Skip to content

Privacy Policy

Effective date: 23 January 2026

  1. Introduction
    This Privacy Policy explains how Miren Clinic / Miren Polyclinic (hereinafter: "Miren", "we", "our clinic") collects, uses, stores and protects the personal data of visitors and users of the website mirenmedic.rs (hereinafter: the "Site"), as well as of people who contact us for information and to book appointments.

We apply this policy to the processing of data that arises:

  • when you visit the Site,
  • when you send an enquiry through the contact form, by e-mail or by telephone,
  • when we communicate about booking appointments and providing services (to the extent that this communication is initiated through the Site).
  1. Who the data controller is
    The controller of personal data is:
    Miren Clinic / Miren Polyclinic
    Address: Vojvode Stepe 250, Belgrade, Serbia
    Telephone: +381 11 6359 130; +381 64 9510 000
    E-mail: info@mirenmedic.rs

For questions about privacy, data protection and exercising your rights, you can write to us at: info@mirenmedic.rs (marking your message "For privacy / data protection").

  1. Which data we collect
    A) Data you provide to us
    When you contact us (contact form, e-mail, telephone), we may collect:
  • your first and last name,
  • your e-mail address,
  • your telephone number,
  • the content of your message (your enquiry, appointment request, preferred appointment time and any additional information you enter).

Important note: please do not send detailed health data (test results, diagnoses, treatment details or photographs of medical records) through the contact form. If you do send such information, we will process it only to the extent necessary to answer your enquiry and organize the service, applying enhanced confidentiality measures.

B) Data collected automatically (technical and analytical data)
When you use the Site, the following may be collected automatically:

  • your IP address (or a shortened version of it, depending on the settings),
  • the type and version of your browser, your operating system and device type,
  • data on how the Site is used (pages visited, time spent, source of the visit),
  • technical identifiers and logs relating to security and stability.
    This data is collected through cookies and similar technologies, in accordance with the Cookie Policy.
  1. Purposes of processing and legal basis
    We process your data only where we have a justified reason and a legal basis, most often for the following purposes:

1) Answering enquiries and communicating with you
Purpose: to answer your request and provide the information you asked for.
Data: first name, last name, contact details, content of your message.
Basis: taking steps at your request and/or our legitimate interest in maintaining quality communication with interested parties.

2) Booking appointments and organizing healthcare services
Purpose: booking, confirming and if necessary changing appointments, organizing your arrival and communicating about your visit.
Data: first and last name, contact details and the information necessary to organize the appointment.
Basis: taking steps at your request before entering into a contract and/or performing a contract for the provision of a service; where required and to the extent provided for by regulations, compliance with legal obligations.

3) Providing healthcare services (away from the Site, when the process continues at the clinic)
Purpose: providing healthcare, medical records, diagnostics and treatment in line with professional standards.
Data: this may also include special categories of data (health data).
Basis: performance of a contract and/or legal obligations; the processing of special categories of data is carried out with respect for professional confidentiality and the applicable regulations.

4) Site security and prevention of misuse
Purpose: protecting the Site and detecting and preventing fraud, spam, attacks and unauthorized access.
Data: technical data, logs, IP address, device and browser identifiers.
Basis: our legitimate interest in ensuring the security and reliability of our systems.

5) Statistics and improvement of the Site (analytics)
Purpose: understanding how the Site is used and improving its content and functionality.
Data: data on visits and interactions, technical identifiers.
Basis: consent (for analytical cookies where consent is required) or legitimate interest, depending on the type of technology and the applicable rules.

6) Marketing communication
Purpose: informing you about services, news, training events and offers.
Data: name and contact details (e-mail/telephone) and basic information about your interests (if you have provided it).
Basis: consent where required and/or legitimate interest to the extent permitted, with the option to unsubscribe easily at any time.
Unsubscribing: every marketing message includes an unsubscribe option, and you can also request to unsubscribe by writing to info@mirenmedic.rs.

  1. Whether you are obliged to provide us with data
    You are not obliged to provide us with your data. Without basic contact details, however, we will not be able to answer your enquiry or arrange an appointment.
  2. Who we may disclose data to (recipients) and processing on our instructions
    We may share your data only where necessary, and only with:
  • providers of hosting and IT services (servers, maintenance, security, backup),
  • providers of tools for measuring visits and Site performance (analytics), where these are enabled and in line with your cookie settings,
  • providers of e-mail and telecommunications services, for communication purposes,
  • providers of spam protection and security incident services (for example firewall, anti-spam, CAPTCHA), where these are enabled,
  • the competent authorities, where this is a legal obligation or where it is necessary to protect rights and safety.

With partners who process data on our instructions, we seek to have appropriate contractual obligations of confidentiality, security and limitation of processing in place.

  1. Transfers of data abroad
    Some technology providers (for example analytics, embedded content, social networks) may process data outside the Republic of Serbia. Where such a transfer takes place, we take protective measures (contractual and technical) so that the level of protection is appropriate, in line with the applicable rules.
  2. How long we keep data
    Applying the principles of data minimization and storage limitation means we keep data only for as long as necessary:
  • Enquiries and messages from the Site or by e-mail: up to 12 months from the last communication, unless a longer period is needed to resolve a request or complaint or to protect rights.
  • Appointment booking data: for the period needed to carry out the appointment and a reasonable period afterwards, as a record of the communication and for quality of service, unless regulations require longer retention.
  • Data that becomes part of medical records: kept for the periods prescribed by the applicable healthcare and other regulations.
  • Logs and security records: typically from 30 days to 12 months, depending on the type of log and the security need.
  • Marketing contacts: until consent is withdrawn or you unsubscribe, or for as long as a permitted basis exists.
  1. Your rights
    In accordance with the applicable regulations, you may exercise the following rights (where they apply):
  • the right to access your data,
  • the right to have inaccurate data corrected or incomplete data completed,
  • the right to erasure (in the cases provided for by law),
  • the right to restriction of processing,
  • the right to object to processing based on legitimate interest,
  • the right to data portability (where applicable),
  • the right to withdraw your consent at any time (withdrawal does not affect the lawfulness of processing carried out before it).

You can send your request to info@mirenmedic.rs. In order to protect your privacy, we may ask for reasonable verification of your identity before acting on the request.

Book an appointment