{"id":4180,"date":"2024-07-11T08:49:54","date_gmt":"2024-07-11T06:49:54","guid":{"rendered":"https:\/\/obalne-lekarne.si\/?page_id=4180"},"modified":"2026-10-22T15:09:04","modified_gmt":"2026-10-22T13:09:04","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/obalne-lekarne.si\/en\/privacy-policy\/","title":{"rendered":"Privacy policy"},"content":{"rendered":"<div class=\"gb-container gb-container-8a832fb5 narrow\">\n\n<p class=\"wp-block-paragraph\">The purpose of this Privacy Policy is to inform individuals, service users, associates, employees and other persons (hereinafter referred to as the \u201cindividual\u201d) who interact with the public institution OBALNE LEKARNE KOPER FARMACIE COSTIERE CAPODISTRIA (hereinafter referred to as the \u201cinstitution\u201d) about the purposes and legal bases for the processing of personal data carried out by our institution, as well as individuals\u2019 rights in relation to such processing.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The institution processes personal data in accordance with European legislation (Regulation (EU) 2016\/697 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, hereinafter referred to as the \u201cGeneral Regulation\u201d), the applicable Slovenian legislation on personal data protection (Personal Data Protection Act), and sector-specific legislation providing a legal basis for the processing of personal data in the healthcare sector (Health Care Databases Act, Health Care and Health Insurance Act, Health Services Act, Pharmacy Services Act and Patients\u2019 Rights Act).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Any amendments to this document will be published on our website. By using the website, you confirm that you have read and understood the entire Privacy Policy.<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><thead><tr><th class=\"has-text-align-left\" data-align=\"left\"><strong>Personal data controller<\/strong><\/th><th class=\"has-text-align-left\" data-align=\"left\"><strong>Data protection officer<\/strong><\/th><\/tr><\/thead><tbody><tr><td class=\"has-text-align-left\" data-align=\"left\">OBALNE LEKARNE KOPER FARMACIE COSTIERE CAPODISTRIA<br>Kidri\u010deva ulica 3 6000 KOPER \u2013 CAPODISTRIA<br><br>E-mail:\u00a0<a href=\"mailto:info@obalne-lekarne.si\">info@obalne-lekarne.si<\/a><br>Telephone: +386 (0) 5 611 00 40<br>Website: <a href=\"https:\/\/obalne-lekarne.si\/en\/\" data-type=\"link\" data-id=\"www.obalne-lekarne.si\">www.obalne-lekarne.si<\/a><\/td><td class=\"has-text-align-left\" data-align=\"left\">DATAINFO.SI, d.o.o.<br>Tr\u017ea\u0161ka cesta 37c, 2000 Maribor<br><br>E-mail:\u00a0<a href=\"mailto:dpo@datainfo.si\">dpo@datainfo.si<\/a><br>Telephone +386 (0) 2 620 4 300<br>Website:\u00a0<a href=\"https:\/\/datainfo.si\/\" target=\"_blank\" rel=\"noreferrer noopener\">www.datainfo.si<\/a><\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Last updated<strong>:<\/strong> 5 March 2026<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Purposes and legal bases for the processing of personal data<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The institution collects and processes your personal data on the following legal bases:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>processing is necessary for compliance with a legal obligation to which the controller is subject;<\/li>\n\n\n\n<li>processing is necessary for the performance of a contract to which the individual whose personal data is being processed is a party, or in order to take steps at the request of that individual prior to entering into a contract;<\/li>\n\n\n\n<li>processing is necessary for the purposes of the legitimate interests pursued by the controller or a third party;<\/li>\n\n\n\n<li>the individual whose personal data is being processed has consented to the processing of their personal data for one or more specific purposes;<\/li>\n\n\n\n<li>processing is necessary to protect the vital interests of the individual whose personal data is being processed or of another natural person.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">For the provision of pharmacy services<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">For the purpose of providing pharmacy services, the institution processes patients\u2019 personal data on the basis of the Pharmacy Services Act, the Health Care Databases Act, the Health Services Act, the Patients\u2019 Rights Act, the Medical Practitioners Act and the Health Care and Health Insurance Act.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">On these legal bases, we process the following personal data of patients: first and last name, permanent and temporary residential addresses, sex, health insurance number issued by the Health Insurance Institute of Slovenia (ZZZS), health insurance details, date of birth and information about prescribed medicines.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Personal data processed on the basis of legislation must be disclosed to the following institutions: the Health Insurance Institute of Slovenia, the National Institute of Public Health, the Ministry of Health, the Employment Service of Slovenia and the Pension and Disability Insurance Institute of Slovenia.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The legal basis for processing is legislation. Data are retained for the period prescribed by law. Some data are retained only for a specified period, while other data must be retained permanently.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">For the purchase of goods and services in person at a pharmacy or through the online pharmacy<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">When an individual makes a purchase in person at a pharmacy, the transaction can be completed without processing personal data (for purchases made without a prescription).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The institution processes personal data in connection with online transactions through its online shop, the online pharmacy, when an individual submits an online form, registers for a user account or makes a purchase by successfully placing an order as an unregistered user.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">When a customer purchases a product without registering or logging into a user account, the institution processes the personal data strictly necessary to fulfil the order, communicate with the customer and exercise the rights and obligations arising from the contract. This includes the customer\u2019s first and last name, delivery address, email address, telephone number, details of the product ordered and payment information.