Privacy policy

1. Who we are

This website (https://viafizio.rs) is operated by VIA FIZIO, sole proprietor Stefan Trišović, registered at Antifašističke borbe 43, New Belgrade, Tax ID (PIB): 115625019, registration number: 68508282 ("Via Fizio", "we"). For any questions regarding the processing of your personal data, contact us by phone at 065 5253 278 or via the contact form on this website.

2. What data we collect

We only collect personal data that you provide to us directly, namely:

• Via the contact form: your name, phone number and message content (which, by its nature, may include information about your health — e.g. a description of the issue you're contacting us about);
• Via direct contact: data you share by phone, Instagram or email when booking an appointment.

We do not automatically collect data through analytics or advertising cookies — the website currently does not use tools such as Google Analytics or Meta Pixel. If this changes, this policy and the relevant notice on the website will be updated before such tools are introduced.

3. Why and on what legal basis we process your data

• Responding to your inquiry and booking an appointment — based on the consent you give by sending us a message (Art. 6(1)(a) GDPR);
• Health-related information you choose to share in your message is processed solely to provide the requested service and solely on the basis of your explicit consent — this data is not shared with third parties or used for any other purpose (Art. 9(2)(a) GDPR);
• Compliance with legal obligations — where required (e.g. tax and accounting regulations).

4. How long we keep your data

We keep data from the contact form and correspondence for as long as needed to respond to your inquiry and, if you book an appointment, to provide the agreed service — generally no longer than 12 months from the last contact, unless a longer retention period is required by law (e.g. tax regulations) or you are our patient and we keep medical records, which are retained in accordance with healthcare regulations.

5. Who we share data with

We do not sell or share your data with third parties for marketing purposes. Data may only be shared with:

• our hosting/email service provider, who technically enables the website to run and to receive messages from the contact form, and who is contractually bound to protect your data;
• competent authorities, where required by law.

6. Google Maps on the contact page

On the Contact page we display our location via the Google Maps service. Loading that page causes your browser to connect to Google LLC's servers and transmit certain data (e.g. your IP address) to it, regardless of whether you interact with the map. This is done on the basis of our legitimate interest in providing you with clear information about our location. You can read more about how Google processes data in Google's Privacy Policy. If you'd rather not trigger that connection, you can look up our address (Antifašističke borbe 43, New Belgrade) on a map provider of your choice instead.

7. Cookies

This website only uses strictly necessary cookies required for basic functionality (e.g. remembering your selected language). We do not use cookies for tracking, analytics or advertising. Most browsers accept cookies automatically, but you can disable them in your browser settings if you wish — this will not affect the website's core functionality.

8. Your rights

Regarding your personal data, you have the right to:

• request access to the data we hold about you;
• request correction of inaccurate or incomplete data;
• request deletion of your data ("right to be forgotten"), where there is no legal basis for further retention;
• withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal;
• object to processing and lodge a complaint with the Serbian Commissioner for Information of Public Importance and Personal Data Protection (www.poverenik.rs), or your local data protection authority.

You can send your request using the contact details listed in section 1. We aim to respond to every request as quickly as possible, and no later than the deadlines required by law.

9. Data security

We take reasonable technical and organisational measures to protect your data from unauthorised access, loss or misuse. Communication via the contact form is sent over a secure (HTTPS) connection.

10. Changes to this policy

This privacy policy may be updated from time to time, e.g. due to changes in legislation or in how the website operates. The date of the last update is shown at the top of this page. We recommend checking it periodically.