Privacy policy

Last updated: April 24, 2026

This Privacy Policy explains how Medsol Ltd. (“Medsol”, “we”, “us”, or “our”) collects, uses, and protects your personal data when you use the website www.cpapeuropa.com (“Website”).

We process your personal data in accordance with the General Data Protection Regulation (GDPR). 

By using the Website, you acknowledge that you have read this Privacy Policy and understand how your personal data is processed. 

We may update this Privacy Policy as necessary to reflect changes in our practices or legal requirements. Any updates will be published on this page. 

1. Data Controller

For the purposes of applicable data protection law, Medsol Ltd. is the data controller responsible for your personal data. 

Medsol Ltd.
UIC: 205390677
13 Sveta Gora Str., Floor 1, 1164 Sofia, Bulgaria
Email: sales@cpapeuropa.com

2. What Data We Collect

We may collect the following categories of personal data:

• identification and contact data (name, email address, phone number, delivery and billing address, VAT number where applicable)
• order and transaction data (products purchased, order history, payments)
• communication data (emails, inquiries, customer support requests)
• technical data (IP address, basic browser and access information)

3. How We Collect Data

We collect personal data:

• directly from you when you place an order, contact us, or use our services
• automatically when you use the Website (e.g. IP address and basic access data)

4. Legal Basis for Processing

We process personal data based on:

• performance of a contract (processing orders and services)
• compliance with legal obligations (tax, accounting, regulatory requirements)
• legitimate interests (such as security, service improvement, and fraud prevention), where these interests are not overridden by your rights and freedoms 
• your consent (marketing communications, where applicable)

5. Sharing of Data

We may share your personal data with:

• courier and delivery companies (e.g. DHL, PostOne)
• payment providers (PayPal, Klarna, banks, etc.)
• IT service providers (hosting, website maintenance)

These third parties process data only as necessary and are required to ensure confidentiality and security.

6. Payments

Payments are processed through third-party providers such as PayPal, Klarna, Stripe, Mollie, Revolut and banks. Medsol does not store or have access to your full payment details.

When you choose a payment method, certain personal data (such as your name, contact details, and order information) may be shared with the payment provider in order to complete the transaction.

These providers process your data in accordance with their own privacy policies.

7. Analytics

We use third-party analytics services, such as Google Analytics and Hotjar, to better understand how users interact with our Website and to improve our services.

These services may collect information such as IP address, pages visited, time spent on the Website, and general usage data. This information is used only for statistical and analytical purposes.

Some of the providers we use (such as Google Analytics and Hotjar) may process data outside the European Union.

When this happens, we ensure that appropriate safeguards are in place to protect your data, such as standard contractual clauses approved by the European Commission or other lawful transfer mechanisms.

Hotjar may use cookies and other technologies to analyze user behavior (such as clicks, scrolling, and navigation patterns) in an aggregated and anonymized manner.

You can control or disable cookies through your browser settings. You may also opt out of Google Analytics tracking by using tools provided by Google.

8. Cookies

We use cookies to make the Website work properly and to improve your experience.

Cookies are small text files stored on your device. We use:

• essential cookies – required for the Website to function
• analytics cookies – to understand how visitors use the Website
• marketing cookies – to show relevant content (only where applicable)

Where required by law, we will ask for your consent before using non-essential cookies.

You can manage or disable cookies at any time through your browser settings.

9. Data Retention

We retain personal data only for as long as necessary:

• order and transaction data – as required by applicable accounting and tax laws
• communication data – as long as needed to handle inquiries and support
• marketing data – until consent is withdrawn

10. Your Rights

Under applicable law, you have the right to:

• access your personal data
• request correction of inaccurate data
• request deletion of your data
• restrict or object to processing
• withdraw consent at any time
• lodge a complaint with a supervisory authority

Requests can be sent to: sales@cpapeuropa.com

You also have the right to lodge a complaint with the Commission for Personal Data Protection if you believe your data has been processed unlawfully. 

11. Data Security

We take appropriate technical and organizational measures to protect personal data, including secure connections (SSL) and restricted access to information.

12. Third-Party Websites

The Website may contain links to external websites. Medsol is not responsible for the privacy practices of such websites.

13. Updates to This Policy

We may update this Privacy Policy from time to time. Any changes will be published on this page.

14. Contact

For any questions regarding this Privacy Policy or your personal data, please contact us at:
sales@cpapeuropa.com