Privacy policy

Poliklinika Avicena clinic (“we”) respects your privacy. This policy explains how we process personal data when you visit our website, use the contact form, or become a patient of our clinic.

Depending on your interaction with us, we may process the following categories of data:

• Identity data (name, phone, email) you submit via the contact form
• Healthcare data recorded in our internal patient records (name, phone, year of birth, notes)
• Technical data (IP address, user agent) when submitting the contact form for abuse prevention
• Technical visit data via anonymous analytics (no cross-site tracking)

We process data for the following purposes:

• Responding to inquiries sent via the contact form
• Maintaining internal patient records and clinic operations
• Fulfilling legal obligations (e.g. fiscal record retention)
• Protecting the website from abuse (rate limits, honeypot)
• Improving service quality through aggregated, anonymous visit statistics

We retain data only as long as necessary for the purpose of processing or as required by law. Clinic records are kept for at least 7 years in accordance with fiscal regulations. Contact messages are archived in the database until manually deleted by the owner.

We use only essential cookies for staff authentication (dashboard) and session technical requirements. We do not use advertising cookies. The Plausible analytics service (in production) does not use cookies to track individual users. The banner at the bottom of the page serves as a notice, not consent, as there are no non-essential cookies.

Under GDPR you have the right to:

• Access the data we hold about you
• Rectify accuracy of your data
• Erasure of data (where permitted by law)
• Restrict processing
• Data portability
• Object to processing
• Lodge a complaint with the relevant data protection authority

For any questions regarding privacy and data protection, you can contact us via the email address below. We will respond within a reasonable timeframe.