This Privacy Policy explains how Glavic Clinic, including its related entities (collectively, “Glavic Clinic,” “we,” “our,” or “us”) collects, uses, shares, and protects your personal information when you visit our website www.glavic-clinic.com, use our mobile applications (including GLARTHnet and GLARTHapp), contact us, or receive treatment at our clinics.
This Privacy Policy applies to all users, including:
Visitors from the European Union/EEA and the United Kingdom (GDPR-compliant)
Visitors from the United States (HIPAA considerations + state privacy laws such as CCPA/CPRA where applicable)
Visitors from all other regions worldwide
By accessing our website, using our applications, or providing personal data, you acknowledge that you have read and understood this Privacy Policy.
Medical Center Glavic d.o.o.
Prilaz baruna Filipovića 23a, 10000 Zagreb, Croatia
Email: info@glavic-clinic.com
Phone: +385 1 646 8300
Glavic Clinic Miami
Email: info@glavic-clinic.com
Phone: +1 786 631 0319
Medical Center Glavic d.o.o.
Email: info@glavic-clinic.com
Email: info@glavic-clinic.com
When you complete forms on our website, mobile applications, or in our clinics, you may provide:
Basic personal data:
Name and surname
Phone number
Email address
Postal address
Identification data (e.g., passport, ID number)
Signature
Special categories of data (sensitive data):
Medical history and health information
Patient records and treatment data
Data related to minors (with parental/guardian authorization)
Communication and marketing data:
Newsletter subscription details
Contact form submissions
Commercial request information
We automatically collect technical data when you visit our website or apps, such as:
IP address
Device information
Browser data
Operating system
Usage statistics
Cookies (with consent where required)
Browsing the website is anonymous and does not directly identify you.
| Purpose | Description | Legal Basis (GDPR) | US Compliance |
|---|---|---|---|
| Patient File Management | Creation and maintenance of medical records, appointments, treatments, and clinical follow-up. | – Explicit consent- Provision of healthcare- Legal obligations | HIPAA-aligned handling of PHI |
| Responding to Contact Forms & Inquiries | Answering questions, providing information, and responding to requests submitted through the website, app, or phone. | Consent | Applicable consumer privacy rights |
| Marketing & Communications | Sending newsletters, promotions, clinic updates, and service information. | Consent (opt-in) | Opt-out rights according to state laws |
| Web User Account Management | Managing and maintaining registered accounts on the website or apps. | Consent | Standard US privacy expectations |
| Cookies & Tracking Technologies | Site functionality, analytics, preferences, advertising measurement (when accepted). | Consent (except necessary cookies) | Follows U.S. state-level cookie regulations |
| Legal & Regulatory Compliance | Compliance with medical laws, record-keeping, tax, billing, and authority requests. | Legal obligation | Federal & state healthcare regulations |
We do not sell, rent, or lend personal data.
We may share data only with:
Authorized medical staff
Trusted service providers (IT, hosting, analytics, marketing)
Regulatory or legal authorities (if required)
Third-party processors under strict confidentiality
Partners may not use data beyond contracted purposes.
We may transfer data:
Within the EU/EEA
Between Spain and Croatia
To the United States
Internationally
Safeguards include:
Standard Contractual Clauses (SCCs)
Adequacy decisions
Additional technical and organizational protection measures
US medical data receives HIPAA-aligned protection.
You may request:
Access to your data
Rectification
Erasure
Restriction of processing
Objection
Data portability
No automated decision-making
Withdrawal of consent at any time
Depending on your state, you may have:
Access rights
Deletion rights
Opt-out of certain uses
Non-discrimination rights
HIPAA rights apply to medical/PHI records.
Rights are granted according to local laws, aiming for GDPR-equivalent protection whenever possible.
You may exercise your rights by contacting the appropriate office:
Email: info@glavic-clinic.hr
Phone: +385 1 646 8300
Email: info@glavic-clinic.com
Phone: +34 626 912 801
Address: Calle Agustín de Foxá 4, 28036 Madrid, Spain
Email: info@glavic-clinic.com
Phone: +1 786 631 0319
Please include:
Full name
Rights you wish to exercise
Contact information
Proof of identity (if required)
You may also file a complaint with:
Croatia: AZOP
Spain: AEPD
USA: HIPAA authorities
We implement strong technical, administrative, and physical measures:
Encryption
Secure servers
Access restrictions
Staff confidentiality
Regular security evaluations
No system is entirely free of risk; users accept inherent online risks.
We only collect children’s data for medical purposes and with parental/guardian consent.
We do not collect children’s data for marketing.
Last Update: December 1st 2025
Users of the GLARTHapp mobile application may request the deletion of their user account and the personal data associated with that account at any time.
To request account deletion, please send an email to:
Please include:
After receiving the request, we will identify the relevant user account and initiate the deletion process.
Deleting the account includes the deletion of data associated with the GLARTHapp user account, except for data that Glavic Clinic is required to retain in accordance with applicable legal or regulatory obligations.
For additional information, please contact us using the email address above.
For enquiries sent through the contact form, Glavic Clinic requests explicit consent to process the contact details and health data provided, including any attached medical documents, to handle and respond to that enquiry. Consent is given using the “I consent and send my enquiry” button. The time of receipt, consent method and version of the displayed statement are recorded with the enquiry. This consent does not cover marketing or analytics and advertising cookies.
You may withdraw consent using the contact details provided in this Privacy Policy. State that you wish to withdraw consent for a website enquiry and provide enough information for the clinic to locate it. Do not resend medical documents. Withdrawal does not affect the lawfulness of processing before withdrawal. Processing based on another applicable legal basis is considered separately.