Privacy Policy

Last updated: 21 July 2026

1. About this Privacy Policy

Zdravstvena.info respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, store, disclose and protect personal data when you visit or use the Zdravstvena.info employment portal, create an account, apply for job opportunities, upload or create a CV or professional profile, subscribe to job alerts or newsletters, publish job vacancies, purchase employer services or otherwise interact with our platform.

This Privacy Policy applies to all users of the Zdravstvena.info employment portal, including job seekers, employers, recruiters, healthcare organisations, pharmaceutical companies and other visitors.

Personal data is processed in accordance with applicable data protection legislation, including Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR), the Slovenian Personal Data Protection Act (ZVOP-2) and other applicable legislation.

2. Data Controller

The controller responsible for the processing of personal data through this Portal is:

Zdravstvena.info
ToTheMoon, s.p.

Email: zaposlitve@zdravstvena.info

Privacy-related enquiries: zaposlitve@zdravstvena.info

Website: Zdravstvena.info

Hereinafter referred to as “Zdravstvena.info”, “we”, “us” or “our”.

Where required by applicable legislation, details of a Data Protection Officer will be published here.

3. Personal Data We May Collect

The personal data we process depends on how you use the Portal.

3.1 Job Seeker Account Data

When you create a job seeker account, we may process:

• first and last name;
• email address;
• telephone number;
• account login information;
• password in encrypted or hashed form;
• preferred location;
• job preferences;
• preferred professional fields;
• communication preferences;
• account settings.

3.2 CV and Professional Profile Information

Where you create or upload a CV or professional profile, we may process information such as:

• education;
• professional qualifications;
• professional licences and certifications;
• work experience;
• professional skills;
• languages;
• career interests;
• professional memberships;
• professional references where provided lawfully;
• uploaded CV documents;
• cover letters;
• profile photograph;
• other information voluntarily included in your profile or application.

You are responsible for ensuring that the information you provide is accurate and that you have the right to provide any information relating to third parties.

You should not include unnecessary sensitive personal information in your CV or professional profile.

In particular, you should avoid providing information concerning health, racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, sexual orientation or other special categories of personal data unless such information is genuinely necessary and its processing is permitted by applicable law.

4. Job Application Data

When you apply for a vacancy through Zdravstvena.info, we may process:

• your identity and contact details;
• your CV;
• your professional profile;
• your cover letter;
• answers to employer-specific application questions;
• uploaded certificates or supporting documents;
• date and time of the application;
• information about the vacancy for which you applied;
• communication relating to the application.

Where an application is submitted directly through Zdravstvena.info, the relevant application information is transmitted to the employer responsible for the vacancy.

Once the employer receives the application, that employer generally acts as an independent controller of the personal data it receives and is responsible for its subsequent recruitment-related processing.

Zdravstvena.info does not determine how an employer processes candidate data after it has been received by that employer, except where expressly stated otherwise.

A similar distinction between the job portal and the employer receiving the candidate’s application is used by other Slovenian employment portals.

Where a vacancy redirects you to an employer’s external recruitment website or another third-party service, the privacy policy of that third party applies to any information submitted there.

5. Employer and Business User Data

When an employer or another professional organisation uses Zdravstvena.info, we may process:

• organisation or business name;
• contact details;
• company identification information;
• VAT information where applicable;
• employer profile information;
• first and last name of contact persons;
• business email addresses;
• telephone numbers;
• job advertisements;
• billing and invoicing information;
• order and package information;
• candidate-management activity within the Portal;
• communications with Zdravstvena.info;
• information necessary for fraud prevention and account verification.

6. Information About Your Use of the Portal

When you access or use the Portal, certain technical information may be collected automatically, including:

• IP address;
• browser type;
• device type;
• operating system;
• date and time of access;
• pages visited;
• referring website;
• technical log information;
• session information;
• security-related information;
• cookie identifiers where permitted.

The use of cookies and similar technologies is explained separately in our Cookie Policy.

7. How We Obtain Personal Data

We may obtain personal data:

Directly from you

For example when you:

• create an account;
• complete your professional profile;
• upload a CV;
• apply for a job;
• create an employer profile;
• publish a vacancy;
• purchase a package;
• contact us;
• subscribe to job alerts or newsletters.

Through your use of the Portal

Certain technical and usage information may be generated automatically when you use our services.

From employers or authorised business users

For example when an employer manages an application, creates an employer profile or communicates with Zdravstvena.info regarding a recruitment process.

From third-party services

Where you choose to use an available third-party login, payment, analytics or integration service, we may receive data in accordance with your settings and the applicable provider’s terms.

