Dental Polyclinic Dr Jelušić (hereinafter: the Polyclinic), with its registered office at Matuljska cesta 1, 51410 Opatija, is the controller of your personal data. This Privacy Policy applies to all personal data of users that we collect and process. Personal data means any information relating to a natural person whose identity has been established or can be established, directly or indirectly. A data subject is any identified or identifiable natural person whose personal data are subject to processing by the controller responsible for the processing of personal data. Data processing means any operation performed on personal data, such as collection, storage, use, consultation and transfer of personal data. Restriction of processing means the marking of stored personal data with the aim of limiting their processing in the future. The personal data controller, or the person designated as the controller of personal data, is any natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of processing personal data. A personal data processor is a natural or legal person, public authority, agency or other body that processes personal data on behalf of the personal data controller. A third party is a natural or legal person, public authority, agency or other body other than the data subject, controller or processor, which, under the direct authority of the controller or processor, is authorised to process the data subject’s personal data. The data subject’s consent is any specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or clear affirmative action, signifies agreement to the processing of personal data relating to him or her. The Polyclinic processes personal data, and the use of certain services and products is not possible without such processing. This policy does not apply to anonymous data. Anonymous data are data that cannot be linked to a specific natural person.

 

You may contact the personal data controller under the General Data Protection Regulation or other personal data protection laws applicable in EU Member States using the following details:

Dentalna poliklinika dr Jelušić
Matuljska cesta 1
51410 Opatija
Tel: 0038551718050
Mail: gdpr@jelusic.com

 

The data collected include:
Personal data such as: first name, last name, email address, physical address, postal code, city, date of birth, telephone number, mobile phone number, occupation, contact details of the closest relative / trusted person, the data subject’s medical condition, and the method / channel through which the data subject heard about the Polyclinic. Medical records, X-ray images, photographs of the data subject related to medical procedures carried out at the Polyclinic, and other medical documentation related to the data subject’s therapeutic procedures.

Information on the quality of service collected through survey forms, where the data subject is not required to enter a first and last name, although the option to do so is available.
Upon completion of treatment, some data subjects receive survey forms that may be anonymous and are used to evaluate the quality of the services provided. The survey forms are used for semi-annual statistical analysis of the quality of services at the Polyclinic.
The final method of collecting data is at trade fairs in which the Polyclinic participates and presents its services.

Data may be disclosed to state institutions that request access to the data for further processing or when necessary for the Polyclinic to exercise its rights due to non-compliance with a service agreement.
Photographs and video recordings: when video surveillance is used.

 

 

The collected data are used for:

Therapeutic procedures, such as treatment plans, treatment procedures themselves, preventive care and check-ups, and appointment scheduling.

Education – internal and external, topics for internal meetings of doctors, and external congresses at which certain employees of the Polyclinic participate as lecturers. Photographs are censored so that only dental interventions and procedures are visible, while the identity of the data subject is indicated by initials and age.

Sending notifications – most often relating to important notices from the Polyclinic, but they may also be used for various thank-you messages for participation at fairs or seasonal holiday greetings.

Service quality statistics – using data collected through survey forms where feedback to the data subject is required, provided that the survey form was not anonymous.

For the preparation of leaflets and brochures, the sending of gift vouchers, newsletters and other printed materials based on information obtained through questionnaire forms, as a token of appreciation for using our dental services.

Sending birthday greetings – via SMS or email.

Preparation of leaflets, brochures and other printed materials.

On the Polyclinic’s website (www.jelusic.com), data subjects may contact the Polyclinic through a contact form in which they enter their name, contact details through which they can receive a reply, and the content of the message. These data are stored and used solely for the purpose of responding to enquiries from interested parties.

Data collected at trade fairs are used for further contact with data subjects in order to provide more detailed information relating to the area in which the data subject has expressed interest.

Video surveillance – for monitoring entry to and exit from work premises and areas, and to reduce workers’ exposure to the risk of robbery, burglary, violence, theft and similar events at work or in connection with work.

