Privacy policy
Introduction
We are committed to protecting your privacy and ensuring that your personal data is processed in a secure and responsible manner. This Privacy Policy explains how we collect, use, and protect your personal data when you visit our website.
Data Controller
The data controller responsible for processing your personal data is:
Dental Practice Helena Margić
Address: Braće Kavurić 10d, 44000 Sisak
Email: info@dentalmargic.hr
Phone: +385 44 717 185
Contact page: https://dentalmargic.hr/kontakt
Data Collection
We collect and process the following types of personal data:
a) Data you provide to us
- Contact information: When you fill out our contact form, we collect your name, email address, phone number, and any other information you include in your message.
- Communication data: Any communications you send to us, such as emails or messages via our contact form.
b) Automatically collected data
- Usage data: Information about how you use our website, including your IP address, browser type, visited pages, and time spent on the site.
- Location data: If you use Google Maps on our website, Google may collect location data in accordance with its privacy policy.
Use of Data
Your personal data is used for the following purposes:
- Responding to inquiries: We use the information you provide in the contact form to respond to your inquiry.
- Improving our services: Usage data helps us understand how our website is used and how we can improve it.
- Location services: Google Maps data is used to provide accurate location information.
Legal Basis for Processing
We process your personal data based on the following legal grounds:
- Consent: By filling out our contact form, you give consent for us to process your personal data in order to respond to your inquiry.
Purposes of personal data processing
Patients' personal data are processed in the dental office for the following purposes:
Provision of healthcare and dental services – includes all necessary activities related to diagnostics, treatment, monitoring of the condition and planning of necessary procedures. Processing of personal data is necessary for maintaining medical records and monitoring medical history, as well as for providing the highest quality health services.
Appointment management – personal data is used to organize examination and procedure appointments, reminders for visits, changes to appointments and contacting patients in case of emergencies or changes in schedule.
Financial management and billing – includes issuing invoices and keeping records of dental service charges, as well as possible installment payments or processing claims for reimbursement in cooperation with insurers (if applicable).
Compliance with legal and regulatory requirements – the dental office is obliged to maintain medical records and store personal data in accordance with healthcare regulations and professional standards and may provide them to competent authorities upon request.
Internal statistical and analytical processing – personal data may be anonymized and used for analytical purposes to improve the quality of services, optimize business processes and tailor services to patients’ needs.
Legal basis for processing personal data
The processing of personal data in the dental practice is based on the following legal grounds under the General Data Protection Regulation (GDPR):
Compliance with a legal obligation – the processing of patients’ personal data is necessary to comply with legal obligations under laws regulating healthcare and the management of medical records.
Performance of a contract – processing is necessary to provide patients with a service that is the subject of a contractual relationship between the patient and the dental practice.
Protection of vital interests – processing of personal data may be necessary in urgent cases to protect the life and health of patients.
Legitimate interest – under certain conditions, personal data may be processed for internal purposes, such as improving the quality of services or managing business processes, but always while ensuring appropriate data protection.
Patient consent – in cases where specific patient consent is required (e.g. to participate in satisfaction surveys or send notifications about new services or publish photos), the dental office obtains consent as a basis for processing.
Providing personal data is a legal and/or contractual obligation and a necessary condition for concluding and executing a contract for the provision of dental services. Without providing the necessary personal data, we cannot provide you with healthcare services, maintain medical records and fulfill legal obligations. The data is processed in accordance with applicable legal regulations and is used exclusively for the purposes of healthcare and managing your appointments and therapy
Recipients or categories of recipients of personal data:
Your personal data are processed confidentially and transferred exclusively to recipients whose access to the data is necessary to provide quality healthcare services and in accordance with legal obligations. Depending on the need and legal obligations, personal data may be forwarded to the following categories of recipients:
CEZIH (Central Health Information System of the Republic of Croatia) – for the purpose of maintaining medical records in accordance with legal regulations.
HZZO (Croatian Health Insurance Institute) – for the purposes of exercising health insurance rights.
External collaborators, dental technicians – for the production of dental prosthetic works when necessary for the implementation of therapy.
Accounting office – for the purposes of processing financial data and fulfilling legal obligations related to financial operations.
IT service providers – for the purpose of maintaining and securing IT systems and storing data.
Other healthcare institutions – when it is necessary to share data for the purpose of providing specialist services or further treatment.
Public authorities – according to legal obligations and at the request of competent authorities in cases prescribed by law.
All recipients of data are obliged to ensure an adequate level of protection of your personal data and act in accordance with the General Data Protection Regulation (GDPR) and the applicable regulations of the Republic of Croatia.
Period of storage of personal data
Your personal data is kept for as long as necessary to fulfill legal and contractual obligations and to provide continuous healthcare. Retention periods vary depending on the type of data:
Accounting data: Retained for 11 years in accordance with legal obligations related to financial operations.
Basic personal data: Retained in accordance with legal obligations governing the maintenance of medical records.
Health data: Retained in accordance with legal regulations on health care.
Your health data is entered in the Central Health Information System of the Republic of Croatia (CEZIH) and stored in accordance with the law, and are available only while I am your chosen dentist.
According to the General Data Protection Regulation (GDPR), patients have a number of rights regarding their personal data.
1. Right to access data
Patients have the right to request information about whether their personal data is being processed, as well as to obtain access to this data. This includes information about the purpose of the processing, the categories of data that are processed, the recipients of the data and the period of data storage. We also draw your attention to the possibility of gaining insight into your health data via the e-Health system.
2. Right to correction
If the patient's personal data is inaccurate or incomplete, the patient has the right to request correction or completion of this data. The dental office is obliged to update the data to be accurate and up-to-date.
3. Right to erasure ("right to be forgotten")
Patients have the right to request the erasure of their personal data in certain situations, for example, if the data is no longer necessary for the purpose for which it was collected or if the patient withdraws consent. This right may be limited by legal obligations to retain data, such as the obligation to keep medical records.
4. Right to restriction of processing
Patients can request the restriction of processing of their data in certain circumstances, for example, when they contest the accuracy of the data or when the processing is unlawful, but do not want the data to be deleted. With the restriction of processing, the data remains stored but is not subject to further processing.
5. Right to data portability
The patient has the right to request the transmission of their personal data in a structured, commonly used and machine-readable format and to transmit those data to another controller, where technically feasible and where the processing is based on consent or a contract.
6. Right to object
Patients have the right to object to the processing of their personal data based on the legitimate interest of the dental practice or for direct marketing purposes. In the event of an objection, the processing of the data must be stopped, unless the practice can demonstrate compelling legitimate grounds for continuing the processing.
7. Right to withdraw consent
If the processing of data is based on consent, the patient has the right to withdraw consent at any time. Withdrawal of consent will not affect the lawfulness of the processing that was based on consent before its withdrawal.
8. Right to lodge a complaint with a supervisory authority
You can exercise your rights by coming to the practice in person or in writing to the e-mail: info@dentalmargic.hr. Your request will be answered as soon as possible, and no later than 30 days from receipt.
If you are not satisfied with the response to your request, you have the right to lodge a complaint with the competent protection authority, the Personal Data Protection Agency (AZOP).
Contact Us
If you have any questions or concerns regarding this Privacy Policy or how we process your personal data, feel free to contact us at:
Dental Practice Helena Margić
Address: Braće Kavurić 10d, 44000 Sisak
Email: info@dentalmargic.hr
Phone: +385 44 717 185
Contact page: https://dentalmargic.hr/kontakt