1. Introduction
This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website, send inquiries via the contact form, or book appointments. We respect your privacy and act in accordance with applicable data protection regulations.
2. Data Controller
The data controller is the healthcare institution whose information is available on this site (hereinafter referred to as the "clinic"). For any inquiries regarding data processing, you can contact us using the contact information provided on the Contact page.
3. What Data We Collect
Depending on how you use the site, we may process:
- Identification and contact data that you voluntarily provide to us (name, surname, email address, phone number).
- Message content that you enter in the contact form or appointment request.
- Technical data generated by your device (e.g., IP address in a limited scope, browser type and version, date and time of the request), for security and basic visit statistics.
We do not request health information through public web forms unless it is necessary for a specific inquiry you send us; in that case, we process it only for the purpose you have consented to and within the scope of healthcare activities.
4. Purpose and Legal Basis for Processing
We process your data for the following purposes:
- responding to your inquiries and providing information about services (contract / legitimate interest / consent, depending on the case);
- scheduling and organizing appointments, in accordance with your request;
- improving the operation of the site, security, and preventing abuse (legitimate interest);
- fulfilling legal obligations, if any (e.g., recording within prescribed deadlines).
5. Data Retention and Protection
Access to your data is granted only to authorized personnel at the clinic and trusted service providers who process data on our behalf (e.g., email hosting), with contractual obligations to protect confidentiality and security.
We retain data for as long as necessary to achieve the purpose of processing, unless the law requires a longer retention period. After the expiration of the period, we delete or anonymize the data.
6. Data Transfer
We do not sell your personal data. Transfer outside of Montenegro is possible only if necessary for providing the service (e.g., email or hosting in the EU/EEA) and with appropriate protective measures.
7. Your Rights
In accordance with applicable regulations, you may, subject to legal limitations, have the right to:
- access data related to you,
- correct inaccurate data,
- delete (“right to be forgotten”), where applicable,
- restrict processing or object,
- withdraw consent, when processing is based on consent.
To exercise your rights, contact the clinic via the channels provided on the website. You also have the right to lodge a complaint with the relevant data protection authority.
8. Cookies
The site may use necessary cookies for basic operation and functionality. If we use analytical or marketing cookies, you will be informed via a banner or settings, in accordance with applicable rules.
9. Policy Changes
We may occasionally update this Privacy Policy. The date of the last revision will be noted on this page. We recommend that you check this page periodically.