The Act on the Implementation of the General Data Protection Regulation ensures the application of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 and regulates the protection of personal data of natural persons, as well as the supervision of the collection, processing, and use of personal data in the Republic of Croatia.

The purpose of personal data protection is to protect private life and other human rights and fundamental freedoms during collecting, processing and managing personal data.

In the Republic of Croatia, the protection of personal data is guaranteed to every natural person, regardless of nationality or residence, and irrespective of race, colour, sex, language, religion, political or other belief, national or social origin, property, birth, education, social status, or other characteristics.

The personal data protection officer shall establish and maintain a record of processing activities under its responsibility.

The Thalassotherapia Crikvenica Special Hospital for Medical Rehabilitation of Primorje-Gorski Kotar County keeps the following personal data records:

• Register of employees
• Record of persons
• Waiting list
• Guest book.