{"id":1756,"date":"2026-09-09T15:52:49","date_gmt":"2026-09-09T13:52:49","guid":{"rendered":"http:\/\/ortoimplant.hr\/privacy-policy\/"},"modified":"2026-09-09T15:52:49","modified_gmt":"2026-09-09T13:52:49","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/ortoimplant.hr\/en\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"<main>\r\n<div class=\"wrap crumb\"><a href=\"https:\/\/ortoimplant.hr\/en\/\">Home<\/a> <span class=\"sl\">\/<\/span> Privacy policy<\/div>\r\n<div class=\"wrap ahead\"><span class=\"eyebrow cat\">Legal<\/span><h1>Privacy policy<\/h1><p class=\"lead\">How Ortoimplant DENTAL SPA collects, uses and protects your personal data.<\/p><\/div>\r\n<div class=\"wrap\" style=\"padding-bottom:60px\">\r\n<article class=\"prose\" style=\"max-width:74ch\">\r\n<h2>Data controller<\/h2>\n<p>The controller of personal data is <b>Ortoimplant DENTAL SPA d.o.o.<\/b>, Ilica 283, 10000 Zagreb, Croatia. For any question about the protection of personal data, to exercise your rights or to object, contact us at <a href=\"mailto:info@ortoimplant.hr\">info@ortoimplant.hr<\/a> or at the clinic address.<\/p>\n<h2>What data we collect<\/h2>\n<p>We collect only the data you provide to us yourself and the technical data necessary for the website to work.<\/p>\n<ul>\n<li><b>Data from the appointment form:<\/b> name, telephone number, email address, subject of the enquiry and the text of the message.<\/li>\n<li><b>Health data:<\/b> if you attach a scan (CBCT, orthopantomogram) to your enquiry or describe your health condition in the message. This is special category data under Article 9 of the General Data Protection Regulation (GDPR), so we process it with enhanced protection.<\/li>\n<li><b>Technical data:<\/b> server logs and the cookie for the language choice. More about cookies below.<\/li>\n<\/ul>\n<p>We do not collect payment data through this website and we do not carry out automated decision making or profiling.<\/p>\n<h2>Why we process data and on what basis<\/h2>\n<ul>\n<li><b>Replying to your enquiry and arranging an appointment.<\/b> The basis is taking steps at your request prior to entering into a contract, Article 6(1)(b) of the GDPR.<\/li>\n<li><b>Assessment of the attached scan and of your health condition.<\/b> The basis is your explicit consent, Article 9(2)(a), and, where health care is provided, also Article 9(2)(h) of the GDPR.<\/li>\n<li><b>Keeping medical records once you become a patient.<\/b> The basis is the legal obligation of the clinic under health care regulations, Article 6(1)(c).<\/li>\n<li><b>Secure operation of the website.<\/b> The basis is our legitimate interest in the website working and being protected from misuse, Article 6(1)(f).<\/li>\n<\/ul>\n<p>Sending an enquiry is not an obligation. If you do not provide us with your data, we cannot reply to your enquiry or arrange an examination.<\/p>\n<h2>Who has access to the data<\/h2>\n<p>We do not sell the data and do not pass it on to third parties for marketing purposes. Access is held by:<\/p>\n<ul>\n<li>authorised members of the clinic team, to the extent necessary to reply to the enquiry and to provide the service;<\/li>\n<li>the website hosting provider, which processes the data exclusively on our instructions and under a processing agreement;<\/li>\n<li>the competent authorities, where required by law.<\/li>\n<\/ul>\n<p>We do not transfer data outside the European Economic Area. Should this change in the future, the transfer will be carried out only with the appropriate safeguards under Chapter V of the GDPR, and this notice will be updated.<\/p>\n<h2>How long we keep the data<\/h2>\n<ul>\n<li><b>Enquiries that do not result in treatment:<\/b> no longer than 12 months from the last contact, after which we delete them.<\/li>\n<li><b>Scans attached to an enquiry:<\/b> we delete them as soon as the assessment is complete, and no later than 12 months from submission, unless they become part of your medical records.<\/li>\n<li><b>Patient medical records:<\/b> we keep them for the periods prescribed by the regulations on health care and on keeping medical records in the Republic of Croatia.