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">When a user registers a user account or makes a purchase as a registered user, they enter into an agreement with the institution\u2019s pharmacy unit for the provision of services to registered users.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The types of personal data processed when a user account is registered include first and last name, delivery addresses, email address, telephone number, information about ordered or purchased products, favourite products, payments, discounts received and any other information the user provides in their profile.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">When a user account is registered, personal data are stored in the user\u2019s profile. In addition to the purposes listed above, the data are processed to automatically populate information required to place orders, display purchase history, assess the product range, improve the services and offerings of the online pharmacy, increase customer satisfaction, analyse user habits and create special offers and benefits available exclusively to registered users.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The legal basis for processing is the contract. Data are retained until the purpose of the contract has been fulfilled or for up to six years after the contract ends.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">For the performance of a contract<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Where an individual enters into a contract with the institution, the contract constitutes the legal basis for processing personal data. Personal data may therefore be processed for the conclusion and performance of a contract, such as the sale of goods and services or participation in various institutional programmes.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If an individual does not provide their personal data, the institution cannot enter into a contract with them. It will also be unable to provide the service or deliver the goods or other products in accordance with the contract, as it will not have the information necessary to do so.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">On this legal basis, we process only the personal data strictly necessary for concluding the contract and properly fulfilling the contractual obligations.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The legal basis for processing is the contract. Data are retained until the purpose of the contract has been fulfilled or for up to six years after the contract ends, except where a dispute arises between the individual and the institution in connection with the contract. In such cases, the institution retains the data for a further ten years after a final court judgment, arbitral award or court settlement becomes final or, where no court proceedings have taken place, for five years from the date on which the dispute is resolved amicably.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">For the purpose of informing individuals by email<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">In the course of its lawful activities, the institution may use customers\u2019 and service users\u2019 email addresses to inform them about its services, events, training activities, offers and other content.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Individuals may request that such communications and the associated processing of personal data be discontinued at any time. They may unsubscribe using the link provided in the message received or submit a request by email or post to the institution\u2019s address.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The legal bases for processing are legitimate interest and consent. Data will be processed until the individual unsubscribes, withdraws their consent or the purpose of processing has been fulfilled. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">For the purpose of preventing misuse<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">On the basis of legitimate interest, we process personal data where this is strictly necessary to prevent misuse. On the same basis, we may continue to process personal data after the contractual relationship has ended, during the period in which legal claims arising from the contract may be brought.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Video surveillance<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Video surveillance is carried out at the institution\u2019s premises. Cameras installed around the entrances to pharmacy units are used to monitor entry to and exit from the premises, pursuant to Article 77 of the Personal Data Protection Act (ZVOP-2).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Video surveillance is also carried out to protect individuals (service users, employees and visitors) and the institution\u2019s property, on the basis of legitimate interest as provided for in Article 6(1)(f) of the General Regulation, in conjunction with Article 76 and the following articles of the Personal Data Protection Act (ZVOP-2).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Video surveillance is conducted within specifically designated work areas where this is strictly necessary to ensure the safety of people or property.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The recordings may assist in detecting, investigating or resolving incidents, emergencies, criminal offences, compensation claims and other claims. Recordings are retained for a maximum of one year.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Video surveillance is not carried out in a manner that would result in particularly intrusive processing. Nor does it involve unusual forms of subsequent processing, such as transfers to entities in third countries, live monitoring or the possibility of audio intervention during live monitoring.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Information about video surveillance can be obtained by calling the institution or contacting it by email. Individuals\u2019 rights are described in this Privacy Policy. Further questions may also be addressed to the data protection officer.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Processing based on consent<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">If the institution does not have a legal basis for processing under legislation, a contractual obligation, legitimate interest or the protection of an individual\u2019s vital interests, it may request the individual\u2019s consent.