1. Who we are
The data controller is Swissmed Kosovo, Tirana Street No. 42, 10000 Prishtina, Kosovo. Email: info@swissmed-ks.com, phone: +383 49 891 333.
For any privacy question, write to the address above. We reply within 30 days.
2. Data we collect
- Inquiry form: full name, email, institution or laboratory (optional), phone (optional), the product you are interested in and your message.
- Email or phone contact: the information you give us yourself.
- Technical data: the hosting server automatically logs IP address, date and time, the page requested and browser type, for security and operation of the site.
- Automatic language: when you open the home page, your IP address is sent to the geolocation service ipapi.co (Kloudend, Inc., USA) only to determine country and city, so the site opens in Albanian or English. We do not store the result.
- Browser storage: your cookie, language and theme choices are stored in your browser. See the Cookie Policy.
We do not collect health data or other special categories of data. Please do not send patient data through the form.
3. Why we use it and legal basis
| Purpose | Legal basis |
|---|---|
| Answering your inquiry and preparing a quote | Steps prior to entering a contract (Art. 6(1)(b) GDPR; Kosovo Law No. 06/L-082) |
| Communicating with existing customers and partners | Performance of contract; legitimate interest (Art. 6(1)(f) GDPR) |
| Website security and abuse prevention (server logs) | Legitimate interest (Art. 6(1)(f) GDPR) |
| Choosing the site language automatically by location | Legitimate interest (Art. 6(1)(f) GDPR) |
| Statistics, if enabled in the future | Your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time |
| Keeping records required by tax and commercial law | Legal obligation (Art. 6(1)(c) GDPR) |
We do not use your data for automated decision-making or profiling.
4. Who we share it with
We do not sell or rent your data. We share it only where needed:
- Hosting and email provider (Hostinger), which hosts the site and delivers form emails as a processor on our behalf.
- Geolocation service ipapi.co, IP address only, to choose the language.
- Partner manufacturers (Roche, Erba Mannheim, Euroimmun, Maccura), only if your request needs a quote or technical support from them, and only for that purpose.
- Public authorities, where the law requires it.
5. International transfers
Some service providers may process data outside Kosovo or outside the European Economic Area. In those cases we rely on appropriate safeguards such as European Commission adequacy decisions or Standard Contractual Clauses, in line with Chapter V GDPR and Law No. 06/L-082.
6. How long we keep it
- Inquiries and correspondence: as long as needed to answer and for the business relationship, then up to 3 years after the last contact unless the law requires longer.
- Accounting and tax records: as long as required by applicable law.
- Server logs: a short security period set by the hosting provider.
- Your cookie choice: 12 months, after which we ask again.
7. Your rights
Under Kosovo Law No. 06/L-082 on the Protection of Personal Data and the EU General Data Protection Regulation (GDPR), you have the right to:
- be informed and access your data;
- rectify inaccurate data;
- request erasure;
- restrict processing;
- object to processing based on legitimate interest;
- receive your data in a portable format;
- withdraw consent at any time, without affecting earlier lawful processing.
To exercise these rights, email info@swissmed-ks.com. You may also complain to Kosovo's Information and Privacy Agency (AIP), or to the supervisory authority where you live or work in the EU/EEA.
8. Notices for other jurisdictions
Switzerland: where the Federal Act on Data Protection (nFADP) applies, you have the rights above and may contact the Federal Data Protection and Information Commissioner (FDPIC).
United Kingdom: where the UK GDPR applies, you may contact the Information Commissioner's Office (ICO).
United States (California and other states): under the CCPA/CPRA and similar state laws you have the right to know what personal information we collect, to correct and delete it, and not to be discriminated against for exercising these rights. We do not sell or share personal information for cross-context behavioural advertising. This site honours the Global Privacy Control (GPC) signal as a refusal of non-necessary cookies.
Asia-Pacific: for visitors from countries with laws such as the PDPA (Singapore, Thailand), APPI (Japan), PIPA (South Korea), PIPL (China) or the DPDP Act 2023 (India), we process data only for the purposes described here, and you can request access, correction, deletion or withdrawal of consent by writing to us. By sending us an inquiry from these countries you agree that your data is processed in Kosovo and by our providers as described in this notice.
9. Children
This website is intended for laboratory professionals and healthcare institutions. We do not knowingly collect data from anyone under 16.
10. Security
The site uses an encrypted connection (HTTPS). Access to inquiry emails and data is limited to staff who need it.
11. Changes
We may update this policy. The date of the last update is shown on this page.