Effective date: 01.01.2025.

The healthcare institution Alea Dr. Kandić respects your privacy and is committed to safeguarding your personal and health information with the highest degree of care, confidentiality, and in compliance with the applicable laws of Bosnia and Herzegovina regarding personal data protection.

This Privacy Policy explains how we collect, use, store, and protect your personal information while using our services and website.

1. What data do we collect?

1. Personal data you provide to us

When using our services or contacting us via the website, email, or phone, we may collect the following information:

• Full Name

• ID number or personal identification number (when legally required)

• Phone number and email address

• Home address

• Date of birth and gender

• Health information relevant to providing medical services

2. Data collected via the website

On our website, we may collect technical data such as:

• IP addresses

• Browser type and operating system

• Date and time of access

• Pages visited

This data is used exclusively for statistical and security purposes.

2. How do we collect your data?

We collect data in the following ways:

• In person, upon admission at the clinic

• Via phone

• Through web forms or email (e.g., for scheduling appointments, second opinions, or inquiries)

• During medical examination or diagnostic processing Your rights regarding data protection

At any time you have the right to:

• Request access to the information we hold about you

• Review the purpose, basis, and duration of data processing

• Request correction, deletion, or restriction of your data processing

• Object to data processing for marketing purposes

• Be informed before the first data transfer to third parties

• Claim compensation if your rights are violated

3. How do we use your data?

Your personal and health data are used exclusively for medical and administrative purposes, including:

• Providing healthcare services and maintaining medical records

• Scheduling and confirming appointments

• Processing payments and issuing invoices

• Fulfilling legal obligations to relevant authorities

• Internal analysis of service quality and process improvement

We never use your data for marketing purposes without your explicit consent.

4. To whom can we disclose your data?

We do not share your data with third parties except when required by law or necessary for providing service, including:

• Authorized healthcare professionals involved in your treatment

• Relevant institutions (health, tax, and judiciary) when required by law

• Insurance companies, with your consent

Your legal representatives or family members, with written consent

4. To whom can we disclose your data?

We do not share your data with third parties except when required by law or necessary for providing service, including:

• Authorized healthcare professionals involved in your treatment

• Relevant institutions (health, tax, and judiciary) when required by law

• Insurance companies, with your consent

Your legal representatives or family members, with written consent

5. How do we protect your data?

We implement technical and organizational protection measures to ensure the confidentiality, integrity, and availability of data, including:

• Secured information systems with restricted access

• Regular backups

• Controlled access to medical data (authorized personnel only)

• Internal staff training on data protection

• Encryption of electronic communications where applicable

6. How long do we keep your data?

Data is retained for as long as prescribed by law or as necessary to fulfill the purpose for which it was collected.

Upon expiration of that period, data is deleted, anonymized, or archived in accordance with legal deadlines.4. To whom can we disclose your data?

We do not share your data with third parties except when required by law or necessary for providing service, including:

• Authorized healthcare professionals involved in your treatment

• Relevant institutions (health, tax, and judiciary) when required by law

• Insurance companies, with your consent

Your legal representatives or family members, with written consent

7. Your rights

In accordance with the Law on Personal Data Protection of BiH, you have the right to:

• Request access to your data

• Request correction of inaccurate or incomplete data

• Request deletion or restriction of data processing

• Withdraw consent for data processing

• Object to data processing

• Lodge a complaint with the BiH Personal Data Protection Agency

To exercise your rights, you can contact us via:

📧 kandic@bih.net.ba

📞 +387 33 538 100

8. Data transfer to third parties

Data is not transferred outside Bosnia and Herzegovina unless necessary and with your written consent, in compliance with international data protection standards.

9. Updating the privacy policy

This Privacy Policy may be updated periodically to align with legal changes or improve our data protection procedures.

The latest version is always available on the website www.aleadrkandic.ba.

Data Controller:

The healthcare institution Alea Dr. Kandić

Avdage Šahinagića 3, 71000 Sarajevo

Butmirska cesta 21, Ilidža

Olovska 67, Sarajevo

📧 info@agc.ba

📧 kandic@bih.net.ba