Privacy Statement
This is an English translation of the Croatian original. If the two versions differ, the Croatian version applies.
Poliklinika GBB Concept d.o.o. is the owner of the website gbbconcept.com (the “website”). We have created this privacy statement to show that we care about the privacy of our users and to inform them about how personal data is collected and processed on this website.
Please read this Statement carefully to learn how we collect, process, protect or otherwise use your personal data.
Data protection officer
Poliklinika GBB Concept d.o.o. is a company registered in the Republic of Croatia. We have appointed a data protection officer whom you can contact with any questions or complaints about our privacy policy or the handling of personal data. You can contact the officer by e-mail at gbb.concept@gmail.com or by phone on 0981360255.
Data collection
Personal data is any information relating to an individual whose identity is known or can be established. An individual whose identity can be established is a person who can be identified directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data or an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that individual.
We collect your personal data only when you give us such information of your own free will. We collect data about you when you fill in a form or sign up for the newsletter.
Please bear in mind that non-personal information and data may be collected automatically through our Internet servers or by using “cookies”.
Examples of information about your use of the website include: the most visited and viewed pages and links on our website, the number of forms filled in, the time spent on the website, the most popular keywords that lead users to our website, your IP address, information collected through cookies, and data about your device such as hardware settings, system activity, browser type, etc.
Data processing
We use the data we obtain about you for one or more of the following purposes:
- To personalise your user experience (the information collected helps us respond better to your individual needs)
- To improve our website (we continually strive to improve what our website offers based on the feedback we receive from our visitors)
- To establish a primary channel of communication with you
- To send occasional e-mails (concerning occasional news (if you wish to receive it), updates, information about similar products or services, etc.)
- To process data for marketing and advertising activities
Online booking, registrations and forms
When you book an appointment through the website, register for a course or send us an enquiry or a job application, we collect the data you enter yourself: your name and surname, e-mail address, phone number, the chosen location, service and appointment time, and a note if you write one. For a course registration this also includes your occupation, and for a job application the CV you attach.
We use this data only to do what you asked for: to book the appointment or a place on the course, send you a confirmation and a reminder by e-mail, let you cancel through the link in the e-mail and get back to you about your enquiry. Health data is not needed for a booking; if you enter it in the note, we use it only to prepare for your visit.
We send confirmations and reminders through the e-mail delivery service Resend (Resend, Inc., USA), which processes your e-mail address and the content of the message only to deliver the message.
Chatbot
On the website you can ask the chatbot a question. The answer is generated by an artificial intelligence model of Anthropic (Anthropic PBC, USA), so the messages you write in that conversation are sent to this provider to generate the answer.
We do not store the content of conversations. After the answer we keep only anonymous statistics, without the text of the messages, for example the topic of the question, the language and whether an answer was found. We keep the statistics for no longer than 12 months, and they cannot be used to tell who asked.
Please do not enter your name, contact details or health data in the chat. To book an appointment or ask about your condition, use online booking, call us or write to us.
Google Maps
The maps on the Contact page are loaded from Google Maps (Google Ireland Limited) only once you allow it. Google then learns your IP address and may set its own cookies. Read more about this in the Cookie Policy.
Protecting your data
To protect the personal data you send through this website, we use physical, technical and organisational security measures. We continually upgrade and test our security technology. We restrict access to your personal data to those employees who need to know this information in order to provide you with benefits or services. In addition, we train our employees on the importance of data confidentiality and of keeping your data private and protected.
Data storage and retention period
All data is stored in databases and repositories supervised by qualified persons. We do not transfer stored data to countries outside the European Union, except when sending e-mails and generating chatbot answers, as described in the sections “Online booking, registrations and forms” and “Chatbot”, with the safeguards required by the General Data Protection Regulation. We keep and protect your personal data for the duration of your business relationship with us. Personal data you have given us for business or contact purposes is regularly deleted 12 months after the day you gave it to us.
Individual rights
If you believe that your privacy has been endangered and/or violated by visiting our web services, contrary to our good intentions in managing your personal data under this privacy policy, please contact us by e-mail at gbb.concept@gmail.com or by phone on 0981360255. We will do everything we can to remove the potential threat of unauthorised handling or misuse of your personal data, if it is technically possible for us to do so.
You also have the right to have the personal data we hold corrected if it is inaccurate. You may also, subject to certain exceptions, ask us to delete your data or to stop processing it.
Notification of a personal data breach
In the event of a personal data breach, we will notify you and the competent supervisory authority by e-mail within 72 hours of the extent of the breach, the data affected, any impact on our services and the measures we plan to take to secure the data and limit any harmful effects on individuals.
We will not send you a breach notification:
- if technical and organisational protection measures (such as encryption) have been applied to the personal data affected by the breach that make the data unintelligible to any person not authorised to access it
- if we have taken subsequent measures which ensure that a high risk to the rights and freedoms of individuals is no longer likely to materialise
- if it would involve disproportionate effort (in that case we will inform you through a public communication or a similar, equally effective measure).
A personal data breach means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed in connection with the provision of our services.
Your consent
By using this website, you consent to this privacy policy.
Changes to our privacy policy
If our privacy policy changes, we will inform you on this page and update the date of the change to the privacy policy below.
This privacy policy was last changed on 3 November 2026.
Right to lodge a complaint with the competent authority
You can lodge a complaint with a supervisory authority at any time about our collection and processing of your personal data. In the Republic of Croatia, you can lodge a complaint with the Croatian Personal Data Protection Agency (AZOP).