Cookie Policy

This Policy on the Use of Cookies (the “Cookie Policy”) governs the use of cookies and similar technologies in connection with visiting the website and using the a.clinic online platform (the “Platform”).

The operator of the Platform is:

a.clinic, s. r. o.
registered office: Jakabova 3621/45, Bratislava-Ružinov 821 04
Company ID (IČO): 57 789 843
Tax ID (DIČ): 2123120736
registered in the Commercial Register of the Municipal Court Bratislava III, Section: Sro, File No. 202261/B
Email: martin@a.clinic

(the “Operator” or “a.clinic”).

The purpose of this Cookie Policy is to provide the user with clear information, in particular on the use of cookies and similar technologies, the purposes of their use, the individual categories of cookies, the conditions of their use and the user's options for managing their settings and the consent given.

Cookies and similar technologies are used in particular in accordance with Act No. 452/2021 Coll. on Electronic Communications, as amended, Regulation (EU) 2016/679 of the European Parliament and of the Council (“GDPR”) and other relevant legal regulations.

This Cookie Policy supplements the document Information on the Protection of Personal Data for Clients and Users of the a.clinic Online Platform. If the use of cookies also involves the processing of personal data, further information on such processing is set out in that document.

Cookies are small data files or similar technical records which, when the website is visited or the Platform is used, may be stored in or read from the user's terminal equipment.

The Platform may also use other technologies with a similar function, in particular local storage, pixels, tags or other identifiers. This Cookie Policy applies to such technologies accordingly.

Cookies and similar technologies may serve in particular for:

1. a)ensuring the proper, secure and stable functioning of the Platform,
2. b)ensuring the user session and login,
3. c)protecting the Platform and user accounts against misuse,
4. d)remembering the user's settings and preferences,
5. e)ensuring the registration, ordering or payment process,
6. f)obtaining analytical information about the use of the Platform,
7. g)evaluating the effectiveness of marketing activities,
8. h)other purposes set out in this Cookie Policy.

Strictly necessary cookies are cookies needed to ensure the proper and secure functioning of the Platform or to provide a service expressly requested by the user.

Strictly necessary cookies may serve in particular to create and maintain the user session, to log in securely to the user account, to protect against unauthorised access to or misuse of the Platform, to technically ensure registration or an order, to carry out a payment operation requested by the user and to store the cookie settings.

If the statutory conditions for their use are met, the Operator may use strictly necessary cookies without the user's consent.

Functional cookies enable in particular the remembering of certain settings or preferences of the user and may enable the provision of extended functions of the Platform.

If a particular functional cookie is not strictly necessary to provide a service expressly requested by the user, it is used only on the basis of the user's prior consent.

Analytics cookies may serve in particular to measure website traffic, to determine how individual parts of the Platform are used, to identify technical problems and to improve the user experience.

Analytics cookies whose use requires the user's consent are activated only after the relevant consent has been given.

Marketing cookies may serve in particular to measure the effectiveness of advertising campaigns, to evaluate the user's interaction with marketing content, to personalise marketing content or for remarketing.

Marketing cookies are used only on the basis of the user's prior consent, if legal regulations require such consent to be given.

The a.clinic Platform provides technological and organisational services, which may include the intermediation of contact and of technical access of the Client to a specific healthcare provider (the “HCP”).

The Operator takes into account the special nature of the Platform and the fact that information arising from the use of some of its parts may directly or indirectly reveal the user's state of health or the user's interest in a certain type of healthcare.

Marketing, remarketing or similar tracking technologies are not used in the health questionnaire, in the user environment containing health data, in content intended for a specific HCP or in other parts of the Platform containing the user's health data, unless their use has been specifically assessed from a legal and technical perspective and all statutory conditions for their use are met.

The Operator does not use data obtained through analytics, marketing or similar technologies for:

1. a)the medical assessment of the Client,
2. b)diagnostics,
3. c)the assessment of the suitability of a specific treatment,
4. d)the choice of a medicine or the determination of its dosage,
5. e)decision-making on the issuing of a medical prescription,
6. f)other clinical decision-making.

The medical assessment of the Client's state of health and decision-making on healthcare rest exclusively with the relevant HCP and the authorised healthcare professional.

On the first visit to the website of the Platform, the user is provided with an interface for managing cookies (the “cookie bar”), if the Platform uses cookies or similar technologies whose use requires consent.

Through the cookie bar, the user must have the option to:

1. a)allow all optional cookies,
2. b)reject all optional cookies,
3. c)set the use of individual categories of optional cookies.

Optional cookies whose use requires consent are not activated before the user has given consent.

The user's consent must be freely given, specific, informed and unambiguous and must be expressed by an active act of the user.

The user's silence, continued browsing of the website, scrolling of the page or any other ambiguous activity are not considered to constitute the giving of consent.

Optional cookies must not be pre-set as allowed.

Not giving consent to optional cookies does not prevent the user from using the basic functions of the Platform that can be provided without the use of these cookies.

The user may change or withdraw their consent to the use of optional cookies at any time through the “Cookie settings” function, which will be permanently available on the website of the Platform.

Withdrawal of consent must be made possible for the user in a manner that is not unreasonably more complicated than giving it.

After consent has been withdrawn, the Operator shall ensure that further use of the relevant optional cookies is ended to the extent required by legal regulations.

Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.

