Polyclinic Arcadia Daruvar Ltd. (hereinafter referred to as “Polyclinic Arcadia”) OIB (personal identification number): 91876976581 which is located in the address: Daruvar, no. 16 Strma Ulica, as a legal entity in charge of processing your personal data, uses for its own use and protects all the information that Users submit to it while using the website www.poliklinika-arcadia.hr and our other services, especially with regard to the processing of personal data in the provision of the services we provide or you require.

By personal information we consider any information relating to a particular natural person or a natural person who can be identified from the collected data. In particular, any data that can be used to identify a user is considered a personal information (e.g. name and surname, OIB- personal identification number, personal health insurance number, residence address, e-mail address etc.)

By the processing of personal data, we consider any action, or more, performed on personal data, whether by automatic means or not. Data processing means collecting, organizing, recording, saving, modifying or adjusting, withdrawing from the database for insight, using, disclosing, transmitting, posting or otherwise making available, sorting or combining, blocking, deleting or destroying, and performing logical, mathematical and other operations with personal data.

THE WAY WE COLLECT PERSONAL INFORMATION

Polyclinic Arcadia collects your personal information, inter alia, in the following cases:

• If you require or buy a service directly from us
• If you send us a request, for example, by filling out a contact electronic entry form on our website
• If you directly contact us via our website
• If our business partners provide us with your information in an authorized manner
• Persons under the of 16 must not provide us with personal information without parental or guardian approval

HOW YOUR PERSONAL INFORMATION CAN BE USED FOR BUSINESS PURPOSES

Personal data will be used in accordance with the regulations on the protection of personal data and the use must be justified under one of the legal bases specified by this regulation.

Justified grounds for the data processing are, inter alia, a contractual obligation, a legitimate interest, legal basis and consent. Legitimate interest processing is used by Polyclinic Arcadia to provide and promote information about its services, for the purpose of maintaining the highest quality standards when selling the services from their offer. The fundamental rights and freedoms of existing and potential customers are measured according to the interests of Polyclinic Arcadia to process the date for this purpose.

Polyclinic Arcadia will collect contact information, information about the services performed, guarantee, as well as the history information of you, as a patient when you use our services for the purpose of processing claims on the basis of the warranty or technical support for services performed. Personal data may be transferred to third parties only if there is a reasonable basis for the transfer in favour of the user’s benefit.

Polyclinic Arcadia is subjected to the laws of the Republic of Croatia, as well as supranational regulations and is obliged to abide by them, including the provision of your information to law enforcement authorities, regulatory and judicial authorities, as well as third civil parties related to proceedings or investigations anywhere in the world where this is requested. Where permitted, we will directly address such a request or inform you before the response, unless this could affect the prevention or detection of a crime. Providing personal information for the purposes of compliance with the mandatory requirements for your data is a legal obligation that depends on the particular request.

IN WHAT WAY DO WE MAINTAIN THE SCURITY OF YOUR DATA

The protection of privacy of your data is permanent, and the Polyclinic Arcadia takes all the measures necessary to protect it. All your data is stored on our secure servers and secure servers of our partners and is accessed and used in accordance with our security policies and standards. We process personal data in a secure manner, including protection against unauthorised or unlawful processing, and against loss.

By filling in a contact form or registering on the website www.poliklinika-arcadia.hr, you give us a separate consent to process your personal data listed in the registration or contact form for a given purpose, as well as the information available in the documentation process in form of the delivery of the photo needed for diagnostics and similar purposes. The purposes which Polyclinic Arcadia may point out in the registration or contact form, require separate consent of each individual.

Your information will be kept and handled in accordance with the General Data Protection Regulation of European Union (679/2016), Law implementing General Data Protection Regulation (NN 42/2018) and other relevant applicable regulations. Collected personal data of the users and visitors of the website, as well as other patients or potential patients, shall not and should not be used unauthorized or made available to third parties, except in cases when this is permitted by special law, if it constitutes our legal obligation or if it is necessary for the purpose of attaining the contractual obligations.

We commit not to abuse personal data from a registration or other form, nor to pass it on to the third parties without your permission, except in cases where the law so explicitly prescribes, and in cases where it is necessary for the fulfilment of the obligations. We consider personal data all the information that we use to confirm the identity of the User (for example name and surname, residential address, OIB personal identification number, e-mail address, etc) and which serve to respond to queries of users, statistics and sending special offers, with special consent obtained.

All customer information is strictly kept and is only available to employees who will use that information to carry out the work. All the employees of Polyclinic Arcadia and its business partners are responsible for respecting the Privacy Principles. We commit to provide protection of your personal data in a way that we collect only basic information that is necessary to fulfil the purpose of a given consent or legitimate interest, contractual or legal basis. Information that is automatically recorded when accessing the website (IP address, domain name, search engine type, number of visits, time spent on the site and similar) will be used mainly to evaluate the attendance of the website and to improve its content and functionality, namely for statistical purposes.

Polyclinic Arcadia informs its Users about the way of using collected information and uses it for marketing campaign solely by specially obtained consent. In case of changing any of personal data (e.g. place of residence, shipping address) which are recorded upon registration, the User is obliged to make the change in the user data too.

Guided by applicable national and supernatural legislation, in order to protect the confidentiality of personal data, in particular we commit to deal with your personal data in accordance with the law and in good faith, to collect data solely for specified and legitimate purposes, not to pass the information to any third party without your prior consent, not to pass over your personal information to the countries outside EU area if such a country does not ensure appropriate level of data protection; ensure adequate, secure storage of personal data in such a way that it does not go beyond the purpose for which the data was collected and for which it was being processed: to ensure processing of personal data only for the time and purpose for which it is necessary, undertake all the necessary and appropriate technical and organizational measures to prevent annihilation, damaging or loss of personal information.

If you no longer want us to process your data in any way, you require the deletion, correction or transfer of your data, inform us of this via e-mail message on e-mail address: poliklinika@poliklinika-arcadia.hr or via phone number: 043/675 200 Polyclinic Arcadia can contact the User to verify the authenticity of the request.

User who is a natural person may at any time request from Polyclinic Arcadia to:

• Confirm whether the information is processed in relation to the user and enable the overview of personal data contained in the personal data storage
• Pass over the personal data contained in the personal data storage
• Enable access to the personal data collection catalogue
• Provide a list of third parties to whom personal information has been transferred, when it has been transferred, on what basis and for what purpose
• To provide the information about the sources on which records are based, which personal information storage system contains about the individual and the means of processing
• To provide the information about the purpose of processing and about type of personal data which are being processed, as well as any other necessary explanations in that regard
• To provide the explanation of technical and logical-technical decision-making process where automated decision-making is carried out by processing personal data of an individual

The period of retention of user’s personal data by Polyclinic Arcadia lasts for a lifetime or until the request for deletion is received by the user to whom the personal data relates, after which the personal data is deleted permanently. Polyclinic Arcadia keeps personal data longer than the stated deadline only if it is binding by applicable regulations in the Republic of Croatia or supranational legislation.

Personal data which is no longer necessary or date for which a request for erasure is submitted shall be irretrievably destroyed in a safe way. If the User has any objection regarding the processing of his/her data by Polyclinic Arcadia, he has the right to file a complaint with the competent national authority, in accordance with the General Regulation on the Protection of Personal Data and the Act of the Enforcement of General Regulation on the Protection of Personal Data.