Our GDPR notice

This notice provides information about how GuiMeds (“we”, “us”, “our”) collects, uses, and shares personal data that we receive through our website, https://guimeds.com/ (the “Website”). We are committed to protecting and respecting your privacy and complying with the General Data Protection Regulation (GDPR).

1.  Controller

The controller for the purposes of the GDPR is GuiMeds, a company incorporated in [country] with registered office at [address]. If you have any questions or concerns about how we process your personal data, you can contact us by email at [email address].

2.  Data we collect

We collect and process personal data that you provide to us through our Website. This may include:

• Contact details, such as your name, email address, and phone number;
• Billing and payment information, if you make a purchase through our Website;
• Shipping information, if you make a purchase through our Website;
• Information about your use of our Website, such as your IP address, device type, and browsing behavior;
• Communications you send to us, such as emails or messages through our Website; and
• Any other information you provide to us through our Website.

We may also collect and process personal data about you from other sources, such as third-party service providers or public sources.

3.  Purposes of processing

We process your personal data for the following purposes:

• To provide you with information and services that you request through our Website;
• To process and fulfill orders that you make through our Website;
• To manage and improve our Website and our business;
• To communicate with you about our products, services, and promotions;
• To comply with legal obligations; and
• To protect our rights and interests.

4.  Legal basis for processing

We process your personal data on the following legal bases:

• You have given your consent to the processing of your personal data for one or more specific purposes;
• The processing is necessary for the performance of a contract to which you are a party or in order to take steps at your request prior to entering into a contract;
• The processing is necessary for compliance with a legal obligation to which we are subject; or
• The processing is necessary for the purposes of our legitimate interests or those of a third party, except where such interests are overridden by your interests or fundamental rights and freedoms.

5.  Data retention

We retain your personal data for as long as necessary to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of the personal data, the purposes for which we process the personal data, and whether we can achieve those purposes through other means.

6.  Data sharing

We may share your personal data with third-party service providers who perform services on our behalf, such as website hosting, payment processing, shipping, and marketing. We may also share your personal data with our affiliates or business partners for marketing or other purposes.

We may also share your personal data with government authorities, law enforcement agencies, or other third parties as required by law or to protect our rights and interests.

7.  Data transfer

We may transfer your personal data to countries outside the European Economic Area (EEA), including to countries that may not provide the same level of data protection as your home country. In such cases, we will ensure that adequate safeguards are in place to protect your personal data, such as standard contractual clauses or certification schemes.

8.  Your rights

Under the GDPR, you have the following rights in relation to your personal data:

• Right of access: You have the right to request access to your personal data and information about how we process it.
• Right to rectification: You have the right to request that we correct any inaccuracies in your personal data.
• Right to erasure: You have the right to request that we delete your personal data.
• Right to restrict processing: You have the right to request that we limit the processing of your personal data.
• Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller.
• Right to object: You have the right to object to the processing of your personal data on grounds relating to your particular situation.
• Right to withdraw consent: If we rely on your consent to process your personal data, you have the right to withdraw that consent at any time.

To exercise these rights, please contact us using the contact details provided in this notice. We may require additional information from you to verify your identity before we can respond to your request.

9.  Cookies

We use cookies and similar technologies on our Website to collect information about your browsing behavior and to provide you with a more personalized experience. For more information about how we use cookies and your choices about cookies, please see our Cookie Policy.

10.              Changes to this notice

We may update this notice from time to time to reflect changes in our privacy practices or legal requirements. We will post the updated notice on our Website and indicate the date of the last update. If we make significant changes to the notice, we will notify you by email or by posting a notice on our Website.

11.              Contact us

If you have any questions or concerns about our processing of your personal data or this notice, please contact us by email at festawi@hotmail.com. You also have the right to lodge a complaint with a supervisory authority if you believe that we have not complied with applicable data protection laws.