In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (Official Journal of the European Union L 119, 4.5.2016, p. 1.), hereinafter referred to as the General Data Protection Regulation (GDPR), which has been fully applicable in the Republic of Croatia and all European Union Member States since 25 May 2018, as well as the Implementation Act of the General Data Protection Regulation (Official Gazette No. 42/18), the Labor Act (Official Gazette Nos. 93/14 and 127/17), the Occupational Safety and Health Act (Official Gazette, Nos. 71/14, 118/14, and 154/14), in accordance with the legal framework for the protection of personal data in the Republic of Croatia and the European Union, as well as best European practices, IRENA LUŠIČIĆ.
registered with the Commercial Court in RIJEKA COMMERCIAL COURT (hereinafter: DENTAL MEDICINE PRACTICE IRENA LUŠIČIĆ), as the controller of the personal data of users of its services and customers, has developed a Privacy Policy regarding the protection of the personal data of users of services and customers. The Privacy Policy on the protection of personal data is a unilaterally binding legal act based on fundamental principles in the processing of personal data, which regulates which user data are collected, how such data are processed, and for what purposes they are used. The Privacy Policy also informs users of services and/or customers of their rights in the collection and further processing of personal data, all for the purpose of protecting their privacy in a broader sense.
The Privacy Policy is based on the following principles of personal data processing: the principles of lawfulness, transparency, and best practices, the principle of limited processing and reduction of data volume, the principle of accuracy and completeness of personal data, the principle of limited storage, the principle of integrity and confidentiality of data, the principle of accountability, the principle of trust and fair processing, the principle of opportunity (processing purposes), and the principle of processing in an anonymous (anonymized) form.
The Privacy Policy applies to all services offered by DENTAL MEDICINE PRACTICE IRENA LUŠIČIĆ, with the aim of informing users in a clear and transparent manner about the procedures for processing their personal data and their rights. Above all, users can contact the Association at any time with a request to amend, supplement, and/or update data concerning them, as well as withdraw consent given and request the cessation of further processing of personal data.
IRENA LUŠIČIĆ is responsible for the processing of personal data.
Contact details for the protection of personal data:
Email: [email protected]
Methods of collection and types of personal data collected
Directly by the users themselves by providing data to DENTAL MEDICINE PRACTICE IRENA LUŠIČIĆ as the controller in a certain scope of data that is essential for providing appropriate services, sales, or some other connection of users and STUDIO-DENTISTICO-FIUME.COM. For the purpose of providing appropriate services, the user is obliged to provide DENTAL MEDICINE PRACTICE IRENA LUŠIČIĆ with the following data necessary for the establishment of a contractual relationship for the provision of a particular service and/or sale of certain products. The buyer – user can provide data orally or in writing to the center of DENTAL MEDICINE PRACTICE IRENA LUŠIČIĆ, via email sent to one of the email addresses of DENTAL MEDICINE PRACTICE IRENA LUŠIČIĆ, and through the website of DENTAL MEDICINE PRACTICE IRENA LUŠIČIĆ, STUDIO-DENTISTICO-FIUME.COM.
From other publicly available data sources about companies and individuals in companies on internet portals, telephone directories containing such data, and other publicly available services only for the purposes for which they were initially collected.
Automatically by visiting the website, applications, and portal of DENTAL MEDICINE PRACTICE IRENA LUŠIČIĆ, whereby it concerns data associated with network identifiers (internet protocol addresses and cookie identifiers, such as Google Analytics for tracking user and/or customer interactions).
A cookie is a small data file that is stored on a computer or mobile device when visiting a specific website. Cookies are used to provide a better user experience to each user and/or customer, store user and/or customer preferences, in order to make websites work more efficiently, and to track and analyze the use and visitation of the website of DENTAL MEDICINE PRACTICE IRENA LUŠIČIĆ.
By disabling and/or blocking the storage of cookies, the user and/or customer can still browse the website of DENTAL MEDICINE PRACTICE IRENA LUŠIČIĆ. However, there is a possibility that certain features and/or functionalities of the website will not be available to such user and/or customer, or that the time required to access certain features of the website will be longer than usual.
These network identifiers can leave traces which, combined with other identifiers and information provided by internet service providers, can be used to identify users and/or customers.
The quantity, or scope, of personal data collected by DENTAL MEDICINE PRACTICE IRENA LUŠIČIĆ depends on the type of service provided by DENTAL MEDICINE PRACTICE IRENA LUŠIČIĆ to its users and/or customers, as well as on the legal basis on which it collects data. DENTAL MEDICINE PRACTICE IRENA LUŠIČIĆ continuously takes care to collect only the necessary scope of personal data required to achieve the legally prescribed purpose for which the data are processed.
Data about potential users
DENTAL MEDICINE PRACTICE also collects data about potential users and/or customers of its services and/or products. These data include basic data (name, email address), as well as interests of potential Users and/or Customers who contact the association with a desire to be informed and/or offered certain products and services.
