Privacy Policy
Last updated: May 27, 2026 · Medilinka ApS · CVR 44347644 · Denmark
1. Data Controller
Medilinka ApS, CVR 44347644, is the data controller responsible for your personal data collected through the KUOS Press platform.
Contact: [email protected] · Copenhagen, Denmark
2. Information We Collect
| Category | Examples | Purpose |
|---|
| Account Information | Name, email, password | Account creation and management |
| Contact Information | Address, phone number | Order fulfillment and delivery |
| Payment Information | Card details (tokenized), billing address | Processing payments |
| Reading Data | Reading progress, highlights, notes | Providing reading features |
| Device Information | IP address, browser, device type | Security and analytics |
| Usage Data | Pages visited, clicks, time spent | Improving our services |
| Local Analytics & Personalization | Search queries, topic interests, content preferences, persona choices, visit patterns | Personalized welcome messages, interest profiling, gamification badges — stored locally on your device only |
Device-Local Data: We store search history, topic interests, and gamification progress in your browser's localStorage. This data never leaves your device. It is used solely to personalize your experience (e.g., time-based greetings, interest widgets, achievement badges). You can clear this data at any time through your browser settings.
3. How We Use Your Information
- To provide and maintain our Services
- To process and fulfill your orders
- To communicate with you about your account and orders
- To personalize your experience and recommendations
- To send marketing communications (with your consent)
- To detect and prevent fraud and abuse
- To comply with legal obligations
4. Legal Basis for Processing (GDPR)
Under the EU General Data Protection Regulation (GDPR), we process your personal data on the following legal bases:
- Contract: Processing necessary to fulfill our contract with you (e.g., delivering purchased content)
- Consent: Where you have given explicit consent (e.g., marketing emails)
- Legitimate Interests: For security, fraud prevention, and service improvement
- Legal Obligation: To comply with tax, accounting, and other legal requirements
5. Data Sharing
We do not sell your personal data. We may share your data with:
- Service Providers: Payment processors (Stripe, PayPal), shipping providers, cloud hosting
- Analytics: Google Analytics (anonymized data)
- Legal Authorities: When required by law or to protect our rights
All third-party processors are bound by data processing agreements that comply with GDPR requirements.
6. International Transfers
Your data is primarily stored within the European Economic Area (EEA). If we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.
7. Data Retention
We retain your personal data for as long as necessary to fulfill the purposes for which it was collected:
- Account data: Until account deletion (or 2 years of inactivity)
- Order data: 5 years (Danish accounting requirements)
- Reading data: Until account deletion
- Marketing data: Until consent withdrawal
- Device-local personalization data (localStorage): Until you clear your browser data. This data is not stored on our servers.
8. Your Rights
Under GDPR, you have the following rights:
- Right to Access: Request a copy of your personal data
- Right to Rectification: Correct inaccurate or incomplete data
- Right to Erasure: Request deletion of your data ("right to be forgotten")
- Right to Restrict Processing: Limit how we use your data
- Right to Data Portability: Receive your data in a structured format
- Right to Object: Object to processing based on legitimate interests or direct marketing
- Right to Withdraw Consent: Withdraw consent at any time
To exercise your rights, contact us at [email protected]. We will respond within 30 days.
You also have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet) at www.datatilsynet.dk.
9. Local Storage & Personalization
To provide a personalized experience, our website stores certain data in your browser's localStorage. This is different from cookies — the data is stored on your device and is not automatically sent to our servers.
What We Store Locally
- Search cache: Recent queries and results (3-hour TTL per entry) for faster repeated searches
- Search history: Last 20 queries with timestamps, used for personalized welcome messages
- Interest profile: Topic frequencies, content type preferences, persona usage patterns, visit statistics, and consecutive visit streaks
- Gamification data: Unlocked achievement badges and progress
- Theme preference: Light or dark mode selection
- Cookie consent: Your chosen consent level (essential / all)
Your Control
- This data is stored only on your device and is not transmitted to our servers
- You can view, modify, or delete this data through your browser's developer tools or by clearing site data
- Clearing localStorage will reset your personalized experience, interest profile, and badges
- The data is not shared with third parties
10. Cookies
We use cookies and similar technologies to enhance your experience. For detailed information, please see our Cookie Policy.
11. Security
We implement appropriate technical and organizational measures to protect your personal data, including:
- SSL/TLS encryption for all data transmission
- Secure password hashing (Argon2id)
- Regular security audits and penetration testing
- Access controls and role-based permissions
- Regular backups and disaster recovery procedures
12. Children's Privacy
Our Services are not intended for children under 16 years of age. We do not knowingly collect personal data from children under 16. If you believe we have collected data from a child under 16, please contact us immediately.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through a notice on our website. The updated policy will be effective as of the date stated at the top.
14. Contact
For privacy-related questions or to exercise your rights:
- Email: [email protected]
- Company: Medilinka ApS, CVR 44347644
- Address: Copenhagen, Denmark
- DPO: We have appointed a Data Protection Officer. Contact via [email protected]