As a growing global company engaged in diverse healthcare and medical technology sectors, Medion Healthcare Pvt. Ltd. (“Medion”) recognizes that the confidence of our customers, business partners, officers, and employees is among our most valuable assets. We understand that our responsibilities extend beyond delivering exceptional products and services — we are equally committed to maintaining the highest standards of legal compliance, privacy, and social responsibility.
Medion is committed to respecting the privacy of all stakeholders and protecting the personal data of customers, business partners, officers, and employees across all business operations.
This policy applies to Medion Healthcare Pvt. Ltd., its affiliates, subsidiaries, and their respective officers and employees. The term “affiliate” refers to any entity over which Medion exercises control through voting rights, management, or contractual agreement.
This policy outlines Medion’s data protection and data security standards and ensures adherence to all applicable data protection laws, both in India and internationally. It incorporates globally recognized data protection principles and is intended to supplement — not replace — national laws.
In cases where national data protection legislation imposes stricter requirements, that legislation shall prevail. Conversely, where national legislation is absent or less rigorous, this policy will serve as the guiding standard.
This policy applies to the processing of all personal data. In jurisdictions where legal entities’ data is protected similarly to personal data, this policy also applies to such data. Anonymized or aggregated data used for statistical or research purposes is excluded.
a. Lawfulness, Fairness, and Transparency
All personal data will be collected and processed lawfully, fairly, and transparently to uphold the rights of the data subjects.
b. Purpose Limitation
Personal data will only be collected for specific, explicit, and legitimate purposes and will not be processed in ways that are incompatible with those purposes.
c. Accuracy and Timeliness
Data must be accurate and, where necessary, kept up to date. Medion will take all reasonable steps to correct or delete inaccurate data without delay.
d. Data Minimization
Only data that is adequate, relevant, and necessary for the intended purpose will be collected and retained. Unnecessary data will not be stored.
e. Data Subject Rights
Medion recognizes and upholds the rights of all data subjects, including the rights to access, correct, delete, and restrict the processing of their data. Clear and transparent communication will be provided regarding how data is collected and used.
f. Erasure and Retention
Personal data will be retained only for as long as necessary. Once the purpose for collection has been fulfilled, or consent is withdrawn (with no other legal basis for retention), the data will be securely deleted.
g. Security and Safeguards
Personal data will be processed securely. Appropriate technical and organizational measures will be implemented to prevent unauthorized access, disclosure, alteration, or destruction of data. Systems will be designed with data resilience and recovery mechanisms in the event of breaches or system failure.
h. Data Protection by Design and Default
Privacy and data protection principles will be embedded in the design of products, services, and processes from the outset. Only necessary data will be collected and processed by default.
i. Accountability
Medion accepts full responsibility for ensuring compliance with this policy and applicable data protection laws. We maintain the ability to demonstrate such compliance through documentation and controls.
Each Medion entity shall appoint a qualified individual responsible for the implementation and ongoing compliance with this policy and data protection best practices.