Cookies are small text files that are stored on a computer or mobile device when visiting a particular website. Cookies are used to provide a better user experience to each user and/or customer, store user and/or customer preferences, in order to make websites work more efficiently, and to track and analyze the use and visitation of the website of DENTAL MEDICINE PRACTICE IRENA LUŠIČIĆ.
By disabling and/or blocking the storage of cookies, the user and/or customer can still browse the website of DENTAL MEDICINE PRACTICE IRENA LUŠIČIĆ. However, there is a possibility that certain features and/or functionalities of the website will not be available to such user and/or customer, or that the time required to access certain features of the website will be longer than usual.
These network identifiers can leave traces which, combined with other identifiers and information provided by internet service providers, can be used to identify users and/or customers.
Data about potential users
DENTAL MEDICINE PRACTICE also collects data about potential users and/or customers of its services and/or products. These data include basic data (name, email address), as well as interests of potential Users and/or Customers who contact the association with a desire to be informed and/or offered certain products and services.
By providing data on the website, the user agrees to the Privacy Policy and provides the data voluntarily, whereby DENTAL MEDICINE PRACTICE IRENA LUŠIČIĆ is obliged to process such data only for the purpose for which they were collected, to protect them in accordance with the best European practices and to provide them in the case of inquiries of competent authorities under the conditions prescribed by law.
Purpose and legal basis of personal data processing
Personal data are processed for the following purposes and on the following legal bases:
The execution of contractual obligations between the user and DENTAL MEDICINE PRACTICE IRENA LUŠIČIĆ, when it comes to the provision of services, sales, or some other form of connection of users and/or customers and DENTAL MEDICINE PRACTICE IRENA LUŠIČIĆ (Article 6, paragraph 1, point b) of the General Data Protection Regulation (GDPR)), for the purpose of performing the contract to which the data subject is party, or in order to take steps at the request of the data subject prior to entering into a contract. Such processing of personal data includes providing services and/or products, maintaining contact with users and/or customers, and solving any possible problems.
Fulfillment of legal obligations of DENTAL MEDICINE PRACTICE IRENA LUŠIČIĆ (Article 6, paragraph 1, point c) of the General Data Protection Regulation (GDPR)), for the purpose of compliance with a legal obligation to which the controller is subject. Such processing includes, but is not limited to, issuing and storing accounting documents, resolving disputes, and cooperating with competent authorities.
Legitimate interests of DENTAL MEDICINE PRACTICE IRENA LUŠIČIĆ (Article 6, paragraph 1, point f) of the General Data Protection Regulation (GDPR)), for the purposes of the legitimate interests pursued by the controller or by a third party. Legitimate interests include, but are not limited to, improving the quality of services, preventing fraud and abuse, resolving disputes, and ensuring the security of personal data.
Consent of the user and/or customer (Article 6, paragraph 1, point a) of the General Data Protection Regulation (GDPR)), for the purposes of processing personal data for one or more specific purposes of the user and/or customer. In cases where the processing of personal data is based on the consent of the user and/or customer, the user and/or customer have the right to withdraw their consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
Data retention period
Personal data are stored for as long as necessary to achieve the purpose for which they were collected, or for as long as required by applicable law. The retention period for personal data is determined based on the following criteria:
The duration of the contractual relationship between the user and DENTAL MEDICINE PRACTICE IRENA LUŠIČIĆ, and any legal obligations arising from such relationship.
The existence of legitimate interests pursued by DENTAL MEDICINE PRACTICE IRENA LUŠIČIĆ, taking into account the rights and freedoms of users and/or customers.
The existence of consent given by the user and/or customer, when the processing of personal data is based on consent.
When the retention period expires, personal data are deleted or anonymized, unless further processing is necessary for archival purposes, for scientific or historical research purposes, or for statistical purposes.
Rights of users and customers
Users and customers have the following rights regarding the processing of their personal data:
The right to access personal data: Users and customers have the right to obtain confirmation from DENTAL MEDICINE PRACTICE IRENA LUŠIČIĆ whether personal data concerning them are being processed, and if so, to access their personal data and information related to the processing of their personal data.
The right to rectification of personal data: Users and customers have the right to request the correction of inaccurate or incomplete personal data concerning them.
The right to erasure of personal data (“right to be forgotten”): Users and customers have the right to request the deletion of personal data concerning them, provided that the conditions specified in Article 17 of the General Data Protection Regulation (GDPR) are met.
The right to restriction of processing: Users and customers have the right to request the restriction of processing of their personal data, provided that the conditions specified in Article 18 of the General Data Protection Regulation (GDPR) are met.
The right to data portability: Users and customers have the right to receive the personal data concerning them, which they have provided to DENTAL MEDICINE PRACTICE IRENA LUŠIČIĆ, in a structured, commonly used, and machine-readable format, and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, provided that the conditions specified in Article 20 of the General Data Protection Regulation (GDPR) are met.
