your name, email address, and meeting-related information on our behalf.

Calendly may also collect technical data, including IP address and device information, and may use cookies or similar technologies that are necessary for providing the scheduling functionality.

Calendly Inc. is established in the United States. Any transfer of personal data outside the European Economic Area is carried out in accordance with applicable data protection laws and based on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses.

Calendly processes personal data solely for the purpose of providing scheduling services to us and is contractually obliged to process such data in accordance with applicable data protection legislation.

Services rendered by third parties:

We may employ third-party companies and individuals to facilitate our Service, provide the Service on our behalf, perform Service-related services or assist us in analysing how our Service is used.

Some of these providers are located outside the European Economic Area, in particular in the United States

These third parties have access to your personal data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.

Within our organisation your personal data is processed only by authorised persons.

Server-side analytics and tag management infrastructure (Stape Europe OÜ):

We use Stape Europe OÜ to host and manage server-side tag management and analytics infrastructure.

When you visit our Website, certain technical information relating to your interaction with the Website may be processed through this infrastructure before being transmitted to analytics, advertising, or marketing providers that we use. Depending on the relevant service configuration, such information may include IP address, browser information, device information, online identifiers, URLs, referral information, and analytics event data.

Payments:

We may provide paid products and/or services within the Service. When purchasing a product through check-out, the products are sold by an authorised re-seller, depending on which country you are buying from. The re-seller has its own terms of sale and privacy policy as shown on the check-out page.

We will not store or collect your payment card details. That information is provided directly to our re-seller whose use of your personal data is governed by its Privacy Policy.

Links to Other Sites

Our Service may contain links to other sites that are not operated by us. If you click a third-party link, you will be directed to that third party’s site. We strongly advise you to review the Privacy Policy of every site you visit.

We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.

Children’s Privacy

Our services are intended for professionals and organisations. Our Service does not address anyone under the age of 18 (“Children”).

We do not knowingly collect personal data from anyone under the age of 18. If you are a parent or guardian and you are aware that your Child has provided us with personal data, please contact us. If we become aware that we have collected personal data from children without verification of parental consent, we take steps to remove that information from our servers.

Changes to This Privacy and Cookies Policy

We may update our Privacy and Cookies Policy from time to time. We will notify you of any changes by posting the new Privacy and Cookies Policy on this page.

You are advised to review this Privacy and Cookies Policy periodically for any changes. Changes to this Privacy and Cookies Policy are effective when they are posted on this page.

By continuing to access or use the Website and the Services we render through it, once those changes take effect, you agree to be bound by the revised Privacy and Cookies Policy. If you do not agree, you must cease using our Website immediately.

Contact Us

If you have any questions about this Privacy and Cookies Policy, please contact us:

By email: support@medicaldevicehq.com