Privacy policy

The data controller is Salus Oris, a healthcare institution at Horvaćanska cesta 75A, Zagreb, Croatia. You can reach us at +385 1 2020 237 or salusoris.dc@gmail.com with any question about this policy or your data.

When you use the contact form we receive your name, your email address, your message and, if you choose to give it, your phone number. We use these solely to read and answer your enquiry.

The legal basis is our legitimate interest in responding to people who contact us (Article 6(1)(f) GDPR) and, where your message concerns an appointment or treatment, the steps needed before providing you a service (Article 6(1)(b) GDPR). Before sending, you confirm that you have read this policy.

Your message is delivered to our mailbox as an email through Resend, an email delivery service acting as our processor. Resend processes the message only to deliver it and keeps it for a limited time for delivery logs. Resend may process data outside the European Economic Area; such transfers are covered by the European Commission's standard contractual clauses.

We keep your message for as long as it takes to handle your enquiry and any follow-up, then delete it. We do not add you to any mailing list and we do not use your details for marketing.

To protect the form from automated abuse, the form includes a hidden field that only automated scripts fill in, and our server limits how many messages one internet connection can send in a short period. For this, your IP address is held in the server's memory for at most ten minutes and is not stored anywhere else by us.

This website is hosted by Vercel Inc. When you open a page, your browser sends technical information such as your IP address, browser type and the page requested. Vercel processes this in server logs to deliver the site and keep it secure, and deletes it after a short period. Our legal basis is our legitimate interest in running a secure website (Article 6(1)(f) GDPR).

We measure how the website is used with Vercel Web Analytics. It works without cookies and without any identifier stored on your device. It records which pages are visited, the country and the type of device and browser, in a form that does not identify you and cannot follow you across visits or across other websites.

The contact page and the homepage include a map from Google Maps, provided by Google Ireland Limited. When the map loads, your browser connects to Google's servers and Google receives your IP address and technical details of your visit, and may set cookies of its own. How Google uses this data is described in Google's privacy policy at policies.google.com/privacy. If you prefer not to load Google's content, you can block third-party content in your browser; the address and opening hours are always shown as text as well.

Appointment booking is handled by a separate booking application that opens in a new tab. Any data you enter there is processed under that application's own privacy policy.

Under the GDPR you have the right to access the personal data we hold about you, to have it corrected or erased, to restrict or object to its processing, and to receive it in a portable format. Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, write to salusoris.dc@gmail.com. You also have the right to lodge a complaint with the Croatian Personal Data Protection Agency (Agencija za zaštitu osobnih podataka, azop.hr) or the supervisory authority in your country.

We will update this policy when the way the website handles data changes. The date of the last change is shown at the top of the page.