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">With the individual\u2019s consent, the institution may also process certain personal data for the following purposes:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>residential address and email address: for information and communication purposes;<\/li>\n\n\n\n<li>photographs, video recordings and other content relating to the individual (e.g. publishing photographs of individuals on the pharmacy website): to document activities and inform the public about the institution\u2019s work and events;<\/li>\n\n\n\n<li>other purposes to which the individual has consented.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">If an individual consents to the processing of their personal data and subsequently no longer wishes to allow such processing, they may request that it be discontinued by submitting a request by email or post to the institution\u2019s address.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Following receipt of a withdrawal of consent or a request for erasure, the data will be deleted within 15 days at the latest. The institution may also delete the data before consent is withdrawn if the purpose of processing has been fulfilled or if required by law.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In exceptional circumstances, the institution may refuse a request for erasure on the grounds set out in the General Regulation, including the exercise of the right to freedom of expression and information, compliance with a legal obligation to process data, reasons of public interest in the area of public health, archiving purposes in the public interest, scientific or historical research purposes, statistical purposes, or the establishment, exercise or defence of legal claims.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Processing necessary to protect an individual\u2019s vital interests<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The institution may process the personal data of an individual where this is strictly necessary to protect their vital interests.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In emergencies, the institution may search for the individual\u2019s personal data, check whether the individual is included in its database, review their medical history and information about medicines and products purchased or prescribed, or contact the individual or their family members. The institution does not need the individual\u2019s consent for these actions.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This applies only where such processing is strictly necessary to protect the individual\u2019s vital interests.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Recipients of personal data, data transfers and automated decision-making<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Recipients of personal data include processors engaged by the institution to carry out specific data-processing activities on its behalf. These primarily include infrastructure maintenance providers, information system maintenance providers, email service providers, software providers and cloud service providers.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">You have the right to request information about the external recipients to whom your personal data or your children\u2019s personal data have been disclosed.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Information about transfers of personal data to third countries<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">We do not transfer personal data to third countries (countries outside the EU, Iceland, Norway and Liechtenstein) or to international organisations.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">We do not carry out automated decision-making or profiling.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Cookies<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Our website uses cookies. For more information, please refer to the separate document on website cookies available on our website.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Data protection and accuracy<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The institution takes care to ensure the security of its information systems and infrastructure, including its premises and application and system software.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Our information systems are protected, among other things, by antivirus software and a firewall. We have implemented appropriate organisational and technical security measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access, and other unlawful or unauthorised forms of processing.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Where special categories of personal data are transmitted, they are sent in encrypted form and protected by a password.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Individuals are responsible for ensuring that they provide their personal data securely and that the information provided is accurate and reliable.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Patients\u2019 rights<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The Patients\u2019 Rights Act defines the rights of patients as users of healthcare services provided by all healthcare providers, as well as the procedures for exercising those rights when they have been violated. The Act also establishes the duties of patients associated with these rights.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Patients\u2019 rights under the Patients\u2019 Rights Act relating to personal data protection include the right to access medical records, the right to privacy and personal data protection, the right to have violations of patients\u2019 rights addressed, and the right to free assistance in exercising patients\u2019 rights.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A patient who believes that their rights have been violated during the provision of healthcare services may request that the matter be appropriately addressed. Individuals wishing to exercise any of the rights listed above may submit a request by email or post to the institution\u2019s address.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Individuals\u2019 rights concerning the processing of their personal data<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Individuals whose personal data are being processed have the right to request access to their personal data, rectification or erasure of their personal data, or restriction of processing concerning them. They also have the right to object to processing and the right to data portability.