Privacy policy
Last updated: October 9, 2026
Medica Algérie connects healthcare professionals with medical equipment suppliers. This policy explains which personal data we process, why, who receives it, how long we keep it and how to exercise your rights, under Algerian law no. 18-07 of 10 June 2018 on the protection of individuals in the processing of personal data.
1. Controller
SARL HERFA MIROTECH, Lot N° 214, Pins maritimes, cité les Mandarines, Mohammadia, Algiers (RC 16/00 - 1051511 B 23), publisher of Medica Algérie.
For any question about your data: [email protected].
2. The data we process
- Account: name, e-mail address, password (stored as an irreversible hash), language, and where used passkeys and two-factor authentication.
- Company: legal name, activity, addresses of establishments, wilayas served, tax identifiers (NIF, NIS, RC, AI), logo, catalogue, members and roles.
- Quote request: the need (equipment, quantities, wilaya, timing, budget), attachments, and your contact details (name, e-mail, phone, organisation, position), stored apart from the request.
- Exchanges: messages, quotes, suppliers' follow-up notes, "did you find your equipment?" answers.
- Subscription: plan, invoices, payment proofs.
- Technical data: security logs, a non-reversible fingerprint of the IP address (anti-abuse), devices allowed to receive push notifications.
- Audience measurement: anonymous from collection, without cookies or IP addresses (a fingerprint that changes every day). Advertising tools load only with your consent (see the cookie policy).
3. Why we process it
| Purpose | Basis |
|---|---|
| Create and secure your account, sign you in | Performance of the terms of use |
| Send your quote request to relevant suppliers and let them answer | Performance of the terms of use, at your request |
| Publish supplier pages and their catalogue | Performance of the supplier terms; listing agreement for pages created by Medica |
| Verify companies ("Verified" badge) | Legitimate interest: buyers' trust |
| Invoice subscriptions | Legal obligation and contract |
| Prevent abuse, fraud and spam | Legitimate interest |
| Send service notifications (e-mail, app, push) | Performance of the contract; adjustable in your preferences |
| Send newsletters | Your consent, withdrawable at any time |
| Audience and advertising measurement | Your consent (non-essential cookies) |
4. Who receives your data
- Suppliers your request is sent to first see the need without your contact details. Your contact details reach them only under the unlock rules of their subscription, or if you choose to share them with one of them.
- Medica's team, according to their role (request review, verification, support), within what is necessary.
- Our technical processors, each for its own task only: hosting (Contabo GmbH, Germany), e-mail delivery (Resend, United States), anti-bot protection of forms (Cloudflare), online payment (Chargily in Algeria; Stripe for euro payments if offered), browsers' push notification services (they receive the content encrypted).
- Authorities, only on a lawful request.
- We do not sell your data. No data is sent to an artificial intelligence model.
5. Hosting and transfers outside Algeria
Data is hosted in Germany (European Union) by Contabo GmbH. Some processors listed above are established outside Algeria. These transfers are limited to what the service needs and covered by those providers' contractual commitments. They are subject to the formalities of law 18-07 with the national personal data protection authority (ANPDP).
6. Retention
| Data | Duration | Then |
|---|---|---|
| A request's contact details, attachments, messages, quote documents and notes, free texts | 12 months without activity | Erased; the request remains without personal data, for statistics |
| Notifications, technical logs | 12 months | Deleted |
| Unused account without a company | 12 months without sign-in | E-mail warning, then deletion 30 days later unless you sign in |
| A company member's account | While the company is registered | Deleted on request or with the company |
| Listing agreement | While the company is listed | Then 12 months |
| Invoices and payment proofs | 10 years | Legal obligation |
7. Your rights
You have the right to information, access, rectification, objection and erasure. You can change most of your data in your space, tune your notifications in "Settings > Notifications", and ask for your account's deletion at [email protected]: it is handled within 30 days.
If you believe your rights are not respected, you can refer the matter to the national personal data protection authority (ANPDP).
8. Security
- Encrypted connection (HTTPS) across the site.
- Irreversibly hashed passwords; two-factor authentication and passkeys available.
- Strict separation of data between companies; requesters' contact details stored apart and masked by default.
- Private files (attachments, proofs) never public; sensitive actions logged.
9. Minors
Medica Algérie is a professional service for adults. We do not knowingly collect data about minors.
10. Changes
We may update this policy. The update date is shown at the top of the page; for a significant change, we let you know by e-mail or in the app.