Privacy policy

This policy explains what personal data this website collects, why, how long it is kept and what rights you have over it.

Who controls the data

Dr Tanja Andonova, a licensed doctor of dental medicine, is the controller of the personal data collected through this website.

• Valandovo — Lazar Kolisevski, Aspra-dent
• Star Dojran — Marsal Tito, Poli-aspra dent
• Phone: 071 381 940
• Email: dr.tanjaandonova@gmail.com

This policy covers only data collected through the website. Clinical records kept at the practice are separate and fall under healthcare legislation.

What we collect

When you send an appointment request we store exactly what you typed into the form: your name, phone number, email address, the treatment you chose, the clinic you chose, a preferred date if you gave one, your message if you wrote one, the language you were using, and your consent.

Alongside the request we store a few technical details, solely so that abuse of the form can be recognised:

• a shortened fingerprint of your IP address — the address itself is never stored. Only an irreversible cryptographic fingerprint, computed with a secret key, is kept; it cannot be turned back into an address.
• the identifier your browser sends about itself
• the page you arrived from and any campaign tags present in the link

If you ticked the newsletter box, your email address is stored separately along with the language and the date. No marketing email is currently sent.

Before-and-after photographs are published only with the prior explicit consent of the person photographed, which is recorded separately. Original photographs are not reachable over the internet.

What we do not collect

This site uses no cookies, stores nothing in your browser, and uses no analytics, no tracking pixels and no third-party scripts of any kind. It makes no request to any external server at all — even the fonts are served from this site. If you follow the link to Instagram, that network's own rules apply from there on.

Why, and on what legal basis

• To answer your appointment request — on the basis of your consent, given by ticking the box in the form. Because the treatment you select may reveal information relating to your health, that consent is treated as explicit consent for such data.
• To protect the form from abuse — on the basis of our legitimate interest in the form not being used to send messages in bulk.
• For the newsletter — only on the basis of separate consent, which you may withdraw at any time.
• For before-and-after photographs — only on the basis of explicit consent given in advance.

Providing the data is voluntary, but without it we cannot contact you about an appointment.

How long we keep it

• Appointment requests — 24 months from receipt. Each request carries its own deletion date, so removal happens automatically rather than by reminder.
• Anti-abuse counters — one hour.
• Newsletter sign-ups — until you unsubscribe.
• The notification email received by the practice remains in its mailbox under the same periods.

Who else sees it

Only Dr Andonova sees the data. We use the following processors:

• Google Cloud (Firestore) — the database is located in Milan, Italy.
• The hosting provider for this website, whose data centre is inside the European Economic Area. It hosts the website and the email.

Data is not transferred outside the European Economic Area. We do not sell it, share it or use it for advertising. No automated decision-making or profiling takes place.

Your rights

You have the right to request access to your data, its correction, its deletion, a restriction on its processing, and its portability, and to object to processing. You may withdraw consent at any time; this does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of these rights, call 071 381 940 or write to dr.tanjaandonova@gmail.com. We reply within 30 days at the latest.

If you believe your rights have been infringed, you may lodge a complaint with the Personal Data Protection Agency of the Republic of North Macedonia. If you live in the European Union, you may also contact the supervisory authority in your own country.

Security

The site is served only over an encrypted connection (HTTPS). IP addresses are kept only as an irreversible fingerprint. Access to the data is limited to a single password-protected account, and the access keys are stored outside the publicly reachable part of the server.

Children

This site is not intended for people under 18, and we do not knowingly collect their data.

Changes

If this policy changes, we will update the date at the top of the page.

Language versions

This page is available in Macedonian, English and Greek. In case of any discrepancy, the Macedonian version prevails.