Health Centar Zagreb
PRIVACY POLICY
HEALING j.d.o.o. respects the privacy of its users and is committed to protecting the personal data it collects through the website healthcentar.com, online booking, the online shop and other communication channels.
In this Privacy Policy, we explain what personal data we collect, for what purposes we process it, on what legal basis, how long we keep it and what rights you have in relation to your personal data.
1. Data controller
The data controller is:
HEALING j.d.o.o.
Radnička cesta 20A
10000 Zagreb, Croatia
OIB (Personal Identification Number): 70257615076
MBS (Court Registration Number): 080966114
Email: info@healthcentar.com
Phone: +385 1 5605 711
Mobile: +385 91 1555 619
2. What personal data we collect
Depending on how you use our website and services, we may collect the following data:
- your full name,
- email address,
- phone or mobile number,
- information provided in the notes when booking,
- information needed to fulfil the order and issue an invoice,
- information related to the purchase of a gift voucher,
- information you voluntarily provide via the contact form or email,
- information about bookings and appointments,
- technical data needed for the website to function,
- data collected through cookies, in accordance with our Cookie Policy.
We do not collect more personal data than is necessary for a specific purpose of processing.
3. Purposes of processing personal data
We may process your personal data for the following purposes:
- receiving and managing online bookings,
- confirming, changing and cancelling booked appointments,
- communicating with users about bookings and services,
- processing and fulfilling orders placed through the online shop,
- issuing and delivering gift vouchers,
- issuing invoices and fulfilling statutory accounting and tax obligations,
- responding to user enquiries and requests,
- resolving complaints,
- protecting the security and functionality of the website,
- preventing misuse and unauthorised access,
- fulfilling legal obligations,
- sending marketing messages, only where there is an appropriate legal basis or consent.
4. Online booking
When booking an appointment through our website, you need to enter the information required to process the booking, including your full name, email address, phone number and any notes.
This information is used to organise and manage the booked appointment and to communicate with you about it.
Online bookings are processed through the appointment management system Simply Schedule Appointments. Information entered when booking may be processed within that system in accordance with its privacy rules and terms of use.
5. Purchases through the online shop and gift vouchers
When you make a purchase through the online shop, we may process the data needed for:
- processing the order,
- processing the payment,
- issuing the invoice,
- delivering the electronic gift voucher,
- communicating about the order,
- exercising rights and obligations arising from the sales relationship.
If, when buying a gift voucher, you enter the recipient's details, such as their name or email address, this information is used solely to create and deliver the gift voucher, i.e. to fulfil the order.
6. Legal bases for processing
We process personal data on the basis of one or more of the following legal grounds:
- performance of a contract or taking steps at the user's request before entering into a contract,
- compliance with legal obligations,
- our legitimate interest, where such processing is permitted and is not overridden by the individual's rights and freedoms,
- the user's consent, where required.
Where processing is based on consent, you can withdraw your consent at any time. Withdrawing consent does not affect the lawfulness of processing carried out before it was withdrawn.
7. Payments
When paying online, the data needed to complete the transaction may be processed by the payment service provider involved in carrying out the payment.
HEALING j.d.o.o. does not store payment card details when payment is made through an external secure online payment system.
The scope of data processed depends on the payment method chosen and the rules of the payment service provider.
8. Recipients of personal data
Your personal data may be accessible only to persons and service providers who need it to fulfil a specific purpose, for example:
- website hosting and maintenance providers,
- online booking service providers,
- payment service providers,
- email service providers,
- accountants and other professional advisers,
- competent authorities where there is a legal obligation to provide data.
We take appropriate measures with external data processors to ensure that personal data is processed in accordance with the applicable data protection regulations.
9. Transfer of data outside the European Economic Area
If any of the service providers we use are located outside the European Economic Area or process data outside it, personal data is transferred only where there is an appropriate legal basis and the safeguards required by the applicable regulations are in place.
10. Data retention period
We keep personal data only for as long as necessary to fulfil the purpose for which it was collected, or as long as necessary to comply with legal obligations.
Data related to invoices, financial transactions and business records is kept for the periods required by accounting, tax and other applicable regulations.
Data related to bookings is kept for the period necessary to manage appointments, communicate with the user, resolve any complaints and comply with legal obligations.
Once the relevant period has expired, the data is deleted, destroyed or anonymised, unless there is another legal basis for keeping it.
11. Security of personal data
We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction, alteration or other unlawful processing.
Despite the measures taken, no transmission of data over the internet and no storage system can be considered completely secure.
12. Your rights
In accordance with the applicable data protection regulations, you have the right to:
- request access to your personal data,
- request the correction of inaccurate or incomplete data,
- request the deletion of your personal data where the legal conditions are met,
- request the restriction of processing,
- exercise the right to data portability in certain cases,
- object to the processing of your personal data where the legal conditions are met,
- withdraw your consent where processing is based on consent.
To exercise your rights, you can contact us by email:
Your request should include enough information for us to verify your identity and act on your request.
13. Right to lodge a complaint with a supervisory authority
If you believe that your personal data is being processed in breach of data protection regulations, you have the right to lodge a complaint with the competent supervisory authority.
The supervisory authority in the Republic of Croatia is:
Croatian Personal Data Protection Agency (AZOP)
Ulica Metela Ožegovića 16
10000 Zagreb
Email: azop@azop.hr
14. Cookies
The website uses cookies and similar technologies to ensure that the website functions properly, to improve the user experience, to analyse website use and, where applicable, for other features.
Detailed information about the types of cookies, their purpose and how to manage them is available in our Cookie Policy.
15. Changes to the Privacy Policy
HEALING j.d.o.o. reserves the right to amend this Privacy Policy when necessary due to changes in the way personal data is processed, the technologies used, its business or the applicable regulations.
The current version of the Privacy Policy will always be published on this website.
Last updated: September 2026