This privacy policy ("policy") explains how INEL-MED d.o.o. (controller) collects, uses and manages your personal data. INEL-MED d.o.o. is committed to protecting and respecting your privacy. Please read this policy carefully to understand why and how we collect your personal data and how it will be used.
With regard to the personal data we collect, INEL-MED d.o.o. is the "controller", i.e. the entity that determines the purpose and means by which personal data is processed.
If you wish to contact us regarding this policy or your personal data, please use the following contact details:
Company name: INEL-MED d.o.o.
Address: Rudarska 20b, 88 000 Mostar
Phone: +387 36 348 539
Email: info@inel-med.ba or szzp@inel-med.ba (Data Protection Officer)
Purposes of Data Processing
We process your data for the following purposes:
- For the distribution of products to which the insured person is entitled (within the HIF framework)
- When you send us a job application
- For (technical) maintenance, analytics and improvement of our website
- For the protection of people and property through video surveillance installed on the facade of the business building
We do not disclose data to third parties in any way, unless we have a legal obligation to disclose data (e.g. the Tax Administration, which has the right to inspect our accounting records) or if we have a processing agreement with our partners for the maintenance of our IT systems and website (e.g. Microsoft for email services).
If we process your personal data, you have the right to access, rectify and erase your personal data. You also have the right to object to processing and the right to data portability.
Below is the longer version of our Privacy Policy in which we provide more detailed explanations of what data we collect, how, for what purposes and on what legal basis. If you have any questions, please contact us at info@inel-med.ba or szzp@inel-med.ba.
Collection of Personal Data for the Distribution of Products to Which the Insured Person Is Entitled (Within the HIF Framework)
In order to distribute aids, devices or other products and to fulfil our contractual obligations in this regard (for example, under the contract for the supply of orthopaedic and other aids as a contracting institution in accordance with the Rulebook on conditions and methods of exercising rights to orthopaedic and other aids of the Health Insurance Fund (HIF) of the Herzegovina-Neretva Canton, and for the purpose of cooperation with services and bodies for conducting supervision (e.g. the HIF). In this case, the legal basis for processing the personal data of the insured person is the fulfilment of our contractual obligation for distribution purposes. If an HIF insured person is unable to submit the necessary documentation themselves to exercise the right to co-financing of a medical device, the person who does so on their behalf (the applicant) will be required, on the basis of the contract with HIF HNC, to provide their ID card number and handwritten signature in order to prove the relationship (familial or similar) with the insured person and thereby confirm authorisation to collect the medical device on their behalf.
Collection of Personal Data for Potential Employment
Persons interested in employment at INEL-MED d.o.o. may send their CV and cover letter to the email address info@inel-med.ba. The legal basis for collecting such data about interested persons is the contract, i.e. the potential conclusion of an employment contract. Upon receipt and processing of the application, the same channel through which the application was received (by email to the address from which the application was sent) will be used to ask the person whether they consent to their CV and cover letter being retained in the database for the purpose of possible future employment. The legal basis for this processing is the consent of the person who sent the application.
Collection of Personal Data for the Protection of People and Property Through Video Surveillance Installed on the Facade of the Business Building
We process personal data through video surveillance. We carry out the processing of personal data by video surveillance cameras for the purpose of protecting persons and property. The video surveillance system has been established with the aim of providing a higher level of protection of people and property, reducing risks and increasing the protection and safety of workers and all other persons present on the controller's premises, for controlling entries and exits to and from the controller's premises, and for preventing unlawful actions directed against the controller's property (such as theft, robbery, burglary, violence, damage, destruction, etc.). At the entrance to the recording perimeter, as the controller, INEL-MED will inform you about the recording. Recordings obtained by video surveillance cameras are retained for a period of 1 month. We process data obtained through video surveillance on the basis of our legitimate interests, i.e. we consider that our interests in protecting people and property outweigh the fundamental rights and freedoms of individuals who may be recorded by video surveillance.
Regular Business Operations
We store correspondence with (former) clients on our server and in online working folders. We retain data in accordance with relevant laws (e.g. accounting documents on the basis of which data has been entered in the journal and general ledger for 11 years).
Lawfulness of Processing
Personal data may only be processed if there is a legal basis for doing so. In accordance with the Law on Protection of Personal Data in BiH, we process personal data on the following legal bases:
- Consent: We will retain job applications on the basis of your consent in our application database. If processing is based on your consent, you have the right to withdraw your consent at any time. The controller must be notified of the withdrawal of consent by email at: info@inel-med.ba, szzp@inel-med.ba or at the address Rudarska 20, 88 000 Mostar. Such withdrawal shall not affect the lawfulness of processing based on consent prior to its withdrawal.
- Contracts/pre-contractual actions: When we distribute our products as a contracting party of the HIF, we must necessarily process the data of the insured person when they submit a request. Also, when a related person submits a request for the distribution of a medical device, on the basis of the contractual relationship with HIF HNC, we collect their personal data (ID card number and handwritten signature).
- Legal obligation: If we receive a legitimate request for disclosure of data from a competent authority. We are also legally required to retain personal data in our financial records for a certain period of time, in accordance with tax and accounting legislation.
- Legitimate interest: We also use video surveillance to protect people and property on the basis of legitimate interest. In any case, you have the right to object to processing based on legitimate interest.
Recipients of Personal Data
We do not disclose personal data to third parties unless we are legally obliged to do so. However, we use the services of suppliers in the field of information and communication technologies. We have concluded processing agreements with such business partners. Processors may only process personal data on our behalf and under our supervision and only for the purposes we determine and under strict confidentiality. When working with independent service providers, temporary employees or partners who are not our processors (because they are not under our supervision) and it is necessary to exchange personal data, we enter into confidentiality agreements.
For data that our processors transfer outside the European Union for the purpose of providing IT services, we use safeguards for data transfers. Data is transferred to Microsoft in connection with the use of communication solutions via email, OneDrive, video calls and chat under the Data Privacy Framework agreement.
Data Retention Period
We do not store personal data longer than necessary for the purpose for which we obtained it. This assessment is based on the type of personal data, the product or service for which we collected the data, and the period during which you, as the data subject, can reasonably expect your data to be retained (e.g. business cooperation – maximum retention period of 11 years from the end of cooperation).
Data Security
We have enabled traffic encryption on our website. This makes data traffic between you and our server unreadable, so that third parties cannot access it. We have also ensured that your data is adequately secured in all our systems. We do this through all technical measures (e.g. antivirus, complex passwords, two-factor authentication), including physical security of access to our office, as well as organisational measures.
Your Rights
In accordance with the Law on Protection of Personal Data in BiH, you have the right, upon your request, to review your personal data and, if necessary, to amend or delete it. In addition to the rights of access, rectification and erasure, you may request that we restrict the processing of personal data and you may object to processing if you disagree with it. Also, in some cases it is possible to exercise the right to data portability.
If you have a complaint, you may also contact the competent supervisory authority, the Agency for Protection of Personal Data in Bosnia and Herzegovina.
For all questions and requests, we are at your disposal and you may contact us at info@inel-med.ba or szzp@inel-med.ba.
Changes to the Privacy Policy
In the event of changes to the Privacy Policy, we will publish the change on our website.