Privacy Policy

Where this site also publishes this policy in Serbian, the Serbian version is binding; the English version is provided for convenience.

1. Who we are

dolami.rs is an online appointment booking service provided by PR W-ANT, Boška Savića 11/5, Trstenik, Srbija, tax ID 115753624, registration no. 68608031 (we, us). This policy explains how we process personal data, in line with the Serbian Law on Personal Data Protection.

2. Two roles

We are the controller for the data of this site’s visitors and of the service’s customers: the companies and sole traders that open an account, their staff who sign in to the app, and the people we deal with about the account, payments and support.

We are the processor for the data of clients who book appointments with our customers. For that data the controller is the business you booked with: it decides what data it keeps and for how long, and it is the first place to go to exercise your rights. If you contact us instead, we will pass your request on to that business. The terms of that processing are in section 6 of the Terms of Service.

3. What data we process and why

Data	Purpose	Basis
Name, email, phone, business name and billing details (tax ID, address)	Opening and running the account, sign-in, account notices	Contract (Terms of Service)
Charges, pro-forma invoices and payments	Billing and bookkeeping	Contract and legal obligation
Support messages, with the device model and app version when you write from the app	Answering and solving the issue	Contract and legitimate interest
Technical records: IP address, time and type of request, error reports	Security, preventing abuse, fixing faults	Legitimate interest
Site visit data (only if we turn analytics on)	Measuring visits	Your consent
Clients’ data entered by the customer or the client when booking (name, phone, email, appointments, notes)	Providing the service to the customer	On the customer’s instructions (we are the processor)

Images you upload (for example a logo or photos) are stored as they are; if you do not want them to carry location or device data, remove it before uploading.

We do not sell data or use it for advertising.

4. Who data is shared with

To run the service we use these providers, who process data only on our instructions:

• Hetzner Online GmbH (Germany): servers, database and backups;
• Scaleway (France): additional database backups;
• Mailgun (EU region): sending the service’s emails, such as confirmations and reminders;
• Migadu (Switzerland): our business mailboxes, when you write to us;
• GlitchTip: reports of errors in the service;
• Cloudflare Turnstile: checking that a signup is not made by an automated program (bot), without tracking cookies;
• Netlify: hosting this site;
• Akton (Serbia): sending SMS, only when SMS is turned on for a customer’s account;
• OpenStreetMap: showing maps and finding a branch’s location from its address;
• Google Analytics: only if analytics is turned on, and only if you accept it (section 7).

We may also share data with public authorities where the law requires it, and with our accountant and bank as far as billing needs.

Where a provider processes data outside Serbia, we do so in line with the Law on Personal Data Protection. EU countries and Switzerland are considered to provide an adequate level of protection.

5. How long we keep data

• Account data is kept while the account exists. A closed account can be reopened, so its data is kept until you ask for it to be deleted.
• Charge and payment records are kept as long as accounting and tax rules require.
• Records of sent notices and messages are kept for 12 months, and the log of actions in the account (audit) for 24 months.
• Detailed widget usage data is kept for 30 days, then only as totals with no personal data.
• Backups are rotated regularly; deleted data disappears from them as they rotate, usually within a few weeks.

Customers can export or anonymise their clients’ data themselves, in the account’s admin.

6. Security

We apply reasonable security measures: encrypted connections (HTTPS), encrypted backups, restricted server access, two-step sign-in (available to every user) and a log of actions in the account. No system is completely secure, so we cannot guarantee absolute security; if a data breach happens, we will act as the law requires.

7. Cookies and local storage

This site uses only what it needs to work and no advertising cookies. If the site measures visits (Google Analytics), that analytics loads only after you accept it in the consent banner; if you decline, it does not load. Your choice is remembered in your browser, and you can change it by clearing the site’s data in your browser.

The app and the booking page use cookies and browser storage only for sign-in, security and settings (for example the language or the last location you chose).

8. Your rights

For data we control you have the right of access, rectification, erasure, restriction of processing, data portability, and to object to processing based on legitimate interest. You can withdraw consent (for example to analytics) at any time, without affecting earlier processing.

Send your request to privatnost@dolami.rs. We reply within 30 days; in more complex cases that period can be extended, and we will tell you if it is. We may ask you to confirm your identity before replying. Some data cannot be deleted while the law requires us to keep it.

You also have the right to lodge a complaint with the Serbian Commissioner for Information of Public Importance and Personal Data Protection (Bulevar kralja Aleksandra 15, 11120 Belgrade, www.poverenik.rs).

9. Changes to this policy

We may change this policy. The current version is always published on this page, with the date of its last change. We tell the service’s customers about material changes by email or in the app.

10. Contact

For privacy questions: privatnost@dolami.rs