Privacy Policy

1. Data controller

MD Health Distribution GmbH
Gernsheimer Straße 22
64584 Biebesheim am Rhein
Germany

Managing Director: Saud Ahmad
E-Mail: info@md-hd.com
Phone: +49 152 09745940

2. Hosting

This website is hosted by:

Hostinger International Limited
61 Lordou Vironos Street
6023 Larnaca
Cyprus

The hosting provider processes the data required to operate and deliver this website on our behalf.

3. Server log files

When you visit this website, technically necessary data is processed in server log files, for example your IP address, the date and time of access, the page accessed and the browser used. This processing is necessary to provide the website securely and reliably. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the secure and stable operation of the website).

4. Contact and quote requests

If you contact us via the contact form or the quote form, we process the information you provide (e.g. name, business email address, phone number, organisation, product family, configuration, quantity and your message) in order to handle your inquiry and, where applicable, to carry out pre-contractual measures. The legal basis is Art. 6(1)(b) GDPR and, for business inquiries, Art. 6(1)(f) GDPR (legitimate interest in handling business inquiries).

We do not operate a permanent lead database on the web server. Attachments you upload are not permanently stored on the web server.

To protect the forms against misuse, a non-reversible hash of your IP address is stored temporarily for rate limiting. This hash is deleted after no more than one hour. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in preventing misuse).

Required information and confirmation of receipt

Information marked as required is necessary so that we can process your inquiry. Without this information, we may not be able to process your request. After you submit an inquiry, an automatic confirmation of receipt may be sent to the email address you provide.

Technically necessary session

When you use our contact or quotation forms, a technically necessary session is established. For this purpose, a session cookie named ‘mdsid’ may be set. It is used in particular to secure the forms and to protect against abusive requests. The cookie is not used for analytics or marketing purposes. Access to the user’s terminal device is based on Section 25(2) TDDDG (German Telecommunications Digital Services Data Protection Act), which permits storage that is strictly necessary to provide a service you have requested without consent. Where personal data is processed, the processing is carried out in connection with handling your inquiry on the basis of Article 6(1)(b) GDPR and/or our legitimate interest in operating secure forms under Article 6(1)(f) GDPR.

5. Email and Microsoft 365

Inquiries submitted via the forms, as well as emails you send us, are received and processed using Microsoft 365. The provider is:

Microsoft Ireland Operations Limited
One Microsoft Place
South County Business Park
Leopardstown
Dublin 18
Ireland

6. Storage period

We store personal data only for as long as is required to handle your inquiry or to process a contract, or for as long as statutory retention obligations apply.

7. Recipients

Personal data may be disclosed to the following recipients where this is necessary for the purposes described above:

hosting and IT service providers
Microsoft (Microsoft 365)
other service providers where this is required for a specific inquiry or order

8. Privacy settings and local storage

We do not use any analytics or marketing services. Your privacy selection is stored in your browser’s local storage (localStorage); this is strictly necessary (§ 25(2) TDDDG). External media are only loaded after you have given your consent (§ 25(1) TDDDG, Art. 6(1)(a) GDPR). You can change or withdraw your selection at any time via “Privacy settings” in the footer.

9. Fonts

The fonts used on this website are hosted on our own server. No connection to third-party font servers is established.

10. Google Maps

On the contact page, a map from Google Maps can be displayed. The provider is Google Ireland Limited. The map is only loaded after you have given your consent; before consent is given, no connection to Google Maps is established. When the map is loaded, data including your IP address is transferred to Google; a transfer to third countries, in particular the USA, is possible.

11. Your rights

Under the GDPR you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and the right to object (Art. 21). You may withdraw any consent you have given at any time with effect for the future. To exercise your rights, please contact info@md-hd.com.

12. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The competent authority is:

Der Hessische Beauftragte für Datenschutz und Informationsfreiheit
Wilhelmstraße 7
65185 Wiesbaden
Germany

13. Last updated

October 2026