Legal documents

Privacy Policy

1. Introduction

Poliklinika Malić ("we", "us", "the Clinic") is committed to protecting your personal data. This Privacy Policy explains what data we collect, how we use it, and your rights under the General Data Protection Regulation (GDPR) and applicable Croatian law.

By using this website (rinoplastika.hr) and its language versions, you acknowledge this Privacy Policy.

2. Data We Collect

• Contact form: name, email address, phone number, message and preferred consultation time
• Technical data: IP address, browser type and version, operating system, referring URL, date and time of visit
• Analytics data: anonymous usage data collected via Google Analytics 4 and Meta Pixel

3. Purpose and Legal Basis

• Responding to your enquiry and scheduling a consultation — legal basis: legitimate interest and/or consent (Art. 6(1)(b) and (f) GDPR)
• Improving the website and user experience — legal basis: legitimate interest (Google Analytics 4, anonymous data)
• Displaying relevant advertisements — legal basis: consent (Meta Pixel, remarketing)

4. Cookies and Tracking Tools

This website uses the following tools:

• Google Analytics 4 — tracks visits and interactions to improve content. Data is anonymised and processed on Google's servers in the EU/US. More info: policies.google.com/privacy
• Meta Pixel (Facebook/Instagram) — tracks conversions from Meta ads and enables relevant ad targeting. More info: facebook.com/privacy/policy

You can disable tracking via your browser settings or tools such as Google Analytics Opt-out and Facebook ad settings.

5. Sharing Data with Third Parties

We do not sell or transfer your personal data to third parties for commercial purposes. Data may be shared only with:

• Netlify Inc. — hosting and form processing provider (US, Standard Contractual Clauses)
• Google LLC — analytics (Google Analytics 4)
• Meta Platforms Inc. — advertising (Meta Pixel)

6. Data Retention

• Contact enquiries: retained for 2 years from receipt, unless an ongoing treatment relationship exists
• Analytics data (GA4): 14 months, per Google Analytics default settings
• Meta Pixel data: per Meta's platform policies (up to 180 days for remarketing)

7. Your Rights

Under GDPR you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — request correction of inaccurate data
• Erasure — request deletion of your data ("right to be forgotten")
• Restriction — request restriction of processing in certain circumstances
• Portability — receive your data in a machine-readable format
• Objection — object to processing based on legitimate interest
• Withdrawal of consent — withdraw consent at any time where processing is based on consent

To exercise your rights, contact us at: info@poliklinikamalic.hr. We will respond within 30 days.

8. Supervisory Authority

If you believe your data is being processed unlawfully, you have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP):

9. Changes to This Policy

We reserve the right to update this Privacy Policy at any time. Changes take effect upon publication on this page. We recommend checking this page periodically.

10. Contact

• Email: info@poliklinikamalic.hr
• Phone: +385 99 304 7785
• Address: Trg Ivana Antuna i Vladimira Mažuranića 5, 10 000 Zagreb, Croatia