Privacy Policy

Last updated: 18 October 2026

This Privacy Policy explains how Rubin Dent SH.P.K. processes personal data when you visit rubindent.com, contact our team or request an appointment through our website.

It covers our website and related enquiries. Information about the processing of clinical records and data collected during dental treatment is provided separately where required.

1. Who Is Responsible for Your Data?

The controller responsible for the processing described in this policy is:

Rubin Dent SH.P.K.
Ulpiana D/4, Hyrja 1, Nr. 4
10000 Prishtina, Kosovo

Email: info@rubindent.com
Phone: +383 49 868 790
Website: rubindent.com

Please use these contact details for questions about this policy or to exercise your data protection rights.

2. Applicable Data Protection Rules

We process personal data in accordance with applicable data protection legislation, including Kosovo Law No. 06/L-082 on the Protection of Personal Data. The EU General Data Protection Regulation (GDPR) also applies where its territorial scope is met.

3. Data Processed When You Visit Our Website

Delivering the website requires the processing of technical information, including your IP address, requested pages and files, date and time of access, browser and operating system information, and the referring page where transmitted.

Our hosting infrastructure may record this information in server logs to maintain availability, investigate errors and protect the website against abuse.

The purpose is to operate a reliable and secure website. Where the GDPR applies, the legal basis is our legitimate interest in website delivery and security under Article 6(1)(f).

4. Contact Forms and Appointment Enquiries

Our contact form includes fields for your first name, surname, email address, telephone number and message. Your email address is required in the current form; the other fields are optional.

We use the information you submit to respond to your enquiry, discuss your request and arrange appointments. If you contact us by email or telephone, we process the information you provide through that channel for the same purposes.

For requests concerning a potential treatment or appointment, processing is necessary to take steps at your request before entering into a contract. Where the GDPR applies, the legal basis is Article 6(1)(b). General enquiries are handled on the basis of our legitimate interest in responding to communications under Article 6(1)(f).

You are not required to submit an online enquiry. However, without sufficient contact details, we may be unable to respond. You may contact the clinic by telephone instead.

5. Health Information

Please do not include medical records, X-rays, identification documents or detailed health information in the general contact form. Contact our team to arrange an appropriate way to provide information needed for your care.

If your enquiry contains health information, it requires additional protection and a specific legal condition for processing beyond the ordinary basis for handling enquiries. Depending on the circumstances, this may be processing necessary for healthcare under professional confidentiality or your explicit consent, where legally appropriate. Where the GDPR applies, the relevant conditions may include Article 9(2)(h) or Article 9(2)(a).

Submitting a message does not, by itself, constitute explicit consent to every use of health information. Health information must not be included in website analytics or advertising data.

6. Cookies and Consent Preferences

The website uses Complianz to display cookie choices and manage consent preferences. This involves storing information about your selected categories and consent status in your browser.

Necessary storage supports essential website functions and records your privacy choices. Optional analytics and other services requiring consent must operate on the basis of your consent. Where the GDPR applies, consent-based processing relies on Article 6(1)(a).

You can review or change your choices through the website's consent controls. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

Further information about cookies, their purposes and expiry periods is available in our Cookie Policy. You can also delete or restrict cookies in your browser settings.

7. Google Analytics

The website includes Google Analytics 4 to help us understand how visitors use our pages and improve the website.

Depending on the configuration and your consent choices, Analytics processes information such as page views, interactions, referral sources, device and browser information, approximate location and online identifiers.

The intended legal basis for optional analytics is your consent. You can withdraw it using the website's consent controls.

Google may process information on infrastructure outside your country. Further information is available in Google's Privacy Policy.

8. Google Fonts

The website requests fonts from Google's servers to display its typography. These requests disclose technical connection information, including your IP address and browser request details, to Google.

Where consent is required for this external service, it must be obtained before the connection is made. Information about Google's processing is available in Google's Privacy Policy.

9. Google reCAPTCHA

The contact page includes Google reCAPTCHA to help distinguish genuine enquiries from automated submissions and protect the website against spam and abuse.

This service may process your IP address, browser and device information, interaction signals and information stored by Google in your browser to assess whether a request is automated.

Spam prevention serves our legitimate interest in website security. Where the service's storage, access or associated processing requires consent, that consent is required in addition to this security purpose.

