Privacy policy

Data controller

The controller of personal data is MEDICENTER MALI zdravstvene storitve d.o.o., Medvoška cesta 3, 1215 Medvode, Slovenia (hereinafter: the controller). For questions about the processing of personal data you can contact us using the contact details published on this website in the Contact section.

Personal data we process

We process data you provide when communicating with us (e.g. name and surname, phone number, email address), data required to provide health services in accordance with applicable law, and technical data generated when using the website (e.g. IP address, browser type, time of visit) where this is technically necessary for security and operation of services.

Purposes and legal bases

We process personal data to conclude and perform services, to comply with legal obligations in the field of health care and documentation, to respond to your enquiries, and to improve our web presence where permitted by law.

The legal basis may be performance of a contract or steps prior to entering a contract, compliance with legal obligations, legitimate interests (e.g. IT security), or your consent where consent is required.

Retention and security

We retain data only for as long as necessary for the purposes for which it was collected or as required by law. We apply appropriate organisational and technical measures to protect data against unauthorised access, loss, or disclosure.

Sharing with third parties

We share data only with providers who assist us in operating the website or our business (e.g. hosting) and with health or other institutions where required by law or necessary to provide medical care. We enter appropriate data processing agreements with processors.

Your rights

In relation to personal data you have, among others, the right of access, rectification, erasure, restriction of processing, and objection where applicable law allows. You may lodge a complaint with the supervisory authority (Information Commissioner of the Republic of Slovenia) if you believe processing infringes data protection rules.

Changes to this policy

We may update this policy from time to time. The latest version is always published on this page. We recommend checking it occasionally for changes.