Your data.

Data controller

The controller of personal data is VALORA Clinic, Đorđa Radojlovića 21, Dedinje, 11000 Belgrade, Serbia, company registration number 68774462, tax ID (PIB) 115951315. Contact for data protection matters: office@valoraclinic.rs, +381 63 288 894.

Which data we process and why

Contact and appointments. When you fill in the contact form, we process your name, email address, the content of your message and, if you provide it, your phone number, as well as the protocol you are interested in — solely to answer your enquiry or handle your appointment request. The phone number is optional. Please do not send medical records or detailed health information through the form.

Newsletter. If you subscribe to the newsletter, we process your email address, the time and source of the subscription and the version of the consent text you accepted (see “Newsletter and marketing communication”).

Health data. We do not collect data about your health through the website. Such data is processed only at the clinic, as part of providing healthcare and keeping medical records, under the confidentiality rules of the Law on Patients’ Rights and with separate access controls. Health data is never used for marketing or transferred to the newsletter system.

Technical data. When you visit the website, the hosting provider records technical data necessary to deliver and secure the site (IP address, time of access, browser type). The website uses no analytics or advertising tools.

Legal basis

Answering enquiries and appointments: steps taken at your request prior to entering into a contract, and our legitimate interest in answering your enquiry (Article 12(1), items 2 and 6 of the Serbian Law on Personal Data Protection). Newsletter: your consent (Article 12(1), item 1). Website security: legitimate interest. Medical records: provision of healthcare and legal obligations (Article 17 of the Law and the regulations on medical documentation).

Newsletter and marketing communication

If you voluntarily subscribe to the Valora newsletter, we process your email address in order to send you expert and educational content, news about the clinic and occasional information about our services and offers.

The legal basis for this processing is your consent (Article 12(1), item 1 of the Law on Personal Data Protection). Providing your data is not mandatory, and not subscribing or withdrawing consent does not affect your ability to use the clinic’s healthcare services. The newsletter subscription is separate from booking: an email address you leave for an enquiry or appointment is not used for the newsletter without your separate consent.

To send the messages we may use an email service provider, which acts solely in line with our documented instructions and an appropriate data processing agreement.

We process newsletter data for as long as your subscription lasts; after you unsubscribe we stop promotional mailings. We keep proof of the consent given and of the unsubscription only for as long as necessary to demonstrate the lawfulness of processing.

You can withdraw your consent at any time by clicking the unsubscribe link in any newsletter or by writing to office@valoraclinic.rs. Withdrawal does not affect the lawfulness of processing carried out before it.

Recipients and processors

The following may process data on our behalf and under our instructions: the website hosting and form-processing provider (Netlify, Inc., USA — contact form and newsletter submissions are stored in its system), the newsletter service provider and IT support. We may disclose data to public authorities where required by law. We do not sell data and do not share it with third parties for marketing purposes.

Transfers to other countries

The hosting provider processes website data on servers outside the Republic of Serbia. The transfer takes place with the appropriate safeguards provided for by the Law on Personal Data Protection, including the service provider’s contractual obligations regarding the security and confidentiality of data. The same applies to the newsletter service provider.

Retention periods

Website enquiries: no longer than 12 months from the last communication, unless you become a patient of the clinic, in which case further processing follows the regulations on medical documentation. Newsletter: for as long as your subscription lasts; after unsubscribing we keep only minimal proof of prior consent and of the unsubscription, for as long as the lawfulness of processing may need to be demonstrated. Medical records: within the periods prescribed by the Law on Medical Documentation and Records in Healthcare (some records, e.g. dental records, must be kept permanently). Hosting technical logs: short-term, in line with the hosting provider’s rules.

Your rights

You have the right of access, rectification, erasure (where possible), restriction of processing, objection and data portability, under the conditions set out in the Law on Personal Data Protection. You can withdraw consent at any time without affecting the lawfulness of prior processing. Send requests to office@valoraclinic.rs. You also have the right to lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection of the Republic of Serbia (Bulevar kralja Aleksandra 15, Belgrade, poverenik.rs).

Are you required to provide data

To answer an enquiry we need your name, email address and message; without them we cannot reply. The phone number is optional. Subscribing to the newsletter is entirely voluntary and is not a condition for booking or for receiving healthcare services.

Automated decision-making

We do not make decisions based solely on automated processing and we do not profile website visitors.

Cookies and local storage

The website uses no tracking cookies, analytics or third-party advertising tools. Your browser locally stores only technically necessary settings (the selected language and whether the intro animation has already been shown), with no transfer to third parties. The clinic map is loaded from Google services only when you open it yourself; Google’s privacy policy then applies to it. If we introduce analytics or similar tools in the future, they will be activated only with your consent and this policy will be updated.

Changes to this policy

We may update this policy when regulations or our processing change. The current dated version is always published on this page.