This English version is provided for convenience. The German version of the privacy policy is legally binding.
With this privacy policy we inform you, in accordance with Art. 13 GDPR, which personal data are processed when you visit medtec24.com and when you contact us, for what purposes, on which legal basis, and what rights you have.
1. Controller
Ing.-Büro Sachit Shrestha
Sachit Shrestha – Owner
Am Sommerberg 20
51503 Rösrath
Germany
Email: s.shrestha@medtec24.com
Mobile: +49 176 76 78 69 10
WhatsApp: +49 176 39 93 78 01
Phone: +49 2205 3488
Fax: +49 2205 91 25 32
2. Hosting and server log files
This website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. STRATO processes the website data on our behalf on servers in Germany.
Each time a page is accessed, the web server processes the following data for technical reasons (server log files):
- IP address of the requesting device
- date and time of access
- page or file accessed and amount of data transferred
- HTTP status code
- referrer URL (previously visited page), if transmitted by the browser
- browser type and version, and operating system
The purpose is to provide the website and to ensure its stability and security, for example to defend against attacks. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the secure and error-free operation of the website. The log files are deleted automatically after the retention period set by the host, unless they are needed to investigate a specific security incident.
3. Encryption
The website can be accessed via an encrypted connection (HTTPS/TLS). Data you submit via the contact form therefore cannot be read by third parties.
4. Cookies and browser storage
This website does not use analytics, tracking or marketing services and does not store any information in your browser’s local storage.
For its two languages (German/English), the website sets one technically necessary cookie named pll_language. It contains only the code of the selected language (“de” or “en”) so that pages are shown in that language, and it is deleted automatically after one year. The legal basis is § 25(2) no. 2 TDDDG in conjunction with Art. 6(1)(f) GDPR. A cookie banner is therefore not required. You can delete or block cookies in your browser at any time; the website remains usable via the language addresses (e.g. /de/).
Only when logging in to the administration area (WordPress login) does WordPress set further technically necessary cookies that are strictly required for logging in (§ 25(2) no. 2 TDDDG). This concerns only the operators of the website, not visitors.
5. Contact form
If you use the contact form on the “Start a project” page, we process the following data: name, email address and your message (required fields) and, voluntarily, company or organisation, phone number and the topics you select. In addition, your consent, the language and the page from which the enquiry was sent, and the time of consent are transmitted. The data are sent to our office by email and are not stored permanently in the website database.
If entries are incomplete or invalid, the data entered are stored temporarily on the server for no more than ten minutes so that the form can be shown again with your entries. To prevent misuse, the number of messages per network address is limited; for this purpose a non-reversible hash of the IP address — not the IP address itself — is stored for no more than 15 minutes.
The purpose is to process and answer your enquiry. The legal basis is Art. 6(1)(b) GDPR insofar as your enquiry is aimed at concluding or performing a contract, and otherwise our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR). Where you have consented to the processing in the form, Art. 6(1)(a) GDPR is an additional legal basis; you can withdraw your consent at any time with effect for the future.
6. Contact by email, phone or WhatsApp
If you contact us by email, phone or fax, we process your details to deal with your request (legal bases as in section 5).
The website contains a link to WhatsApp. WhatsApp is only opened when you click this link; no data are transferred to WhatsApp beforehand. When you use WhatsApp, WhatsApp Ireland Limited, Dublin, Ireland, is responsible for the processing by WhatsApp; data may also be transferred to the USA. Further details can be found in WhatsApp’s privacy policy. If you do not want this, please use email or phone.
7. Email processing and recipients
Our email mailboxes for medtec24.com are also operated by STRATO GmbH in Germany. Messages from the contact form and to our email addresses are therefore processed on STRATO servers.
Beyond this, we only pass on your data if this is necessary to perform a contract, if we are legally obliged to do so, or if you have consented.
8. Fonts, content and third-party services
All fonts, icons, graphics and scripts are loaded directly from our own server. No content from Google Fonts, content delivery networks, video platforms, map services or social networks is embedded.
9. Retention period
We store personal data only as long as necessary for the respective purpose or as required by statutory retention periods (e.g. six or ten years under § 257 HGB and § 147 AO for business letters and accounting records). Enquiries that do not lead to an order are deleted no later than 24 months after the last contact.
10. Your rights
Subject to the statutory requirements, you have the following rights:
- access to your stored data (Art. 15 GDPR)
- rectification of inaccurate data (Art. 16 GDPR)
- erasure (Art. 17 GDPR)
- restriction of processing (Art. 18 GDPR)
- data portability (Art. 20 GDPR)
- objection to processing based on Art. 6(1)(f) GDPR on grounds relating to your particular situation (Art. 21 GDPR)
- withdrawal of consent with effect for the future (Art. 7(3) GDPR)
To exercise your rights, a message to s.shrestha@medtec24.com is sufficient.
You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2–4, 40213 Düsseldorf, Germany, www.ldi.nrw.de.
11. Obligation to provide data, no automated decision-making
Providing your data is not required by law or contract. Without the required fields in the form, however, we cannot process your enquiry. No automated decision-making, including profiling, takes place.
12. Changes
We update this privacy policy when the website or the legal situation changes. The version published on this page applies.
Last updated: October 2026