Privacy Policy

How we protect your personal data.

This Privacy Policy explains how the REHABILITY Rehabilitation Clinic processes and protects the personal data of website visitors and users of its services. Processing is carried out in accordance with the Personal Data Protection Act of the Republic of Serbia (“Sl. glasnik RS”), and because the website is also available in Hungarian and English and is aimed at visitors from the EU, we also apply the standards of the General Data Protection Regulation (GDPR).

Data controller

“JOVAN ROGIĆ PR, AMBULANTA ZA REHABILITACIJU REHABILITY SUBOTICA”
Georgija Dimitrova 2A, 24000 Subotica, Serbia
MB: 60121125 · PIB: 104365704
Activity: physical therapy and medical rehabilitation
Email: jovan.rogic.fizio@gmail.com · Tel: 024/522-150 · Mob: 064 286 2000

What data we collect

  • Data from the contact form: full name, email, telephone number and the content of the message you submit through the contact form.
  • Technical data: IP address, device and browser type, operating system, and data collected via cookies (see the Cookie Policy).
  • Health data: processed solely as part of providing the rehabilitation service, with your consent and applying confidentiality measures; this data is not collected through the website.

Purpose and legal basis of processing

  • responding to enquiries and scheduling appointments (basis: your consent and taking steps prior to entering into a contract);
  • providing and improving rehabilitation services (basis: performance of a contract and legal obligations);
  • protecting the contact form from misuse and spam (basis: legitimate interest);
  • measuring visits and basic analytics to improve the website (basis: your consent given via the cookie notice).

Third parties and data processors

We do not sell data to third parties. To run the website and provide certain features we use trusted service providers who process specific data on our behalf:

  • Google Analytics (via the Google Site Kit plugin): collects website visit statistics using cookies (_ga, _ga_*). The processor is Google Ireland Ltd, or Google LLC. Data may be transferred outside the EU (USA).
  • Google Tag Manager: a Google tool that manages analytics and marketing tags on the website.
  • Mapbox: displays the interactive location map on the Contact page. Resources are loaded from the servers of Mapbox Inc. (USA), and the visitor’s IP address may be logged.
  • Cloudflare Turnstile: protects the contact form from spam and bots, provided by Cloudflare Inc. The solution is designed to respect privacy and does not track users across websites.
  • Contact Form 7: the contact form through which the data you enter (name, email, phone, message) is delivered to the clinic’s email.
  • WordPress (content management system) and Polylang (sets a pll_language cookie that remembers your language choice).
  • Hosting provider: the server hosting the website processes technical data necessary for its operation (e.g. IP address in server logs).

International transfers

By using the services of Google, Mapbox and Cloudflare, certain data may be transferred to the United States. These transfers are carried out with appropriate safeguards in place, primarily the Standard Contractual Clauses approved by the European Commission.

Cookies

The website uses necessary cookies (e.g. pll_language to remember the language) and, with your consent, analytics cookies (Google Analytics). Detailed information about the types of cookies, their purpose and duration, and how to manage your consent, is available in the Cookie Policy.

Data retention

We retain data only for as long as necessary for the stated purposes or as required by law. Contact-form messages are kept until the communication and any scheduling are concluded, and at most for as long as needed for documentation. Analytics data is retained in line with the Google Analytics settings. Once the purpose ceases, the data is deleted or anonymised.

Your rights

You have the right to access your data, to rectify, erase and restrict its processing, the right to object to processing, and the right to withdraw your consent at any time (withdrawal does not affect the lawfulness of processing before withdrawal). You may submit a request to jovan.rogic.fizio@gmail.com. If you believe the processing of your data is unlawful, you have the right to lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection.

Data security

We apply appropriate technical and organisational data protection measures, including an encrypted (HTTPS) connection, access control and cooperation with vetted service providers. Despite all measures, no transmission of data over the internet is entirely without risk.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in the operation of the website or in legislation. Changes take effect when published on this page, so we recommend that you review it periodically.

Contact

For any questions regarding the protection of personal data, please contact us at jovan.rogic.fizio@gmail.com or by phone at 024/522-150.

Last updated: 2026.