PRIVACY RULES

INTRODUCTION

We thank you for visiting the website of the healthcare institution Poliklinika Golden Mind d.o.o.

Through this, we would like to provide you with more detailed information about the method of processing and protection of personal data that you have provided by filling out our Contact Form.

In accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation), personal data is considered to be all data relating to an individual whose identity is determined or can be determined (“data subject”); an individual whose identity can be determined is a person who can be identified directly or indirectly, in particular by means of identifiers such as name, identification number, location data, online identifier or by means of one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that individual.

All procedures and measures implemented regarding the processing and protection of personal data are based on the provisions of relevant regulations, specifically the provisions of:

  • Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC;
  • The Act on Implementation of the General Data Protection Regulation (Official Gazette 42/2018).

Modifications to the implemented procedures and measures of protection and processing of personal data are possible in the case of any amendments and/or supplements to the relevant regulations, with prior notification of the type and scope of the modifications.

All collected personal data, including personal data collected via our online Contact Form, related to the offer and services of our healthcare institution, are used exclusively for the purposes of:

  • responding to your enquiry or, if necessary, preparations for the selected diagnostic and/or therapeutic procedure,
  • promotion of the activities, work, and services of our healthcare institution in the media (newspapers and other print, radio and television programs, news agency programs, electronic publications, social networks) and the production of promotional materials,
  • informing service users or clients of our healthcare institution about activities, methods of work, and services,
  • all forms of professional development of authorized persons of our healthcare institution and promotion of the work of the healthcare institution at professional conferences, educations, and workshops,
  • production and optimization of the work of our website.

All data is stored in our database on a protected server, and only our administrators and processors have access to them. The data is processed in the manner and under the conditions specified below.

Any further use and processing or transfer of data to unauthorized third parties, automated individual decision-making, and profiling are strictly prohibited.

PROCESSING OF PERSONAL DATA

“Processing” means any operation or set of operations performed on personal data or sets of personal data, whether automated or non-automated, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.

The processing of personal data is carried out exclusively for the above-mentioned purposes, so that Poliklinika Golden Mind d.o.o. and its employees can provide, maintain, protect, and improve the way of working and provision of their services. Poliklinika Golden Mind and its employees collect personal data based on a statement of consent given by the service user or client for one or more specifically defined purposes.

When giving the statement of consent, the service user is always provided with an explanation of the conditions of collection and processing of data. The explanation must specify all data that will be collected, the purpose of collection, as well as the person responsible for their processing (processor of processing – Dubravka Galez Mihaldinec).

If you are not yet a registered user, the personal data you have sent us in the Contact Form is processed only for the time necessary to process your enquiry, and at the longest until one (1) month after the date the Contact Form was filled out, after which such personal data is deleted or destroyed. The purpose of processing in this case is processing the submitted enquiry of the user, and the legal basis is the proper execution of the requested service or, depending on the case, compliance with legal obligations of the Company as the controller of processing.

Poliklinika Golden Mind d.o.o., as the Controller of Processing, undertakes to implement appropriate technical and organizational measures to ensure and be able to prove that the processing of personal data in each case is conducted in accordance with the provisions of the relevant regulations, and in this context specifically undertakes:

  • to give lawful instructions to the processor of processing, based on valid and lawful legal grounds (lawfulness of processing), and in accordance with other established principles of processing (purpose limitation, data minimization, accuracy, storage limitation, integrity and confidentiality, and reliability),
  • to take appropriate measures to provide data subjects with all necessary information about the collection and processing of their personal data (including information about the identity of the controller of processing, the purpose of processing, recipients or categories of recipients, and other information in accordance with the provisions of the relevant regulations),
  • to respond to data subjects’ requests based on the data subject’s right of access, right to rectification and erasure (“right to be forgotten”), right to restriction of processing, right to data portability, and right to object, as well as based on other rights of data subjects in accordance with the provisions of the relevant regulations, and
  • to cooperate with the processor of processing in fulfilling its legal obligations.

DATA SUBJECTS AND THEIR RIGHTS

In the case of processing of personal data by the company Poliklinika Golden Mind d.o.o. as the Controller of Processing, in accordance with the relevant provisions of the General Data Protection Regulation, you acquire the status of a data subject with all the rights and obligations prescribed by the Regulation in relation to the data subject.
In accordance with the provisions of Articles 15 to 22 of the General Data Protection Regulation, the data subject has the following rights:

  • right of access to their personal data, especially the right to request information about the processing of their personal data from the controller of processing;
  • right to rectification of personal data if the data is inaccurate;
  • right to erasure of personal data (so-called “right to be forgotten”) in cases provided for in Article 17 of the Regulation;
  • right to restriction of processing in cases provided for in Article 18 of the Regulation;
  • right to object to processing to the controller of processing;
  • right not to be subject to a decision based solely on automated processing, including profiling (with exceptions).

The data subject has the right to submit a complaint regarding the processing of their personal data at any time. The complaint is submitted in writing to the Agency for Personal Data Protection, at the address Martićeva ulica 14, 10000 Zagreb.

SECURITY OF PERSONAL DATA

We ensure protection of data against breaches or misuse of any kind by using all prescribed technical protection measures of our website and other information systems and software applications we use, as well as internal procedures and organizational rules established for this purpose, including especially the strict obligation of maintaining business secrecy by all our employees and collaborators.

In the case of entrusting the processing of personal data to a third party as a processor of processing, we regulate the processing and protection of personal data by a concluded contract by which such third party, during the processing and protection of personal data, is obliged to act fully in accordance with the relevant provisions of the General Data Protection Regulation and prescribed technical measures and organizational rules.

COOKIES

To improve the quality of our website, we use, among other things, cookies (so-called cookies).

Cookies are small text files stored on computers, tablets, or smartphones. Cookies allow our website to function optimally for all our users and to further improve our products and services and our communication with you.

It is important to emphasize that cookies cannot access your data stored on your personal computer or other communication devices and therefore are not used to collect personal data. You can refuse the use of cookies at any time and can always subsequently disable or cancel them on the information-communication devices you use.

CONTACT

In case of any questions, as well as if you wish to withdraw a given statement of consent or exercise any of your rights related to the processing of personal data, you can always contact us:

Poliklinika Golden Mind d.o.o., Crnojezerska 14, 10090 Zagreb; VAT 04697011238; IBAN HR5224020061101166954, authorised person Dubravka Galez Mihaldinec, director; share capital paid in full 2,500.00 EUR, Commercial Court in Zagreb.