This privacy policy explains how the Dr. Milanovski dental practice in Skopje collects, uses and stores your personal data: when you visit this website, when you send us an appointment request and when you come to us for an examination or treatment. We have tried to write it in plain language and to keep legal jargon to a minimum.
We process personal data in accordance with the Law on Personal Data Protection (Official Gazette of the Republic of North Macedonia, nos. 42/2020 and 294/2021). This law is largely aligned with the European Union’s General Data Protection Regulation (GDPR).
Who is responsible for your data
The data controller, meaning the legal entity responsible for how your data is processed, is:
- PZU D-R MILANOVSKI Skopje (registered name in Macedonian: ПЗУ Д-Р МИЛАНОВСКИ Скопје), a private health institution registered as a general dental practice
- Address: Bul. Jane Sandanski 96, 1000 Skopje (Aerodrom), North Macedonia
- Company registration number (EMBS): 7069359
- Tax number (EDB): 4032015529630
- Email: dr.milanovski@gmail.com
- Phone: +389 78 218 457
If you have any questions about your data, please email or call us.
What data we collect
Appointment requests through this website
On the appointment request form, we ask only for what we need to contact you and arrange an appointment:
- your full name
- your phone number
- your email address (optional)
- the language you would like us to contact you in
- the treatment you are interested in, chosen from a list
- your preferred date and time of day
- a short message, if you would like to add anything
The form also automatically records the page from which you sent your request. If you enter your email address, you will receive an automatic confirmation there.
We do not ask for health information on the form. It is enough to say briefly why you would like to come in, for example ‘check-up’ or ‘lost filling’. Please do not mention illnesses, medicines or diagnoses in your message: we will discuss them with you at the practice.
The box at the end of the form, which you tick to agree to us contacting you about your appointment, is not pre-ticked. Children under 14 should not fill in the form themselves.
When you phone or email us
If you phone or email us, we use your name, your phone number or email address, and what you tell us, to reply to you and arrange an appointment.
The Viber button on this website opens a chat with our number in the Viber app. If you message us there, your message is also handled by the company that runs Viber, under its own privacy rules.
When you are our patient
At your examination and during treatment, we record the information needed to care for you safely: your personal and contact details, your health insurance details when the service is covered by the Health Insurance Fund (FZO), your general health, the medicines you take and any allergies, our findings, any X-rays, your treatment plan and the treatment carried out. All of this is kept in your dental record.
Technical data when you visit the website
When you open a page, our web server and security service automatically process your IP address, the type of browser you use and the time of your visit. This is needed to display the page and to protect the site from attacks and spam.
When you send a request, your IP address is also used to protect the form. It is kept for no more than one hour, only to limit the number of requests. If the Cloudflare Turnstile check is switched on, it also processes your IP address to tell people apart from automated programs (bots).
Why we use your data and on what legal basis
- Replying to your request and arranging an appointment. Legal basis: steps we take at your request before providing a service (Article 10(1), line 2 of the Law).
- Examination, treatment and your dental record. Legal basis: the processing is necessary for diagnosis and treatment, and it is carried out by a dentist bound by professional secrecy (Article 13(2), point 8, and Article 13(3)). Keeping medical records is also a legal obligation for us (Article 10(1), line 3).
- Services through the Fund. If Dr Kiril Milanovski is your chosen dentist (izbran stomatolog) under the Fund, we send it the data that the regulations require. Legal basis: legal obligation.
- Invoices and accounting. Legal basis: legal obligation under tax and accounting rules.
- Website security and spam protection. Legal basis: our legitimate interest in protecting the website and our visitors’ data (Article 10(1), line 6).
- Analytics, if switched on. Legal basis: your consent, which you give or refuse in the cookie banner.
- Google Maps. The map loads only when you click ‘Show the map’. Legal basis: your consent, which you give by clicking that button.
- Photos of teeth for publication on this website or on social media. Legal basis: your explicit written consent (Article 13(2), point 1). We publish only photos in which the patient cannot be recognised. We do not publish photos or treatment details of children.
We do not use the details from the form to send you marketing messages. We do not make decisions about you based solely on automated processing, and we do not carry out profiling.
You do not have to give us any data through the website, but without your name and phone number we cannot contact you. For treatment, however, we do need the health information that the dentist asks you for: without it, we could not treat you safely.
Health data and your dental record
Health data is a special category of personal data, and the law protects it more strictly. We collect it only at the practice: from you, or from documents you bring with you, such as previous X-rays or a referral letter.
Only the dentist and the people involved in your treatment can access your dental record. All of them are bound by professional secrecy.
