Data controller

The data controller for your personal data is Vanja Tolj, Mostar, Bosnia and Herzegovina. For any questions about the processing of your data, or to exercise your rights, please get in touch using the details on the Contact page.

What data we collect

When you send an enquiry through the form, we collect only what you enter yourself: your name, your email address and, if you provide it, your phone number, the service you choose, whether you would prefer to meet online or in person, the part of the day that suits you, and the message you write. We also record the language you filled the form in and the time you sent the enquiry and gave your consent. Your message may contain information about your health only if you choose to share it. We ask for nothing more – no date of birth, no diagnosis, no health details as separate fields, and no tracking or analytics identifiers. Your IP address is used only briefly, to protect the form from automated abuse, and is never stored with your enquiry. We do not collect information about you from any other source.

Purpose and lawful basis

We process your data solely in order to reply to your enquiry and arrange an appointment. The lawful basis is your consent, given when you send the enquiry. For any health information you share, the basis is your explicit consent, which you may withdraw at any time.

Processing and recipients

Your enquiry reaches us by email through the Resend service, whose servers are located in the European Union. We measure site traffic with Plausible Analytics (servers in the European Union), which uses no cookies and no personal identifiers and records only aggregate visit data — never your enquiry. We do not sell your data, and we do not share it with any other party except where required by law.

Data retention

We keep the data from your enquiry for no longer than 12 months from receipt, after which it is erased automatically and permanently.

Your rights

You have the right to access your data, to have it rectified or erased, to restrict its processing, and to withdraw your consent at any time. To exercise any of these rights, please get in touch through the Contact page; a request to delete your data is honoured within 30 days at the latest.