Privacy Policy

1. Data Controller

The data controller for personal data collected through this website is:

Targetad, a sole proprietorship (obrt) for digital marketing under Croatian law (trading as Dentasky)
Registered office: Zagreb, Croatia
Croatian personal identification number (OIB): 15365214364
E-mail for privacy inquiries: gdpr@dentasky.eu

Throughout this document, the name "Dentasky" or "the data controller" is used.

2. What Data We Collect

Through this website, Dentasky collects the following categories of personal data:

• Contact form ("Send a question"): first and last name, e-mail address, name of the dental practice/clinic, message content.
• Booking a call (Google Calendar / Google Workspace widget): name, e-mail address, and any information you enter when booking an appointment through the embedded calendar. This data is processed by Google as a processor, in accordance with Google's privacy policy.
• Website usage data: standard technical data (e.g. browser type, IP address, pages visited) collected through analytics tools, if used - see Section 6 (Cookies).

Dentasky does not collect special categories of personal data (e.g. health data) through this website.

3. Purpose and Legal Basis for Processing

Dentasky processes your data for the following purposes:

• Responding to inquiries submitted through the contact form - legal basis: steps taken at your request prior to entering into a possible contract (Art. 6(1)(b) GDPR).
• Scheduling and conducting the free strategy call - same legal basis as above.
• Improving and securing the website - Dentasky's legitimate interest (Art. 6(1)(f) GDPR).
• Marketing communications (e.g. newsletter), only where you have given explicit consent - legal basis: consent (Art. 6(1)(a) GDPR). You may withdraw your consent at any time.

Dentasky does not use automated decision-making or profiling that would produce legal effects concerning you.

4. Data Retention Period

Dentasky retains personal data for as long as necessary to fulfil the purpose for which it was collected, and no longer than:

• Contact form inquiries: up to 24 months from the last contact, unless the inquiry results in a business relationship - in which case the statutory retention periods for business/accounting records apply.
• Data related to booked appointments: as per Google Workspace's default settings, or until the call has taken place or you request deletion.
• Data for marketing communications (newsletter): until consent is withdrawn, and no longer than 3 years from the last interaction - adjust this period to actual practice before publishing.

Once these periods expire, the data is permanently deleted or anonymised.

5. Data Recipients and Processors

Dentasky does not sell or rent your data to third parties. Data may only be shared with the following processors, to the extent necessary to provide the service:

• Google Ireland Limited (Google Workspace / Google Calendar) - for appointment scheduling.
• Netlify, Inc. - website hosting provider.
• Microsoft Corporation (Microsoft Outlook / Microsoft 365) - for sending the contact form and e-mail communication.

Some of the processors listed above are based, or process data, outside the European Union/EEA (e.g. Netlify, Inc. and Microsoft Corporation, in the United States). In such cases, the data transfer is based on appropriate safeguards under the GDPR, such as Standard Contractual Clauses (SCCs) and/or the provider's participation in the EU-U.S. Data Privacy Framework, depending on the provider's current status. Updated information on the transfer mechanism is available on request.

Data processing agreements (DPAs) have been or will be concluded with all processors, in accordance with Art. 28 GDPR.

6. Cookies

This website aims to use a minimal number of cookies and third-party scripts. It uses:

• Necessary cookies - required for the basic functioning of the website (e.g. security settings).
• Analytics cookies (if used, e.g. Google Analytics) - only with your consent, via the consent management tool (cookie banner).

You can change your consent settings at any time via the link in the website footer ("Cookie Settings").

7. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• access to the data Dentasky processes about you,
• rectification of inaccurate or incomplete data,
• erasure of data ("right to be forgotten"), where the legal conditions are met,
• restriction of processing,
• data portability,
• objection to processing based on legitimate interest or direct marketing,
• withdrawal of consent at any time, without affecting the lawfulness of processing before withdrawal,
• the right to lodge a complaint with a supervisory authority - in Croatia, the Croatian Personal Data Protection Agency (AZOP); UK-based visitors may also contact the Information Commissioner's Office (ICO) if they consider that Dentasky's processing of their data infringes applicable data protection law.

You may send your request to the e-mail address listed in Section 1. Dentasky will respond within one month of receiving the request.

8. Data Security

Dentasky takes reasonable technical and organisational measures to protect your data from unauthorised access, loss, or misuse. Only personnel who require access to perform their work have access to the data.

Given the scope and nature of the processing, Dentasky is not required under the GDPR to appoint a Data Protection Officer (DPO).

9. Contact

For any questions regarding the processing of your personal data, you may contact Dentasky at:

Targetad (obrt), trading as Dentasky - Zagreb, Croatia
E-mail: gdpr@dentasky.eu

Last updated: 08-2026.