This Privacy Policy, based on the General Data Protection Regulation (GDPR), shall explain what personal data is collected in connection with our activities, how we process, use and protect this data, for what purposes we use it, as well as your rights related to your personal data.
PRIVACY AND PROTECTION OF PERSONAL DATA ARE THE FUNDAMENTAL PRINCIPLES OF OUR BUSINESS
Privacy of individuals and protection of personal data are fundamental human rights. It is our duty to take care of the personal data that we collect, process and store. Your personal data are our responsibility and we collect and process them only when necessary, while ensuring security measures for their protection.
iDENT POLYCLINIC shall observe the following principles with the aim of protecting the privacy and personal data of its patients and all persons whose personal data we process:
We do not collect more personal data than is necessary.
We do not use personal data for purposes you are not familiar with in good time.
We do not store personal data if it is no longer necessary.
We never sell, lend or distribute personal data.
We do not send personal data to third parties without your consent and if it is not lawful.
We do not use any automated processing or profiling for decision-making.
We do not transfer personal data outside the EU/EEA.
We continuously ensure that personal data is securely stored and protected.
It is important to read this Privacy Policy and we hope you will take the time and give your attention. We tried to make it as clear as possible and understandable to everyone, in order to maintain your full confidence in the way we handle your personal data.
In case you have additional questions about the protection of personal data at iDENT POLYCLINIC after reading this Privacy Policy, you can contact our Data Protection Officer at any time:
Zoran Ivasović, Director of the Polyclinic, Data Protection Officer
by email at info@ident.hr or
by post: POLIKLINIKA iDENT, Radnička cesta 21, 10000 Zagreb.
We regularly improve our Privacy Policy in order to improve the protection of your data.
This Privacy Policy was updated on 31 January 2025.
WHO ARE WE
iDENT POLYCLINIC, Radnička cesta 21, 10000 Zagreb, is the controller of your personal data. It shall determine the purposes and means of the processing of your personal data and ensure all security measures for your personal data.
WHAT DATA DO WE PROCESS, HOW AND FOR HOW LONG
When registering potential patients for dental services
For these purposes, we need your basic personal data (name and surname) and contact information (email and phone number) for effective communication and better understanding of your wishes and needs, and well as for the purpose of agreeing on an appointment. If you cancel the appointment, we will permanently delete all your personal data.
When registering potential patients for dental services
For these purposes, we need your basic personal data (name and surname) and contact information (email and phone number) for effective communication and better understanding of your wishes and needs. If you give up searching for an appointment, we will permanently delete all your personal data.
When providing dental services
During the provision of dental services, we shall collect all data on the patient’s dental health while maintaining the patient’s records, as well as the necessary set of personal health information essential for planning the therapy in accordance with rules for ensuring the lawfulness of handling health information as a special category of personal data according to the GDPR with the highest level of security for the processing of such personal data.
During the planning and implementation of therapy, in order to monitor the effectiveness of individual phases of the therapy, we shall also collect patient’s intraoral photos, which shall be stored exclusively in the patient’s records.
In the patient’s records, we shall retain all data relevant to ensuring the highest quality of the patient’s dental health, which, in accordance with the legal regulations in the field of dental medicine, shall be kept for ten years after the end of the treatment, with full respect for the patients’ right to the confidentiality of data related to the health condition in accordance with the regulations on professional secrecy , while older data shall be archived.
All members of our team shall keep everything they know about your health condition as a professional secret. Access to all your personal data shall be strictly limited, and in accordance with the Health Care Act, we shall give access to your personal data at the request of the competent ministry, other government bodies in accordance with the special regulations of the Croatian Dental Chamber and competent judicial authorities.
We shall retain the necessary set of basic personal data of the patients (name, surname, OIB (Personal Identification Number), address, service provided) for the purposes of issuing invoices for services in accordance with accounting and tax regulations.
Selection of candidates for jobs and employment
During the candidate selection and employment procedures, we shall collect basic information about candidates with the intention of concluding an employment contract, such as name and surname, address, email, phone number, education and work experience, and other information you provide in your resume, as a set of your personal data essential for carrying out the selection and employment procedure. Following the end of the selection process, we shall recruit the selected candidates and collect all the necessary data in accordance with legal obligations, while applications and personal data of unsuccessful candidates shall be returned upon request or permanently destroyed, and based on your consent we shall retain them in case of potential employment in the future.
The consumer’s right to object
Each patient shall be entitled to lodge a complaint about the services provided, whereby we shall collect the necessary set of personal data of the complainant and retain it for a period of up to 12 months, in accordance with regulations in the field of consumer rights protection.
