Region
In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), which has been applicable since 25 May 2018 in the Republic of Croatia and all Member States of the European Union, as well as the Act on the Implementation of the General Data Protection Regulation (Official Gazette 42/18), and in accordance with the legal framework for personal data protection in the Republic of Croatia and the European Union and best European practice, SALVUS d.o.o., Toplička cesta 100, 49240 Donja Stubica, OIB (Personal Identification Number): 40672036464 (hereinafter: “Salvus”), as the data controller of the personal data of visitors to this website, has prepared this Privacy Policy.
This Privacy Policy (“Policy”) explains how Salvus collects, uses, and manages your personal data available on this website and obtained when you use it.
In addition to this website, Salvus, as a data controller, also operates other websites through which it may process your personal data. Each of these other websites have separate privacy policies that apply exclusively to them, and you will be duly informed when accessing such websites.
Salvus is committed to protecting and respecting your privacy. Please read this Policy carefully to understand why and how we collect your personal data and how it will be used. With regard to the personal data it collects, Salvus acts as the data controller, meaning the entity that determines the purposes and means of the processing of personal data.
If you wish to contact Salvus regarding this Policy or your personal data, you may do so using the following contact details:
SALVUS d.o.o.
Toplička cesta 100
49240 Donja Stubica
The Data Protection Officer can also be contacted at: dpo@salvushealth.com
We collect your personal data when it is necessary to meet your needs and requests, ensure the functioning and improvement of this website’s features, provide our services, and for the purposes of our business operations.
We collect the above-mentioned categories of your personal data on the basis of consent (for example, the consent you may give when accessing this website via a pop-up window for non-essential cookies, by submitting an inquiry through a contact form or via social media, or when sending an unsolicited job application).
If you submit a request to exercise your rights under the General Data Protection Regulation or any other regulation, we process your data on the basis of a legal obligation to respond to such a request.
If the processing is based on your consent, you have the right to withdraw your consent at any time. You may do so by notifying the data controller via email at: dpo@salvushealth.com or by post to Toplička cesta 100, 49240 Donja Stubica. Such a withdrawal will not affect the lawfulness of processing based on consent before its withdrawal.
Please note the mandatory scope of the data we request. If you do not provide the required information marked as mandatory for the requested or expected activity, you may not be able to participate in or complete that activity, as it will not be technically possible without the required data.
The typical categories of data we collect include: name, surname, contact details and other information that you provide when communicating with us by phone or email.
As a data subject, you have rights guaranteed under the General Data Protection Regulation.
You have the right to request confirmation of whether your personal data is being processed, as well as access to that data and additional information regarding the purposes of processing, categories of data, recipients to whom the data has been disclosed, the retention period, and the rights available to you.
You have the right to request the correction of inaccurate or incomplete personal data relating to you.
In certain cases, you have the right to request the deletion of your personal data, for example, when the data is no longer necessary for the purposes for which they were collected, when you withdraw consent (if the processing is based on consent), or when you consider that the data is being processed unlawfully.
You have the right to request the restriction of the processing of your personal data in the following cases:
You have the right to receive your personal data that you have provided to Salvus in a structured, commonly used and machine-readable format, and to transmit this data to another data controller, where technically feasible, provided that the processing:
You have the right to object to the processing of your personal data based on Salvus’s legitimate interests, including profiling, or when the data are processed for direct marketing purposes.
If the processing of your personal data is based on your consent, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing carried out before its withdrawal.
To submit a request for the exercise of any of the above rights, please use the contact details provided at the beginning of this Privacy Policy.
Please note that these rights are not absolute, and the data controller may restrict the exercise of a specific data subject right. The reasons for any such restriction will always be stated and documented.
If you believe that the processing of your personal data is not in compliance with applicable data protection regulations, you have the right to lodge a complaint with the competent supervisory authority – the Croatian Personal Data Protection Agency (AZOP).
When submitting an inquiry or request related to the exercise of the rights described above, we may ask you for additional identifiers if we have doubts about your identity or if you do not have verified data in our system that would allow us to unequivocally confirm your identity before providing information or copies of personal data.
For your protection, we verify your identity to prevent your personal data from being disclosed to any unauthorised third party.
We will respond to your request as soon as possible and, in any event, within one month. If your request requires a more complex assessment, this period may be extended, in which case you will be informed of the reasons for the extension.
