Personal data protection policy
This Privacy Policy informs you about the processing of your personal data that we collect when you visit our website or when you contact us as a client of an osteopathic – or alternative and complementary – medical practice (“controller” within the meaning of the GDPR).
General information about the controller
The following is responsible for the processing of personal data:
Alexandra-Henriette Marjanovic, OIB: 85923623269, Ulica Drage Gervaisa 24, 52210 Rovinj, E-Mail: info@osteopatija-istra.com
You can direct all questions related to personal data protection to:
- Email: info@osteopatija-istra.com
- By mail: Drage Gervaisa Street 24, 52210 Rovinj
Categories and purpose of processing personal data
We may process your personal data for the following purposes:
- Organization and implementation of osteopathic/alternative medical diagnostics and therapy
- Maintaining client records for medical documentation, reporting, and monitoring treatment progress
- Issuing and maintaining invoices in accordance with accounting obligations (fiscalization)
- Respond to inquiries via form or email
- Timely contact regarding appointments, administrative issues, or changes related to your treatment
We process these categories of data (depending on the level of client involvement):
- Name and surname, address, date of birth, contact details (phone/email)
- Information about health conditions relevant to osteopathic/alternative medicine treatment
- Medical history, therapy and any documents you voluntarily submit
- Account number (for managing transactions and legal obligations only)
- Other data necessary to exercise your rights and provide quality service
Legal basis for processing
Your personal data is processed solely on the basis of:
- Contract execution (provision of osteopathic services)
- Legal obligations (record keeping, fiscalization, health legislation of the Republic of Croatia)
- Your consent (to process special categories of data or send advanced information)
- Legitimate interest of the controller (protection of the interests of the practice and clients where permitted by law)
Data transfer and storage
Personal data will not be made available to third parties in any way, except:
- for legally prescribed purposes (e.g. tax supervision, health supervision)
- where necessary for the provision of a service (e.g. health management information system, accounting) and then with a confidentiality obligation and a personal data processing agreement
All data are stored in accordance with applicable laws and are kept at least as long as prescribed by the Law on Medical Documentation and Health Care. Upon expiration of the term or upon request, the data is deleted or anonymized.
Use of cookies and web analytics
In order for the website to function optimally and to improve the user experience, we use cookies. You can find more information in our separate "Cookie Policy".
No automated individual decision-making or profiling is integrated. Data does not leave the EU.
Your rights
According to the GDPR and the Law of the Republic of Croatia, you have the following rights:
- Right to information and access (to obtain a copy, to find out the categories and purpose of processing)
- Right to correction and supplementation
- Right to erasure ("right to be forgotten") where applicable
- Right to restriction of processing in special cases
- The right to withdraw consent at any time (with the proviso that withdrawal does not affect the lawfulness of processing already carried out)
- The right to transfer data to another data controller when technically feasible
- The right to object to data processing, especially if the data is used for direct marketing purposes (which this site does not otherwise use)
To exercise your rights, please contact us at the contact details above.
Data protection and security
The latest technical and organizational measures are taken to protect personal data against unauthorized access, loss, destruction or theft.
Only authorized persons have access to your data, and all tradesmen and employees are obliged to keep your data as a professional secret.
Right to complain to the competent agency
If you believe that your data is being processed contrary to the law, you have the right to complain to the Croatian Personal Data Protection Agency ( azop@azop.hr , Selska cesta 136, 10000 Zagreb).
Policy update
This privacy policy may be changed from time to time to comply with legislation and practice. We recommend that you periodically check the current version on our website.
Last updated: 15.09.2025