Privacy policy
Last updated: 27 August 2026
1. Who processes your data
Your data is processed by the dental practice SanjaDent, Ratka Mitrovića 151, 11030 Belgrade, Serbia. For anything concerning your data, write to sanjadent011@gmail.com or call +381 64 125 3901.
2. What we collect
- Website enquiry. Your name, a phone number or email address, and the message you write.
- X-rays and photos. If you send us a panoramic X-ray or photos of your teeth by email, WhatsApp or Viber, these are health data and we treat them as a special category.
- Clinical records. Once you become a patient, we keep dental records as required by Serbian healthcare regulations.
- Technical data. Our server logs standard access data (IP address, time of access, browser type) for security and to keep the site running.
3. Why we process it, and on what basis
| Purpose | Legal basis |
|---|---|
| Answering your enquiry and arranging an appointment | Your consent, given by ticking the box on the form (Art. 6(1)(a) GDPR) |
| Preparing a treatment plan from your X-ray | Your explicit consent and provision of healthcare (Art. 9(2)(a) and (h) GDPR) |
| Keeping your dental records as a patient | Legal obligation of a healthcare provider |
| Security and correct operation of the website | Our legitimate interest (Art. 6(1)(f) GDPR) |
4. Who else sees your data
We do not sell your data and we do not use it for advertising. The following technical partners are involved:
- Our own mail server — the form sends your message through this website straight to the mail server of the sanjadent.rs domain. No external form-processing service is involved.
- Vercel — website hosting. The server logs technical access data.
- Google Fonts — fonts are loaded from Google's servers, which means Google receives your IP address.
- WhatsApp / Viber — only if you choose to write to us there; their own privacy policies then also apply.
Some of these services are located outside the European Economic Area. Transfers take place on the basis of standard contractual clauses and the providers' terms.
5. How long we keep it
- Enquiries that do not lead to an appointment are deleted no later than 12 months after the last exchange.
- X-rays and photos sent for an estimate are deleted after 6 months, unless you become a patient — then they form part of your records.
- Patient dental records are kept for the retention periods required by law.
6. Your rights
At any time you can ask for:
- access to the data we hold about you, and a copy of it;
- correction of anything inaccurate;
- erasure, where no legal retention duty applies;
- restriction of processing, or objection to it;
- withdrawal of your consent, without affecting processing already carried out.
Send your request to sanjadent011@gmail.com. We reply within 30 days. If you believe your rights have been breached, you may complain to the Serbian Commissioner for Information of Public Importance and Personal Data Protection, or to the supervisory authority in your country of residence.
7. Cookies
This site sets no cookies for tracking, profiling or advertising. If we ever introduce them, we will ask for your consent before any tracking begins.
8. Changes
We may update this policy when our services or the applicable rules change. The date of the last update is shown at the top of this page.