Legal information

Privacy policy

Who we are

The data controller is Poliklinika Pavan, Senjska ul. 39 A, 47000 Karlovac, Croatia. For any questions about data protection, you can contact us by phone at +385 47 655 999 or via the contact form on the website.

Our website address is: https://www.drpavan.com

Appointment booking and contact form

When you contact us via the form or request an appointment, we collect the data you enter yourself (first and last name, phone, e-mail address and message content). We use this data solely to respond to your enquiry and arrange an appointment, and we do not pass it on to third parties for marketing purposes.

Health data

Data about your health is a special category of personal data and is processed as part of providing healthcare, with the highest level of confidentiality and in accordance with data protection regulations (GDPR) and laws on healthcare and patients’ rights. Medical records are kept separately from data collected via the website and are accessible only to authorised medical staff.

Comments

When visitors leave comments on the site, we collect the data shown in the comment form, as well as the visitor’s IP address and browser user agent string to help detect spam.

An anonymised string created from your e-mail address (a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar privacy policy is available at: https://automattic.com/privacy/. After your comment is approved, your profile picture will be publicly visible alongside your comment.

Media

If you upload images to the website, avoid uploading images with embedded location data (EXIF GPS). Visitors to the website can download and extract any location data from such images.

Cookies

If you leave a comment on our site, you may opt in to saving your name, e-mail address and website in cookies. This is for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies last for one year.

If you visit our login page, we will set a temporary cookie to determine whether your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we also set several cookies to save your login information and screen display choices. Login cookies last for two days and screen options cookies for a year. If you select “Remember me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in exactly the same way as if the visitor had visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking and monitor your interaction with that embedded content, including tracking your interaction if you have an account and are logged in to that website.

Who we share your data with

We do not sell or pass on your data to third parties for marketing purposes. If you request a password reset, your IP address will be included in the reset e-mail.

How long we retain your data

If you leave a comment, the comment and its metadata are retained indefinitely so that we can recognise and approve any follow-up comments automatically. For users who register on the website, we also store the personal information they provide in their profile. All users can see, edit or delete their personal information at any time (except their username). Website administrators can also see and edit that information.

What rights you have over your data

If you have an account on this site or have left comments, you can request an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal or security purposes.

Where we send your data

Visitor comments may be checked through an automated spam detection service.