Legal information

Privacy policy

Last updated: 4 August 2025.

Welcome to the website of Poliklinika Kranjčec (www.poliklinika-kranjcec.com). Your privacy is extremely important to us, and we are committed to protecting personal data in accordance with the General Data Protection Regulation (GDPR) and the relevant Croatian regulations.

1. Data controller

  • Name: Poliklinika Kranjčec d.o.o.
  • Registered office: Ulica Tomislava Ivčića 20b, 23000 Zadar, Croatia
  • VAT ID (OIB): 77468505537
  • Phone: +385 23 324 881
  • E-mail: poliklinika.kranjcec@gmail.com

2. Types of personal data we collect

  • Identification data (e.g. first name, surname, personal ID number, date of birth)
  • Contact data (e.g. address, phone number, e-mail)
  • Health data (e.g. medical history, diagnoses, findings, medical images)
  • Technical data (e.g. IP address, device type, browser, cookies)
  • Marketing data (e.g. preferences, responses to campaigns)

We collect data through online forms, telephone and e-mail inquiries, when concluding contracts and providing healthcare services, and automatically when you visit the website.

3. Purposes of processing and legal basis

  • Scheduling appointments and providing healthcare services — performance of a contract and a legal obligation
  • Keeping medical records — a legal obligation and the public interest in the field of public health
  • Responding to inquiries — our legitimate interest in providing you with the requested information
  • Sending promotional content (newsletter) — solely with your consent, which you can withdraw at any time
  • Analysing website traffic and optimising content — a legitimate interest in improving the functionality of the site

4. Cookies

We use cookies in order to:

  1. ensure the technical correctness and customisation of the site
  2. track visit statistics (Google Analytics)
  3. run digital advertising (Google Ads, Facebook Pixel)

You cannot disable essential cookies, but you can disable analytical and marketing cookies in your browser settings or through our consent management banner.

5. Data recipients

  • Providers of IT and hosting services (data processing agreement)
  • Providers of analytical and marketing tools (Google LLC, Meta Platforms Inc.)
  • Authorised state bodies when required by law

The data is generally processed within the European Economic Area. If we exceptionally transfer it outside the EEA, we use appropriate safeguards, such as standard contractual clauses.

6. Storage period

  • Medical records: at least 10 years after the end of treatment (in accordance with the Healthcare Act)
  • Accounting documents: 11 years (the General Tax Act)
  • Newsletter data: until consent is withdrawn
  • Analytical cookies: according to the tool settings (up to a maximum of 26 months)

7. Data security

We apply technical and organisational measures such as SSL encryption, access control, pseudonymisation and regular security checks to prevent unauthorised access to, loss of, or misuse of data.

8. Your rights

You have the right to:

  1. Access the personal data we process about you
  2. Rectify inaccurate or incomplete data
  3. Erase data (the "right to be forgotten") when the data is no longer needed or you have withdrawn consent
  4. Restrict processing in certain situations
  5. Transfer data to another controller
  6. Object to processing based on a legitimate interest or carried out for the purposes of direct marketing
  7. Withdraw consent at any time, without affecting the lawfulness of processing before the withdrawal
  8. Lodge a complaint with the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb, azop@azop.hr

To exercise your rights, contact us in writing or by e-mail; you will receive a response within 30 days at the latest.

9. Processing of minors' data

The polyclinic's services are intended for persons over 16 years of age, unless consent is given by a parent or legal guardian. We do not knowingly collect the data of minors without appropriate authorisation.

10. Automated decision-making

We do not carry out profiling or automated decisions that would have legal or similarly significant effects on you.

11. Changes to the privacy policy

We may update this policy from time to time to comply with regulations or technological changes. The updated version will always be published with the date of the last change indicated. We recommend that you check it periodically.

Thank you for your trust! For any questions about privacy protection, contact us at poliklinika.kranjcec@gmail.com or by phone at +385 23 324 881.