Your privacy, in good hands.

JokaDent is a family dental clinic in Tirana, Albania. We are the controller of the personal information described here: we decide why and how it is used, and we answer for it.

We follow Albanian Law No. 124/2024 “On Personal Data Protection” and, for patients and visitors from the European Union and the United Kingdom, the GDPR and the UK GDPR.

What you send us

• Contact and booking requests: your name, phone number, email, preferred date of visit, and the problem you describe.
• X-rays and photos you attach, and anything else you tell us about your teeth and your health. This is health information, and we treat it with the extra care the law asks for.
• Job applications: your name, email, phone, date of birth, citizenship, city, the position and experience you apply with, your CV, licences and certificates, links you share, and your message.
• Messages you send us by email, phone, WhatsApp, Instagram or Facebook.

What your browser sends

Like every website, ours receives technical information when you visit: your IP address, browser and device type, the page you came from, the pages you open and when. Our hosting provider keeps it briefly in its logs to deliver the site and keep it secure.

• To answer you, book your consultation and prepare your treatment plan, which is why we ask for X-rays and photos.
• To provide your treatment and keep the clinical records the law requires.
• To plan a visit from abroad with you: dates, travel and accommodation.
• To consider your application when you apply to work with us.
• To run, secure and improve the website.
• With your consent only: to measure how the site is used and how our advertising performs.

Our legal grounds

Steps before a treatment agreement, and the agreement itself, when you ask for a consultation or become a patient. Your explicit consent for the health information and images you send, and for analytics and advertising cookies. Legal obligations for medical and financial records. Our legitimate interests in keeping the website secure and working. You may withdraw consent at any time; this does not affect what was done before.

We never sell your information. We share it only with the services that help us run the clinic and the site:

• Vercel hosts the website and delivers its pages.
• Google Workspace carries our email, and Resend delivers the forms you send to it.
• Cloudflare Turnstile checks, invisibly, that a form is sent by a person and not a bot (see part 06).
• Sanity stores the website’s text and pictures. It holds no visitor or patient information.
• OpenStreetMap draws the map on our Contact page (see part 07).
• Google Search Console shows us how the site appears in Google Search. It uses Google’s own search data and places no cookies on your device.
• Laboratories, specialists and, for visits from abroad, travel partners, when your treatment or trip needs them and only what they need.
• Authorities, when the law requires it.

Some of these providers are based in, or store data in, the United States and elsewhere outside Albania and the EU. Where that happens, the transfer is protected by the safeguards the law recognises, such as the European Commission’s Standard Contractual Clauses or the EU-US Data Privacy Framework.

• Patient records for as long as Albanian healthcare rules require.
• Enquiries that do not lead to treatment, with their X-rays and photos, for up to 2 years.
• Job applications for up to 12 months, unless you ask us to delete yours sooner or agree to let us keep it longer.
• Your cookie choice for 12 months.
• Hosting logs for the short period our hosting provider keeps them.

Cookies are small files a website stores in your browser. We keep them to a minimum: today the site needs only two, both to do with the cookie bar itself.

Spam protection on our forms

To keep our inbox free of spam, the Contact and Careers forms are protected by Cloudflare Turnstile, an invisible check you never have to click. While a form is on screen, it reads technical signals from your browser, such as your IP address, browser type and how the page is used, and Cloudflare tells us whether the visitor looks human. It does not set cookies for tracking or advertising, and the signals are used only for this check, under Cloudflare’s Turnstile privacy addendum. Because it protects the forms you choose to send, it runs without asking for consent. We also limit how many messages can be sent from one address in a short time.

Analytics and advertising

We may add tools such as Google Analytics to understand how visitors use the site, and Meta Pixel (Facebook and Instagram), Google Ads or TikTok Pixel to measure our advertising. They set cookies of their own and share limited information with their providers, some of it in the United States. None of them loads unless you press Accept, and each one we add will be listed in the table above with its cookies.

Your choice

Decline, and the site works exactly the same. You can change your mind at any time with the Cookie Approval button below, or delete cookies in your browser’s settings.

Cookie Approval

The map on our Contact page and in the footer is drawn from OpenStreetMap tiles. When it loads, your browser requests the tiles from the OpenStreetMap Foundation’s servers, which receive your IP address. Clicking the pin opens our listing on Google Maps, where Google’s own privacy policy applies.

Map data © OpenStreetMap contributors, available under the Open Database License. The map is displayed with Leaflet.

You can ask us, free of charge, to:

• see the personal information we hold about you and receive a copy;
• correct it, or complete it;
• delete it, where we are not required to keep it;
• restrict or object to how we use it;
• send it to you or to another provider in a common format;
• withdraw a consent you gave.

Write to info@jokadent.com and we will reply within one month. If you are not satisfied, you can complain to Albania’s Information and Data Protection Commissioner, or to the data protection authority where you live.

The site is served only over an encrypted connection, access to patient information is limited to the people who need it, and our providers are chosen for how they protect data. No system is perfectly secure, but we work to keep yours safe and will tell you, as the law requires, if something goes wrong.

Patients under 16 are welcome with a parent or guardian, who should contact us on their behalf.

When we change how we use your information, or add a new tool to the site, we update this page and the date below. Significant changes will be announced on the site.

Effective September 16, 2026