Cookies and privacy
Updated: 14 October 2026.
The data controller is Ordinacija dentalne medicine Izidora Miser, dr. med. dent., Vladimira Nazora 19, 40315 Mursko Središće, Croatia. For questions about data processing or to exercise your rights, email info@dentalmiser.hr or call +385 40 313 874.
Cookies and similar technologies
Cookies are small files stored in your browser. This website also uses browser local storage to remember your privacy choices. Optional services are enabled only after your consent. Rejecting them does not affect access to information about the practice.
Your choices
You can accept all optional services, reject them or choose analytics and the map separately. The boxes are not preselected. Your choice is remembered in this browser for up to 180 days. You can change or withdraw it at any time using “Cookie settings”. Withdrawal does not affect the lawfulness of processing before withdrawal.
Essential storage
We store your privacy choice so the website can respect it. Essential session cookies help secure the practice sign-in and appointment form. These are necessary for the services requested and are not used for advertising.
| Name | Purpose | Duration |
|---|---|---|
| miser_privacy_v1 | Local storage: selected categories, date and notice version | Up to 180 days; expiry is checked on a visit |
| miser_admin | Secure sign-in for an authorised member of the practice | Browser session; access expires after 30 minutes of inactivity or at most 8 hours |
| miser_booking | Protection of the appointment request form | Browser session; security token valid for 30 minutes |
| miser_lang | Manual HR/SL/EN language choice | Up to one year |
| _ga, _ga_* | Google Analytics: distinguishing browsers and session data, only with consent | Up to 180 days under this website’s settings |
Google Analytics
Google Analytics 4 helps us understand website visits. The legal basis for optional analytics is your consent. The Google tag does not load before you accept analytics. If analytics is not connected to the practice’s account, it will not load even after acceptance.
Once enabled, visit data and technical browser and device data are sent. This implementation does not send names, email addresses, enquiry content, patient data or information from the administration area. The page address is sent without query parameters or fragments. Advertising personalisation and Google Signals are disabled in this integration. Google Ads tags are not used.
The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Processing may involve Google LLC in the United States and other locations listed in Google’s terms. Information about recipients and safeguards for international transfers is available in Google’s privacy policy and data processing terms.
Cookie duration differs from report retention in Analytics. Retention of user and event data is set in the practice’s account to two months before measurement is enabled. Aggregated reports may be retained longer. Withdrawing consent stops future measurement and removes accessible Analytics cookies on this domain; it does not automatically delete data previously sent.
Google Maps
The map appears only after separate consent for Google Maps. Connecting may involve your IP address, device data and storage controlled by Google, depending on your settings. The service has its own privacy rules. You can disable the map in this website’s settings. Storage from other domains can be removed in your browser settings. The external “Open Google Maps” link leaves this website and opens Google’s service.
Other data and external services
Fonts are provided by your device; the website does not load Google Fonts. Our hosting provider may keep technical logs for operation and security. To limit failed sign-in attempts, the site temporarily stores a hashed IP address and attempt times. Restrictions remain active for no more than 15 minutes; expired records are removed on the next attempt. We process telephone and email enquiries to respond and arrange appointments, separately from analytics.
To check whether a request has already been submitted, the session may store a hashed security token and a submission confirmation for up to 30 minutes, without storing the enquiry itself.
Appointment requests
The form collects your name, email address, optional telephone number, preferred part of the day and earliest suitable time. We use this information to respond and arrange an appointment by taking steps at your request before providing a service (Article 6(1)(b) GDPR). The form does not subscribe you to marketing. You may add an optional note briefly describing your concern or reason for visiting. The note is emailed to the practice together with the other form details.
Your request is sent to info@dentalmiser.hr. Authorised practice staff and the hosting and email providers needed to deliver the message may have access. The website does not store the content of enquiries in its database. Messages are kept in the mailbox while needed to arrange and handle appointments, then deleted unless there is a legal duty to retain them. The website itself does not control deletion from the mailbox.
The form uses the essential miser_booking session cookie to protect against abuse. The security token is valid for 30 minutes. To limit unwanted requests, a protected summary of the IP address and attempt times is kept for a one-hour period, without enquiry content. Expired records are removed on the next submission. The legal basis for these protective measures is the legitimate interest in website security.
Language selection
Your manual HR/SL/EN choice is stored in the essential miser_lang cookie for up to one year and takes priority over automatic selection. If the hosting provider supplies country information, visitors from Croatia are shown Croatian, visitors from Slovenia Slovenian, and visitors from other identified countries English on their first visit. We do not request GPS location or send IP addresses to an external geolocation service. If country information is unavailable, Croatian is the default.
Your rights
Depending on the applicable legal basis, you may request access, correction, erasure, restriction of processing or data portability, or object to processing. Send your request to the practice using the contact details above. You have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP).
Further information about cookie rules is available in AZOP’s guidance.