Privacy Policy
What data we collect through this site, why, on what legal basis, and the rights you have over it.
1. Controller
Belgrade Smile Center (belgradesmilecenter.com), 11000 Belgrade, Serbia. Email: info@belgradesmilecenter.com. Phone: +381 64 3404155.
A data protection officer is appointed where required by Art. 37 GDPR; contact details are published here as soon as the appointment is made.
2. What we collect
Visiting the site: your browser transmits an IP address, user agent, referrer and request time to our hosting provider. These server logs are used to deliver and secure the site and are deleted or anonymised after a short retention period.
Consultation form: first and last name, email address, phone number (optional), country of residence, the procedure you are interested in, your preferred timeframe, preferred contact channels, and the free-text message you write.
3. Health data
The message field and any photos or records you later send us may contain data concerning your health. This is a special category of personal data under Art. 9 GDPR. We process it exclusively on the basis of your explicit consent under Art. 9(2)(a) GDPR, given when you tick the consent box on the form, and only to assess your enquiry and prepare a treatment proposal. You are never required to describe your medical situation in the form. A short note is enough to start the conversation.
4. Purposes and legal bases
- Answering your enquiry and preparing a treatment or travel proposal. Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) and, for health data, Art. 9(2)(a) GDPR (explicit consent).
- Operating, securing and troubleshooting the website. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a functioning, secure site).
- Statistical analysis of site usage. Legal basis: Art. 6(1)(a) GDPR (consent), given through the cookie banner and withdrawable at any time.
- Complying with statutory retention and accounting obligations. Legal basis: Art. 6(1)(c) GDPR.
5. Recipients and processors
- Vercel Inc.: website hosting and delivery.
- Brevo (Sendinblue GmbH): transactional email delivery for your enquiry and its confirmation.
- Google Ireland Ltd. (Google Analytics) and/or Plausible Analytics: usage statistics, only if you consent.
Each of these acts as a processor under a data processing agreement pursuant to Art. 28 GDPR. We do not sell personal data and do not pass it to advertisers.
6. Transfers outside the EEA
Serbia is not part of the EEA and has not received an EU adequacy decision. Transferring your enquiry to our team in Belgrade is therefore based on your explicit consent under Art. 49(1)(a) GDPR, and additionally on standard contractual clauses where a processor is involved. Where a US provider is used, transfers rely on the EU-US Data Privacy Framework or standard contractual clauses.
7. Retention
- Enquiries that do not lead to treatment: deleted no later than 24 months after the last contact.
- Enquiries that lead to treatment: retained for the period required by medical documentation and accounting law.
- Server logs: deleted or anonymised within 30 days.
- Consent records: kept for as long as needed to prove that consent was given.
8. Your rights
- Access to the data we hold about you (Art. 15 GDPR).
- Rectification of inaccurate data (Art. 16 GDPR).
- Erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR).
- Data portability (Art. 20 GDPR).
- Objection to processing based on legitimate interests (Art. 21 GDPR).
- Withdrawal of consent at any time, with effect for the future (Art. 7(3) GDPR).
To exercise any of these, write to info@belgradesmilecenter.com. You also have the right to lodge a complaint with a supervisory authority in the EU member state of your residence or workplace.
9. Cookies
Essential cookies keep your language preference and protect the form. Analytics cookies are set only after you consent through the cookie banner. Details are in our cookie policy, and you can change your choice at any time through the cookie settings link in the footer.
10. Changes
We update this notice when the site or our processing changes. The current version is always available at https://belgradesmilecenter.com/legal/privacy.