8. Purposes and Legal Bases for Processing

We process personal data only where there is an appropriate legal basis.

8.1 Providing the Portal and User Account

We process personal data in order to:

• create and manage user accounts;
• authenticate users;
• provide job-search functions;
• provide employer services;
• allow users to manage profiles and applications;
• provide job posting and recruitment functionality;
• provide purchased services.

Legal basis: performance of a contract or taking steps at your request prior to entering into a contract under Article 6(1)(b) GDPR.

8.2 Processing Job Applications

We process application information in order to allow candidates to apply for vacancies and employers to receive and manage applications.

Legal basis: performance of the service requested by the user and, where applicable, consent for optional functionality.

9. CV Database and Profile Visibility

Where Zdravstvena.info offers a searchable CV or candidate database, inclusion in such a database is not automatic.

Your profile or CV will only be made available to employers in such a database where you have expressly selected that option or otherwise provided the required consent.

You may withdraw this choice or change the visibility of your profile at any time through the available account settings or by contacting us.

Withdrawal does not affect the lawfulness of processing performed before the withdrawal.

10. Job Alerts, Newsletters and Marketing Communications

You may choose to receive:

• personalised job alerts;
• new vacancy notifications;
• career-related information;
• Zdravstvena.info newsletters;
• recruitment-related updates;
• promotional communications.

Where consent is required, such communications are sent only after you have provided consent.

You may unsubscribe at any time by:

• using the unsubscribe link contained in the email;
• changing your account preferences; or
• contacting Zdravstvena.info.

Legal basis: consent under Article 6(1)(a) GDPR where applicable.

Withdrawal of consent does not affect the lawfulness of processing performed before withdrawal.

MojeDelo similarly distinguishes normal portal communications connected with the contractual service from optional newsletters that rely on consent.

11. Service and Account Communications

Certain messages are necessary for providing the service and are therefore not considered optional marketing communications.

These may include:

• account verification emails;
• password reset messages;
• application confirmations;
• important account notifications;
• purchase confirmations;
• invoices;
• security warnings;
• notices concerning material changes affecting the service.

Where such communication is required for providing the service, it may be sent regardless of newsletter preferences.

12. Legal Obligations

We may process certain personal data where necessary to comply with:

• accounting requirements;
• tax obligations;
• legal requests;
• regulatory requirements;
• court orders;
• other obligations imposed by applicable law.

Legal basis: compliance with a legal obligation under Article 6(1)(c) GDPR.

13. Legitimate Interests

Where appropriate, we may process personal data on the basis of our legitimate interests, including:

• ensuring security of the Portal;
• detecting and preventing abuse;
• preventing fraudulent activity;
• protecting accounts;
• investigating technical incidents;
• maintaining service reliability;
• establishing, exercising or defending legal claims;
• improving the basic functionality of the Portal.

Where legitimate interests are relied upon, we consider the interests and fundamental rights of the affected users.

Legal basis: Article 6(1)(f) GDPR.

14. Cookies, Analytics and Advertising

Non-essential analytics, advertising and similar tracking technologies are used only where permitted by applicable law and, where required, after obtaining the user’s consent.

Detailed information is available in our Cookie Policy.

Under Slovenian law, the storage of or access to information on a user’s device through cookies and similar technologies is regulated in particular by Article 225 ZEKom-2.

15. Who May Receive Your Personal Data

Depending on the services you use, personal data may be disclosed to:

Employers

When you apply for a job or voluntarily make your professional profile available to employers.

Service Providers and Processors

We may use trusted providers for:

• website hosting;
• cloud infrastructure;
• website maintenance;
• software development;
• email delivery;
• customer support;
• payment processing;
• cybersecurity;
• backup services;
• analytics, where consent has been obtained where required;
• communication services.

Such providers may process personal data only to the extent necessary to provide the contracted service and are required to protect the data appropriately.

Public Authorities

Personal data may be disclosed where required by law, a valid court order or a legally binding request from an authorised public authority.

Professional Advisers

Where necessary, information may be provided to lawyers, accountants, auditors or other professional advisers subject to appropriate confidentiality obligations.

16. International Data Transfers

We aim to process personal data within the European Economic Area wherever reasonably possible.

Where a service provider processes personal data outside the European Economic Area, appropriate safeguards will be used where required by law.

These may include:

• a European Commission adequacy decision;
• Standard Contractual Clauses;
• other transfer mechanisms recognised by applicable data protection legislation.

17. How Long We Keep Personal Data

Personal data is retained only for as long as reasonably necessary for the purpose for which it was collected or as required by law.

