Platform melio.med — www.melio.med Version 1.0 | September 2025
1. What are cookies?
Cookies are small text files stored on your device (computer, phone, tablet) when you visit a website. They allow the site to recognize your device and retain certain information about your visit.
This Cookie Policy is drafted in accordance with Law no. 506/2004 on the processing of personal data and the protection of privacy in the electronic communications sector (which transposes ePrivacy Directive 2002/58/EC, as amended by Directive 2009/136/EC), Regulation (EU) 2016/679 (GDPR), Law no. 190/2018, and the ANSPDCP Guidelines on the use of cookies.
2. Categories of cookies used
2.1. Strictly necessary cookies (technical)
These cookies are essential for the operation of the melio.med platform. They cannot be disabled without affecting basic functionality. They do NOT require consent under Art. 5(3) of the ePrivacy Directive.
| Cookie Name | Type | Purpose | Duration | Provider |
|---|---|---|---|---|
| session_id | Technical | Maintains the authenticated session | Session | melio.med |
| csrf_token | Technical | Protection against CSRF attacks | Session | melio.med |
| cookie_consent | Technical | Retains cookie preferences | 12 months | melio.med |
| auth_token | Technical | Secure user authentication | 30 days | melio.med |
| lang_pref | Technical | Retains language preference | 12 months | melio.med |
2.2. Performance and analytics cookies
These cookies collect information about how visitors use our platform, helping us improve our services. CONSENT REQUIRED.
| Cookie Name | Type | Purpose | Duration | Provider |
|---|---|---|---|---|
| _ga | Analytics | Identifies unique Google Analytics users | 2 years | |
| ga* | Analytics | Maintains GA4 session state | 2 years | |
| _gid | Analytics | Distinguishes users (session) | 24 hours | |
| _gat | Analytics | Limits GA request rate | 1 minute |
2.3. Functional cookies
Allow the platform to retain choices made by the user for a personalized experience. CONSENT REQUIRED.
| Cookie Name | Type | Purpose | Duration | Provider |
|---|---|---|---|---|
| ui_theme | Functional | Retains interface theme (light/dark) | 6 months | melio.med |
| notifications_pref | Functional | Notification preferences | 12 months | melio.med |
| recent_doctors | Functional | Recently viewed doctors | 30 days | melio.med |
2.4. Payment cookies (PayU)
Cookies used by the payment processor PayU to secure transactions. They are necessary for completing payments.
| Cookie Name | Type | Purpose | Duration | Provider |
|---|---|---|---|---|
| payu_session | Payment | Secure payment session | Session | PayU S.A. |
| payu_token | Payment | Anti-fraud transaction token | Session | PayU S.A. |
3. Cookie consent
When you first visit the melio.med platform, you are presented with a consent banner (Consent Management Platform - CMP) that allows you to:
- Accept all cookies
- Reject optional cookies
- Customize preferences by cookie category
Strictly necessary (technical) cookies are activated automatically, without requiring consent, as they are indispensable for providing the requested service.
Your consent is valid for a period of 12 months, after which it will be requested again. You can withdraw or modify your consent at any time by accessing the Cookie Settings section in the platform's footer or from your account.
4. Withdrawing Consent and Managing Cookies
You can manage and/or delete cookies at any time through the following methods:
4.1. From browser settings
- Google Chrome: Settings > Privacy and security > Cookies and other site data
- Mozilla Firefox: Options > Privacy & Security > Cookies and Site Data
- Safari: Preferences > Privacy > Manage Website Data
- Microsoft Edge: Settings > Cookies and site permissions
4.2. Provider-specific opt-out
- Google Analytics: https://tools.google.com/dlpage/gaoptout
- PayU: according to PayU's policy available at www.payu.ro
Warning: disabling technical cookies may affect the normal operation of the melio.med platform.
5. Data Transfers to Third Parties
Certain cookie providers (e.g., Google Analytics) may transfer data outside the European Economic Area. These transfers are carried out in compliance with the legal mechanisms provided for in Chapter V GDPR (EU-US Adequacy Decision — Data Privacy Framework, Standard Contractual Clauses).
Complete list of third-party providers and their privacy policies:
- Google LLC: https://policies.google.com/privacy
- PayU S.A.: https://www.payu.ro/politica-confidentialitate
6. Cookie Policy Updates
This Cookie Policy may be updated periodically to reflect technological, legislative, or operational changes. The date of the last update is indicated in the document header.
The current version is always available at: https://www.melio.med/politica-de-cookies
7. Contact
For any questions regarding the use of cookies:
- Email: gdpr@melio.med
- Address: ONCOSTOP S.R.L., Bucharest, Sector 3, Strada Murgeni, No. 3
- ANSPDCP (supervisory authority): www.dataprotection.ro
ONCOSTOP S.R.L. | Tax ID: 52443272 | J2025066671009 | www.melio.med