Privacy policy

Last updated: 6 October 2026

This document explains what personal data is processed in connection with this website, on what legal basis, how long it is kept and what rights you have. For cookies and similar technologies, see the cookie policy.

Who the controller is

The controller is ZIEGERT SRL, the seller of the products ordered through this site — VAT ID RO35793880, Trade Register no. J40/3733/2016, registered office at Str. Sfântul Petru Tei nr. 59, Sector 2, București, Romania. The products are manufactured by EVIE KOREA Co., Ltd., Republic of Korea, which does not receive your order data from this site.

What data we process

Data you send us

If you contact us by phone or email, we process the data you provide: name, contact details and the content of your message. We use it solely to answer your request.

The enquiry form on the contact section collects the name, company, email, phone and message you type into it, together with the enquiry type you select. It is used only to answer you.

Orders

When you place an order we process what you enter at checkout — name, email, phone, company and VAT or registration number if you buy as a business, delivery address and notes — together with the products and quantities ordered. We use it to confirm and deliver the order, to issue the invoice and to apply the correct VAT. If you give an EU VAT number, it is checked in VIES, the European Commission's VAT register.

The contents of your order are kept in your browser, in localStorage, under the key medisco-cart — product codes and quantities only — so that the order survives moving between pages. It is not sent anywhere until you check out.

The customer profile you choose — private person, company with an EU VAT number or company without one — is kept in the same way, under medisco-profile, together with the VAT number you verified and the company name VIES returned for it. There are no customer accounts on the server.

On this preview the shop runs in demonstration mode: checkout only prepares the order request as text on your screen and nothing is transmitted.

Technical data

Like any website, the server hosting it records web requests, which include the IP address, browser type, time of access and the page requested. These are necessary to deliver pages and to keep the service secure.

Your cookie choice

Your selection in the cookie banner is stored in your browser, in localStorage, under the key medisco_ck_v1. It stays on your device and is not transmitted to us.

Legal basis

• Legitimate interest (Art. 6(1)(f) GDPR) — delivering a functional and secure website, and responding to requests you address to us.
• Consent (Art. 6(1)(a) GDPR) — for analytics and marketing cookies, if you accept them. You can withdraw it at any time, as easily as you gave it.
• Performance of a contract (Art. 6(1)(b) GDPR) — processing your order and delivering it, or taking steps at your request before an order.
• Legal obligation (Art. 6(1)(c) GDPR) — invoicing, VAT and the keeping of accounting records.

How long we keep data

• Correspondence received by email or phone: for as long as needed to resolve the request and, afterwards, for the period required by legal archiving obligations.
• Order and invoice data: for the period required by Romanian accounting law — currently five years for supporting documents, longer for the invoice register.
• The contents of your basket: in your browser, until you empty the order, complete it or clear your browser data.
• Server technical logs: for the period applied by the hosting provider.
• Your cookie choice: stays in your browser until you delete it.

Who receives the data

We do not sell or rent personal data. It may be accessed, strictly for operating the service, by:

• the website's hosting provider;
• the card payment processor (Stripe), once card payments are switched on — it receives the payment details directly on its own secure page;
• the courier that delivers the parcel — name, address and phone number;
• the Romanian tax authority, through the national e-invoicing system, where the law requires it;
• the European Commission's VIES service, for the VAT number you enter;
• Google, for delivering web fonts (your IP address reaches Google as part of the request);

Transfers outside the European Economic Area

Font delivery through Google may involve transfers to servers outside the EEA, on the basis of the standard contractual clauses approved by the European Commission.

Your rights

Under the GDPR you have the right of access, rectification, erasure, restriction of processing, data portability, objection, and the right to withdraw your consent at any time without affecting the lawfulness of processing carried out beforehand.

You can exercise these rights by writing to ZIEGERT SRL at its registered office, shown above and in the footer, or through the contact form on the home page. We respond within one month at the latest.

If you consider that your rights have been infringed, you may lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), B-dul G-ral. Gheorghe Magheru 28-30, Bucharest, dataprotection.ro.

Security

The site is delivered over an encrypted connection (HTTPS). Access to its administration is limited to the people who maintain it.

Minors

The site is not addressed to people under 16 and does not knowingly collect data about them.

Changes

We may update this policy. The version in force is the one published here, with the date shown at the top.

← Back to site