Privacy Notice

This Privacy Notice explains how Ador Diagnostics Ltd. ("ADOR", "we", "us", "our"), a company registered in Cyprus (registration number HE395533) with registered office at 58 Agiou Athanasiou, El Greco Building, Flat/Office 201, 4102 Limassol, Cyprus, collects, uses, shares, and protects personal data when you visit www.adordx.com (the "Site"), register for an account, contact us, or otherwise interact with us. It should be read together with our [Cookie Policy] and [Terms of Use].

We process personal data in accordance with Regulation (EU) 2016/679 (the "GDPR") and applicable Cyprus data protection law (Law 125(I)/2018).

1. Who We Are

Ador Diagnostics Ltd. is the data controller responsible for personal data processed through the Site. ADOR develops the NATlab system and associated in vitro diagnostic syndromic panels, with operations in Cyprus, Italy, and Israel. For this Notice, the data controller's contact details are set out in Section 11 below.

2. What Personal Data We Collect

Depending on how you interact with the Site, we may collect:

Contact and identification data - name, job title, organisation, email address, phone number, country, submitted through contact forms, registration, or newsletter sign-up.
Account data - login credentials and profile information, where you register for a members' area or customer portal.
Enquiry and correspondence data - the content of messages, requests, or documents you send us (e.g., via the Contact page).
Technical and usage data - IP address, browser type and version, device information, pages visited, time and duration of visits, and referral source, collected automatically through cookies and similar technologies (see our [Cookie Policy] for details).
Professional data - where relevant to your role (e.g., healthcare professional, laboratory representative, distributor), information about your organisation and professional interest in our products.

We do not knowingly collect special categories of personal data (e.g., health data about you personally) through the Site. Do not submit sensitive personal data through our contact or registration forms unless specifically requested.

3. How We Use Your Data and Legal Basis

Responding to enquiries and providing information you request
Legal basis: Legitimate interest in managing communications, or steps taken at your request prior to a contract.

Managing account registration and access to restricted areas of the Site
Legal basis: Performance of a contract with you, or your consent.

Sending newsletters or marketing communications
Legal basis: Your consent, which you may withdraw at any time.

Analytics and improving the Site's functionality Legal basis: Your consent (for non-essential cookies) or our legitimate interest (for strictly necessary cookies).

Maintaining the security of the Site and preventing misuse
Legal basis: Our legitimate interest.

Complying with legal, regulatory, or accounting obligations (including obligations relevant to our status as an IVD medical device manufacturer)
Legal basis: Legal obligation.

We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another compatible reason.

4. Who We Share Your Data With

We may share personal data with:

Service providers who support our website, IT infrastructure, email, analytics, and customer relationship management, acting on our instructions and under contractual confidentiality and data protection obligations.
Group companies and business partners involved in the development, manufacture, distribution, or support of the NATlab system, where relevant to your enquiry (e.g., a distributor in your region).
Professional advisers and regulators, where necessary for legal, compliance, or regulatory purposes (including in connection with our obligations as an IVD medical device manufacturer).
Competent authorities, where required by law or to protect our rights, property, or safety, or that of others.

We do not sell your personal data to third parties.

5. International Data Transfers

Given our operations in Cyprus, Italy, and Israel, personal data may be transferred to and processed in countries outside your country of residence, including outside the European Economic Area (EEA). Where we transfer personal data outside the EEA, we ensure an adequate level of protection through appropriate safeguards, such as the European Commission's Standard Contractual Clauses, an adequacy decision (where applicable), or other mechanisms recognised under the GDPR. You may request further information about these safeguards by contacting us as set out in Section 11.

6. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, including to satisfy any legal, accounting, or regulatory requirements (for example, obligations relating to IVD medical device vigilance and traceability, where applicable). Retention periods vary depending on the type of data and the purpose of processing; where you no longer wish us to retain your data, you may request its deletion in accordance with Section 7, subject to any overriding legal obligations.

7. Your Rights

Subject to applicable law, you have the right to:

Access the personal data we hold about you;
Rectify inaccurate or incomplete data;
Erase your data ("right to be forgotten"), in certain circumstances;
Restrict processing, in certain circumstances;
Object to processing based on legitimate interest or for direct marketing purposes;
Data portability, where processing is based on consent or contract and carried out by automated means;
Withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact us using the details in Section 11. You also have the right to lodge a complaint with the Cyprus Commissioner for Personal Data Protection, or with the data protection authority in your country of residence.

8. Cookies

The Site uses cookies and similar technologies. Full details, including how to manage your preferences, are set out in our [Cookie Policy].

9. Security

We implement appropriate technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure, or destruction. No method of transmission or storage is completely secure; while we work to protect your data, we cannot guarantee absolute security.

10. Children's Privacy

The Site is not directed at individuals under the age of 18, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can take appropriate action.

11. Contact and Data Protection Queries

For questions about this Privacy Notice or to exercise your rights, please contact:

Ador Diagnostics Ltd. 58 Agiou Athanasiou, El Greco Building, Flat/Office 201, 4102 Limassol, Cyprus

Or via our Contact page.

12. Changes to This Notice

We may update this Privacy Notice from time to time to reflect changes in our practices or in applicable law. The date of the last update is shown at the top of this page. Material changes will be highlighted on the Site.