Privacy policy
Last updated: 11 November 2026
This policy explains which personal data Zdravstvena ustanova dr Đerić (Dr Đerić healthcare practice) collects through the website drdjeric.com, why it uses the data, how long it keeps it and which rights you have. It is written in line with the Law on Personal Data Protection of Bosnia and Herzegovina (Official Gazette of BiH, No. 12/25).
The policy covers this website only. Processing of patient data in the course of treatment and other services is covered by a separate notice that you receive at the practice.
1. Who is responsible for your data
The data controller is Zdravstvena ustanova Stomatološka ambulanta „Moj zubar doktor Đerić“ Bijeljina, Svetozara Ćorovića 34, 76300 Bijeljina, Bosnia and Herzegovina, tax ID (JIB) 4404241560005.
Email: info@drdjeric.com · Phone: +387 55 420 430
2. Which data we collect and why
Visiting the website
When you open the website, the server automatically records your IP address, the date and time of access, the page opened, the address you came from and browser details. We use this data only to run and secure the website, for example to detect attacks and errors.
Legal basis: legitimate interest in running the website securely (Article 8(1)(f) of the Law).
Retention: 30 days, after which the data is deleted automatically.
Enquiries
The website has no contact form. When you contact us by email or phone, we process your name, email address, phone number and the content of your message in order to reply and to book an appointment. Please do not send health information or medical findings by email; we discuss these by phone or at the practice.
Legal basis: steps taken at your request before entering into a contract (point (b)) and our legitimate interest in answering your enquiry (point (f)).
Retention: until the enquiry is resolved, and no longer than 12 months after the last message, unless the enquiry leads to a contract.
Cookies
The website sets no cookies and uses no visitor tracking, statistics or advertising tools. See the Cookie policy for details.
3. Who else receives your data
We do not sell your data or pass it on to others for their marketing. Access is limited to:
- think.ba (agencija za računarsko programiranje „THINK" Momir Cerovina s.p., Bijeljina), which hosts and maintains the website as our processor under a data processing agreement;
- public authorities, only where the law requires it.
4. Transfers abroad
The server that runs the website is located in Germany (European Union), where the General Data Protection Regulation (GDPR) applies.
The website uses no services from the United States or other third countries. Fonts and all content are loaded from our own server.
The website contains links to other websites (Google Maps, Instagram and Facebook). When you open such a link you leave our website, and the privacy policy of that site's owner applies.
5. How long we keep data
Retention periods are stated for each purpose in section 2. When a period ends, we delete the data or anonymise it permanently.
6. Your rights
You have the right to:
- request access to your data and a copy of it (Article 17);
- request correction of inaccurate data (Article 18);
- request deletion of data (Article 19);
- request restriction of processing (Article 20);
- receive your data in a machine-readable format and transfer it to someone else (Article 22);
- object to processing based on legitimate interest (Article 23);
- withdraw consent at any time, without affecting the lawfulness of processing before the withdrawal (Article 9).
Send your request to info@drdjeric.com. We reply free of charge within 30 days at the latest. In complex cases the period may be extended by a further 60 days, and we will let you know (Article 14). We may ask you to confirm your identity.
We do not make decisions about you based solely on automated processing, including profiling.
7. Complaint to the Agency
If you believe we process your data unlawfully, you can lodge a complaint with the Personal Data Protection Agency in Bosnia and Herzegovina (www.azlp.ba) or bring an action before the competent court. Please contact us first, as we can resolve most questions straight away.
8. Whether you must provide data
Providing data is voluntary. Without contact details we cannot reply to your enquiry.
9. Children
The website is not intended for children under 16 and we do not knowingly collect their data. Appointments for children are booked by parents or guardians. If we learn that we received a child's data without parental consent, we delete it.
10. How we protect data
The website runs over an encrypted connection (HTTPS). Only authorised persons have access to data, the server is updated regularly and a backup is made every day.
11. Changes to this policy
We update the policy when the way we process data changes. The current version is always on this page, with the date of the last update.