Privacy Policy

The personal data controller is CanSolutions Center for Complementary Oncology, Stara cesta 23, 1360 Vrhnika, Slovenia.

Contact for all questions regarding personal data protection: can.solutions.eu@gmail.com, +386 31 870 479.

In the course of our business, we may process the following categories of data:

• Contact details: first and last name, phone number, email address.
• Message content: data that you provide via the form or email.
• Consultation data: context, observations and selected program (only with explicit consent).
• Payment data: amounts, method and date of payment (for invoicing purposes).
• Technical data: anonymized data regarding website visits (see the Cookies section).

• Response to inquiry and appointment booking — legal basis: pre-contractual measures (Art. 6(1)(b) GDPR).
• Conducting the consultation and maintaining patient records — legal basis: performance of a contract (Art. 6(1)(b) GDPR) and consent for special categories of data, such as health data (Art. 9(2)(a) GDPR).
• Invoicing and tax obligations — legal basis: legal obligation (Art. 6(1)(c) GDPR).
• Marketing messages — only with your explicit consent (Art. 6(1)(a) GDPR); you may withdraw consent at any time.

Only authorized personnel of the CanSolutions center and the company Objemi Zdravja have access to your personal data. We do not sell data to third parties. For certain technical and accounting services, we use carefully selected processors with whom we have concluded appropriate data processing agreements:

• Website hosting provider.
• Email service provider.
• External accounting service.
• Provider of infrastructure for storing client data.

As a rule, we do not transfer personal data outside the European Economic Area (EEA). In the event that this occurs, we ensure appropriate safeguards in accordance with the GDPR.

• Contact information from inquiries: maximum 2 years from the last contact.
• Consultation data and documentation: 10 years from the last consultation.
• Accounting documents: 10 years (in accordance with tax legislation).

As an individual, under the GDPR, you have the right to:

• Access to your personal data.
• Correction of inaccurate or completion of incomplete data.
• Erasure ('right to be forgotten') in accordance with GDPR conditions.
• Restriction of processing.
• Data portability.
• Objection to processing based on our legitimate interests.
• Withdrawal of consent for processing based on it.

You may submit a request in writing to can.solutions.eu@gmail.com. We will respond to you within 1 month.

We take appropriate technical and organizational measures to protect personal data from unauthorized access, loss, or destruction — including encrypted transmission via the website (HTTPS), restricted access to physical and digital documentation, and regular staff training.

The Privacy Policy may be updated periodically. We will notify you of significant changes via the website or email. The date of the last update is listed at the top of the page.