+355 67 208 2992Clinic +355 67 208 5012Laboratory 042 426 470Landline

Privacy policy

This site collects some Personal Data from its Users. This document can be printed using the print command in the settings of any browser.

Data controller

Creadent Clinic & Lab
Rr. Kongresi i Lushnjes, Pallati 1, Tiranë 1001, Albania

Controller’s e-mail address: info@creadent.al

Types of data collected

Among the Personal Data collected by this site, on its own or through third parties, there are: first name; last name; telephone number; e-mail address; the content of the message the User sends us; and any attachment the User chooses to send us, such as a panoramic X-ray.

Personal Data may be provided freely by the User. Unless stated otherwise, all Data requested by the forms on this site is necessary in order to act on the request: if the User refuses to provide it, it may be impossible to reply. Users who are unsure which Data is necessary are welcome to contact the controller.

The User takes responsibility for the Personal Data of third parties obtained, published or shared through this site.

Information concerning the User’s health — an X-ray, the description of a symptom or of a treatment under way — is a special category of personal data. We process it only in order to answer the request for an opinion or a quote that the User addresses to us, and on the basis of the consent the User gives by sending it.

How and where the data is processed

Methods of processing

The controller takes appropriate security measures to prevent unauthorised access, disclosure, modification or destruction of Personal Data. Processing is carried out using computers and, in some cases, on paper, with organisational methods strictly related to the purposes stated. Besides the controller, in some cases the Data may be accessed by the people involved in running the clinic — medical, administrative and reception staff — or by external parties such as technical and hosting service providers, appointed where necessary as data processors. An up-to-date list of the processors can be requested from the controller.

Place

The Data is processed at the controller’s operating premises in Tirana, and in any other place where the parties involved in the processing are located. Albania is a third country with respect to the European Union: the Personal Data of a User resident in the Union may therefore be processed outside the Union. For further information the User may contact the controller.

Retention period

Unless stated otherwise in this document, Personal Data is processed and stored for as long as required by the purpose for which it was collected, and it may be kept longer where there is a legal obligation to do so or on the basis of the User’s consent. At the end of the retention period the Personal Data is deleted.

Purposes of processing

The User’s Data is collected so that the controller can answer the requests it receives, provide the healthcare service agreed where there is one, comply with legal obligations, respond to requests from the authorities and protect its own rights. In practice: to contact the User and answer the request for information or for a quote; to manage the appointment and the clinical records; and to comply with administrative and tax obligations.

The controller processes Personal Data relating to the User where one of the following applies:

  • the User has given consent for one or more specific purposes;
  • processing is necessary for the performance of a contract with the User, or for pre-contractual measures;
  • processing is necessary to comply with a legal obligation to which the controller is subject;
  • processing is necessary for healthcare purposes, by a professional bound by professional secrecy;
  • processing is necessary for the legitimate interests pursued by the controller or by a third party.

It is always possible to ask the controller to clarify the specific legal basis of each processing operation.

Cookies and tracking tools

This site installs no profiling cookies and no advertising cookies. With the User’s consent, and only after receiving it, it uses Google Analytics (Google) to measure statistically how the site is used (pages viewed, clicks on the WhatsApp and telephone buttons, form submissions) and keeps, for 90 days on the User’s device, the advertising click identifier and the campaign parameters the visit came from, so that an enquiry can be linked to its campaign. Until the User chooses, the measurement tool is not loaded and no measurement cookie is installed. The User can accept or refuse with equal prominence and change the choice at any time through the “Cookie preferences” link at the foot of every page; refusing does not limit use of the site. Measurement data is kept for 14 months. Fonts, stylesheets, scripts and images are served by the site itself.

The home page embeds a video hosted on YouTube. When it plays, YouTube (Google) may collect browsing data in accordance with its own policy. The WhatsApp button, the telephone links and the links to our Instagram and Facebook profiles take the User to third-party services, which process data in accordance with their own policies.

Any change to the measurement tools will be recorded in this document before it is switched on.

The User’s rights

Within the limits set by law, the User has the right to:

  • withdraw consent at any time, where the processing is based on consent;
  • object to the processing of their Data, where it takes place on a legal basis other than consent;
  • access their Data and obtain a copy of it;
  • verify their Data and ask for it to be rectified;
  • obtain the restriction of processing;
  • obtain the erasure of their Personal Data;
  • receive their Data in a portable format and, where technically feasible, have it transferred to another controller;
  • lodge a complaint with the competent supervisory authority, or bring an action before a court.

How to exercise these rights

To exercise these rights the User may send a request to the controller’s contact details given in this document. The request is free of charge and the controller replies as soon as possible, and in any case within one month.

Further information about the processing

Legal defence

The User’s Personal Data may be used by the controller in court, or in the stages leading up to possible legal action, to defend itself against misuse of this site or of the related services. The User is aware that the controller may be required to disclose the Data by order of the public authorities.

Changes to this policy

The controller reserves the right to make changes to this policy at any time, notifying Users on this page. Please therefore check this page regularly, referring to the date of last modification shown at the bottom.

For any question about this policy: info@creadent.al.