In the operation of the Platform, services of third parties may be used which may use cookies or similar technologies.

If the use of a particular third-party technology requires the user's consent, that technology is activated only after such consent has been given.

Before deploying a third-party technology, the Operator shall appropriately assess in particular its purpose, the categories of data processed, the recipients of the data, the retention period, the legal position of the relevant third party, any transfers of personal data to third countries and the special risks arising from the nature of the Platform.

If personal data are processed through a third-party technology, further information is provided to the user in the document on the protection of personal data or through the cookie settings.

The Operator maintains an up-to-date overview of cookies and similar technologies that are actually used on the Platform.

For each technology used, the following are stated, depending on its nature, in particular:

1. a)name,
2. b)provider,
3. c)category,
4. d)purpose,
5. e)period of validity or retention,
6. f)information on whether its use requires the user's consent.

Cookies and technologies currently in use:

• sb-…-auth-token (local storage); sb-…-auth-token-as, aclinic.as (session storage)

  Provider

  a.clinic (Supabase infrastructure)

  Category

  Strictly necessary

  Purpose

  Keeps you logged in to the user account. When an administrator shows a demo, the same sign-in is kept in one browser tab only, until it is closed.

  Duration

  Until you log out (demo tab: until it is closed)

  Consent required

  No

• aclinic.consent (local storage)

  Provider

  a.clinic

  Category

  Strictly necessary

  Purpose

  Stores your cookie settings.

  Duration

  180 days

  Consent required

  No

• aclinic.lang (local storage)

  Provider

  a.clinic

  Category

  Strictly necessary

  Purpose

  Remembers the language you have chosen.

  Duration

  Until deleted in the browser

  Consent required

  No

• aclinic_assessment, aclinic_assessment_draft (local storage)

  Provider

  a.clinic

  Category

  Strictly necessary

  Purpose

  Stores the health questionnaire answers on this device until you save them to your account.

  Duration

  Until saved to the account, then deleted

  Consent required

  No

• aclinic.call.* (local storage)

  Provider

  a.clinic

  Category

  Strictly necessary

  Purpose

  Remembers that you have joined a video consultation on this device.

  Duration

  Until deleted in the browser

  Consent required

  No

• aclinic_checkout, aclinic_login_email, aclinic_login_resend_until (session storage)

  Provider

  a.clinic

  Category

  Strictly necessary

  Purpose

  Retains data during login and ordering, for example when redirecting to payment verification.

  Duration

  Until the browser tab is closed

  Consent required

  No

• __stripe_mid, __stripe_sid

  Provider

  Stripe Payments Europe, Limited

  Category

  Strictly necessary

  Purpose

  Fraud protection and secure payment processing. Set only on the payment page.

  Duration

  1 year (__stripe_mid), 30 minutes (__stripe_sid)

  Consent required

  No

• _fbp (Meta Pixel)

  Provider

  Meta Platforms Ireland Limited

  Category

  Marketing

  Purpose

  Measuring the effectiveness of advertising campaigns. Only on the informational pages of the website, never in the questionnaire or in the user account.

  Duration

  90 days

  Consent required

  Yes

• _fbc (Meta Pixel)

  Provider

  Meta Platforms Ireland Limited

  Category

  Marketing

  Purpose

  Attributing a visit to a click on an advertisement.

  Duration

  90 days

  Consent required

  Yes

• a.clinic (measurement; script, no cookies, no storage)

  Provider

  a.clinic (Supabase infrastructure)

  Category

  Analytics

  Purpose

  Measures which pages and questionnaire and order screens are shown, for how long, where visitors leave and how fast pages load. Reads language, time zone, device and browser type and window size. Stores nothing on the device; a random identifier lasts only until the page is closed or reloaded. Does not record answers to health questions and does not run in the user account.

  Duration

  Until the page is closed or reloaded; data kept for at most 400 days

  Consent required

  Yes

• Google Maps (embedded map in the lab finder)

  Provider

  Google Ireland Limited

  Category

  Functional

  Purpose

  Shows the streets around the chosen collection point. The map loads only when you click it; Google then sees the labs' positions and the part of the map you view, and may use its own cookies. We do not send it your postcode or location.

  Duration

  As set by Google's policies

  Consent required

  Yes (by clicking Load the map)

Only technologies that are actually used on the Platform are included in the overview under clause 8.3.

If a new technology requiring the user's consent is deployed, the Operator shall ensure its correct classification and the corresponding configuration of the consent mechanism before its activation.

If personal data are processed through cookies or similar technologies, the processing is carried out in accordance with the GDPR and other relevant legal regulations.

More detailed information on the processing of personal data by the Operator, in particular on the purposes and legal bases of processing, recipients, the retention period and the rights of data subjects, is set out in the document Information on the Protection of Personal Data for Clients and Users of the a.clinic Online Platform.

The user may address questions concerning the use of cookies or the protection of personal data to the Operator at the email address martin@a.clinic.

The Operator may appropriately amend or update this Cookie Policy, in particular in the event of changes to legal regulations, the technologies used, the technology service providers or the way the Platform functions.

The current version of the Cookie Policy will be permanently available on the website of the Platform.

A change to this Cookie Policy does not in itself substitute for a new consent of the user, if under legal regulations the giving of such consent is required for the use of a particular technology.

This Cookie Policy takes effect on 7 October 2026.