Privacy policy

At Stomatoestetika Ovsenik we respect your privacy. This notice explains which personal data we process when you visit www.stomatoestetikaovsenik.com or contact us, why we need it, who we share it with and what rights you have. It has been prepared in accordance with the General Data Protection Regulation (GDPR) and the Slovenian Personal Data Protection Act (ZVOP-2).

Data controller

Zobozdravstvena dejavnost, Lenart Ovsenik s.p.
Peričeva 23, 1000 Ljubljana, Slovenia
Email: info@se-ovsenik.si
Phone: +386 41 744 800

For any question about your personal data, write to us at the address above.

What data we process and why

Contact form, email and phone. When you write to us through the form on the website, by email, or call us, we process the data you give us: your name, email address, phone number (if you provide it) and the content of your message. We use it only to reply to you, arrange an appointment and send you the information you asked for. The legal basis is taking steps at your request before entering into a contract (Article 6(1)(b) GDPR) or our legitimate interest in replying to the messages we receive (Article 6(1)(f) GDPR).

Providing your data is voluntary, but without an email address or phone number we cannot reply to you. We do not carry out automated decision-making or profiling.

Health information. Please do not include details of your health in your message unless they are needed to arrange your treatment. If you share them, we process them only to plan your treatment, and they are covered by medical confidentiality (Article 9(2)(h) GDPR).

Visiting the website. The server hosting the website automatically records technical data on each visit, such as your IP address, the time of the visit, the page requested and your browser type. This is needed for the site to work and stay secure (legitimate interest, Article 6(1)(f) GDPR), and we do not use it to identify visitors. The website does not use analytics or advertising cookies; see Cookies.

Who we share data with

We do not sell your data or share it with third parties for marketing. The following providers help us run the website and handle messages as processors, acting only on our instructions:

• Vercel Inc., USA – website hosting and handling of the contact form,
• Resend, USA – delivery of contact form messages to our mailbox,
• Google Ireland Limited (Google Workspace) – the clinic's email.

Where a provider is based in the USA, the transfer is protected by the EU-US Data Privacy Framework or by the European Commission's standard contractual clauses. We also disclose data to public authorities where the law requires it.

How long we keep data

We keep enquiries for as long as we need them to reply and, if you wish, to arrange your treatment, and delete them no later than 12 months after our last contact. If you become our patient, the data needed for your treatment is kept in your medical record for the periods set by healthcare regulations.

Your rights

You can ask us at any time for:

• access to the personal data we hold about you,
• correction of inaccurate or incomplete data,
• erasure of data we no longer have a legal basis to keep,
• restriction of processing,
• transfer of your data to another controller where technically feasible.

You can also object to processing based on our legitimate interest. Send your request to info@se-ovsenik.si and we will reply within one month.

If you believe we process your data unlawfully, you can lodge a complaint with the Information Commissioner of the Republic of Slovenia, Dunajska cesta 22, 1000 Ljubljana, www.ip-rs.si.

Changes to this notice

We may update this notice from time to time, for example when the website or the law changes. The current version is always published on this page.