The data are accessible to MaPro d.o.o., whose business software is used by the Polyclinic.

 

 

We store and process personal data only for as long as necessary to fulfil a specific legitimate purpose, unless applicable regulations require a longer retention period for a particular purpose.

Where consent has been given for marketing, we retain the data until the consent is withdrawn. In the case of rejected offers where consent for marketing has not been given, data relating to the offer are retained for one year; if you request deletion, they will be deleted immediately. Personal data that are no longer required are either irreversibly anonymised or securely destroyed.

 

 

Data are stored using security and organisational measures that provide secure backups in order to prevent data loss. The Polyclinic ensures that data are kept up to date through periodic checks of contact details with data subjects during visits. The Polyclinic safeguards data through technical and organisational measures designed to prevent unauthorised or intentional attempts to misuse data. Appropriate security measures are provided pursuant to Article 32 of the Regulation, including, but not limited to, backups, antivirus software, firewalls and access passwords, for the purpose of preventing accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data.

Within the business application in which records of all patients are maintained, user authentication and authorisation are enabled so that only certain sections are accessible to specific users. The personal data controller will process and retain the data subject’s personal data only for the period necessary to achieve the purposes for which the personal data are retained, or until the deadline required by EU legislation or other legislation applicable to the personal data controller.

 

 

Access to and correction of data:
A data subject may at any time obtain information about which data the Polyclinic has stored by sending a request to gdpr@jelusic.com. We will only be able to provide a response to your request if the request is sent from an active email address recorded in our business software and contains accurate identifying information in the email (first and last name, telephone number of the user requesting the information), in order to protect you from the possibility of your personal data being disclosed to a third party.

Right to erasure of the user’s personal data:
The user has the right to request the deletion of personal data at any time. This can be done by sending a request to gdpr@jelusic.com, and the data will be deleted without undue delay unless there is a legal obligation to retain the data, a legitimate interest, or another legal basis necessary for the exercise of your legal rights. We will only be able to provide a response to your request if the request is sent from an active email address recorded in our business software and contains accurate identifying information in the email (first and last name, telephone number of the user requesting the information), in order to protect you from the possibility of your personal data being disclosed to a third party.

Right to object:
If, despite all measures taken to protect personal data, you believe that you have grounds to object, please contact us at gdpr@jelusic.com. In addition to submitting a complaint to us, you may also lodge a complaint with the competent personal data protection authority.

Cookie Policy:
A cookie is a piece of data that a website stores on a visitor’s computer or mobile device. A cookie allows the website to remember the visitor’s actions from previous visits. Most browsers allow the use of cookies, but the user may delete cookies or configure the browser to block their use at any time. The most common reasons for using cookies are user identification, remembering user preferences, assisting with the entry or review of content previously entered during earlier visits, collecting data for analytics and promotional campaigns. When cookies are used, certain data are collected automatically from your computer when you visit our website. These data may include your IP address, date and time of access, information about the type of computer, operating system, browser used, software versions, and your computer’s language settings. When accessing the website, you will see a notice regarding the use of cookies that collect these data, and by clicking the “I agree” field you give us consent to collect such data. If you do not give consent on the website, these data will not be collected, stored or processed. Cookies may be session cookies – they are stored on the computer and deleted immediately after the browser is closed, and they allow the website to collect temporary data such as shopping-cart contents or comments. First-party cookies originating from the website you have visited may be temporary or persistent. Such cookies allow the website to store data that are used when the user visits the website again. Third-party cookies are cookies originating from external services that store limited cookies on the user’s device (such services include Facebook, Instagram, Google Analytics, AdWords, etc.). These cookies are placed by the Polyclinic and are used to help interpret user behaviour and for marketing purposes. Options available to you: In your browser settings, you can determine which cookies you wish to accept and which you wish to reject. The location of these settings depends on the browser and can be found by searching its Help files. If you decide not to accept cookies from the Polyclinic’s websites, it is possible that you will not be able to use certain functions of the website.