Privacy Policy

Privacy Policy

1. Introduction

Ultrazdravje d.o.o.("we", "us" or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use and disclose information about you when you use our website at ultrazdravje.si.

Our data processing practices comply with the following regulations and standards:

• GDPR — EU General Data Protection Regulation (Regulation 2016/679)
• PIPEDA — Canadian Personal Information Protection and Electronic Documents Act
• CalOPPA — California Online Privacy Protection Act
• CCPA — California Consumer Privacy Act
• LGPD — Brazilian General Data Protection Law

Scope

This Privacy Policy applies to personal data we process as a data controller. It does not apply to third-party services or websites accessible through our pages.

Processing Activities

Our processing activities include: website management, customer communication, provision of medical services and compliance with legal obligations.

2. Personal Data We Collect

What We Collect

We collect the following categories of personal data:

• Identification data (first name, last name)
• Contact data (email address, phone number)
• Health information you voluntarily provide
• Device and browsing data (IP address, browser type)

How We Collect Data

We collect personal data directly from you (e.g. through contact forms, booking services, communication by email or phone) and automatically through technical systems (e.g. server logs).

From Whom We Collect Data

We collect personal data from website visitors, customers interested in our services, and patients using our medical services.

Device Data

When you visit our website, we automatically collect certain technical data about your device, including information about your web browser, IP address, time zone and certain cookies installed on your device.

Third-Party Data

We may receive personal data from third parties where permitted by law and where necessary for the provision of our services.

Purpose of Processing

We process your personal data for the following purposes:

• Operating and maintaining the website
• Responding to your enquiries and requests
• Providing medical services and diagnostics
• Fulfilling legal obligations
• Improving our services

International Transfers

Your data is primarily processed in the Republic of Slovenia and the European Union. In the event of any transfer of data outside the EEA, we ensure appropriate safeguards in accordance with the GDPR.

Disclosure and Sharing of Data

We do not sell your personal data to third parties. We may share data:

• With service providers who assist us in operating our business (e.g. web hosting, email services) — under data processing agreements
• With healthcare professionals involved in your care, where necessary
• With law enforcement or regulators where required by law

3. Cookies

This website uses essential cookies for functionality, as well as analytical and marketing cookies, which are only activated with your consent. You can learn more about cookies on your first visit.

4. Retention and Deletion

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting or reporting requirements.

Medical records are retained in accordance with the applicable health regulations of the Republic of Slovenia. Contact data for marketing purposes is retained until consent is withdrawn or for a maximum of 3 years from the last contact.

When your data is no longer required, we will securely delete or anonymise it.

5. Merger or Acquisition

In the event that our company is purchased, sold or otherwise transferred to a third party, we reserve the right to transfer your personal data to the buyer or successor. In the event of such a transfer, we will provide you with notice in accordance with applicable data protection law.

6. How We Keep Your Data Secure

We implement appropriate technical and organisational security measures to protect your personal data from unauthorised access, loss, destruction or disclosure. These measures include:

• Data encryption in transit (SSL/TLS)
• Limiting access to personal data to authorised personnel only
• Regular security reviews of systems
• Employee training on data protection

Despite these measures, no method of transmission over the internet or electronic storage is 100% secure. In the event of a data breach, we will act in accordance with our legal notification obligations.

7. Children's Privacy

Our website is not intended for children under the age of 16. We do not knowingly collect personal data from children under the age of 16. If we discover that we have inadvertently collected data from a child under 16, we will delete it immediately. If you believe we may have collected data from a child under 16, please contact us.

8. Your Rights Regarding Personal Data

Under the GDPR and applicable Slovenian law, you have the following rights regarding your personal data:

• Right of access — the right to obtain a copy of the personal data we process about you.
• Right to rectification — the right to request correction of inaccurate or incomplete data.
• Right to erasure ("right to be forgotten") — the right to request deletion of your personal data under certain conditions.
• Right to restriction of processing — the right to request restriction of the processing of your data in certain circumstances.
• Right to data portability — the right to receive your data in a structured, machine-readable format.
• Right to object — the right to object to the processing of your data for certain purposes, including direct marketing.
• Rights regarding automated decision-making — the right not to be subject to a decision based solely on automated processing.
• Right to lodge a complaint — the right to lodge a complaint with the competent supervisory authority (Information Commissioner of the Republic of Slovenia, www.ip-rs.si).

To exercise any of the above rights, please contact us at the address below. We will respond to your request within one month.

9. Changes

We may update this Privacy Policy from time to time to reflect changes in our data processing practices or applicable law. We will notify you of significant changes via the website or by email. We recommend that you check this policy regularly.

10. Contact Us

If you have any questions about this Privacy Policy or the processing of your personal data, please contact us: