Privacy Policy

This text was translated and restructured from the previous website. It requires review by a legal professional against the final hosting, analytics, cookies and forms before publication.

1. General information

SANA Medical Laboratory is committed to protecting the privacy and personal data of people who visit sanalab-bg.com or use its services. This policy explains what information may be collected, why it is used, when it may be disclosed and how it is protected.

The policy may be updated. Please check this page for the current version. Questions may be sent to laboratoriosana@gmail.com.

2. Who we are

The data controller is SANA Independent Medical Diagnostic Laboratory Ltd, with a registered address at 83 Bulgarska Morava St., Vazrazhdane district, Sofia 1303, Bulgaria.

3. Information we collect

Information may be received when you use the website, send an enquiry or request a service. It may include your name, postal address, email address, telephone number, information required by accounting or other applicable law, and technical information about pages visited and the time of the visit.

Only information needed to provide the requested service, respond to you, comply with legal obligations or fulfil another clearly stated purpose should be collected.

4. How information may be used

To provide requested services and meet contractual obligations.
To answer enquiries and provide information you have requested.
To send information directly related to a service you use.
To obtain feedback and analyse how services can be improved.
To protect legitimate interests connected with the website and services.
To notify you about changes to terms, this policy or the services.
For marketing only where there is an appropriate legal basis, including consent where required.

5. Retention

Personal data is kept only for as long as needed for the purpose for which it was supplied, for the period agreed in a contract, or for the periods required by Bulgarian accounting, tax and other applicable law. Marketing data is kept until you withdraw the relevant permission or object where that right applies. Data should then be securely deleted or anonymised.

6. Access by service providers and public authorities

Personal information is not sold or rented to third parties for their marketing. It may be shared with service providers and processors only to perform necessary tasks on SANA’s behalf and subject to appropriate confidentiality and data-protection duties.

Information may be disclosed where required by law, a court order, the prevention of fraud or another crime, or a lawful request from a competent public authority. Only the information necessary for that purpose should be disclosed.

7. Contact with you

SANA may contact you when needed to provide a requested service, meet a contractual or legal obligation, respond to an enquiry or protect your interests. Marketing communication by email, telephone, text message or post requires an appropriate legal basis.

8. Your data-protection rights

To ask whether your personal data is processed and request access to it.
To ask for inaccurate or outdated information to be corrected.
To request erasure or restriction where the legal conditions are met.
To object to certain processing and to withdraw consent at any time where processing is based on consent.
To request data portability where applicable.
To be informed about recipients of a correction, erasure or restriction where required by law.
To lodge a complaint with the Bulgarian Commission for Personal Data Protection or another competent supervisory authority.

A request must concern your own personal data. SANA may need to verify your identity before acting on it. Contact laboratoriosana@gmail.com and describe the right you wish to exercise.

9. Security

Appropriate organisational and technical measures are used to reduce the risk of unauthorised access, loss, misuse or alteration. Website connections use HTTPS where configured. No transmission over the internet can be guaranteed to be completely secure, so please avoid sending sensitive health information through an ordinary email enquiry unless specifically instructed to use an approved secure channel.

10. Automated decisions and profiling

The legacy policy states that SANA does not use automated decision-making or profiling.

11. Cookies and links to other websites

The website may use cookies and similar technologies. More information is available in the Cookie Policy. Links may lead to websites operated by other organisations; their own privacy policies apply and SANA is not responsible for their practices.

12. International transfers

If personal data is transferred outside the European Economic Area, appropriate safeguards required by applicable data-protection law should be used. When services are used from outside the EEA, data may need to cross borders in order to provide those services.

13. Review of this policy

The source policy states that it was last updated in March 2018 with reference to Regulation (EU) 2016/679. This English version is a translation and editorial restructuring of that legacy content and requires legal review before production publication.