Privacy policy

01Who we are

The data controller is PODÉA, Prizren, Kosovo. The controller's full contact details are published on the contact page.

02What we collect

• When you book: your name, phone number, email (optional), the service, date and time, and any message you choose to write
• Minimal technical data recorded by the server for security, such as IP address and request time

03Why we use it

Only to manage your appointment, to contact you about it and for the care you receive from us. The legal basis is your consent and preparing the service you request, in line with Law No. 06/L-082 on the Protection of Personal Data.

04Health information

Your message may contain health information. Write only what is needed for the appointment. We discuss details during the consultation.

05How long we keep it

We keep appointment requests for no longer than 24 months after your last appointment, unless the law requires otherwise.

06Who we share it with

We do not sell your data or share it for marketing. We only use the technical providers that run the website and bookings (hosting, database and email notifications), who process data on our instructions.

07Cookies

This website does not use cookies for analytics or advertising. Only strictly necessary technical cookies are used, for example for staff sign-in to the admin panel.

08Your rights

• To request access to your data
• To request correction or deletion
• To withdraw your consent at any time
• To lodge a complaint with the Information and Privacy Agency