Privacy policy

This document covers this website only — the data you send us through the booking request form, CVs you send us in response to the Careers page, and the technical data created when you visit the site. Medical records arising from an examination are governed by the clinic’s own separate rules and are not covered here.

Who processes your data

The controller is:

Sportiva Medical, s.r.o.
Registered office: Rybníky 945/11, 010 01 Žilina, Slovakia
Company ID (IČO): 36 434 868
Registered in the Commercial Register of the Žilina District Court, section Sro, file no. 16668/L

Clinic: Hálkova 9092/1A, 010 01 Žilina, Slovakia
Email: info@sportiva.sk · Telephone: 0944 140 121

Booking requests

What we collect. The form collects three things only: your name, your telephone number and your email address.

The form deliberately has no message box and asks nothing about your health. Please do not send us any health information through this website — we will go through everything necessary by telephone or at the clinic.

Why. So that we can call you back and agree a time for your examination. We use these details for nothing else. We do not send newsletters and we do not use your details for marketing.

On what legal basis. Your consent, under Article 6(1)(a) GDPR. You give it by ticking the box on the form.

Do you have to provide it? No, it is voluntary — but without it we cannot call you back. You can also book without the form, by telephone on 0944 140 121.

How long we keep it. A form submission is not stored in any database — it reaches us as an email in the rezervacie@sportiva.sk mailbox. We delete that email once the request has been dealt with, and within 6 months of receiving it at the latest.

CVs

What we collect. Whatever you choose to send us by email — usually a CV, a cover letter and your contact details. Please leave out any information about your health and your Slovak birth number (rodné číslo); we do not need them to consider your application.

Why, and on what legal basis.

• If you apply for an advertised position, we use your details for that recruitment process. The legal basis is taking steps at your request before entering into a contract, under Article 6(1)(b) GDPR.
• If you send us a speculative application, or ask us after a recruitment process to keep your CV, we keep it so that we can contact you when a position opens. The legal basis is your consent under Article 6(1)(a) GDPR, which you give by sending us your CV for that purpose and may withdraw at any time.

Do you have to provide it? No — but without a CV we cannot consider your application.

How long we keep it. A CV sent for an advertised position is deleted within 3 months of the end of the recruitment process, unless we enter into a contract with you. A speculative application is kept for no more than 12 months from when we receive it.

Technical data when you visit

What is recorded. On every visit, our web hosting provider’s server records technical data: your IP address, the time of the visit, the page viewed and your browser type. When you submit the form, we also keep a one-way fingerprint (hash) of your IP address for one hour, so that we can limit the number of requests from a single device.

Why, and on what legal basis. To keep the website secure and protect the form from abuse. The legal basis is our legitimate interest in running the website securely, under Article 6(1)(f) GDPR.

How long it is kept. The IP fingerprint for one hour at most. The server logs are kept by the hosting provider only as long as needed for security and for resolving technical problems, and are then deleted automatically.

Who we share it with

We do not sell your data or pass it to third parties, and we do not transfer it outside the European Union.

On the technical side, it is handled by two processors, both of which process the data within the European Union:

• our web and email hosting provider, which is bound by contract,
• GoatCounter, which we use for visitor statistics (see below).

The Directions button and the map link open Google Maps. Once you follow them you have left our website, and Google’s own privacy rules apply.

Cookies and visitor statistics

This site uses no cookies and stores nothing in your browser, which is why there is no cookie banner. We do not use Google Analytics or any advertising tools.

What data. We measure visits with GoatCounter. When you open a page, your browser sends it the address and title of that page, the address of the page you came from, and your screen width. As with any connection on the internet, GoatCounter also receives your IP address and browser type.

From this GoatCounter stores only aggregate counts — for example how many people looked at the price list today, how many visits came from Google, or how many people use a phone. It does not store your IP address; it only works out the country from it. So as not to count one visitor several times, it creates a random identifier from your IP address and browser type. The link between that identifier and your IP address exists only in the server’s memory, for at most 8 hours. We therefore cannot tell from the statistics who you are.

Why, and on what legal basis. So that we know which pages people read and how they find us, and can improve the website. The legal basis is our legitimate interest under Article 6(1)(f) GDPR.

Who processes it. GoatCounter is operated by Martin Tournoij, based in Ireland. The data is stored on servers of Hetzner Online GmbH in Germany and Finland.

How long we keep it. Your IP address is not stored at all. We keep the aggregate statistics, from which nobody can tell who you are, for as long as we use the service.

You can object to this measurement at any time (see Your rights). You can also stop it yourself with an ad blocker or by turning off JavaScript; the website works without it.

Automated decision-making

Your data is not used for automated decision-making or profiling.

Your rights

You have the right to:

• know what data we hold about you and receive a copy of it,
• ask us to correct or erase it,
• ask us to restrict its processing,
• data portability, for data you gave us on the basis of consent or a contract,
• object to processing based on our legitimate interest,
• withdraw your consent at any time. Withdrawing it does not affect the lawfulness of processing before the withdrawal.

To exercise any of these rights, write to info@sportiva.sk or call 0944 140 121. We will reply without undue delay, and within one month at the latest.

If you believe we are handling your data improperly, you may lodge a complaint with the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava, www.dataprotection.gov.sk.