Legal information
Privacy Policy
Last updated: 5 August 2026.
This Privacy Policy explains how VIDAR-ORASIS SWISS processes personal data when you use the vidar.rs website, contact us or submit an appointment request through the website. It applies to processing carried out through the website. Data created during the provision of healthcare is processed in accordance with the specific regulations governing healthcare and the institution's internal rules.
1. Data controller
The data controller is Zdravstvena ustanova u privatnoj svojini "VIDAR-ORASIS SWISS" NOVI SAD, Tax Identification Number 106836866, Company Registration Number 08922004.
- Registered office: Bulevar cara Lazara 79 B, 21000 Novi Sad, Serbia
- Clinic location and contact address: Bulevar oslobođenja 76A, 21000 Novi Sad, Serbia
- Email for privacy questions and requests concerning your rights: info@vidar.rs
- Telephone numbers: 021 63 61 222, 021 444 864, 065 522 3860
2. Data we collect
When you submit a request through the form, we may collect your first and last name, telephone number, email address, selected service, preferred date and time, and the text of your message. Technical data required for the operation and protection of the website may be processed automatically. This may include your IP address, the date and time of access, the page visited, device and browser type, and security logs.
Do not enter diagnoses, medical reports, treatment details, your national identification number or other health or particularly sensitive data in the online form. If you nevertheless submit such data, we will process it only to the extent necessary to respond safely, fulfil a legal obligation or protect your vital interests. Where possible, we will then remove it from any channel not intended for medical documentation.
3. Purposes and legal basis for processing
- responding to an enquiry and arranging an appointment, in order to take steps at your request before providing a service and on the basis of our legitimate interest in communicating effectively with patients;
- sending confirmation that a request has been received and contacting you later by telephone or email to confirm the appointment;
- preventing spam, misuse and security incidents, on the basis of our legitimate interest in protecting the website, patients and information systems;
- fulfilling the institution's legal obligations and responding to requests from competent authorities;
- processing based on consent where consent is explicitly requested for a specific optional purpose. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.
4. Who may have access to the data
Data is available only to authorised employees and associates who need it in order to respond or arrange an appointment. To the extent required for the operation of the website, data may be processed by providers of hosting, maintenance and email services, subject to appropriate confidentiality and data-protection obligations. Data may be disclosed to public authorities where we are required to do so by law or by an order of a competent authority.
The form uses Akismet, a service provided by Automattic, to detect spam. Technical data and form data required for this check may therefore be sent to this provider. More information is available in the Automattic Privacy Policy.
5. Google Maps and external content
The Contact page contains an embedded Google map. When the map loads, Google may receive your IP address and information about your device and browser and may set its own cookies in accordance with its policies. More information is available in the Google Privacy Policy. If you do not wish to use the map, you can read the contact details and address without interacting with it.
6. Cookies
At the time of the most recent update, no dedicated advertising cookies, Google Analytics or Meta Pixel were detected on the publicly tested pages of the website. The website and its security or technical services may use essential cookies or similar technologies for basic operation, protection and administration. External content, particularly Google Maps, may use its own cookies in accordance with the provider's policies.
7. Transfer of data outside Serbia
Certain technical providers, including Google and Automattic, may process data in other countries. Where such a transfer applies, we require it to be carried out on an appropriate legal basis and with the safeguards provided for by data-protection law.
8. Retention period
We retain data from enquiries and appointment requests only for as long as necessary to respond and complete the communication. We retain it for longer only where the communication becomes part of documentation that we are required to keep, where there is a legal obligation, or where retention is necessary to establish, exercise or defend a legal claim. Technical and security logs are retained for a limited period in accordance with the purpose of protecting the system and the infrastructure providers' rules.
9. Your rights
Under the Serbian Law on Personal Data Protection, depending on the circumstances, you have the right to request access to your data, correction or completion, erasure, restriction of processing and data portability. You may object to processing based on legitimate interests and withdraw consent where processing is based on consent.
You can send a request to info@vidar.rs. To protect your data, we may ask for additional proof of identity. We will respond without undue delay and within the period prescribed by law.
If you believe that processing is unlawful, you have the right to lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection.
10. Security
We apply technical and organisational measures appropriate to the risk, including an encrypted HTTPS connection, access restrictions, security controls, backups and monitoring for misuse. No method of transmitting or storing data is completely free of risk. Please therefore do not send medical data through an ordinary online form or unprotected email.
11. Minors
A parent or legal guardian may submit an appointment request on behalf of a minor. Only the information necessary for contact and arranging the appointment should be entered in the online form, without the child's health information.
12. Changes to this policy
We may update this policy when we change our processing practices, service providers or the applicable regulations. The current version and date of the latest update will always be published on this page.