Privacy policy
Last updated: 18 July 2026
Data controller
The medisora.sk website is operated, and the Medisora service is provided, by Verteco digital services, s. r. o., registered office Daniela Dlabača 21, 010 01 Žilina, Slovak Republic, Company ID (IČO): 53 412 834, Tax ID (DIČ): 2121358349, VAT ID: SK2121358349, registered in the Commercial Register of the District Court Žilina, Section Sro, Insert No. 75936/L. For any questions about data protection, contact us at info@medisora.sk.
Two roles: controller and processor
When operating this website, handling inquiries and invoicing our customers, we act as the controller of personal data. For patients' health data processed in the Medisora system, we act exclusively as a processor under Article 28 of the GDPR — the controller of that data is always the healthcare provider (the customer practice), with whom we conclude a data processing agreement.
Contact and demo form
Through the form we process your name, email, phone number, type of practice and the content of your message for the purpose of handling your inquiry, demonstrating the system and preparing a quote. The legal basis is Article 6(1)(b) of the GDPR — pre-contractual measures taken at your request. Providing the data is voluntary, but without it we cannot handle your inquiry. We retain the data for a maximum of 24 months from the last communication.
Customer accounts and invoicing
When you register for and use the service, we process users' identification and contact details (name, email, phone, role in the practice), operational and security records (sign-in history, audit logs) and billing details. The legal bases are performance of a contract (Article 6(1)(b) GDPR), compliance with legal obligations in accounting and taxation (Article 6(1)(c) GDPR) and our legitimate interest in the security of the service (Article 6(1)(f) GDPR). We retain accounting documents for 10 years as required by the Slovak Accounting Act; account data is retained for 60 days after the agreement ends, as set out in the Terms of Service.
Health data in the Medisora system
Patients' medical records belong to the healthcare provider; we process them solely on the provider's documented instructions, acting as a processor. Data is encrypted (TLS in transit, AES-256 at rest, with sensitive fields additionally encrypted at the application level) and stored exclusively in data centers in the European Union (Frankfurt am Main, Germany). Every practice has an isolated database schema, and every access to medical records is written to an audit log.
Recipients and processors
We share data only with vetted infrastructure providers: DigitalOcean LLC (application and database hosting, Frankfurt data center, EU) and Cloudflare, Inc. (operation of this website, DNS, protection against attacks and processing of contact-form data). We never sell data or share it with third parties for marketing purposes. We notify customers of changes to sub-processors in advance, as set out in the Terms of Service.
Transfers to third countries
Health data in the Medisora system is processed and backed up exclusively within the EU/EEA. For the operation of the website and the contact form we use Cloudflare, Inc., headquartered in the USA — the transfer is safeguarded by an adequacy decision (the EU-U.S. Data Privacy Framework) and standard contractual clauses.
Your rights
You have the right to access your data, to rectification, erasure, restriction of processing and data portability, the right to object to processing based on legitimate interest, and the right to withdraw consent at any time (where processing is based on consent) without affecting the lawfulness of prior processing. To exercise your rights, contact info@medisora.sk. You may lodge a complaint with Úrad na ochranu osobných údajov SR (the Office for Personal Data Protection of the Slovak Republic), Hraničná 12, 820 07 Bratislava, dataprotection.gov.sk.
Cookies and local storage
Information about cookies and local storage can be found in our separate cookie policy. You can change your choice at any time via the "Cookie settings" link in the page footer.