PRIVACY AND COOKIE POLICY

The purpose of this Privacy and Cookie Policy is to inform users (hereinafter also: the individual or you) of the website https://www.dialysisadventures.com/ (“website”) about the purposes and legal bases for the processing of personal data by the company Institute for Patient Innovation, e-mail: dialysisadventures@gmail.com (hereinafter: Dialysis Adventures, the company, we, or the controller).

We process, store, and protect all personal data in accordance with the applicable legislation governing the protection of personal data, in particular with Regulation (EU) 2016/679 (GDPR) and national data protection laws.

By providing your personal data, you declare that you have read this Privacy and Cookie Policy and that you understand how and why your personal data is processed.
If you do not agree with the processing methods, please do not provide us with your personal data.

IMPORTANT INFORMATION ABOUT DIALYSIS BOOKING AND MEDICAL DOCUMENTS

We will book your dialysis appointments on your behalf, but you are also welcome to make the bookings yourself if you prefer.
To make a reservation, we will need to ask your doctor for the required dialysis documents. We will send you detailed instructions and the document list by e-mail after registration.

In accordance with GDPR, you must agree to our Privacy Policy during the registration process.
By checking the “I confirm my consent” box, you give your explicit consent for us to:

collect your medical documentation,
communicate with your doctor when necessary,
and forward your medical documentation to the dialysis center selected to provide your treatments during your trip.

After your trip has been completed, we will erase all your personal and medical information, unless retention is required by law.

BASIC TERMS

Personal data: Any information that identifies an individual as a specific or identifiable person.

Data subject: The individual whose personal data is processed.

Processing of personal data: Any operation performed on personal data (collection, storage, use, disclosure, deletion, etc.).

Restriction of processing: Marking stored data to limit its further processing.

Profiling: Automated processing used to evaluate personal aspects of an individual.

Automated decision-making: Decisions based solely on automated processing that significantly affect an individual.

Anonymisation: Processing data in a way that prevents identification.

Controller: Entity determining the purposes and means of processing.

Processor: Entity processing data on behalf of the controller.

User of personal data: Any person to whom personal data is disclosed.

Third party: Any person other than the controller, processor, or persons authorised to process data.

Consent: A freely given, informed, and unambiguous expression of will for processing personal data.

CONTROLLER AND DATA PROTECTION OFFICER

Controller:
Institute for Patient Innovation
Slivnica pri Celju 33A, 3263 Gorica pri Slivnici
Registration number: 6745806000
E-mail: dialysisadventures@gmail.com

The company has not appointed a Data Protection Officer.

PURPOSES AND LEGAL BASES FOR DATA PROCESSING

We process personal data only for specific, lawful purposes.

a) Processing based on consent

We process personal data on the basis of explicit consent for the following purposes:

completion of the contact form,
participation in promotional campaigns,
sending information and offers via e-mail or telephone,
online counselling,
diagnostic forms,
sending newsletters,
collecting, storing, and forwarding medical documentation necessary for organising dialysis treatment,
communicating with your doctor for the purpose of obtaining dialysis-related medical documentation,
booking dialysis appointments on your behalf during your trip.

Your consent is obtained during registration by selecting the “I confirm my consent” checkbox.

b) Processing based on a contract

Processing under a contract includes:

placing an order for goods/services,
contract conclusion and execution,
informing customers of a successful order,
service delivery,
complaint handling,
organising dialysis treatments requested by you as part of travel arrangements,
communicating your medical documentation to the dialysis center providing your treatment.

c) Processing based on legitimate interest

We process data for:

responding to your inquiries regarding travel and dialysis arrangements,
measuring customer satisfaction,
reminders about incomplete orders,
direct marketing in accordance with GDPR and ZEKom-1,
website optimisation and security,
fraud prevention.

d) Processing based on law

We process data required by legislation (e.g., tax regulations).

DATA WE COLLECT

a) Voluntarily provided personal data

To provide our services—including the organisation of dialysis treatments—we collect:

name and surname,
delivery or contact address,
e-mail address,
telephone number,
medical documentation related to your dialysis treatment,
contact details of your doctor (if required),
any other information you voluntarily provide.

Providing essential information is required to book dialysis on your behalf.

b) Automatically collected data

We automatically collect:

IP address,
browser type and language,
time of the request,
anonymous usage statistics,
data relating to your device.

These data alone cannot identify you.

DISCLOSURE OF PERSONAL DATA

We do not sell personal data.

Personal data is disclosed only:

with your explicit consent,
when necessary to fulfil the booked travel or dialysis services,
to our contracted service providers, including payment services, accounting services, and IT providers,
to dialysis centers selected to perform your treatment during your trip (only after you provide explicit consent),
to your doctor for the purpose of retrieving required dialysis medical documentation (with your consent),
when required by law.

Only the minimal amount of personal data required is disclosed.

We do not transfer personal data to third countries unless the dialysis center chosen by you is located outside the EU.
In such cases, your explicit consent will be required before any transfer of medical documentation.

CONSENT OF MINORS

We do not knowingly collect data from children under 15.
Any such data will be deleted upon detection.
We use reasonable measures to verify parental consent when required.

AUTOMATED DECISION-MAKING AND PROFILING

We do not use automated decision-making or profiling.

HOW WE PROTECT DATA

We use appropriate technical and organisational measures:

firewalls and encryption,
secure access controls,
physical security measures,
strict authorisation procedures.

The website may contain links to third-party sites. We are not responsible for their content or data protection practices.

MANAGEMENT OF YOUR PERSONAL DATA

You may at any time:

request access,
request correction,
request deletion,
withdraw consent,
object to processing,
or request a copy of your data.

Contact: dialysisadventures@gmail.com

After withdrawal of consent, we will immediately stop processing and delete your medical documentation, unless legally required otherwise.

RIGHTS UNDER GDPR

Under GDPR you have the right to:

access your personal data,
rectification,
erasure (“right to be forgotten”),
restriction of processing,
data portability,
objection,
lodge a complaint with a supervisory authority.

Submit requests to: dialysisadventures@gmail.com
Response time: within 10 days.

We may request identity verification.

DATA RETENTION PERIOD

We store personal data only as long as necessary.

Specifically:

Medical documentation and dialysis-related data are erased after your trip is completed, unless longer retention is required by law.
data processed based on consent is kept until consent is withdrawn.
legally required retention periods (e.g., accounting rules) take precedence.

Retention periods required by law (e.g., tax laws) take precedence.

Data processed based on legitimate interest or pre-contractual communication is stored for up to 1 year or until the expiration of relevant claims.

LINKS TO OTHER WEBSITES

Our website may include links to external websites.
We are not responsible for their content or privacy practices.

COOKIES

Cookies are small files stored on your device.

Necessary cookies do not require consent.
Other cookies require your approval.

Changing cookie settings

You can change settings anytime by clicking the cookie icon (________), adjusting slider options to “On” or “Off,” and clicking “Save and close.”

Cookies used

Non

MANAGING AND DELETING COOKIES

You can delete or control cookies through your browser settings.

CHANGES TO THE PRIVACY AND COOKIE POLICY

We may update this Policy at any time without prior notice.
Updates take effect upon publication on the website.

Published on: 20.11.2025