Legal

Privacy Policy

Information pursuant to Article 13 of EU Reg. No. 2016/679 (GDPR)

This Policy describes which of your personal data is collected by Tern Medtech S.r.l., for what purposes and how it is processed. Below you will also find the information you need to exercise your rights under the GDPR.

Who processes your data: the data controller

Tern Medtech S.r.l., Italian tax registration and VAT number 14254690960, with registered office in Novate Milanese (MI), Via Volta 2, justingray@ternmedtech.com (hereinafter “Data Controller”) is the controller of your personal data.

What data we process — Type of data processed

Your contact data. We will process the details you provide us with (e.g., name, e-mail address) when you contact us by email or through our LinkedIn page.

Where we get your data — Method of data collection

Directly from you. For example, if you ask us a question by e-mail.

Why and for how long we process your data — Purpose and legal basis for data processing; retention period

  1. To answer to your requests collected through email and LinkedIn. For example, we will use your data to answer to your requests received by email or received through our LinkedIn page, both as public comments and as private messages. The legal basis of this processing is the performance of a contract to which the data subject is party, or the performance of pre-contractual obligations and the retention period is equal to the time necessary to comply with the data subject's requests.
  2. To prevent or control unlawful conduct or to protect and enforce rights. For example, we may use your data to prevent or prosecute torts, violations of our own or third parties' intellectual/industrial property rights or computer crimes or crimes committed through telematic networks. The legal basis for such processing is our legitimate interest in protecting our rights and preventing wrongdoing. The data retention period for your data is equal to the time reasonably necessary to enforce our rights from the time we learn of the wrongdoing or its potential commission.

Nature of provision of personal data

For the purposes a) and b) in the previous paragraph, the provision of data is necessary.

Where your data is processed — Data transfer — Who we share your data with — Recipients of personal data

The data will be processed and stored at Data Controller's offices and at Data Controller's suppliers, with whom Data Controller has entered into agreements for the processing of personal data in accordance with Article 28 GDPR, within the European Union. Provided that, where required by law, we will obtain your prior consent, we may share your data with the following third parties: (i) service providers; (ii) judicial or administrative authorities, where we believe we must do so in order to comply with a court order or authority, or to fulfill legal obligations or in order to judicially protect us, or third parties.

Minors

Our website https://www.ternmedtech.com/ is not intended for children under the age of 18, but is intended for an adult audience. If you are a parent or guardian and you think your child has submitted data to us, you can contact us at the addresses above.

Your rights

You can contact the Data Controller to request access to your personal data, rectification, erasure or restriction of processing, to object to processing and to request the portability of your data. When you exercise your right of access, you have the right to know whether your data are being processed, what the purpose of the processing is, what categories of data are being processed, who the recipients or categories of recipients are to whom your data are disclosed (and, if they reside in a third country on the basis of what guarantees), the retention period of your data (or the criteria for determining the retention period), whether any automated processing is taking place (e.g. by profiling) and what the logic of such processing is, the origin of the data (if not initially collected by us). You can exercise your rights by contacting us at the above addresses. You have the right to lodge a complaint with the competent supervisory authority pursuant to and within the limits of Article 77 GDPR.

Updated version as of January 20, 2026