Privacy policy

Data processing is governed by the Serbian Law on Personal Data Protection (Official Gazette of RS, No. 87/2018). The Serbian version of this policy is the authoritative one.

Who processes your data

The data controller is Milica Stepanović pr Specijalistička lekarska ordinacija iz oblasti dermatovenerologije ISKIN Niš, Tome Rosandića 4, 18000 Niš, Serbia. Company registration number: 66610748. Tax ID (PIB): 113145022.

For any question about your data, write to iskin.ordinacija@gmail.com or call +381 18 511 800.

What data we collect

We only collect what you send us through a form on the website:

• Appointment request: name, phone number, the treatment you are interested in, preferred time and a note.
• Question from the blog: name, phone number, your question and the title of the article you sent it from.
• Offer sign-up: name, phone number, treatment areas, when you would like to start and a tag of the ad you came from.
• Whether you agreed to receive news and offers. With your consent we record the time and the version of the text you saw.

Name and phone number are required because we cannot get back to you without them. Everything else is up to you.

Health data

In the note or question you may describe a skin problem. That is health data. It is read only by the clinic staff, who are required by law to keep patient information confidential. Write only as much as we need to answer you or prepare your appointment, and we will discuss the rest at the clinic.

When you come for an examination, your health data is kept in your medical records under the rules on medical documentation. This policy covers the website only.

Technical data and cookies

When you open the website, the server logs the technical data every browser sends: IP address, browser type and time of visit. We use it only to run and protect the website. To protect the forms from abuse, we keep the IP address a form was sent from for no longer than 10 minutes.

The website does not use cookies for tracking, analytics or advertising and does not load content from other services. If the server protection decides that traffic looks suspicious, your browser may receive a technical cookie used only for that check.

Why we use your data and on what basis

• To get back to you, arrange an appointment and answer your question or sign-up. Basis: steps taken at your request before providing a service (Article 12(1)(2) of the Law).
• Health data you choose to write down is used to provide health care, under a duty of professional confidentiality (Article 17 of the Law).
• We send news and offers by SMS, Viber, WhatsApp and email only if you ticked that box. Basis: your consent (Article 12(1)(1) of the Law). Consent is not required to book an appointment.
• Protecting the website and forms from abuse. Basis: our legitimate interest (Article 12(1)(6) of the Law).

We do not sell your data, do not share it with others for their advertising and do not make automated decisions about you.

Who else has access to the data

We use the services of three companies that process data only on our instructions:

• Vercel Inc. (USA): website hosting and processing of submitted forms.
• Resend (USA): sending the email with your request to our inbox.
• Google LLC (USA): the clinic's mailbox (Gmail) where requests arrive.

These companies are based in the USA, so data is transferred outside Serbia. The transfer relies on the safeguards these companies provide in their data processing agreements.

How long we keep the data

• A request, question or sign-up that did not lead to an appointment is deleted no later than 12 months after we receive it.
• If you come for an appointment, the data becomes part of your medical records and is kept for as long as the regulations require.
• Consent to news and offers is valid until you withdraw it. After that we stop sending messages and keep the record of consent and withdrawal for no longer than 12 months.
• The hosting provider keeps technical server logs briefly, under its own rules.

Your rights

At any time you can ask for:

• access to the data we hold about you and a copy of it
• correction of inaccurate data
• erasure of your data
• restriction of processing and transfer of your data to another controller
• us to stop using your data (objection), especially for news and offers

You can withdraw consent to news and offers by message, email or phone, without giving a reason. Withdrawal does not affect anything done before it, or your appointments.

Send your request to iskin.ordinacija@gmail.com. We reply within 30 days at the latest.

If you believe your data has been processed unlawfully, you can file a complaint with the Commissioner for Information of Public Importance and Personal Data Protection, Bulevar kralja Aleksandra 15, 11000 Belgrade, www.poverenik.rs.

Minors

If you are under 15, an appointment request should be sent by a parent or guardian.

Changes to this policy

If we change how we use data, we will update this page. Last updated: 12 November 2026.