1. Controller and contact
HLN SmartHealth DOO, Đakona Avakuma 65A, 21000 Novi Sad, Serbia. Privacy requests can be sent to [email protected].
2. Information we collect
The enquiry form may contain a name, work email, phone, organization name and type, requested service, business-problem description, indicative timeline, budget range, source page and UTM parameters. We do not request patient health information. When HLN Project Advisor is enabled, message content, language, a session identifier and communication time are processed.
3. Purpose and legal basis
Information is used to answer requests, assess a possible engagement, prevent abuse and maintain business records. The basis may be steps requested before a contract, consent or a legitimate interest in security and business administration, depending on the processing activity.
4. Retention
Enquiries are retained by default for up to 24 months after the last relevant communication. Project-advisor records are retained by default for up to 90 days. Information may be deleted sooner following a valid request or retained longer where required by contract, law or legal-claim protection.
5. Recipients and providers
The website and administration data may be processed through WordPress and hosting infrastructure supplied by HostGator. Enquiries are delivered to a business mailbox. When the agent is enabled, message text is transmitted to the OpenAI API service to generate a response. Providers receive only the information needed for the relevant function.
6. International transfers
Some technology providers may process information outside Serbia or the European Economic Area. Before production processing of more sensitive categories, processing locations, contractual safeguards and the appropriate transfer mechanism are reviewed. The public demo is not intended for patient information.
7. Analytics and cookies
Optional analytics does not load without consent. When analytics identifiers are blank, those services remain disabled. Consent can be refused or withdrawn by clearing the stored website choice in the browser.
8. Your rights
You may request access, correction, deletion, restriction, portability or object where applicable. Include the email used in the communication so we can verify identity and locate the record. You may also contact the competent data-protection authority.
9. Security and limits
Reasonable technical and organizational measures are applied, including administrative access control, backups and separation of demo and production environments where appropriate. No internet system can guarantee absolute security. Do not submit medical records, diagnoses, test results, national identifiers, passwords or trade secrets.