Last updated: 15 July 2026

1. Who We Are

This website is operated by MEDTRACS LTD ("we", "our", or "us"), a non-profit organisation established in the Republic of Cyprus.

For the purposes of the General Data Protection Regulation (EU) 2016/679 ("GDPR"), we are the data controller for the personal data processed through this website.

If you have any questions about this Privacy Policy or how we process personal data, please contact us at: medtracs.cyprus@gmail.com

2. Purpose of This Website

This website provides information about our organisation, our activities, projects, partnerships and initiatives. It is intended to inform the public about our work and does not require visitors to create an account, register or provide personal information in order to browse its content.

3. Personal Data We Process

We process limited personal data in connection with the operation and improvement of this website and when individuals choose to contact us by email.

This may include:

• technical information about your device and browser;

• information about how you use the website, such as pages visited, approximate location and time spent on pages, where collected through Google Analytics 4 after consent;

• your name, email address and any other information you choose to provide if you contact us by email.

We do not intentionally collect special categories of personal data through this website.

4. How We Use Personal Data

We process personal data to:

• operate and maintain the website;

• ensure the security and reliability of the website;

• understand how visitors use the website and improve its content and usability;

• respond to enquiries sent by email; and

• comply with our legal obligations.

We do not use personal data for automated decision-making or profiling.

5. Legal Basis for Processing

Where required by applicable law, we rely on the following legal bases under the GDPR:

• Consent, for the use of Google Analytics cookies and related analytics processing.

• Legitimate interests, to operate, secure and improve the website and to respond to enquiries.

• Legal obligation, where processing is necessary to comply with applicable law.

6. Google Analytics

This website uses Google Analytics 4 to collect statistical information about how visitors use the website.

The information we receive is used only to understand website usage, improve the content and usability of the site, and monitor its overall performance. We do not use Google Analytics for advertising, personalised marketing or profiling.

Where required by law, analytics data is collected only after you have given your consent through the cookie consent mechanism provided on Google Sites.

7. Embedded Third-Party Content

This website currently includes an embedded interactive map provided by one of our partner organisations. 

When the embedded map is displayed, your browser may connect directly with the provider's servers. The provider may receive technical information, such as your IP address and browser information, and any processing carried out by the provider is subject to its own privacy policy. 

We recommend reviewing the partner organisation's privacy and cookie policies before interacting with the embedded content.

8. Links to Other Websites

This website contains links to external websites, including our Facebook page.

Following a link to another website is entirely optional. Once you leave our website, the privacy practices of the external website apply, and we encourage you to review their privacy policies.

9. Sharing Personal Data

We do not sell, rent or otherwise disclose personal data for commercial purposes.

Personal data may be processed by trusted service providers that help us operate the website, including Google, which provides the Google Sites hosting platform and Google Analytics.

We may also disclose personal data where required by law or to protect our legal rights.

10. International Transfers

Some service providers used by this website, such as Google, may process personal data outside the European Economic Area (EEA). Where such transfers take place, they are carried out in accordance with the requirements of the GDPR and applicable data protection law. 

11. Data Retention

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy or as required by law.

Analytics data is retained according to the retention period configured in Google Analytics 4. We review these settings periodically to ensure that data is not retained longer than necessary. 

Email correspondence is retained only for as long as reasonably necessary to respond to the enquiry and to meet any legal or administrative requirements.

12. Security

We take appropriate technical and organisational measures to protect personal data against accidental or unlawful loss, alteration, unauthorised access or disclosure.

However, no method of transmitting or storing information electronically can be guaranteed to be completely secure.

13. Your Rights

If the GDPR applies to you, you may have the right to:

• request access to your personal data;

• request correction of inaccurate or incomplete personal data;

• request deletion of your personal data where applicable;

• request restriction of processing;

• object to processing carried out on the basis of legitimate interests;

• withdraw your consent at any time where processing is based on consent

To exercise your rights, please contact us using the details provided above.

If you believe that your personal data has been processed in breach of applicable data protection law, you have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection of the Republic of Cyprus. 

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our activities, website functionality or legal obligations.

The latest version will always be published on this page together with the date of its most recent revision.