Cookies and GDPR on the HR Clinic website
On this page, you will learn which cookies we generally process on the website
webdemo.dam-medizin.com
, for what purpose, and how you can influence which cookies we store on your devices.
What are cookies
Cookies are small data files that are, in some cases, necessary for certain
website functions, such as logging in. Thanks to cookies, our website can also
remember various settings that you have chosen for viewing or using the site.
This is why we place cookies on your computer. It is a standard method used by
all websites worldwide to store information important for their operation.
How we use cookies on this website
Cookies can be divided according to their duration of validity and according to who places them on your computer
and for what purpose.
According to the duration of validity, we distinguish two categories:
- Short-term cookies (session cookies) remain on your computer until you close your
browser, after which they are automatically deleted. - Long-term cookies (persistent cookies) remain stored on your computer for a long
time, depending on your browser settings and the settings of the specific cookie, or until you manually
remove them.
According to who creates and processes the cookies, we can divide them into two categories:
- First-party cookies are created directly by the website or scripts
on the same domain. They most often serve to ensure the basic functionality of the given site. Without them,
most websites would not be able to provide their basic functions and various user settings. - Third-party cookies are most often cookies from advertising
systems, social media widgets, various analytical tools, or embedded videos.
Which cookies we use on this website
- Technically necessary storage (first-party): your choice in the cookie banner is stored with a timestamp in your browser's local storage (key “dam_cc”); it is not sent to us.
- Google Tag Manager (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) is loaded on every page and manages the measurement services. When it loads, Google receives your IP address and browser information, which may also be transferred to Google LLC in the USA. We use Google Consent Mode v2: without your consent, statistics and advertising are set to “denied” and no cookies are set for them; Google may nevertheless receive individual cookie-less requests (pings) with technical information such as the IP address – this data is not anonymous. If you reach this website through a Google ad, the website carries the ad's click ID (e.g. gclid) along in the page address from one page to the next (URL passthrough), and it can appear in these requests to Google. This lets Google attribute an enquiry to the ad even if you have not consented. Nothing is stored on your device.
- Google Analytics 4 (Google, third-party), only with your consent to “Statistics”: measures how the pages are used (pages viewed, time on page, clicks on phone, email and booking buttons, source, device, approximate location). Cookies and identifiers may be set and data transferred to Google, including to the USA. Retention is limited to 14 months at most.
- Google Ads and DoubleClick (Google, third-party), only with your consent to “Marketing”: measure whether an ad led to an enquiry or booking. When you click an ad, Google appends a click identifier (e.g. gclid) to the page address.
- Meta Pixel (Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland), only with your consent to “Marketing”: records your interactions with the website (including the page viewed, time, IP address, browser) and passes them to Meta for ad measurement. Where data is collected and passed to Meta, we and Meta are joint controllers (Art. 26 GDPR; agreement).
- LinkedIn Insight Tag (LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland), only with your consent to “Marketing”: measures visits and conversions of our LinkedIn advertising; data is transferred to LinkedIn.
- YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4): a video is embedded on the home page in enhanced privacy mode (youtube-nocookie.com). It loads when the page is opened and your IP address is transmitted to Google/YouTube. The legal basis is our legitimate interest in showing the video (Art. 6(1)(f) GDPR).
- Fonts: the fonts (including Roboto, Roboto Slab, Comic Neue) are delivered from our own server; no connection to Google Fonts is made for them. The Tally request form loads fonts from Google itself for its display and may send technical error reports to an error-monitoring service in the USA (Sentry).
The legal basis for Google Analytics, Google Ads, Meta Pixel and LinkedIn Insight Tag is your consent (Art. 6(1)(a) GDPR); for Google Tag Manager it is our legitimate interest in managing the services in one place (Art. 6(1)(f) GDPR). Transfers to the USA rely on the EU-US Data Privacy Framework, in which the US providers named here participate, and additionally on EU standard contractual clauses.
We do not use cookies to identify you personally, and we do not store health or contact data in them.