The right to object to processing: Users and customers have the right to object, on grounds relating to their particular situation, at any time to processing of personal data concerning them which is based on Article 6(1)(e) or (f) of the General Data Protection Regulation (GDPR), including profiling based on those provisions.
The right to withdraw consent: Users and customers have the right to withdraw their consent to the processing of personal data at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
The right to lodge a complaint with a supervisory authority: Users and customers have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work, or place of the alleged infringement if they consider that the processing of personal data infringes the General Data Protection Regulation (GDPR).
Exercise of rights
Users and customers can exercise their rights regarding the processing of their personal data by submitting a written request to DENTAL MEDICINE PRACTICE IRENA LUŠIČIĆ, using the contact information provided in this Privacy Policy.
Upon receipt of a request from a user and/or customer, DENTAL MEDICINE PRACTICE IRENA LUŠIČIĆ will respond to such request without undue delay and at the latest within one month of receipt of the request. Depending on the complexity and number of requests, this deadline may be extended by an additional two months, in which case the user and/or customer will be notified of such extension, together with the reasons for the delay, within one month of receipt of the request.
If DENTAL MEDICINE PRACTICE IRENA LUŠIČIĆ does not take action on the request of the user and/or customer, it will inform the user and/or customer without delay and at the latest within one month of receipt of the request of the reasons for not taking action, as well as the possibility of lodging a complaint with a supervisory authority and seeking judicial protection.
If the user and/or customer’s request is submitted electronically, unless otherwise requested by the user and/or customer, the information will be provided in electronic form.
Data security
DENTAL MEDICINE PRACTICE IRENA LUŠIČIĆ implements appropriate technical and organizational measures to ensure a level of security appropriate to the risk, taking into account the state of the art, the costs of implementation, and the nature, scope, context, and purposes of processing, as well as the risk of varying likelihood and severity for the rights and freedoms of natural persons.
In determining the appropriate level of security, DENTAL MEDICINE PRACTICE IRENA LUŠIČIĆ takes into account the risks that are presented by processing, in particular from accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to personal data transmitted, stored, or otherwise processed.
DENTAL MEDICINE PRACTICE IRENA LUŠIČIĆ implements measures for the ongoing confidentiality, integrity, availability, and resilience of processing systems and services, and regularly tests, assesses, and evaluates the effectiveness of such measures to ensure the security of processing.
In the event of a personal data breach, DENTAL MEDICINE PRACTICE IRENA LUŠIČIĆ will notify the competent supervisory authority without undue delay and, where feasible, not later than 72 hours after having become aware of it, unless the personal data breach is unlikely to result in a risk to the rights and freedoms of natural persons.
If the personal data breach is likely to result in a high risk to the rights and freedoms of natural persons, DENTAL MEDICINE PRACTICE IRENA LUŠIČIĆ will communicate the personal data breach to the data subject without undue delay, unless any of the exceptions specified in Article 34 of the General Data Protection Regulation (GDPR) apply.
Transfer of personal data
Personal data may be transferred to recipients outside the European Economic Area, in countries that provide an adequate level of protection of personal data, or to countries that do not provide an adequate level of protection of personal data, provided that appropriate safeguards are in place, and data subjects have enforceable rights and effective legal remedies.
Personal data may be transferred to:
Processors engaged by DENTAL MEDICINE PRACTICE IRENA LUŠIČIĆ, which provide services on behalf of DENTAL MEDICINE PRACTICE IRENA LUŠIČIĆ and under its instructions.
Public authorities, regulatory bodies, or law enforcement agencies, when necessary for compliance with a legal obligation to which DENTAL MEDICINE PRACTICE IRENA LUŠIČIĆ is subject or for the exercise or defense of legal claims.
International organizations, when necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in DENTAL MEDICINE PRACTICE IRENA LUŠIČIĆ.
Personal data may also be transferred to other recipients, with the user’s and/or customer’s explicit consent, or when necessary for the performance of a contract between the user and DENTAL MEDICINE PRACTICE IRENA LUŠIČIĆ, or for the implementation of pre-contractual measures taken at the user’s and/or customer’s request.
In cases where personal data are transferred to countries that do not provide an adequate level of protection of personal data, DENTAL MEDICINE PRACTICE IRENA LUŠIČIĆ will implement appropriate safeguards to ensure the protection of personal data, such as standard data protection clauses adopted by the European Commission.
Changes to the Privacy Policy
DENTAL MEDICINE PRACTICE IRENA LUŠIČIĆ may change this Privacy Policy from time to time in order to reflect changes in the legal framework, as well as changes in the services, business practices, and regulations.
Users and customers will be informed of any changes to the Privacy Policy in a timely manner, through appropriate channels of communication (e.g., email, website notification), and are encouraged to review the Privacy Policy periodically for updates.
If the changes to the Privacy Policy are significant, users and customers will be provided with an explicit notice and, if required by applicable law, will be asked to consent to such changes before they come into effect.