Protection of Personal Data

In accordance with the Law on Protection of Personal Data of Bosnia and Herzegovina (“Official Gazette of BiH”, nos. 49/06, 76/11 and 89/11), Private Health Institution Alea Dr. Kandić holds the status of a data controller.

Your personal data – including identification information (name, surname, etc.), contact details (phone, email), website usage data (IP address, access data), as well as any other information you share with us – are processed for the purpose of providing safe and personalized healthcare services.

Purposes of Processing Personal Data

Your data is processed for the following purposes:

• Maintaining records of scheduled and completed appointments

• Delivering laboratory and diagnostic test results via online platform

• Managing patient relations and conducting satisfaction surveys

• Informing about services, new treatment methods, and other relevant activities

• Sending promotional and educational messages via email or SMS (with your consent)

• Issuing medical documentation and other necessary reports

• Concluding and executing health service contracts

• Fulfilling legal obligations and regulations

• Communicating regarding scheduling, rescheduling, and providing additional information

Who Can Your Data Be Shared With?

Within your explicit consent, your data may be stored in electronic and/or paper form and shared with:

• Medical and administrative staff within Alea clinics

• Partners and subcontractors providing IT support, laboratory, and other health services

• Competent institutions if required by law

Your Rights Regarding Data Protection

At any time, you have the right to:

• Request access to information we hold about you

• Verify the purpose, basis, and duration of processing your data

• Request correction, deletion, or restriction of processing your data

• Object to the processing of your data for marketing purposes

• Be informed prior to the first transfer of data to third parties

• Claim compensation in the event of a rights breach

Consent Declaration for Personal Data Processing

I declare that I have read and understood the content of this notice and give explicit consent that Private Health Institution Alea Dr. Kandić:

• Processes, stores, and uses my personal data, as well as the data of people I am legally responsible for, in accordance with applicable laws and stated purposes.

• Transfers data to the listed third parties to effectively provide healthcare and communication services.

Consent for Commercial Electronic Messages

I consent to Alea Dr. Kandić contacting me via:

• Email

• SMS messages

• Phone calls

…for the purpose of informing me about:

• New medical services

• Educational content

• Promotional campaigns, discounts and events

Note: You can withdraw your consent at any time via contact form or email.

Sincerely,

The Alea Dr. Kandić Team

www.alea.ba