Privacy and clinic preferences

Website operator and contact

Health BiH operates this website. Health BiH is responsible for the personal information described in this notice. For website questions, corrections or privacy requests, email [email protected]. Health BiH administration handles this inbox.

You can browse without sending us a message. If you contact us, provide enough information for us to understand and answer your request. Please do not include medical records, symptoms or other sensitive health information. Treatment enquiry forms and document uploads are unavailable.

Information we use and why

Website enquiries. We use your email address, any name you provide, your message and related correspondence to answer ordinary website questions, deal with corrections and handle follow-up.

Website operation. When your browser requests pages or resources, the receiving service receives connection information such as your IP address, the requested address and browser information sent with the request. This supports page delivery, service security and operation. This website also loads Cloudflare monitoring resources for website performance information.

Professional profiles. The directory publishes professional names, roles, qualifications, affiliations and source links from providers or other cited public professional sources. These help visitors understand provider information. Published profile details are visible to website visitors; people named in a profile can request a correction or object to its use.

Clinic preferences. Saving a clinic stores its catalogue identifier in this browser tab so you can compare information. The directory does not send saved choices to a clinic, book care or assess your suitability for treatment.

Our lawful bases

For ordinary enquiry handling, necessary website operation and publishing relevant professional information, we rely on legitimate interests: answering requests, maintaining a reliable and secure information service, and helping visitors understand providers. We use this basis only where the processing is necessary and those interests are not overridden by your rights.

Where we must process information to meet a legal obligation, that obligation is the basis. If consent is required for particular optional cookies or monitoring, legitimate interests do not replace that requirement. Where processing is based on consent, you may withdraw it without affecting earlier lawful processing.

Who receives information

Our policy is to limit internal access to authorised staff who need the information for the relevant work. Hosting, email, DNS and monitoring services receive the information needed to provide those services. Information may also be disclosed to a competent authority where required by law.

WPX hosts this website on its UK hosting service. Incoming email for healthbih.com is routed to Google mail servers. Cloudflare provides the domain’s authoritative DNS service, and the website loads Cloudflare monitoring resources.

Following a link to a clinic or another website takes you to a separate service whose privacy information applies to your interaction there.

International processing

Website and email services can involve processing outside Bosnia and Herzegovina, including the UK and other countries used by the relevant provider. The WPX UK hosting service does not mean that Google email processing, Cloudflare services or all other processing stays in the UK.

International transfers must meet the applicable data-protection requirements. You can contact [email protected] to ask about processing locations and any transfer safeguards that apply to your information.

How long information is kept

We keep ordinary website enquiries only while they are needed. We review inactive enquiries that have not led to an ongoing service six months after the last contact and delete information that is no longer needed. Relevant information may be kept longer where needed for an ongoing service, a dispute or a legal obligation; we review that need and delete the information when it ends.

The six-month point is a review of ordinary enquiries, not a medical-record retention period. Technical records have different purposes: their retention depends on the service, operational or security need and any applicable legal requirement. We keep professional profile information while it remains relevant to the directory and review requests for correction or removal.

Saved clinic identifiers stay in this browser tab’s session storage. You can remove individual clinics or clear the saved list using Your saved clinics. A saved preference does not reserve care or notify a clinic.

Your privacy rights

Under applicable data-protection law, you can request access to your personal information, correction, deletion or restriction of its use. You can object to processing based on legitimate interests. Data portability and withdrawal of consent apply where their legal conditions are met. These rights are subject to the relevant legal conditions and exceptions.

Send a request to [email protected] and explain what you would like us to do. If needed to protect your information, we may ask for reasonable information to verify your identity. We will respond within the time required by the applicable law.

You can complain to the Personal Data Protection Agency in Bosnia and Herzegovina (AZLP). Where UK data-protection law applies, you can complain to the UK Information Commissioner’s Office (ICO). Where EU/EEA data-protection law applies, you can complain to the supervisory authority in your usual residence, workplace or the place of the alleged infringement. The EDPB directory lists those authorities.

Read about cookies and website storage