All requests submitted by data subjects and the responses provided are recorded in the data subject request register.
Requests and responses are retained for five years from the date on which the response is delivered to the data subject. If the personal data contained in a request constitutes evidence in judicial, administrative, arbitration or other equivalent proceedings, it will be retained until the final conclusion of such proceedings.
The personal data we collect about you is stored in a secure environment. Your personal data is protected against unauthorised access, disclosure, use, modification or destruction by any organisation or individual.
The processed data is stored on our premises and within secure IT systems; however, in some cases, we store data on the servers of our trusted service providers located within the European Union.
Salvus will ensure that personal data is kept in a secure location (including administrative, technical and physical safeguards designed to prevent the unauthorised use, access, disclosure, copying or modification of personal data) that is accessible only to authorised persons.
All authorised persons are required to sign a confidentiality agreement.
Protecting your privacy is important to us. Therefore, we will never share your personal data with third parties except for the purposes described in this Policy.
In certain situations, we engage external service providers (for cloud services, website hosting, website technical maintenance and software solutions) who may have access to personal data in order to ensure the uninterrupted provision of our services. When this occurs, the data is transferred to servers located within the European Union or in a country that ensures an adequate level of protection in accordance with EU legislation.
In some cases, our partners providing services on behalf of Salvus may process your data outside the European Union or the European Economic Area.
On 10 July 2023, the European Commission adopted an adequacy decision under which personal data may be freely transferred from the European Union to companies in the United States participating in the EU–U.S. Data Privacy Framework. The adequacy decision is based on Article 45 of the General Data Protection Regulation and constitutes a mechanism that ensures the secure and lawful transfer of data to third countries.
U.S. companies wishing to participate in the Data Privacy Framework must complete a self-certification process and be included on the list of companies that have joined the framework (for example, transfers of data to the United States may occur when we use services provided by Google, such as Google Analytics, or by our website hosting and technical maintenance service providers).
These partners are required, under the relevant agreements, to use the data entrusted to them only in accordance with our instructions and solely for the purposes strictly defined by us. We also require them to implement appropriate safeguards to protect your data. We periodically audit all our partners to ensure that the protection of your personal data remains at the required level and continues to comply with the applicable regulations.
The data collected as described in this Policy will only be retained for as long as necessary to fulfil the purposes for which it was collected.
Your personal data will not be kept in a form that permits your identification for longer than Salvus reasonably considers necessary to achieve the purpose for which the data was collected or processed.
Salvus will retain certain personal data for the period required under applicable laws and regulations.
Where you have provided your consent, we will process your personal data until that consent is withdrawn.
If you submit a justified objection to the processing of personal data based on legitimate interest, we will cease processing your personal data for such purposes in the future.
Cookie retention periods can be found in the Cookie Policy.
In addition, when judicial, administrative, arbitration, or other out-of-court proceedings have been initiated, personal data may be retained until the conclusion of such proceedings, including any applicable appeal periods.
For more detailed information regarding data retention periods, you can contact our Data Protection Officer.
Other websites that may be accessed through this website have their own privacy statements and policies regarding the collection, use and disclosure of data. Salvus is not responsible for the practices or operating conditions of third parties.
Salvus maintains a business profile on the social network LinkedIn and collects and processes personal data through user interactions on that platform (for example, for responding to inquiries, comments and requests, publishing posts, and similar purposes).
Salvus and its authorised personnel have access to the messages you send, posts published on the above-mentioned social network, comments you leave, profile pictures and similar information. However, Salvus does not store personal data collected through such interactions, particularly data contained in messages, nor does it further process such data except for the purposes specified in this Policy.
We recommend that you familiarise yourself with LinkedIn’s privacy policies and terms governing the use of its platform. If you have any questions regarding the collection and processing of data by LinkedIn, or if you wish to exercise any of your rights under the General Data Protection Regulation, please contact:
LINKEDIN IRELAND UNLIMITED COMPANY, Wilton Place, Dublin 2, Ireland
Contact details of the Data Protection Officer:
If you are not satisfied with the manner in which your personal data is collected and processed, you can contact LinkedIn’s lead supervisory authority, the Data Protection Commission, or the Croatian Personal Data Protection Agency (AZOP).
This Policy shall enter into force on the date of its publication on this website.
Salvus reserves the right to amend and supplement this Policy, indicating the date on which it was last updated.
Date of publication and last update: 22 May 2026.
