1. Controller
The controller is MH-Digits OÜ, Ahtri tn 12, 15551 Tallinn, Estonia. Contact us at office@mhdigits.com or +372 5660 9660. This notice covers only the MH-Digits corporate website. It does not cover the Medalixy app, its accounts, subscriptions or health data.
2. Data we process
- Technical access data: When a page is requested, technical logs may contain your IP address, time, requested address, referrer, browser and device information, and server response codes. This supports delivery, stability and security of the website.
- Email enquiries: If you send a message using the email link, we process the sender address, any name, message content and files you choose to include so we can reply and, where relevant, prepare pre-contractual steps. The link opens your email application; the website does not send the message itself.
- Local settings and analytics: Your language, display mode and consent choice are stored locally in your browser. Google Tag Manager loads only if you allow analytics cookies.
3. Legal bases
We process technical access data for the legitimate interests of operating and securing the website (GDPR Article 6(1)(f)). Local settings support the website functions you choose. Google Fonts are loaded only with your consent (Article 6(1)(a)); you may withdraw that consent for future processing at any time. We process email enquiries to respond and take steps at your request before a contract (Article 6(1)(b)); where needed, processing is also based on legitimate interests or legal obligations (Article 6(1)(f) or (c)).
4. Hosting
This website is hosted through hosttech. In providing hosting, the provider may process technical access data to deliver and secure the website. The specific server region, log retention and any subprocessors depend on the product selected by MH-Digits and its applicable contract and privacy terms. See hosttech's privacy policy.
5. External fonts
If you select “Accept all”, the website loads fonts from Google Fonts. This creates a connection to Google servers; your IP address and technical browser/request data may be sent to Google. If you reject optional content, these fonts are not loaded. See Google's privacy information.
6. Recipients and transfers
Recipients may include hosttech for website hosting and, only after your consent, Google Fonts. Email messages also pass through the email services used by MH-Digits and by the sender. Depending on each provider's configuration, processing outside the European Economic Area cannot be ruled out. The applicable provider settings and safeguards govern such processing.
7. Retention
Language, display mode and consent choice remain in your browser until you clear local storage or change your choice. We keep enquiry emails only as long as needed to respond and, where relevant, handle resulting business; statutory retention and limitation periods still apply. Technical logs are kept under the settings for the selected hosting service and only as long as needed for operation and security.
8. Your rights
Subject to the GDPR, you may request access, rectification, erasure, restriction and data portability, and object to processing based on legitimate interests. You may withdraw consent for future processing. Contact office@mhdigits.com. You may also complain to Estonia's supervisory authority, the Andmekaitse Inspektsioon, Tatari 39, 10134 Tallinn, Estonia, info@aki.ee.
9. Changing your consent
You can change your choice about optional fonts at any time using Cookie settings at the bottom of the website. Rejecting optional content does not affect the website's essential functions.
10. Changes
We update this notice when the website or its data processing changes materially. The current version is available on this page.
Google Tag Manager and analytics
The Google Tag Manager container GTM-KSR5CMB4 loads only after you consent to analytics cookies. This connects your browser to Google servers; technical request data such as your IP address and browser/device information may be sent to Google. Analytics tags configured in the container, such as Google Analytics 4, may also process visited pages, referrers and interactions. The legal basis is your consent (GDPR Article 6(1)(a)). Depending on Google’s configuration, processing outside the European Economic Area cannot be ruled out. You can withdraw consent at any time in Cookie settings; the container will then not load on future page views.
The Google Analytics 4 tag with measurement ID G-K2817855TR is also loaded only after your consent. It records page views, including navigation within the website.