Privacy Policy

Who processes your data

The controller of your personal data is Kamea stomatološka poliklinika d.o.o., Hadži Milentijeva 47, 11000 Belgrade. For any questions about your data, including questions for our data protection officer, email [email protected] or call 060 000 10 01.

We process data in accordance with the Personal Data Protection Act of the Republic of Serbia (Zakon o zaštiti podataka o ličnosti). For patients who live in the European Union, we also apply the EU General Data Protection Regulation (GDPR).

What data we collect

• Booking and contact details: first name and surname, phone number, email address, and the service, dentist and appointment you chose.
• Data for your medical records: date of birth and address, which we record at your first visit.
• Health data: your answers to the questionnaire before your first visit (conditions, medicines, allergies, pregnancy), test results, dental X-rays, your treatment plan and the dentist's notes.
• Payment data: the amount, date and method of payment. We do not see or store your card details; these are processed by the bank.
• Correspondence: messages and photos you send us by email, SMS, Viber or WhatsApp.
• Technical data from the website: IP address, browser type and cookie data, as described in our Cookie Policy.

We do not record video consultations.

Why we process it and on what legal basis

• Booking, confirmations and reminders (appointments, the check-up reminder after 6 months): processing is necessary to book and provide the service at your request. You can turn off check-up reminders at any time.
• Examination, treatment and medical records: processing is necessary to provide healthcare, and keeping medical records is also our legal obligation.
• Invoices and accounting: legal obligation.
• Website security and preventing misuse: our legitimate interest.
• Website analytics: only with your consent.

Health data

Health data is a special category of personal data, and the law protects it more strictly than other data. We process it only for your examination and treatment, on the basis that processing is necessary for the provision of healthcare (for patients from the EU: Article 9 of the GDPR). Only the dentists and staff involved in your treatment, who are bound by professional confidentiality, have access to it.

We do not use health data for advertising and we do not sell it. If you would rather not fill in the questionnaire on the website, you can complete it at the clinic.

Who else has access to your data

We use reliable service providers that process data on our behalf, under a contract and only to the extent needed for the service:

• an email service (appointment confirmations, reminders, cost estimates)
• an SMS service (reminders)
• a calendar and appointment booking system
• Google Meet, for video consultations
• website hosting and, with your consent, an analytics service
• a dental laboratory, which receives only what it needs to make your restoration
• an accounting firm, for invoices

When you message us via Viber or WhatsApp, those apps also process data under their own terms. Some providers may store data outside Serbia and the EU. In that case we transfer data only with the safeguards required by law and the GDPR, such as standard contractual clauses.

We disclose data to public authorities only when the law requires it.

How long we keep data

• Medical records (questionnaire, X-rays, test results, treatment plan): for the periods set by the law governing medical records.
• A questionnaire completed on the website, if the appointment is cancelled before the first visit: deleted within 30 days.
• Appointment data and correspondence that is not part of the medical records: up to two years from the last contact.
• Invoices: for the periods set by tax and accounting regulations.
• Cookies: as set out in the Cookie Policy.

Your rights

You have the right to:

• be told what data we hold about you and receive a copy of it
• ask us to correct inaccurate or incomplete data
• ask us to delete your data, except data we are required by law to keep, such as medical records
• ask us to restrict processing
• object to processing based on our legitimate interest
• receive your data in a commonly used electronic format
• withdraw your consent at any time, without affecting processing carried out before you withdrew it

Send your request to [email protected]. We reply without undue delay and within 30 days at the latest. To protect your data, we may ask you to confirm your identity.

If you believe we are not processing your data lawfully, you can lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection (Poverenik za informacije od javnog značaja i zaštitu podataka o ličnosti), Bulevar kralja Aleksandra 15, Belgrade. Patients from the EU can also contact the data protection supervisory authority in the country where they live or work.

Children

For children under 15, appointments are booked and data is provided by a parent or guardian.

Security

The website uses an encrypted connection (HTTPS). Access to data is password-protected and limited to the people who need it for their work. We do not make decisions about you based solely on automated processing.

Changes to this policy

We update this policy when regulations or the way we work change. Last updated: 1 October 2026.

Last updated: 22 October 2026