At Crystal Medical Centre Ltd we are committed to protecting your privacy.

The purpose of our Privacy Policy is to inform you about privacy protections and the choices available to you about how we collect and use information online.

By signing up to receive the newsletter, ordering a check-up or otherwise signing up, you declare that you are a person of legal age and that you allow Crystal Medical Centre Ltd to collect and process the personal data you provide.

The authenticity of personal data and contact information is the sole responsibility of the users.

The personal data provided will be processed in accordance with the General Data Protection Regulation and the applicable Personal Data Protection Act.

Data collection and processing

We only collect your personal data if it is strictly necessary. You can visit www.crystalmc.si without providing any personal information.

By signing up to the newsletter, you agree to us collecting the personal data about you that you provide when you sign up. The personal data we collect is your first name, last name and email address, in some cases it may be just your email address.

By using cookies, you agree to their use for the purposes of analysing the user’s journey on the website: where the user came to the website from (source of traffic), to monitor the user’s stay on the website, which websites the user has visited, what content the user has downloaded or viewed, and to monitor and personalise advertising.

In addition to the above, for the sole purpose of proving personal consent, the controller may collect information on the address of the website on which consent was given, the IP address of the individual when consent was given and the time of consent, etc. For the purposes of monitoring opt-outs and restrictions on processing, it will collect the date of the opt-out or restriction of processing and the emails informing us of the opt-out, change of data, etc.

Purpose and use of the data

We collect personal data in accordance with the purpose for which you provided it to us and use it solely for the purpose for which you provided it to us.

We will not use the personal data provided for any other purpose.

Legal basis

We collect and process personal data on the basis of consent, contract, legitimate interest or applicable law.

Data storage

We will keep the personal data you provide when you sign up to our newsletter until we receive a request to unsubscribe, which automatically means withdrawing your consent. Once we receive a request to unsubscribe, we will no longer use the personal data collected to send you newsletters or event invitations. After the withdrawal or revocation of consent or after the expiry of the contractual relationship, the data may remain stored in the controller’s database for a period of five years.

You may withdraw your consent to the processing of your personal data at any time. The withdrawal of consent does not affect the lawfulness of the processing of data prior to the withdrawal.

All other personal data within the framework of contractual cooperation is stored in accordance with the current legislation and within the limitation periods.

Transmission of personal data

We will not disclose personal data to third parties, except to selected contractual partners who are also bound by the General Data Protection Regulation, and we will not publicly disclose them, except in cases of explicit consent or contract. We will not transfer personal data to a third country.

Your rights

In accordance with the General Data Protection Regulation and applicable law, you have the right to withdraw consent, the right of access to data relating to you, the right to rectification of inaccurate data, the right to restriction of processing, the right to be forgotten or. You have the right to have your data subject to processing, to have any data erased, to lodge a complaint with a supervisory authority, and to data portability.

You may exercise any of your rights in writing at any time. Please include your name, surname and email address. You can send your request by post to Crystal medicinski center d.o.o., Štukljeva cesta 46, 1000 Ljubljana. You should send your complaint to the supervisory authority to the contact details of the Information Commissioner. You may also send your withdrawal of consent to the contact from which you received our message or by clicking on the link provided.

We must respond to your request to exercise your rights in relation to that personal data without undue delay and at the latest within one month of receipt of the request.

We may request additional information from you for the purposes of reliable identification in the event that you exercise your rights in relation to personal data, but we may refuse to take action only if we can demonstrate that we cannot identify you reliably.

This Privacy Statement may be amended or supplemented at any time, without prior notice or warning. By using the Provider’s website following a change or amendment, the individual acknowledges that he or she has read and agrees to the changes and amendments.

Ljubljana, 7. March 2023