Please see Google's Privacy Policy and Terms of Service. You may contact the clinic by telephone if you prefer not to use the online form.

10. Reviews Displayed Through Trustindex

We use Trustindex to display reviews originally published on Google. Displayed information may include the reviewer's public name, profile image, rating, review text and publication date.

Loading review scripts, images and other resources from Trustindex or Google may disclose technical connection information, including your IP address, to those providers.

Displaying reviews serves our legitimate interest in informing visitors about patient feedback. Consent is required for any associated optional tracking or storage where applicable. Reviews that reveal health information require separate consideration under the rules for sensitive personal data.

Further information: Trustindex Privacy Policy.

11. Website Translation

The website uses GTranslate to offer language options. When translation is activated, the translation service may process page content, technical connection information and your selected language. Language preferences may be stored in your browser.

This processing supports the translation you request. Any additional optional storage or tracking requires consent where applicable. Please avoid entering sensitive information into content that is submitted to an external translation service.

Further information: GTranslate Privacy Policy and, where Google translation services are involved, Google's Privacy Policy.

12. Maps and Social Media Links

Our website includes links to Google Maps, Facebook and Instagram. Following these links takes you to an external service, whose operator processes data under its own privacy policy.

If you are signed in to the external service, the provider may associate your activity with your account. Any messages you send us through social media are also processed by that platform. Please avoid sending detailed health information through social media.

13. Patient Images and Testimonials

The website displays patient feedback and treatment-result images. Identifiable patient images and testimonials that disclose health information require an appropriate legal basis, including explicit consent where required.

If publication is based on your consent, you can contact us to withdraw it for future use. Withdrawal does not affect prior lawful processing. Content already copied or independently published by third parties may remain outside our control.

14. Who May Receive Your Data?

Depending on the purpose, recipients may include:

  • Authorised clinic staff handling enquiries and appointments.
  • Hosting, email, website maintenance and IT service providers.
  • Providers of analytics, security, translation and review services, as described above.
  • Professional advisers or public authorities where disclosure is necessary and legally permitted or required.

Providers acting on our behalf may process data only within their authorised role and subject to applicable contractual requirements. Some external services also process data for their own purposes, as explained in their privacy policies.

15. International Processing

Rubin Dent is based in Kosovo. Information you submit to the clinic is therefore received and handled in Kosovo. External service providers may also process information in other countries, including the United States.

Where applicable law requires safeguards for an international transfer, the relevant transfer must be supported by a valid mechanism, such as an applicable adequacy decision or approved contractual safeguards. The mechanism depends on the provider, recipient and processing location. You may contact us for information about the safeguards relevant to your personal data.

16. How Long Is Data Kept?

Retention depends on the purpose of processing and any applicable legal obligations:

  • Enquiries: for the time needed to respond and complete related follow-up, unless further retention is justified by a legal obligation or a specific dispute.
  • Appointment and patient information: according to applicable healthcare and recordkeeping requirements, explained separately where relevant.
  • Technical logs: for the limited period needed for operation, troubleshooting and security investigations.
  • Consent records: for the period needed to record your choices and demonstrate compliance.
  • Cookies and analytics: according to cookie expiry periods and the configured retention settings of the relevant service.

17. Your Rights

Subject to the conditions and exceptions in applicable law, you may have the right to:

  • Request access to your personal data and information about its use.
  • Request correction of inaccurate or incomplete data.
  • Request deletion of your data.
  • Request restriction of processing.
  • Object to processing based on legitimate interests, taking account of your particular situation.
  • Object at any time to processing for direct marketing.
  • Receive or transfer your data where data portability applies.
  • Withdraw consent at any time where processing relies on consent.
  • Lodge a complaint with a competent supervisory authority.

Send requests to info@rubindent.com. We may need proportionate information to verify your identity. We will respond within the time limits set by applicable law.

18. Complaints

You may contact Kosovo's Information and Privacy Agency (Agjencia për Informim dhe Privatësi): aip.rks-gov.net.

Where the GDPR applies, you may also complain to a competent supervisory authority in the EU/EEA, including in the country of your habitual residence, place of work or the alleged infringement.

19. Updates to This Policy

We may update this policy when our website, services or legal obligations change. The date at the top indicates the latest revision.