Processing of personal data of website visitors and patients
General Dental Medicine Practice Jovana Dedović
1. Who we are
General Dental Medicine Practice Jovana Dedović (hereinafter: the “Clinic”, “we”, “us”) provides dental and aesthetic/anti-aging medicine services in Belgrade.
This Privacy Policy explains which personal data we collect through the website www.drjovanadedovic.rs, and how we use, store and protect it, in accordance with the Personal Data Protection Act of the Republic of Serbia.
Data controller:
- General Dental Medicine Practice Jovana Dedović
- Uroša Martinovića 18/57, Belgrade, Serbia
- Company registration number: 66972151
- Tax ID (PIB): 113643452
Contact for data protection enquiries:
- Email: drjovanadedovic@gmail.com
- Phone: +381 61 311 9900
2. What data we collect
Depending on how you communicate with us, we may collect the following categories of data:
- Basic identification data: first name, last name, phone number, email address — when you fill in the contact form, book an appointment or subscribe to our email list.
- Appointment data: the treatment you select, your preferred time slot and any notes you leave when booking.
- Health data (medical history): if you come in for a consultation or treatment, we collect data relevant to performing the procedure safely (e.g. allergies, previous treatments, health condition). This data belongs to a special category of personal data and is processed exclusively with your explicit consent, in paper and/or electronic form. It is not published on the website nor shared for marketing purposes.
- Photographs: before and after treatment we photograph the face, teeth, parts of the face and body (lips, cheekbones, jaw), neck and other treated areas, in order to track results, maintain medical documentation and plan therapy. Photographs are kept in internal medical/business records and are not published, shared on the website or social media, or used for marketing purposes without your separate, explicit and written consent, which you give separately from the consent to the treatment itself and which you may withdraw at any time.
- Website usage data: IP address, device and browser type, the pages you visit and the time spent on the website — collected via cookies (see the Cookie Policy).
- Communication: the content of messages you send us through the contact form, email, Instagram/Facebook/TikTok accounts and direct messages, or the ManyChat chatbot.
3. Purpose and legal basis of processing
We process your data for the following purposes:
- Booking and providing services — performance of a contract and/or taking steps prior to entering into a contract.
- Keeping medical documentation — compliance with legal obligations and, where applicable, your explicit consent to the processing of special categories of data.
- Sending email newsletters, guides and marketing offers (e.g. via MailerLite) — on the basis of your consent, which you may withdraw at any time.
- Communication via the ManyChat/Instagram/Facebook/TikTok chatbot — on the basis of your consent when you first write to us.
- Improving the website and user experience (analytics) — on the basis of your consent to the relevant cookies, in accordance with the Cookie Policy.
- Compliance with legal obligations — including accounting and tax records.
4. Who we share data with
We do not sell your data to third parties.
We may share data with the service providers we use to run the clinic and the website, including:
- MailerLite — email marketing;
- ManyChat — communication via Facebook/Instagram channels;
- Setmore — appointment booking;
- Google Analytics — website usage analytics;
- Meta/Facebook — communication and related functionality;
- the website hosting provider — technical maintenance and hosting.
We may disclose data to the competent state authorities where required by law.
All external service providers engaged in processing data are obliged to protect your data in accordance with the applicable regulations and their contractual obligations.
5. How long we keep data
- Medical documentation (patient records): kept in accordance with the statutory retention periods for medical documentation.
- Data collected through the contact form or email list: kept until you withdraw your consent or unsubscribe from the list, and for no longer than [enter period] years of inactivity.
- Cookie data: kept in accordance with the periods stated in the Cookie Policy.
6. Your rights
In relation to your personal data, you have the right to:
- request access to the data we hold about you;
- request the correction of inaccurate data;
- request the erasure of data, where the legal conditions for this are met;
- withdraw your consent at any time, for example by unsubscribing from the email list via the link in every newsletter;
- lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection.
You can send requests to: drjovanadedovic@gmail.com, or submit them in person at the clinic.
7. Data security
We take appropriate technical and organisational measures to protect your data from unauthorised access, loss or misuse.
This includes, among other things, restricted access to medical documentation and the secure storage of electronic records.
8. Changes to this Privacy Policy
We reserve the right to update this Privacy Policy from time to time.
We may notify you of significant changes via the website or by email.
Last updated: 20 August 2026