Privacy Notice for the Poliklinika Kranjčević Bubica Website

This privacy notice explains how we collect, use, and protect your personal data when you use our website, www.kranjcevic-bubica.com.

Information about the Data Controller

Name: POLIKLINIKA KRANJČEVIĆ BUBICA – Healthcare Institution
MBS (Company Registration Number): 110162062
OIB (Personal Identification Number): 82148085630
Registered Office Address: Sv. Vinka Paulskog 20, 23000 Zadar, Croatia

Data Protection Officer Email Address: poliklinika.kranjcevicbubica@gmail.com

Categories and types of personal data processed, legal bases, purposes of processing, and retention periods

Accessing the website
During a standard visit to our website, we collect only data regarding the IP address from which the request originates. We use the IP address data to monitor for malicious activity and retain the data for 14 days, after which the IP address is anonymized. The purpose of collection is legitimate interest.

Online security
In the event of a security incident (ransomware, website defacement, etc.), we may forward all collected data to competent authorities as evidence for the purpose of reporting the cyber incident. The legal basis for such action is the Cybersecurity Act (Directive (EU) 2022/2555 of the European Parliament and of the Council of 14 December 2022 on measures for a high common level of cybersecurity across the Union, amending Regulation (EU) No 910/2014 and Directive (EU) 2018/1972, and repealing Directive (EU) 2016/1148 (NIS2 Directive) (OJ L 333/80, 27 December 2022)).

Inquiries regarding our services

When you send us an inquiry as an individual via email or telephone, we may process the following data to fulfill your request:

  1. full name
  2. email address
  3. telephone number

We store the data listed under (a), (b), and (c) in our business system at the time a commercial quote is issued.

We delete unaccepted quotes from individuals at the end of the calendar year. If no business relationship involving the issuance of an invoice has previously been established between us and the individual, we also delete your personal data.

If a business relationship is established and finalized by the issuance of an invoice to an individual, we are required to retain your personal data in accordance with applicable legal regulations; in the case of issued invoices, this retention period is 11 years.

The data required for issuing an invoice are:

  • name and surename
  • OIB (personal identification number)
  • email address where you wish to receive the invoice

Technical and organizational measures

We employ appropriate technical and organizational measures to ensure the security of your personal data and protect it against unauthorized access, alteration, disclosure, or destruction, such as:

  • adhering to strict security procedures to minimize the risk of data destruction, unauthorized disclosure, unauthorized access to personal data, and other breaches
  • housing the equipment/premises where personal data is stored in a secure environment with restricted physical access
  • using active network security devices, strong passwords, multi-factor authentication, antivirus software, and other data protection measures (e.g., encryption and anonymization)
  • limiting access to personal data to authorized personnel within our organization, as regulated by our internal policies
  • requiring our employees to maintain the confidentiality of all data they become aware of while performing their duties
  • conducting regular employee training to ensure a satisfactory level of awareness regarding personal data protection within our company

Your rights

  • Right of access: You have the right to request access to the personal data we process
  • Right to rectification: You may request the correction of inaccurate or incomplete data
  • Right to erasure (“right to be forgotten”): You have the right to request the deletion of your personal data if it is no longer necessary for the purposes for which it was collected or if you withdraw your consent
  • Right to restriction of processing: You may request a restriction on the processing of your data in certain cases
  • Right to data portability: You have the right to request the transfer of your data to another service provider in a structured, commonly used, and machine-readable format
  • Right to object: You have the right to object to the processing of your data based on our legitimate interests or for direct marketing purposes
  • Right to withdraw consent: If we have requested your consent to process data, you have the right to withdraw that consent at any time

To exercise these rights, you may contact us via email at poliklinika.kranjcevicbubica@gmail.com; the response time is 15 days from the date of the inquiry.

 

Right to lodge a complaint regarding the processing of your personal data

In the event of a grievance concerning your rights, you may lodge a complaint with the personal data protection supervisory authority, i.e., the Personal Data Protection Agency (AZOP).Agencija za zaštitu osobnih podataka (AZOP).

Data recipients/categories of recipients and data transfer to third countries

We do not share the personal data of individuals with third parties.

Cookies

We use cookies on this website. We use cookies to assist you with efficient navigation and the performance of certain functions.

Necessary cookies are required to enable the basic features of this site, such as secure login or adjusting consent preferences. These cookies do not store any personal data.

Functional cookies help perform certain functions, such as sharing website content on social media platforms, collecting feedback, and other third-party features.

Analytical cookies are used to understand how visitors interact with the website. These cookies help provide information on metrics such as the number of visitors, bounce rate, traffic source, etc.

Third-party cookies help us analyze how you use this website and provide you with its full content. These cookies will be stored in your browser only with your prior consent. You may choose to enable or disable some or all of these cookies, but disabling some of them may affect your browsing experience.

Performance cookies are used to understand and analyze key website performance indicators, which helps provide a better user experience for visitors.

 

Privacy Policy Changes

This privacy policy may be updated periodically to ensure compliance with relevant laws or changes in our practices. We recommend checking this page occasionally to stay informed about any changes.

This privacy policy was last updated on September 11, 2026.