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Requests from individuals are handled in accordance with the provisions of the General Regulation.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">All the above rights may be exercised, and any questions may be submitted, by sending a request to our address.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">We will respond to your request without undue delay and no later than one month after receiving it. This period may be extended by up to two additional months, taking into account the complexity and number of requests. You will be informed of any such extension and the reasons for the delay.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Exercising these rights is free of charge. However, we may charge a reasonable fee if a request is manifestly unfounded or excessive, particularly if it is repetitive. In such cases, we may also refuse to act on the request. We will inform you of the reasons for the refusal and of your right to lodge a complaint with the supervisory authority.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If we have doubts about your identity, we may request additional information necessary to verify it.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">You may lodge a complaint with the supervisory authority:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Information Commissioner of the Republic of Slovenia<\/strong><br>Dunajska cesta 22<br>1000 Ljubljana, Slovenia<br>Email: <a href=\"mailto:gp.ip@ip-rs.si\">gp.ip@ip-rs.si<\/a><br>Website: <a href=\"http:\/\/www.ip-rs.si\" target=\"_blank\" rel=\"noopener\">www.ip-rs.si<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This Privacy Policy has been in force since 22 February 2023.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Responsible person:<\/strong> mag. Katja Gomba\u010d Aver<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Personal data protection<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The public institution Obalne lekarne Koper undertakes not to sell, lend or otherwise disclose to third parties any data you provide through the website or by any other means.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">All data will be treated confidentially and used solely for internal records and for the purpose for which they were provided. Your data will be carefully protected against loss, misuse, unauthorised access, disclosure, alteration or destruction.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">When you visit the website, certain information (IP address, date, time and the address of the page from which you arrived) is stored on the server. This information is anonymous and is used solely for statistical analysis.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The website uses cookies. These are small files stored on your device when you visit the website. Cookies enable certain important website functions.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">You can use your web browser settings to decide whether to accept or reject cookies. You can also delete cookies at any time through your browser settings.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If you do not accept cookies, some pages may not display correctly, or you may not be able to access all website information or functionality.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Disclaimer<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The public institution Obalne lekarne Koper endeavours to ensure the accuracy of the information published on its website. However, it cannot guarantee that all information on the website is up to date, accurate or correct. All information published on the website may be changed without prior notice.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The public institution Obalne lekarne Koper also accepts no liability for any damage arising directly or indirectly from the use, malfunction or unavailability of the website.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Where this website refers or links to other websites owned or operated by third parties, the public institution Obalne lekarne Koper accepts no responsibility for their content or proper functioning.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Copyright<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u00a9 Copyright 2026 Obalne lekarne Koper<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">All text, images, graphics, animations and other documents contained on this website are protected by copyright or other forms of intellectual property protection to the extent permitted by law.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The content of this website may not be copied, distributed, modified or reproduced in any other way without the written consent of the public institution Obalne lekarne Koper, which actively enforces its intellectual property rights to the fullest extent permitted by law.<\/p>\n\n<\/div>\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n","protected":false},"excerpt":{"rendered":"<p>The purpose of this Privacy Policy is to inform individuals, service users, associates, employees and other persons (hereinafter referred to as the \u201cindividual\u201d) who interact with the public institution OBALNE LEKARNE KOPER FARMACIE COSTIERE CAPODISTRIA (hereinafter referred to as the \u201cinstitution\u201d) about the purposes and legal bases for the processing of personal data carried out [&hellip;]<\/p>\n","protected":false},"author":10,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"footnotes":""},"class_list":["post-4180","page","type-page","status-publish","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/obalne-lekarne.si\/en\/wp-json\/wp\/v2\/pages\/4180","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/obalne-lekarne.si\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/obalne-lekarne.si\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/obalne-lekarne.si\/en\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/obalne-lekarne.si\/en\/wp-json\/wp\/v2\/comments?post=4180"}],"version-history":[{"count":2,"href":"https:\/\/obalne-lekarne.si\/en\/wp-json\/wp\/v2\/pages\/4180\/revisions"}],"predecessor-version":[{"id":4182,"href":"https:\/\/obalne-lekarne.si\/en\/wp-json\/wp\/v2\/pages\/4180\/revisions\/4182"}],"wp:attachment":[{"href":"https:\/\/obalne-lekarne.si\/en\/wp-json\/wp\/v2\/media?parent=4180"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}