Privacy Policy

Last updated: March 20, 2026

1. Data Controller

The data controller is: MEDS-LINK Ltd — Division Elysium MedTech Agias Zonis 30A, Fantaros Court, 3rd floor, office 302 3027 Limassol, Cyprus Email: contact@elysiummedtech.com Phone: +357 99 11 78 34

2. Data Collected

We collect the following data via the contact form: • First and last name • Email address • Phone number (optional) • Medical specialty • Free-text message We also automatically collect technical data: IP address, browser type, pages visited, via strictly necessary technical cookies.

3. Processing Purposes

Your personal data is processed for the following purposes: • Responding to your contact and digital audit requests • Providing you with information about our services • Improving the Website’s functionality • Complying with our legal obligations

4. Legal Basis

The processing of your data is based on: • Your consent (Article 6.1.a of GDPR) when submitting the contact form • The legitimate interest of MEDS-LINK Ltd (Article 6.1.f) for improving its services • Compliance with legal obligations (Article 6.1.c)

5. Data Retention Period

Your data is retained for a maximum of 3 years from the last contact, unless a legal obligation requires otherwise. Technical data (logs) is retained for 12 months.

6. Data Recipients

Your data is not sold or shared with third parties for commercial purposes. It may be accessible to: • The internal team of MEDS-LINK Ltd / Elysium MedTech • Our technical subcontractors (hosting: Vercel Inc.) strictly within the scope of their duties All our subcontractors are bound by confidentiality and GDPR compliance obligations.

7. International Transfers

Website hosting is provided by Vercel Inc. (USA). Data transfers to the United States are governed by the European Commission’s Standard Contractual Clauses (Article 46.2.c of GDPR).

8. Your Rights

Under the GDPR, you have the following rights: • Right to access your personal data • Right to rectification of inaccurate data • Right to erasure (“right to be forgotten”) • Right to restriction of processing • Right to data portability • Right to object to processing • Right to withdraw your consent at any time To exercise these rights, contact us at: contact@elysiummedtech.com You also have the right to lodge a complaint with the competent supervisory authority (Commissioner for Personal Data Protection, Cyprus).

9. Cookies

The Website uses only strictly necessary technical cookies. No advertising, analytics or tracking cookies are used. These cookies do not require your prior consent in accordance with the ePrivacy Directive.

10. Security

MEDS-LINK Ltd implements appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure or destruction. The Website uses HTTPS protocol to encrypt communications.

11. Policy Modification

MEDS-LINK Ltd reserves the right to modify this Privacy Policy at any time. Any modifications will be published on this page with an updated date.

12. Contact

For any questions regarding this Privacy Policy or your personal data: MEDS-LINK Ltd — Division Elysium MedTech Email: contact@elysiummedtech.com Phone: +357 99 11 78 34 Address: Agias Zonis 30A, Fantaros Court, 3027 Limassol, Cyprus