Prescription24

Personal data protection

1. Data controller

MEDINOW Sp. z o.o., Aleja Marszałka Józefa Piłsudskiego 36/108, 10-450 Olsztyn, Poland
Email: info@medinow.app · Telephone: +48 576 851 416

2. What data we process

  • Identification data: first name, surname, date of birth, address, email address, telephone number, identity document number.
  • Health data: your answers about symptoms, illnesses and the medicines you take and, if you upload them, test results. These are special categories of data within the meaning of Article 9 of the General Data Protection Regulation.
  • Order data: order number, amount, payment status. We do not receive your full payment card details.

3. Purposes and legal bases

  • Carrying out the medical assessment - Article 6(1)(b) and, in the case of health data, Article 9(2)(h) together with your explicit consent under Article 9(2)(a).
  • Keeping medical records and retaining accounting records - Article 6(1)(c).
  • Handling complaints and establishing or defending legal claims - Article 6(1)(f).

4. Recipients of the data

  • Stripe Payments Europe, Ltd. - payment processing.
  • Resend, Inc. - sending emails.
  • Cloudflare, Inc. - website hosting.
  • Railway Corp. - running the application and the database.

We do not sell your data and we do not pass it on for advertising purposes.

5. Transfers outside the EU

Some of these providers belong to groups established outside the European Economic Area. Where data is transferred, this takes place on the basis of the European Commission's standard contractual clauses or an adequacy decision.

6. Retention periods

Under Polish law we retain medical records for 20 years from the end of the calendar year in which the last entry was made (Article 29 of the Polish Patient Rights Act). Accounting records are retained for 5 years.

7. Your rights

You have the right of access to your data, the right to rectification, erasure and restriction of processing, the right to data portability and the right to object, and you may withdraw your consent at any time.

Limit on the right to erasure: we cannot delete medical records before the statutory retention period has expired. Your user account, however, can be deleted at any time.

Please write to info@medinow.app.

8. Complaint to a supervisory authority

You may lodge a complaint with the President of the Polish data protection authority (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, Poland) or with the Information and Data Protection Commissioner.

9. No automated decision-making

Your request is always assessed by a human being. We do not take decisions based solely on automated processing, including profiling, within the meaning of Article 22 of the General Data Protection Regulation.

10. Cookies and statistics

This website does not use statistical or advertising cookies and contains no tracking tools. The only data transmitted is the data you enter in the order form.