The Information on the processing of personal data refers to the processing of personal data by the controller Zdravlje.

Zdravlje processes personal data of the following natural persons: employees, professional associates, business partners, candidates applying for jobs in Zdravlje, persons who visit the website and official pages of Zdravlje on social networks, as well as personal data of other persons to whom Zdravlje comes in connection with by performing activities.

Zdravlje processes personal data that it needs for regular business, depending on the specific business needs, namely: name and surname, address, date and place of birth, personal identification number, occupation and level of education, data on skills and work experience, data on performance assessments, data on knowledge of foreign languages, trainings, e-mail address, telephone number, bank account number, amount of salary, i.e. compensation earned by the person, amount of bonuses and other incomes as well as other data on persons obtained by Zdravlje within the registered activity.

Data processing for the purpose of fulfilling contractual obligations

Zdravlje is the controller of personal data of natural persons (employees / persons engaged on some other legal basis / business partners), including data on health status, which are collected and processed in order to fulfil obligations under the contract concluded for the purpose of performing its registered activity. Data processing is performed on the basis of the mentioned contracts and without collecting and processing personal data of persons, Zdravlje is not able to fulfil its obligations from the contract it concludes in order to perform its registered activity. These data are kept permanently by Zdravlje in the field of work and in other areas as long as there is a basis for their processing, with the application of all adequate technical and organizational data protection measures in accordance with the law and internal acts of Zdravlje.

Zdravlje forwards personal data: 1) to its shareholders and employees who, according to the law and the nature of the work they perform, must have access to such data, as well as to third parties with whom Zdravlje has a contract and for the purpose of fulfilling obligations under the contract; 2) authorized state bodies at their request; 3) an authorized audit company that Zdravlje is obliged to hire in accordance with the provisions of the Law; 4) business partners for the purpose of fulfilling concluded contracts.

Data transfer is performed on the basis of adequate protection measures taken in the form of a standard contractual clause, except in the case of data transfer to authorized state bodies to which data are submitted on the basis of law.

Data processing in order to fulfil legal obligations

Zdravlje processes personal data of persons for the purpose of fulfilling legal obligations. Data processed for this purpose shall be kept at least within the period provided by law or as long as there is a basis for data processing.

Data processing for marketing purposes

Zdravlje processes personal data, such as: name and surname, telephone number, e-mail address, address of residence in order to inform about promotions and offers of products and services, only on the basis of prior consent. Zdravlje keeps the data it processes for the purpose of offering products and services and informing about promotional actions for five years, i.e. until the revocation of approval, with the application of all adequate technical and organizational data protection measures in accordance with law and internal acts of Zdravlje.

Rights of persons whose data are processed

In accordance with the Law on Personal Data Protection, the person whose data are processed has the following rights:

• right of access;
• the right to correction and supplementation;
• the right to delete;
• the right to restrict data processing;
• the right to data portability;
• interruption of processing (complaint),
• the right against decision-making based on automated processing.

If the processing of personal data is performed on the basis of previously given consent, that consent may be revoked at any time in accordance with the Law on Personal Data Protection. 

Revocation of consent will not affect the admissibility of processing on the basis of consent before revocation.

If you believe that the processing of personal data was carried out contrary to the provisions of the Law on Personal Data Protection, you have the right to file a complaint to the Commissioner for Information of Public Importance and Personal Data Protection. (e-mail: office@poverenik.rs).

For questions regarding the processing of your data, you can contact us via following means of communication:

• e-mail: info@zdravlje.co.rs;
• phone: (+381) 16 202 132;
• mail to: Zdravlje AD Leskovac, HR Department, Vlajkova 199, 16000 Leskovac.