GDPR Compliant

Privacy Policy

Last updated: September 08, 2026 · E-Klinika, Ferizaj, Kosovo

E-Klinika takes your privacy and that of your patients very seriously. This policy clearly explains what data we collect, how we use it and how we protect it, in compliance with GDPR and Kosovo legislation.

1 Data Controller

The data controller is E-Klinika, headquartered in Ferizaj, Kosovo.

Contact email for privacy matters: info@eklinika-ks.com

A registered clinic is considered an independent controller for its own patients' data and bears legal responsibility for it.

2 Data We Collect

A. Clinic / administrator data

  • Name and surname of the contact person
  • Clinic name and address
  • Email and phone number
  • City and location
  • Number of doctors
  • Payment and invoice history

B. Doctor data

  • Name and surname
  • Email and phone
  • Medical specialty
  • License number
  • Working hours and prescription preferences

C. Patient data (sensitive health data)

  • Name, surname and date of birth
  • Phone number
  • Medical history and diagnoses
  • Prescriptions and medications
  • Appointment dates and times

⚠️ This data is treated as a special category under GDPR and is protected with additional security measures.

3 How We Use the Data

Collected data is used only to:

  • Provide and operate the E-Klinika service.
  • Send automatic appointment notifications (to doctors and patients).
  • Manage the account and billing.
  • Communicate about technical support or service changes.
  • Improve the platform based on usage patterns (without identifying individuals).

We do not sell, share or trade your data or your patients' data with third parties, for any purpose.

4 Data Security

E-Klinika applies high-level technical and organizational measures to protect data:

🔒

SSL/TLS Encryption

All data is transmitted encrypted.

🗄️

Automatic Backups

Daily backup copies of all data.

👤

Restricted Access

Only authorized staff can access the infrastructure.

📋

Audit Logging

Every action is logged for security purposes.

5 Data Retention

Clinic and doctor data is retained for as long as the account is active, plus 12 months after service termination.

Patient data is retained according to the legal requirements of Kosovo's healthcare legislation, which mandates a minimum retention of 10 years for medical records.

After the retention period expires, data is permanently deleted from our systems.

6 Your Rights Under GDPR

The clinic and any identifiable person has the following rights:

Right of access: You can request a copy of your data at any time.
Right to rectification: You can correct inaccurate or incomplete data.
Right to erasure: You can request deletion of your data (with legal limitations).
Right to restriction: You can restrict processing of your data in certain cases.
Right to object: You can object to processing of your data for certain purposes.
Right to portability: You can receive your data in a structured, machine-readable format.

To exercise these rights, contact: info@eklinika-ks.com

7 Cookies

E-Klinika uses minimal, essential cookies for the platform to function:

  • Session cookies — to keep you logged in.
  • CSRF cookies — to protect forms from cyberattacks.
  • Preference cookies — to remember language and appearance settings.

We do not use marketing, third-party analytics, or advertising cookies.

8 Changes to This Policy

This policy may change from time to time. Material changes will be notified by email at least 14 days before taking effect.

The last update date is always shown at the top of this page.

Questions about privacy?

info@eklinika-ks.com
View Terms of Service