Use of your personal data for the purpose of sending the newsletter
We send news about our services and special offers via newsletter based on your consent or a valid legitimate interest in using your email address for this matter, and we use it up to the time of withdrawal of consent or your complaint and expressed desire to stop receiving further notifications.
Collection of your personal data on our website
Even though you can use our website without providing personal data, when you contact us using our contact form for the purpose of arranging an appointment, for the purposes of potential employment, we shall collect your name and surname, phone number and email address. As long as we have an open communication in terms of scheduling appointments, providing information about services, we shall collect your personal data and delete it upon termination of communication, upon the expiry of all legal obligations or the termination of the existence of legal grounds from the GDPR related to the processing of your personal data.
Our website is not intended for providing services and information to minors under the age of 16, and for this purpose it is necessary to attach the consent of parents or holders of parental responsibility before providing personal information via our contact form.
Our website also contains links to other websites and social media (e.g. Facebook, Instagram, YouTube) and this Privacy Policy shall not apply to them. We recommend you to read the privacy policy of every website and social network you visit, and especially where you provide information.
Cookies
Our website uses small text files and places them on your computer or device in order to customize your web browser interface. Cookies necessary to ensure the functionality of our website cannot be turned off. They are usually set in response to your actions involving a request for services, such as cookie settings, logging in or filling out forms.
The use of other cookies to collect your personal data shall require your prior consent, and even in the absence of your free consent, you can still fully use our website and have unhindered access to all its content.
WHO HAS ACCESS TO YOUR DATA
We cooperate exclusively with reliable business partners who help us provide and improve our services, as well as make our direct communication with you more effective. We provide access to your personal data to authorized external contractors for the purpose of processing personal data on our behalf and on the basis of our specific instructions based on concluded personal data processing agreements in accordance with Article 28 of the GDPR. These partners shall strictly comply with the obligation of confidentiality in accordance with this Privacy Policy, the contracts we have concluded with them and in accordance with the obligations of the GDPR.
Our chosen external processing contractors are business partners who provide us with services of establishing contact with patients, personnel selection, IT services and services of business application and system maintenance, protection of assets and people, as well as web and email hosting, without whose support we would not be able to ensure the fulfillment of the highest quality of our services.
YOUR RIGHTS
You can contact us at any time in order to exercise your rights in the area of personal data protection. You have the following rights:
Right to access personal data
You are entitled to access your personal data and to be informed which data we process and in what way, for what purpose and for what period. We provide you with the opportunity to receive a copy of your personal data.
Right to correct personal data
You are entitled to correct or supplement inaccurate or incomplete personal data we have collected.
Right to delete personal data
You are entitled to request deleting your personal data when the data is no longer necessary to achieve the purpose for which it has been collected, when you submit a reasoned objection or your personal data is processed unlawfully.
Right to object
You are entitled to object to certain handling of your personal data. For example, you may request that we stop processing your personal data for direct marketing purposes via newsletter.
Right to restriction of processing
You can request restriction of data processing, for example when deletion, correction or objection regarding your personal data is pending and/or when we have no valid basis for processing your data and you want us to keep it. When processing is restricted, your data shall be stored and shall not be processed further. For example, if you dispute the accuracy of your data, the processing of such data shall be restricted until it is ensured that the data is correct.
Right to data transfer
When data is processed by automated means of processing based on a contract or consent, you are entitled to receive the personal data you have provided to us in a structured and commonly used machine-readable format and to transfer such data to third parties at your own discretion.
Right to withdraw consent
If you have previously given your free explicit consent to the public disclosure of intraoral and facial photos or audio/video files on our websites or social media, you are fully entitled to withdraw your consent at any time and we shall delete your photos or audio/video files.
If you want to exercise any of the aforementioned rights, you can submit a request:
by email at info@ident.hr or
by post: POLIKLINIKA iDENT, Radnička cesta 21, 10000 Zagreb.
We will respond to your request as soon as possible, and no later than one month upon receiving your request. In case of impossibility to securely confirm your identity, we shall be free to request an additional verification of the applicant’s identity.
If you believe that our handling of your personal data is not lawful, you may lodge a complaint directly with the competent supervisory authority – the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10 000 Zagreb, phone: 01 4609 000, email: azop@azop.hr.
IMPROVING THIS PRIVACY POLICY
We shall reserve the right to occasionally adjust and improve the text of this Privacy Policy, primarily for the purpose of complying with legislative changes, or in case of changes in the purposes and means of processing. However, we shall not limit or diminish your rights arising from this Privacy Policy or the relevant legal provisions. In the event that there are changes that may affect your rights, we shall notify you appropriately in a timely and direct manner.
