UniThis Privacy Policy explains how UniMed ("UniMed", "we", "us" or "our") collects, uses, shares and protects your personal data when you visit this website or use our education-consultancy services. We process personal data in accordance with the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") and applicable national law.
1. Data Controller
The controller responsible for your personal data is:
- „UniMed Europe” Ltd, company number 208745635, Bulgaria
- Email: office@unimedeu.com
For any data-protection question, or to exercise your rights, contact us at the email above.
2. What Data We Collect
We only collect data you provide or that is strictly necessary for the site to function:
- Contact form: first and last name, email address, phone number and country code, and the content of your message.
- Consultation bookings: consultations are scheduled through a Google Calendar appointment page embedded on our Booking page. The name, email address and any details you enter there are submitted to Google as part of that booking, and are also sent to us as the appointment record.
- Consent record: the fact that you agreed to be contacted and to this policy, with a timestamp.
- Technical / cookie data: your cookie-consent choice. We do not currently run advertising or third-party analytics cookies.
We do not knowingly collect special-category data (e.g. health data). Please do not include sensitive personal information in free-text message fields.
3. How We Use Your Data and Legal Bases
| Purpose | Legal basis (Art. 6 GDPR) |
|---|---|
| Respond to your enquiry and provide consultancy | Steps prior to a contract / legitimate interest (Art. 6(1)(b), (f)) |
| Send you a booking confirmation / auto-reply | Consent / contract (Art. 6(1)(a), (b)) |
| Where you ask, share your details with a partner university | Consent (Art. 6(1)(a)) |
| Remember your cookie preferences | Legitimate interest / consent (Art. 6(1)(a), (f)) |
| Comply with legal obligations | Legal obligation (Art. 6(1)(c)) |
4. Cookies
We use a small number of cookies that are strictly necessary or preference-based:
unimed_consent— stores your cookie-banner choice (1 year).
No cookies are used for advertising or cross-site tracking. You can clear cookies at any time via your browser settings; essential cookies are needed for core functionality.
5. Who We Share Data With
We do not sell your personal data. We may share it only with:
- Partner universities — only when you explicitly ask us to submit or forward your application details.
- Service providers (processors) — e.g. our email and hosting providers, and Google (Google Calendar appointment scheduling, used for consultation bookings), acting on our instructions or under their own terms as applicable.
- Authorities — where required by law.
6. International Transfers
Your data is primarily processed within the European Economic Area (EEA). If any transfer outside the EEA is necessary, we rely on an adequacy decision or appropriate safeguards such as the EU Standard Contractual Clauses.
7. How Long We Keep Data
We keep enquiry and booking data only as long as needed to assist you and for a reasonable follow-up period, and thereafter for as long as required by law (e.g. accounting obligations). When no longer needed, data is securely deleted or anonymised.
8. Your Rights
Under the GDPR you have the right to:
- Access your personal data and receive a copy;
- Rectify inaccurate or incomplete data;
- Erasure ("right to be forgotten");
- Restrict or object to processing;
- Data portability;
- Withdraw consent at any time, without affecting prior lawful processing;
- Lodge a complaint with a supervisory authority.
To exercise any right, email office@unimedeu.com. In Bulgaria, the supervisory authority is the Commission for Personal Data Protection (CPDP) — www.cpdp.bg.
9. Data Security
We apply appropriate technical and organisational measures to protect your data against unauthorised access, loss or misuse. No transmission over the internet can be guaranteed to be 100% secure.
10. Children
Our services target prospective university students. We do not knowingly collect data from children under the age required for valid consent under applicable national law. If you believe a child has provided data, contact us and we will delete it.
11. Changes to This Policy
We may update this policy from time to time. The "last updated" date at the top reflects the latest version. Material changes will be highlighted on this page.
12. Contact
Questions about this policy or your data? Email office@unimedeu.com.