Privacy Policy
Last updated: 09/01/2026
Specialist medical practice in the field of radiology RTG Studio, DUŠANKA ŠOSBERGER PR SPECIJALISTIČKA LEKARSKA ORDINACIJA IZ OBLASTI RADIOLOGIJE RTG STUDIO NOVI SAD, with registered office in Novi Sad, Mikole Kočiša 4, Company ID: 68528518, Tax ID (PIB): 115653135 (hereinafter: “the Practice”, “we”), cares about the privacy of visitors to the website rtgstudio.rs (hereinafter: “the Site”) and the patients it examines.
We collect only the minimum data necessary and use it exclusively for the purposes stated in this Policy. We do not sell your data and do not share it with third parties for their marketing purposes. We process data in accordance with the Law on Personal Data Protection of the Republic of Serbia, as well as regulations in the field of healthcare and medical documentation.
1. What data we collect
a) Data you provide us via the Site. When you fill out the contact form, request an appointment, or contact us via email, phone, or social media, we may collect your first and last name, email address, phone number, and the content of the message you send us.
b) Data about Site usage. We automatically collect your IP address, device type, browser and operating system, pages you visit, time and duration of your visit, and approximate location (based on IP address).
c) Cookies and similar technologies. The Site uses cookies, which are small files stored on your device. We use:
-
- necessary cookies, without which the Site cannot function properly;
- functional cookies, which remember your settings;
- analytics and marketing cookies (e.g. Google Analytics, Meta Pixel), which we set only with your consent.
You may accept, decline, or delete cookies in your browser settings or via the cookie notice on the Site. If you decline cookies, some parts of the Site may not function fully.
d) Health data and examination data. Unlike the general data you leave via the Site, during the actual examination at the Practice we also collect data about your health condition necessary for performing radiological imaging (X-ray imaging of the body and teeth) — including the physician’s referral, anamnestic data relevant to the imaging, the radiological image itself, and the medical findings. This data falls into a special category of personal data and is processed exclusively for the purpose of providing the healthcare service you have sought, in accordance with the Law on Patients’ Rights, the Law on Healthcare, and the Law on Medical Documentation and Records in Healthcare. Medical records, images, and findings are kept and stored at the Practice in accordance with the aforementioned regulations, separately from data collected via the Site, and access to them is limited exclusively to authorized medical staff and persons who have a legal right of access (e.g. the patient themselves, their chosen physician with the patient’s consent, competent authorities). Please refrain from submitting information about your health condition via the Site or the contact form — such data is collected exclusively at the Practice, in the context of providing the service.
2. Why we use your data
We use your data to:
- respond to your inquiries and schedule appointments for examinations;
- communicate with you regarding your request;
- provide you with the radiological imaging healthcare service and maintain required medical records;
- ensure the proper and secure operation of the Site;
- analyze visits and improve the Site and our services;
- send notifications and promotional messages, only if you have explicitly consented to this;
- fulfill legal obligations and protect our rights.
The legal basis for processing is your consent, the need to act on your request, the provision of the healthcare service and the legal obligation to maintain medical records, our legitimate interest (security and improvement of the Site), depending on the purpose. You may withdraw your consent at any time, without affecting the lawfulness of processing carried out prior to withdrawal; this does not affect the legally mandated obligation to maintain medical records.
3. Who has access to your data
We do not publish your data publicly and do not disclose it to third parties for their independent purposes. Access may be granted to:
- our associates and service providers who process data on our behalf (hosting, website maintenance, email service, analytics, advertising), only to the extent necessary to provide their service and subject to an obligation to protect the data;
- authorized medical staff of the Practice and the patient’s chosen physician, with the patient’s consent, for the purpose of providing the healthcare service;
- government authorities, if required by law or by order of a competent authority.
4. Data transfer outside Serbia
Some of our service providers (e.g. Google, Meta) may process data collected via the Site on servers located outside the Republic of Serbia. We carry out such transfers only by applying the protective measures required by law, or with your consent when required. Medical records and health data are not transferred outside the Republic of Serbia, except when explicitly requested by the patient or required by law.
5. How long we keep data
We keep data only as long as necessary for the purpose for which it was collected, namely:
- data from inquiries and correspondence via the Site: 12 months from the last communication, unless an examination is scheduled or another legal obligation applies;
- data based on consent: until consent is withdrawn;
- data on Site usage: in accordance with cookie retention periods and analytics tool settings;
- medical records (images, findings, charts): for the periods prescribed by the Law on Medical Documentation and Records in Healthcare and accompanying bylaws.
After the expiry of these periods, the data is deleted or anonymized, except for medical records whose retention is prescribed by specific regulations.
6. Data security
We apply reasonable technical, organizational, and personnel security measures against unauthorized access, loss, or misuse of data, including special protective measures for medical records as prescribed by relevant laws. However, no transmission of data over the internet or method of electronic storage is completely secure, so we cannot guarantee absolute security.
7. Your rights
In accordance with the law, you have the right to:
- request information on whether we process your data and access to that data;
- request correction of inaccurate or completion of incomplete data;
- request deletion of data (except for medical records whose retention is legally prescribed);
- request restriction of processing;
- request data portability;
- object to processing;
- withdraw your consent at any time, as easily as you gave it;
- exercise the rights prescribed by the Law on Patients’ Rights with regard to access to your own medical records.
You may send a request to rtgstudions@gmail.com. We will respond without undue delay, and no later than 30 days from receipt of the request. This period may be extended where permitted by law, and we will notify you accordingly.
If you believe your data is being processed contrary to the law, you have the right to file a complaint with the Commissioner for Information of Public Importance and Personal Data Protection (poverenik.rs).
8. Children
The Site is not intended for persons under 15 years of age, and we do not knowingly collect their data via the Site. If the examination of a patient under 15 years of age is necessary, health data is collected and processed in accordance with the law, with the consent of a parent or guardian. If you are a parent or guardian and believe your child has provided us with personal data via the Site outside of this context, please contact us and we will delete such data.
9. Links to other websites
The Site may contain links to third-party websites (e.g. social media). We do not control their content or privacy practices and are not responsible for them. We recommend that you read their privacy policies.
10. Changes to this Policy
We may amend this Policy from time to time. The current version is always published on this page, with the date of the last update. We will notify you of significant changes via the Site.
11. Contact
For any questions regarding privacy and data protection:
RTG Studio, Mikole Kočiša 4, Novi Sad
email: rtgstudions@gmail.com
phone: +381 60 500 50 34
Person responsible for personal data protection:
Petar Samardžija, Attorney at Law
phone: +381 69 158 19 91
email: advokat@samardzija.org