Hosting. This website runs on a server of Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus, in a data centre in Germany. Technical operation is carried out on behalf of HR Clinic s.r.o. by Digital Assets Management s.r.o., Za Sokolovnou 487, 671 82 Dobšice, Czech Republic. When you open the site the server technically processes connection data (IP address, date and time, page requested, browser) to deliver and secure the pages (Art. 6(1)(f) GDPR).
Booking and request form. The pages for booking an appointment embed the booking calendar of the Zeeg service (zeeg.me) and a short request form of the Tally service (tally.so). When they load, your browser connects to these services, and the details you enter there (for example name, email, phone number and the reason for your request) are received by HR Clinic s.r.o., Kotkova 3974/9c, 669 02 Znojmo, which processes them to handle your request. You can also book by phone.
To help identify technical drop-offs, Tally may also store entries that have not yet been submitted as an incomplete request.
To identify technical problems with the request form, we count visits to pages containing a Tally form, forms displayed, moves to a later form page and submissions, aggregated per practice and day. We store only these daily totals, not IP addresses, visitor identifiers or form answers. This counting sets no cookies and stores nothing in your browser. It is separate from Tally processing the information you enter.
How you can adjust the use of cookies on your device
You can delete all cookies already stored on your computer at any time. Most browsers
also offer the option to block the placement of cookies on your devices. In such a case, however, you will not
be able to use all the online services that websites or e-shops commonly offer.
Detailed information on cookie storage settings in your browser can be found on the pages
of the specific browser provider:
Detailed information about cookies can also be found on the website
AboutCookies.org.
You can change your choice at any time or withdraw your consent with effect for the future: open cookie settings. The consent banner distinguishes “Necessary”, “Statistics” and “Marketing” and appears on your first visit.
Data Protection – Information Obligation
Our organization processes personal data in accordance with the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, i.e., the General Data Protection Regulation, also known as GDPR, and within the meaning of Act No. 110/2019 Coll., on the processing of personal data.
Our organization is not a public authority or a public body and is therefore not obliged under the EU General Regulation to appoint a Data Protection Officer. The contact person for resolving your questions, requirements, or requests is our organization.
Contact details for the organization
HR Clinic s.r.o.
Kotkova 3974/9C, 669 02 Znojmo
ID: 230 53 569
Personal data of patients, clients, employees, and other persons are kept for the period strictly necessary for the purpose of their processing. This is governed by the filing and shredding rules issued in accordance with Act No. 499/2004 Coll., on archives and records management, as amended.
Please exercise your rights and requirements under the General Regulation at the contact details provided above. Your requests will always be properly assessed and settled in accordance with the relevant provisions of the General Regulation. In the event that you do not agree with the settlement of your requirements and requests, you have the right to file a complaint with the Office for Personal Data Protection.
Personal data – patients
Our organization is the controller of your personal data, which it processes primarily for the purpose of:
- providing and ensuring healthcare
- billing healthcare to health insurance companies
Your personal data are collected and further processed primarily on the basis of a legal obligation arising from Act No. 372/2011 Coll., on health services and conditions of their provision (Act on Health Services), as amended.
Within the scope of this obligation, your identification, address, and contact details, information about your health status and the course of the healthcare services provided, anamnesis data, and other decisive data necessary for the provision of a specific healthcare service according to the nature of the service provided are collected.
Personal data – employees
Our organization processes the personal data of its employees and other persons in employment relationships. The employment relationship is based on personnel records; the scope and type of materials are decided by the employer at their discretion and with regard to their obligations.
Employees are entitled, upon their request, to inspect their personal file and the documents for salary calculation or to make copies of them.
The employer is obliged to ensure the protection of the personal data of its employees against unauthorized access by unauthorized persons or misuse.
Processing, including the protection of personal data, is described in the internal directive SM-05 GDPR.
Information Obligation
The information obligation is stated in this Annex No. 14 to SM-05 GDPR.