Protection of personal data


With the Privacy Policy, the Special Hospital for Medical Rehabilitation BIOKOVKA explains in more detail how to process the personal data of respondents and other participants (hereinafter: the respondent) in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (General Data Protection Regulation) and the Law on the implementation of the General Data Protection Regulation. The respondent is any living natural person whose personal data is processed for a lawful purpose. Respondents in BIOKOVKA are patients (hospital and outpatient), hotel guests, employed workers, persons who participate in business activities without establishing an employment relationship (practitioner students, volunteer interns, etc.), external members of management or professional bodies, tenderers in public procedures procurement (craftsmen-natural persons and authorized representatives of legal persons), business partners-suppliers, persons covered by video surveillance recordings and other persons whose data is processed by BIOKOVKA for a lawful purpose.

Information about the data controller:
Special hospital for medical rehabilitation BIOKOVKA (hereinafter: BIOKOVKA) OIB: 22775078552 , Put Cvitačke 9, 21300 Makarska, phone: +385 21 602 200, 602 300, fax: +385 21 612 493, e-mail:

Official contact details of the Personal Data Protection Officer:

BIOKOVKA in carrying out its hospital and hospitality-tourism activity, in accordance with Article 6 of the Regulation, collects and processes only personal data, the processing of which is necessary for the realisation of a contract in which the respondent is a party or in order to take actions at the request of the respondent before concluding the contract, and personal data whose processing is necessary to comply with the legal obligations of the data controller.

BIOKOVKA does not allow excessive collection and processing of data that is not necessary for the legal purpose of processing. Copying and/or scanning personal documents of respondents is expressly prohibited, except in cases where the data user is expressly authorized to do so by law.

BIOKOVKA, as the processing manager, is responsible for the protection of personal data of natural persons, whose personal data it processes (respondents), and in this sense implements appropriate technical, personnel and organizational measures to enable the effective application of data protection principles, in order to ensure a level of security that is in accordance with the requirements of regulations on the protection of personal data, and commensurate with the risks associated with the processing of personal data, so that such protection is ensured that prevents accidental or illegal destruction, loss, alteration, unauthorized disclosure of personal data or unauthorized access to personal data that has been transferred, stored or otherwise processed. Special protection is given to special categories of personal data (so-called "sensitive data", such as health data).

BIOKOVKA, in accordance with its legal obligations, submits personal data of respondents upon written request to authorized judicial and state administrative bodies.

BIOKOVKA, in accordance with legal regulations, processes data on patients using the Central Health Information System of the Republic of Croatia (CEZIH), data on employees is processed through the Register of Employees in the Civil Service and Public Services and by using the information system Centralized Payroll in the Civil Service and Public Services (COP ). Data on hotel guests are registered into eVisitor – centralised information system for registration and deregistration of tourists.

BIOKOVKA keeps Records of personal data processing activities of certain categories of respondents, in accordance with Article 30 of the Data Protection Regulation.

BIOKOVKA processes personal data of respondents until the purpose of personal data processing is fulfilled. After the end of the purpose for which they were collected, we no longer use the personal data, and they remain in our storage system and we keep them to the extent required by the legal regulations on the preservation of archival material.

BIOKOVKA enables the exercise of the rights of persons (respondents) whose data it processes:

The right to access information - you have the right to access your personal data that we process about you and you can request detailed information, in particular about the purpose of their processing, about the type/categories of personal data that are processed, including insight into your personal data, about recipients or categories of recipients and about the expected period in which personal data will be stored. Access to personal data can be limited only in cases prescribed by EU law or our national legislation, i.e. when such a limitation respects the essence of the fundamental rights and freedoms of others.

  • Right to rectification - you have the right to request correction or addition of personal data if your data is not correct, complete or up-to-date.
  • Right to deletion - you have the right to request the deletion of personal data relating to you primarily for the reason if you consider that your personal data are no longer necessary in relation to the purpose for which we collected or processed them or you; you have withdrawn the consent on which the processing is based if you have given it.
  • The right to restriction of processing - you have the right to obtain a restriction of processing if you dispute their accuracy, if the processing is illegal, and you object to their deletion, if the controller no longer needs the personal data but you have requested it in order to establish, exercise or defend legal claims, if you objected to the processing of your personal data.
  • The right to data portability - you have the right to ask BIOKOVKA to transfer data to another processor in a structured, commonly used and machine-readable format in the following cases: if BIOKOVKA processes these data on the basis of consent that can be revoked, for the purpose of fulfilling contractual relationships if the processing is carried out by automated means.
  • The right to object - if personal data is not processed for legitimate purposes or the defense of legal claims, if it is processed for the purposes of direct marketing, if the data subject objects to the processing and withdraws consent, if the processing is not necessary for the implementation of the tasks of public bodies or for the needs of the public interest

If the respondent wishes to exercise one of the above-mentioned rights, he can use the Request form for the exercise of the respondent's rights (download here pdf / doc).

If the respondent believes that BIOKOVKA has violated the provisions of the Data Protection Regulation during the processing of his personal data, he can directly contact the Personal Data.

If the respondent believes that BIOKOVKA has violated the provisions of the Data Protection Regulation during the processing of his personal data, he can directly contact the Personal Data Protection Officer of BIOKOVKA in order to determine any disputed issues. The personal data protection officer takes care of the legality of personal data processing and the exercise of the right to personal data protection, cooperates with the Personal Data Protection Agency in connection with the implementation of supervision over the processing of personal data, and enables the exercise of the rights of respondents in accordance with the provisions of the Regulation.

In case of violation of personal data, the respondent has the right to file a complaint with the Data Protection Agency, Martićeva 14, 10000 Zagreb.

If a breach of personal data is established and if it is likely that this breach will cause a risk to the rights and freedoms of the data subject, BIOKOVKA will report without delay to the Agency for the Protection of Personal Data (AZOP) as the supervisory body about the breach of personal data, no later than within 72 hours from information about the violation. If it is likely that the breach will cause a high risk for the rights and freedoms of the data subject, BIOKOVKA will inform the data subject in an appropriate and efficient manner about the breach of personal data.

BIOKOVKA on its official website uses the so-called cookies – text files placed on the user's computer by the Internet server, through which the Internet access service provider (ISP) displays the website. Cookies are created when the browser on the user's device loads the visited web destination, which then sends data to the browser and creates a text file (cookie). The browser retrieves and sends a cookie to the server of the website when the user returns to it. Cookies according to function are: a) technical cookies - mandatory cookies (always active) - necessary for the functioning of the Internet site and cannot be turned off in our systems. They are typically set in response to your actions involving a request for services, such as cookie settings, logging in, or filling out forms. You can set your browser to block these cookies or send a warning about them, but in this case some parts of the site will not work. These cookies do not store any information that could identify you b) functional cookies (can be turned off) - enable the website to provide improved functionality and personalization c) statistical cookies (can be turned off) - allow recording of visits and traffic sources for the purpose of measurement and improvement the effectiveness of Internet sites d) marketing cookies (can be turned off) - serve to track users through websites and display targeted ads.

Our pages use only TECHNICAL COOKIES (mandatory cookies, which cannot be turned off) because they are necessary for the website to function.