1. Controller and contact
Laen Health SH.P.K.Rruga Trepca Nr. 8
10000 Prishtinë
Republic of Kosovo
Represented by managing director Kadri Berisha. For privacy enquiries and requests to exercise your rights, contact kadri@laen-health.com.
This notice covers this website and the contact and application channels described below. It does not replace the separate information required for client projects involving patient or healthcare-professional data.
2. Applicable law
The starting point is Kosovo Law No. 06/L-082 on Protection of Personal Data. The purposes and corresponding legal bases are set out below. Any additional mandatory law, including the EU GDPR where applicable, remains unaffected.
3. Website delivery and access protection
When you load a page, technical connection data is transmitted to the hosting infrastructure. This includes your IP address, the requested page, time of access and browser information. It is needed to deliver the website and protect it against misuse. The corresponding interest of laen health is secure, reliable website operation (Article 5(1.6), Law No. 06/L-082).
The public laen health website is hosted by ALL-INKL.COM – Neue Medien Münnich, owner René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. ALL-INKL stores hosting data on servers in Germany. This hosting service is separate from our email service, Google Workspace.
ALL-INKL privacy information · ALL-INKL server locations
Laen health has not integrated visitor analytics, advertising pixels or a newsletter tool into this website. Images and fonts do not require separate requests to an external image or font provider.
4. Contact enquiries
The form processes your name, email address, selected topic and message, plus any company name or telephone number you choose to enter. “Send enquiry” prepares a message in your email application. Your entries are not submitted to or stored in a laen health website database. Your email app or its provider may store the prepared draft. Laen health receives the message only when you send it.
We use Google Workspace (Gmail) for the mailbox kadri@laen-health.com to receive, send and store emails. Google processes message content, attachments, sender and recipient details and technical delivery data to provide this service. This also applies to applications sent to this address. Processing locations depend on the Workspace service and the applicable account settings; processing outside Germany and Kosovo, including in the United States, may occur.
Google Workspace data processing terms · Google Workspace data regions
We use the message to answer your enquiry, clarify the project and, where relevant, prepare a contract. Where you are the prospective contracting party, the basis is pre-contractual steps requested by you (Article 5(1.2)). For general enquiries or business representatives, the basis is our legitimate interest in responding to business communications (Article 5(1.6)).
Contact is voluntary. Without a reply address and enough information about your request, we may be unable to respond. The form’s mandatory fields do not create a legal obligation to use it. Please do not send patient records, diagnoses or other sensitive health data through this channel.
5. Applications by email
You can apply to the advertised roles by email. The information processed is what you send us: contact details, the role you are interested in, CV, relevant qualifications and any proposed starting date. It is used to assess your application and communicate with you about the recruitment process. The basis is taking steps towards an employment contract at your request (Article 5(1.2)).
Please limit documents to what is relevant to the role. The website has no application-upload service and performs no automated applicant ranking. Applications for our own advertised positions are not automatically treated as consent to join a talent pool or to be forwarded to other employers. Such additional use would need a separate basis and prior information.
6. Optional Google Calendar
The calendar is initially disabled. Selecting “Agree & load Google Calendar” allows the embedded calendar to connect to Google. Google receives connection data such as your IP address and browser information and may read or set cookies. If you are signed in, Google may associate activity with your account. Processing may take place outside Kosovo, including in the United States.
Activating the optional embed is based on your consent (Article 5(1.1) and Article 6). It is not necessary to contact us. You can use email instead. “Withdraw consent & close calendar” removes the embed and stops further requests from it on this page; it cannot undo data already transmitted or delete Google cookies. The choice is not saved for a future page load.
The separate “Open appointment booking” link takes you directly to Google. Information entered during booking is processed by the booking service and made available to the calendar organiser. The purpose is arranging and conducting the requested meeting. For laen health’s handling of the enquiry, the bases described in section 4 apply.
For Google’s own processing, the responsible entity depends on residence and service; for users in the EEA and Switzerland, it is generally Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Details and Google’s retention criteria are in its privacy notice.
7. Recipients and international processing
Depending on the channel used, recipients include the people responsible for your enquiry or application at laen health and technical providers for hosting, email or appointment booking. Authorities or professional advisers may receive information where a legal duty or the handling of a specific legal claim requires it. Access must be limited to what is necessary for the relevant task.
International providers can process data outside Kosovo. Transfers must meet Articles 44–49 of Law No. 06/L-082. Whether an AIP adequacy decision covers a particular recipient or an authorisation under Article 49 is necessary depends on the actual arrangement. A privacy-policy link, an EU standard contract or consent to load a calendar does not by itself establish compliance with these requirements.
8. Retention and deletion
The relevant criteria are the purpose of the data, whether the enquiry or recruitment process has ended, and any applicable statutory retention periods or specific legal claims. Data should not be kept merely because storage is available. The storage-limitation principle follows Article 4(5).
- Form entries: no storage in a website database; drafts in your email app follow your provider’s settings.
- Enquiries and appointments: for handling the matter and any resulting contract; longer retention only where required by a specific legal duty or claim.
- Applications: for the recruitment process; after it ends, only as long as a lawful, necessary retention purpose remains. On recruitment, relevant records become employment records.
- Technical logs, mailbox backups and Google data: retention depends on the service and its settings. See the linked provider privacy notices for their retention criteria.
Where retention is legally required, the basis is Article 5(1.3). Necessary retention to establish, exercise or defend a specific claim is assessed under Article 5(1.6).
9. Your rights
Subject to the statutory conditions, you have the following rights:
- Access to your personal data (Article 14).
- Rectification, erasure and restriction of processing (Articles 15–17).
- Data portability where processing is automated and based on consent or a contract (Article 19).
- Objection, on grounds relating to your situation, to processing based on legitimate interests; objection to direct marketing at any time (Article 20).
- Withdrawal of consent at any time, without affecting the lawfulness of prior processing (Article 6).
Send your request to kadri@laen-health.com. We respond without undue delay and generally within one month. A legally permitted extension by up to two further months must be explained within the first month (Article 11). If identity verification is necessary, only the information needed for that purpose should be requested.
The website does not make decisions producing legal or similarly significant effects on you solely through automated processing.
10. Right to complain
You may lodge a complaint with Kosovo’s Information and Privacy Agency under Article 52. You do not have to contact laen health first.
Agjencia për Informim dhe Privatësi (AIP)Rr. Zejnel Salihu Nr. 22
10000 Prishtinë, Kosovo
info.aip@rks-gov.net