Unless a different retention period is communicated at the time of collection, the following general principles apply.

Job Seeker Accounts

Account information is retained while the account remains active and until the user requests deletion, subject to limited retention necessary for legal, security or backup purposes.

CVs and Professional Profiles

CVs and profile information are retained while the relevant account or profile remains active or until deleted by the user.

Job Applications Stored on Zdravstvena.info

Applications may generally be retained on the Portal for up to 12 months from the date of application, unless deleted earlier or a different period is clearly communicated.

After an application has been transferred to an employer, the employer determines its own lawful retention period as an independent controller.

Employer Accounts

Employer account information is retained for the duration of the business relationship and afterwards where necessary for legal, accounting, contractual or dispute-resolution purposes.

Accounting and Transaction Records

Records are retained for the periods required under applicable accounting and tax legislation.

Newsletter and Marketing Data

Data processed on the basis of consent is generally retained until consent is withdrawn or the user unsubscribes.

Technical and Security Information

Technical logs and security records are retained only for the period reasonably necessary to ensure security, investigate incidents and prevent abuse.

18. Data Security

Zdravstvena.info applies appropriate technical and organisational safeguards designed to protect personal data against:

• unauthorised access;
• accidental loss;
• unlawful disclosure;
• alteration;
• destruction;
• misuse.

These measures may include access controls, encryption where appropriate, secure authentication, system monitoring, backups and restrictions on access to personal data.

However, no internet-based service can provide an absolute guarantee of security.

Users are responsible for keeping their account credentials confidential and should immediately notify us if they suspect unauthorised access to their account.

19. Your Data Protection Rights

Subject to the conditions set out in applicable law, you may have the right to:

Right of Access

Request information about whether and how your personal data is processed and obtain a copy of your personal data.

Right to Rectification

Request correction of inaccurate or incomplete personal data.

Right to Erasure

Request deletion of your personal data where the legal conditions for deletion are met.

Right to Restriction

Request that processing of your personal data is restricted in certain circumstances.

Right to Data Portability

Receive certain personal data in a structured, commonly used and machine-readable format where applicable.

Right to Object

Object to processing based on legitimate interests in circumstances provided by law.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw that consent at any time.

Right to Lodge a Complaint

You may lodge a complaint with the competent supervisory authority:

Information Commissioner of the Republic of Slovenia
(Informacijski pooblaščenec Republike Slovenije)

The GDPR provides rights including access, rectification, erasure, restriction, portability and objection; Slovenian employment portals reflect the same rights in their current privacy documentation.

20. Exercising Your Rights

Requests relating to personal data may be submitted to:

zaposlitve@zdravstvena.info

or by e-mail to zaposlitve@zdravstvena.info.

We may request additional information where reasonably necessary to verify your identity before responding to a request.

Requests will be handled within the deadlines required by applicable legislation.

21. Automated Recommendations and Matching

Zdravstvena.info may use information such as:

• profession;
• job category;
• location;
• experience;
• saved searches;
• job preferences;

to provide more relevant search results or job recommendations.

Unless expressly stated otherwise, Zdravstvena.info does not make decisions that produce legal or similarly significant effects on users solely through automated processing.

Employers remain responsible for their own recruitment and selection decisions.

22. Children and Minors

The Portal is primarily intended for individuals seeking employment and professional opportunities.

Where a service relies on consent and is offered directly to minors, the requirements of applicable Slovenian and European data protection legislation apply.

Under the Slovenian ZVOP-2 rules concerning information society services, a child aged 15 or older may generally provide valid consent in the circumstances covered by those provisions; for younger children, appropriate parental or guardian authorisation may be required.

Users under 18 must also comply with applicable employment and other legislation.

23. Third-Party Websites

Job advertisements and other content on Zdravstvena.info may contain links to external websites.

Zdravstvena.info is not responsible for the privacy practices, security or content of third-party websites.

Users are encouraged to review the privacy notice of any third-party service before submitting personal information.

24. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• changes to the Portal;
• new services;
• legal requirements;
• technological developments;
• changes in our data processing practices.

The current version will always be published on Zdravstvena.info together with the date of the latest update.

Where required by law, users will receive additional notice of material changes.

25. Contact

Questions concerning privacy or personal data can be sent to:

Zdravstvena.info
ToTheMoon, s.p.

Email: zaposlitve@zdravstvena.info

Zdravstvena.info brand is managed by:
ToTheMoon, s.p. 
zaposlitve@zdravstvena.info

Full details of the operator (name, registered office, registration and VAT number) are listed at the bottom of the Terms and Conditions of Use.