<\/li>\n<li><b>Server logs:<\/b> no longer than 12 months.<\/li>\n<\/ul>\n<h2>Cookies<\/h2>\n<p>The website uses <b>strictly necessary cookies<\/b> without which it cannot work. This is the cookie that remembers the selected language, set by the multilingual system. Consent is not required for strictly necessary cookies.<\/p>\n<p>We serve fonts from our own server, so no connection to external font providers is established when you visit and your IP address is not passed on to third parties.<\/p>\n<p>If we introduce cookies for analytics or advertising in the future, we will ask for your consent before they are set and we will state here which cookies they are, who sets them and how long they last.<\/p>\n<p>You can delete or block cookies at any time in your browser settings. Blocking strictly necessary cookies may impair the operation of the website.<\/p>\n<h2>Your rights<\/h2>\n<p>At any time you have the right to:<\/p>\n<ul>\n<li>request <b>access<\/b> to your data and a copy of the data we process about you;<\/li>\n<li>request <b>rectification<\/b> of inaccurate data or completion of incomplete data;<\/li>\n<li>request <b>erasure<\/b> of the data, where there is no longer a basis for keeping it;<\/li>\n<li>request <b>restriction of processing<\/b> or lodge an <b>objection<\/b> to processing based on legitimate interest;<\/li>\n<li>request <b>portability<\/b> of the data you have provided to us;<\/li>\n<li><b>withdraw your consent<\/b> at any time, without this affecting the lawfulness of processing carried out before the withdrawal.<\/li>\n<\/ul>\n<p>Send your request to <a href=\"mailto:info@ortoimplant.hr\">info@ortoimplant.hr<\/a>. We reply without delay and at the latest within one month of receiving the request. In order to protect your data, we may ask you to confirm your identity.<\/p>\n<p>The right to erasure does not cover medical records for which there is a statutory obligation to keep them.<\/p>\n<h2>Complaint to a supervisory authority<\/h2>\n<p>If you consider that our processing of your data breaches the personal data protection rules, you have the right to lodge a complaint with the supervisory authority in the country of your habitual residence, or with the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb, <a href=\"https:\/\/azop.hr\" rel=\"noopener\">azop.hr<\/a>, given that the controller is established in Croatia. The list of EU supervisory authorities is available at <a href=\"https:\/\/edpb.europa.eu\" rel=\"noopener\">edpb.europa.eu<\/a>. Before doing so, please feel free to contact us directly, we will try to resolve the matter straight away.<\/p>\n<h2>Security<\/h2>\n<p>The website is served over an encrypted connection (HTTPS). Only authorised persons have access to enquiries and attached scans, with passwords and access logging. Attached files are limited by size and type in order to reduce the risk of misuse.<\/p>\n<h2>Changes to this notice<\/h2>\n<p>We may change this notice when our processing operations or the regulations change. The date of the last change is stated at the bottom of the page, and we will highlight material changes on this page.<\/p>\n<\/article>\r\n<\/div>\r\n<\/main>\r\n","protected":false},"excerpt":{"rendered":"<p>How Ortoimplant DENTAL SPA handles personal data from this website: what we collect, why, how long we keep it and what your rights are.<\/p>\n","protected":false},"author":0,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"footnotes":""},"class_list":["post-1756","page","type-page","status-publish","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/ortoimplant.hr\/en\/wp-json\/wp\/v2\/pages\/1756","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ortoimplant.hr\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/ortoimplant.hr\/en\/wp-json\/wp\/v2\/types\/page"}],"replies":[{"embeddable":true,"href":"https:\/\/ortoimplant.hr\/en\/wp-json\/wp\/v2\/comments?post=1756"}],"version-history":[{"count":0,"href":"https:\/\/ortoimplant.hr\/en\/wp-json\/wp\/v2\/pages\/1756\/revisions"}],"wp:attachment":[{"href":"https:\/\/ortoimplant.hr\/en\/wp-json\/wp\/v2\/media?parent=1756"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}