Skip to main content
Dr. Lukić

Privacy Policy

This Privacy Policy explains how Dr. Branislav Lukić ("we", "us") collects, uses, and protects personal data provided through this website and our communication channels. We process personal data in accordance with the Serbian Law on Personal Data Protection (Zakon o zaštiti podataka o ličnosti).

Data controller

  • Dr. Branislav Lukić — Aesthetic Medicine Practice.
  • Miren Clinic, Vojvode Stepe 250, Belgrade, Serbia.
  • Contact: office@drbranislavlukic.com
  • Appointment requests sent to the Zurich contact channels go directly to Meda Esthetic in Switzerland, a separately registered Swiss company; the privacy notice at meda-esthetic.ch applies to that processing.

Information we collect

  • Contact details you provide when reaching out via WhatsApp, email, or other communication channels.
  • Appointment requests and messages you submit.
  • Clinical photographs you may share for a preliminary assessment or during the course of treatment.
  • Anonymous website usage data collected through Plausible Analytics and Vercel Speed Insights (pages visited, browser type, device type, country). This data is aggregated and cannot identify you personally.
  • The language you pick with the language switcher, stored in your browser as a preference cookie. Its value is only en or sr, and it identifies no one. See our Cookie Policy.

How we use information

  • To reply to enquiries and arrange consultations.
  • To conduct preliminary clinical assessments of photographs you have shared.
  • To improve the website's content and usability based on aggregated analytics.
  • To meet legal and security obligations where required.

Legal bases for processing

  • Replying to enquiries and arranging consultations: steps taken at your request before entering into a treatment agreement.
  • Preliminary assessment of clinical photographs: your explicit consent. You may withdraw it at any time; withdrawal does not affect processing that took place before it.
  • Website analytics and performance measurement: our legitimate interest in understanding aggregate site usage, using tools that avoid personal identification.
  • Record-keeping and security: compliance with the legal obligations that apply to a medical practice.
  • Remembering the language you chose: your own request, made by using the language switcher. The preference stays on your device; we do not store it on our systems.

Photographs and clinical information

  • If you share a photograph for a preliminary clinical assessment, it is treated as special-category health data under applicable law and used only for that assessment or your subsequent care.
  • Photographs are stored securely, kept only as long as clinically necessary, and deleted sooner on written request.
  • Photographs are never used for marketing, teaching, or publication without your separate, explicit written consent.

Third-party services

  • Vercel Speed Insights: collects anonymous web performance metrics (Core Web Vitals — page load times, interaction responsiveness). Vercel's privacy policy applies to this data processing.
  • Plausible Analytics: collects anonymous page view and referrer data without cookies or personal identification. Plausible is privacy-focused and designed with privacy regulations in mind.
  • WhatsApp (Meta Platforms): when you contact us via WhatsApp, Meta's privacy policy applies to message delivery and storage.
  • We do not sell, share, or transfer your personal data to third parties for marketing purposes.

Where your data is processed

  • Our service providers may process data outside Serbia. This includes WhatsApp messages on Meta's infrastructure in the European Economic Area and the United States, website hosting and performance data with Vercel in the United States, and anonymised analytics with Plausible on servers in the European Union. Each provider processes data under its published data-protection terms.
  • WhatsApp is a channel outside our control: when you message us there, Meta's own processing applies before the message reaches us. If you would rather not send photographs or health details through WhatsApp, email us at info@drbranislavlukic.com or bring them to your consultation.

Data retention

  • Enquiries that do not lead to a consultation are deleted no later than one year after our last exchange.
  • Clinical documentation, including photographs used in your care, is retained for the periods prescribed by Serbian medical-records regulations and then deleted.
  • Analytics data is aggregated and anonymised — no personal data is retained by our analytics tools.

Your rights

  • You have the right to access, correct, or request deletion of your personal data.
  • You have the right to object to or restrict processing of your data.
  • You have the right to receive the data you provided to us in a structured, commonly used, machine-readable format (data portability).
  • Where processing is based on your consent, you may withdraw it at any time.
  • To exercise these rights, contact us at office@drbranislavlukic.com.
  • You may also file a complaint with the Commissioner for Information of Public Importance and Personal Data Protection of the Republic of Serbia.

This policy was last updated in August 2026. If you have questions about privacy or data handling, contact us at office@drbranislavlukic.com.