Who is responsible for your data
The controller of personal data collected through this website is Dado Šabotić (ChiropractorDado). In this policy, “we” refers to the controller.
For any privacy questions and to exercise your rights, write to: info@chiropractordado.com
Contact form
When you send an enquiry, we process your name, email address and the text of your message, as well as the language of the page you are writing from. We use this data only to respond to your enquiry and, if you wish, to arrange an appointment.
Enquiries are not stored in the website database. They are sent by email to our account, and you receive an automatic confirmation of receipt. We keep the correspondence in our email for no longer than 12 months after the last message and then delete it.
Legal basis: steps taken at your request before a possible agreement on a service (Serbian Law on Personal Data Protection, Article 12(1)(2); GDPR, Article 6(1)(b)).
To protect the form from abuse (automated submissions and spam), your IP address is not stored in its original form, only as a one-way value (hash) created with a secret key, together with the time of sending. These records are used only to limit the number of messages and are deleted after 30 days. Legal basis: legitimate interest in protecting the website (Law on Personal Data Protection, Article 12(1)(6); GDPR, Article 6(1)(f)).
Website analytics (Google Analytics 4)
Only if you allow it in the cookie notice do we use Google Analytics 4 to understand which pages visitors read and how they find the website. Before you consent, no Google script is loaded and no cookie is set.
The data collected relates to how the website is used: pages visited and time of visit, page language, device and browser type, approximate location (country and city) and the source of the visit. Google Analytics 4 does not log or store IP addresses. Google Signals and ad personalisation are turned off, and we do not use the data for advertising.
Retention: user-level and event-level data is kept in Google Analytics for 2 months. After that, only aggregated reports remain, with no link to individual visitors.
The service is provided by Google (Google Ireland Limited or Google LLC), so data may be transferred to the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework and also applies standard contractual clauses to data transfers.
The legal basis is your consent (Law on Personal Data Protection, Article 12(1)(1); GDPR, Article 6(1)(a)). You can withdraw your consent at any time, as easily as you gave it:
Strictly necessary records
Your choice in the cookie notice is stored in your browser’s local storage for 6 months, so that we do not ask you on every page. The record contains only your choice, the version of this policy and the date of your choice.
A login cookie exists only in the administration area of the website and is never set for visitors.
Like any web server, the server hosting this website may keep technical access logs (for example IP address, time and requested page) for security and proper operation.
Cookies and similar records
| Name | Purpose | Duration | Type |
|---|---|---|---|
cdd_consent | Remembers your cookie choice | 6 months | Strictly necessary (browser local storage) |
_ga | Google Analytics: distinguishing visitors | up to 2 years | Analytics, only with consent |
_ga_YDSSBNPH3R | Google Analytics: visit state | up to 2 years | Analytics, only with consent |
cdd_admin | Login to the administration area | up to 8 hours | Strictly necessary, administrator only |
Who else has access to the data
We do not sell your data or share it for marketing purposes. Access is limited to service providers needed to run the website: the hosting and email provider (contact form) and, with your consent, Google (website analytics).
Your rights
Under the Serbian Law on Personal Data Protection and, for visitors from the European Union, the General Data Protection Regulation (GDPR), you have the right to:
- request access to your data and a copy of it
- request correction of inaccurate data
- request erasure of your data
- request restriction of processing
- object to processing based on legitimate interest
- request portability of the data you provided to us
- withdraw your consent at any time, without affecting the lawfulness of processing before withdrawal
Send your request to the email address given at the top of this page. We will respond without undue delay and no later than within 30 days.
If you believe your data is not processed lawfully, you can lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection of Serbia: www.poverenik.rs
Visitors from the European Union may also contact the supervisory authority in their own country.
Data security
The website runs exclusively over an encrypted connection (HTTPS). We do not store contact form data in a database, and we keep technical records to the minimum necessary and only for as long as needed.
Changes to this policy
We may update this policy from time to time. The date of the last change is shown at the top of the page. If the way we use cookies changes, we will ask for your consent again.