Privacy and cookie policy
Last updated: 22 October 2026. This is an English translation; in case of discrepancy the Italian version prevails.
This policy explains how Medilcom S.r.l. processes the personal data of people who visit www.medilcom.it or contact the company through the details provided, under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003 (Privacy Code).
In short: the website uses no cookies and no profiling tools. It only collects anonymous, aggregated visit statistics, without cookies. We process the technical data needed to run the website and the data you send us when you write to us, call us or use the contact form.
1. Data controller
MEDILCOM S.R.L.
Via Fabio Filzi 14/16, 70026 Modugno (BA), Italy
VAT no. IT07116350724
Email for privacy requests: amministrazione@medilcom.it
2. What data we process
Browsing data. Like any website, the servers hosting the site automatically log some technical data for each visit: IP address, date and time of the request, page requested, browser type and operating system. This data is used to run the website and protect it from abuse, and is not used to identify you.
Visit statistics. We use Vercel Web Analytics to learn how many people visit the website, where they come from and which sections they use, for example whether the contact form is sent. The tool uses no cookies, does not store IP addresses and only produces aggregated data: it cannot identify you or follow you on other websites.
Website performance. With Vercel Speed Insights we anonymously measure how fast pages load (for example, how long content takes to appear), together with the type of device and connection. This tool also uses no cookies and cannot identify you.
Data you send us. If you contact us by email, phone or through the website form, we process the data you provide: name, organisation or company, email, phone number and the content of your request. The form sends the data as an email to Medilcom's mailbox through the company's email service; the website does not store it. If the form is unavailable, your email app opens with the message already filled in, and you decide whether to send it.
Please do not send us health data or other special categories of data: they are not needed for our activities.
3. Why we process it and on what legal basis
| Purpose | Legal basis |
|---|---|
| Replying to your requests for information, site surveys and quotes | Pre-contractual steps taken at your request (Art. 6(1)(b) GDPR) |
| Running the website and keeping it secure | Legitimate interest of the controller (Art. 6(1)(f) GDPR) |
| Anonymous, aggregated statistics on website use, to improve it | Legitimate interest of the controller (Art. 6(1)(f) GDPR) |
| Complying with legal obligations, including tax and accounting, if a contract results from the request | Legal obligation (Art. 6(1)(c) GDPR) |
Providing your data is optional, but without it we cannot reply to your request. The data is not used for automated decision-making or profiling and is not sold or passed to third parties for marketing purposes.
4. How long we keep it
- Browsing data: for the short period set by the hosting provider for technical logs, after which it is deleted automatically.
- Contact requests: for as long as needed to handle the request and any follow-up, and no longer than 24 months after the last contact if no contract results.
- Contract-related data: for 10 years, as required by Italian civil and tax law.
5. Who can access the data
The data is processed by authorised Medilcom staff and by suppliers of technical services appointed as data processors (Art. 28 GDPR):
- Vercel Inc. (United States), provider of website hosting and visit statistics;
- Aruba S.p.A. (Italy) and the other email service providers through which we send and receive emails, including those from the contact form.
Data may be disclosed to public authorities only where required by law.
6. Transfers outside the European Union
The hosting provider is based in the United States. Any data transfers take place with the safeguards required by Articles 44 et seq. of the GDPR: the European Commission adequacy decision for companies participating in the EU-U.S. Data Privacy Framework, or standard contractual clauses approved by the Commission.
7. Cookies and similar technologies
The website uses no cookies, neither technical nor profiling. Visit statistics are collected with Vercel Web Analytics, which uses no cookies or other identifiers stored on your device. We do not use advertising pixels or other tracking technologies. For this reason no consent banner is shown, in line with the cookie guidelines of the Italian Data Protection Authority (decision of 10 June 2021).
Fonts are hosted on the website itself and the office map is a static image: opening the website does not contact any third-party service other than the hosting provider.
The website contains links to external services such as Google Maps and LinkedIn. If you open them, you leave our website and the privacy and cookie policies of those services apply.
8. Your rights
At any time you can ask to access, correct or erase your data, restrict its processing, object to processing based on legitimate interest, and obtain portability of the data you provided (Articles 15-22 GDPR).
To exercise these rights, write to amministrazione@medilcom.it. We will reply within one month of your request.
If you believe the processing breaches the law, you can lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) or with the supervisory authority of your country.
9. Changes to this policy
This policy may be updated, for example if the website adds new features. The date of the last update is shown at the top of the page.