Privacy Policy

Who we are and when this policy applies

GjejeMjekun is a platform for finding and contacting healthcare professionals and clinics and for patient-account and professional-workspace features. For processing carried out to operate the platform, GjejeMjekun acts as the data controller. For privacy questions or requests, email info@gjejemjekun.com.

When a professional or clinic uses your information to provide healthcare, that provider may be a separate controller and remains responsible for its own legal and professional duties concerning health records.

Information we process

• identity, contact, account and verification information;
• searches, language choices and interactions with the platform;
• contact or appointment requests, messages, documents and health information you choose to submit;
• professional, licensing, clinic, team and public-listing information;
• payment and subscription records, without storing full payment-card details;
• technical data, security logs, online identifiers and cookie choices.

Information comes from you, the professional or clinic you interact with, your use of the platform and, for directory listings, public or authorised sources. Unverified listings are labelled as such.

Purposes and legal bases

We use information to create and administer accounts, provide search and communication, take steps before or perform a contract, protect users and systems, comply with legal duties, and handle support and complaints. Depending on the activity, the legal basis is performance of a contract, a legal obligation, a balanced legitimate interest, consent, or another basis permitted by law.

Health information is treated as a special category of data. It is processed only where a valid condition under Law No. 06/L-082 exists, such as explicit consent or processing needed for healthcare by persons subject to confidentiality duties. Do not submit health information that is unnecessary for the feature you are using.

Who receives information

Information may be received by the professional or clinic you choose, authorised personnel, and providers supporting hosting, security, email, payments or customer support. We may also disclose information when legally required or necessary to protect rights and safety. We do not sell personal information. Transfers outside Kosovo take place only with a lawful basis and safeguards permitted by law.

Retention and security

We retain information only as long as needed for its purpose, applicable legal periods, security, accounting and dispute resolution. The period depends on the account type, provider relationship and health-record obligations. We use technical and organisational measures to limit access, protect transmission, log sensitive actions and recover services, but no system is entirely risk-free.

Your rights

Subject to Law No. 06/L-082 on Protection of Personal Data, you may request information, access and a copy, correction, deletion, restriction, portability or objection. You may withdraw consent at any time without affecting earlier lawful processing. We may verify your identity before fulfilling a request.

If you believe your rights have been infringed, you may complain to Kosovo’s Information and Privacy Agency at aip.rks-gov.net.

Children and automated decisions

Accounts or requests concerning minors must be managed by a parent or legal representative where required by law. GjejeMjekun does not make solely automated decisions that produce legal effects for a patient; result ranking and search suggestions are not medical decisions.

Changes to this policy

We may update this policy when services or legal requirements change. The update date is shown on the page, and we will give appropriate notice when a change is material.