We keep your record and X-rays for as long as the rules on medical records require. For this reason, a request to erase your dental record cannot be granted before that period ends (Article 21(3) of the Law). You can ask to see your record, or for a copy of it, at any time.
How long we keep your data
| Data | How long we keep it |
|---|---|
| Appointment request from the website | 180 days from receipt, then deleted |
| Dental record and X-rays | As long as the rules on medical records require |
| Invoices and accounting records | As long as tax and accounting rules require |
| Written consent to publish photos | Until you withdraw your consent |
| Your cookie choice | As set out in our cookie policy |
If you come in for an examination after sending a request, your name and phone number become part of your dental record and are kept with it.
Who may receive your data
We do not sell your data, and we do not pass it to anyone for marketing. It is shared only with:
- our hosting provider, whose servers run this website
- Cloudflare, a service that protects the website and helps it load faster
- our email provider: requests arrive in the practice’s Gmail (Google) mailbox
- Google, when you load the map or if you have accepted analytics
- the dental laboratory, which receives only the details it needs when it makes a crown or other dental work for you
- the Fund (FZO) and other institutions, when the law requires it
External providers that process data on our behalf (processors) are bound by contract to protect it, and they may use it only on our instructions.
Transfers of data outside North Macedonia
Some providers, such as those for email and website security, may store data on servers in the European Union or the United States. Transfers to a member state of the EU or the European Economic Area (EEA) are permitted under Article 48 of the Law.
Data may be transferred to other countries only if the Personal Data Protection Agency (AZLP) has decided that the country offers an adequate level of protection, or if appropriate safeguards are in place, such as standard data protection clauses (Articles 49 and 50). If you ask, we will tell you which safeguards apply.
Your rights
Under the Law, you have the right to:
- access: find out whether we process data about you and receive a copy of it (Article 19)
- rectification: have inaccurate data corrected within 15 days and incomplete data completed (Article 20)
- erasure: have your data deleted within 30 days when it is no longer needed or there is no legal basis for keeping it (Article 21); medical records are kept for as long as the law requires
- restriction of processing: ask us to limit how we use your data, for example while we check whether it is accurate (Article 22)
- data portability: receive the data you have given us in a commonly used electronic format, where we process it by automated means on the basis of your consent or a contract (Article 24)
- object to processing that is based on our legitimate interest (Article 25)
- withdraw your consent at any time, as easily as you gave it; this does not affect the lawfulness of any processing before you withdrew it (Article 11)
How to exercise your rights
Email us at dr.milanovski@gmail.com, call us on +389 78 218 457 or tell us when you come to the practice. We may ask you to confirm your identity, so that we do not give your data to the wrong person.
We will reply without undue delay, and within one month at the latest. If your request is complex, this period can be extended by a further two months; in that case, we will let you know, with our reasons, within the first month (Article 16). As a rule, there is no charge for our reply.
Your right to complain to the Agency
If you believe that your data is being processed in breach of the Law, you can submit a request to the Personal Data Protection Agency (AZLP) to establish whether there has been a violation (Article 97). The request form is on the Agency’s website.
If you prefer, you can write to us first and we will try to resolve the matter together, but you do not have to.
- Address: Bul. Goce Delchev 18 (Macedonian Radio Television building, 14th floor), 1000 Skopje, North Macedonia
- Phone: +389 2 3230 635
- Email: info@privacy.mk
- Website: azlp.mk
You have the right to challenge a decision of the Agency in court (Article 98). You can also take legal action directly in the competent court if you believe that the processing of your data has infringed your rights (Article 99).
How we protect your data
The website uses an encrypted connection (HTTPS), and the form is protected against automated spam. Only authorised people who need access for their work can see appointment requests and dental records.
If there is a personal data breach, we will notify the Agency without undue delay and, where feasible, within 72 hours (Article 37). If the breach is likely to result in a high risk to your rights, we will also inform you (Article 38).
Cookies, the map and external links
Without your consent, this website uses only essential cookies. Analytics, if we use it, is switched on only with your consent, and Google Maps loads only when you click ‘Show the map’. This is governed by the Law on Electronic Communications (Official Gazette of the Republic of North Macedonia, no. 135/2025).
For details, and to change your choice, see our cookie policy.
This website links to our profiles on Instagram, Facebook and Google. When you open them, those companies’ own privacy policies apply, not this one.
Changes to this privacy policy
We update this policy when the way we work changes or when the law changes. We publish each new version on this page, and the date of the last update is shown at the top of the page.
If you have any questions about this policy, please contact us.