Controller: LOBOVO GmbH, Fuchsiastrasse 7, 8048 Zürich, Switzerland
Contact: privacy@medlucy.com
1. Introduction
This Privacy Policy explains how LOBOVO GmbH ("we", "us", "our") collects, uses, and protects your personal data when you visit our website medlucy.com (the "Website"). We are committed to protecting your privacy in accordance with the General Data Protection Regulation (GDPR) and applicable Luxembourg data protection laws.
2. Data We Collect
When you use our Website, we may collect the following categories of personal data:
- Contact information – name, email address, phone number, and clinic name, provided when you fill in a contact form, request a demo, or subscribe to our newsletter
- Usage data – pages visited, time spent on pages, referral source, browser type, device type, and IP address, collected automatically through analytics tools
- Appointment data – information provided when booking an appointment through our online agenda
- Communication data – any messages or enquiries you send us through the Website
3. How We Use Your Data
We use the data we collect for the following purposes:
- To respond to your enquiries and contact form submissions
- To process demo requests and schedule appointments
- To send you our newsletter (only with your consent)
- To analyse website traffic and improve user experience
- To ensure the security and proper functioning of our Website
4. Legal Basis for Processing
We process your personal data based on the following legal grounds under the GDPR:
- Consent (Article 6(1)(a)) – for newsletter subscriptions and optional cookies
- Legitimate interest (Article 6(1)(f)) – for website analytics and security
- Contract performance (Article 6(1)(b)) – to respond to your demo requests and enquiries
5. Cookies and Analytics
Our Website uses cookies and similar technologies:
- Google Analytics – we use Google Analytics 4 to understand how visitors interact with our Website. Google Analytics collects data such as pages visited, session duration, and device information. This data is processed by Google LLC. For more information, visit Google's privacy policy.
- Essential cookies – required for the proper functioning of the Website
- Third-party cookies – some of our integrated services (such as Zoho and Freshworks) may set their own cookies when you interact with embedded forms
6. Third-Party Services
We use the following third-party services on our Website:
- Zoho CRM – to process contact forms, demo requests, and newsletter subscriptions. Data is sent to Zoho's EU servers (crm.zoho.eu).
- Freshworks CRM – to process contact and demo request forms. Data is processed by Freshworks Inc.
- Google Maps – to display location maps on our contact page. Google may collect data when the map is loaded.
- Google Fonts – to display web fonts. Google may collect your IP address when fonts are loaded.
- Vercel – our Website is hosted on Vercel's infrastructure.
7. Data Storage and Security
Our Website is hosted on Vercel's infrastructure. Form submissions are processed through Zoho and Freshworks, both of which store data within the EU or in compliance with GDPR transfer requirements. We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, or loss.
8. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes described in this policy:
- Contact form submissions and demo requests – up to 24 months
- Newsletter subscriptions – until you unsubscribe
- Analytics data – as configured in Google Analytics (up to 14 months)
9. Your Rights
Under the GDPR, you have the following rights regarding your personal data:
- Right of access – obtain a copy of your data
- Right to rectification – correct inaccurate data
- Right to erasure – request deletion of your data
- Right to restrict processing
- Right to data portability
- Right to object – including to direct marketing
- Right to withdraw consent at any time
10. Children's Privacy
Our Website is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically.
12. Contact
If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us at: privacy@medlucy.com