Privacy policy

Dental Center Ostojic d.o.o. has aligned its operations in accordance with GDPR Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of individuals with regard to the processing of personal data and on the free movement of such data.
This Privacy Policy aims to explain how we access patients’ personal information. It explains how personal information is collected, processed, and for what purposes it is used. The privacy policy informs visitors (patients) of this site about their rights in the collection and further processing of personal information, all for the purpose of protecting their personal information and privacy.
The privacy policy is based on the following principles of processing personal data: the principle of legality, transparency and best practice, the principle of limited processing and reduction of data, the principle of accuracy and completeness of personal data, the principle of limited storage, the principle of data integrity and confidentiality, the principle of responsibility, the principle trust and fair treatment, the principle of opportunity (processing purposes), the principle of processing in an unnamed (anonymized) form.

Collection of personal information
Patients can visit our website without revealing personal information about themselves. This means that we do not process patient information (name and contact details) unless the patient voluntarily submits his or her personal information to our official mailing address for the purpose of contacting or sending an offer. This gives tacit consent to the processing of personal data
The information collected will not in any way be made available to unauthorized third parties except for the purpose prescribed by law. All personal information is used solely for the purpose for which it was collected.

Manage consent
When a patient arrives at the Dental Center, an FDI form (Health Questionnaire) is signed, with the text of the consent (consent) for the processing of personal data. The consent to the processing of personal data may be given by persons over the age of 16 or over, while for persons under 16, the consent may be given by the parent or guardian. Consent is a voluntary, specifically informed and unambiguous expression of the patient’s wishes by which he or she consents to the processing of personal data. Consent management implies the ability for a patient to consent or withdraw consent to the processing of personal data. Consent is given for one or more purposes.

Information that is automatically collected on our website
We automatically collect information in server log files, such as your IP address, browser type, redirect pages, and other technical information we use to manage our websites and technical solutions. It allows us to better understand our site visit and improve the visitor experience.

Cookies
A cookie is a small data file that is stored on a computer or mobile device when you visit a particular web page. Cookies are used to provide a better user experience for visitors, with the aim of making web pages work more efficiently, as well as to monitor and test the use and visitation of our site.
By turning off and / or blocking cookies, the visitor can still browse our web pages. However, it is likely that some features or functionality of the website will not be accessible to the visitor, so the time taken to access certain features of the website will be longer than usual.

The length of time personal data is stored and processed
Depending on the purpose and legal basis on which the personal data of visitors (patients) are collected. Dental Center Ostojic d.o.o. in some cases is obliged to keep personal data for a time (period) prescribed for the specific purpose by the relevant legal regulations in medicine. If the retention of data is not legally defined then the retention of personal data is limited by the termination of the purpose for which it was collected. The deletion of personal data (patients and employees) is due to the expiry of the statutory period, which obliges the Dental Center Ostojic doo to store certain personal data.

Technical and organizational measures
Within our organization, according to the estimated risks to personal data, we have established a number of technical and organizational measures for the protection of personal data. These measures are related to the protection of office documents, computer security, anti-virus policies, data destruction, employee conduct rules, contractual relations with our external service providers, periodic audits of personal data management systems, video surveillance and numerous other measures.

Visitor (Patient) Right
The patient has the following rights at any time:
• the right to access and view data
• the right to be informed about the processing of personal data
• the right to data portability
• the right to withdraw the privilege
• the right to file a complaint
• the right to correct and change personal data in case the data is incomplete or incorrect
• the right to be deleted in cases such as termination of the purpose of processing, withdrawal of the privilege or in case of objection

How to access your rights
If you wish to access any of these rights, please contact our Personal Data Protection Officer on +385 91 211 2221 or by email: mirjana@drrenataostojic.hr

Changes to the Privacy Policy
Dental Center Ostojic d.o.o. reserves the right to amend this Policy at any time without giving any special notice to interested persons. For this reason, it is recommended that all interested parties regularly check the content of the Dental Centar Ostojić d.o.o. web site for information on the updated content of this Policy.