Privacy Policy

1. Data controller

The controller responsible for processing personal data through this website is:

2. Sources of personal data

We normally receive personal data directly from you in the following ways:

• When you complete the website contact form.
• When you submit an appointment request.
• When you contact us by email or telephone or provide additional information during subsequent communication.
• If a request is submitted on behalf of another person by their legal representative or another authorised person, we may receive information from that person.

3. Personal data we process

Depending on how you use the website, we may collect the following information:

• Your name and surname.
• Your email address and telephone number.
• The selected service and your preferred appointment date and time.
• Information that you voluntarily provide in a message or booking comment.
• Limited technical information required for website security and correct operation, such as IP address and request logs.

4. Why we process your data

• To respond to your questions and requests.
• To process appointment requests and contact you about the requested service.
• To protect the website, prevent misuse and investigate technical problems.
• To comply with applicable legal obligations.

We do not use contact or booking form data to send marketing messages without a separate lawful basis.

5. Legal basis

Contact requests are processed under Article 6(1)(f) GDPR on the basis of our legitimate interest in responding to enquiries. Appointment requests are processed under Article 6(1)(b) GDPR in order to take steps at your request before providing a service.

Technical information is processed under Article 6(1)(f) GDPR on the basis of our legitimate interest in maintaining a secure and properly functioning website.

Where required by law, data are processed under Article 6(1)(c) GDPR in order to comply with a legal obligation.

6. Requirement to provide personal data

Fields marked as mandatory are necessary for us to process your contact or appointment request and communicate with you. Providing an additional comment is voluntary.

If you do not provide the mandatory information, we may be unable to process the request or provide a response.

7. Health information

The website contact and booking forms are intended to arrange communication and appointments. They are not intended for submitting medical records, diagnoses or detailed health information.

If you unexpectedly provide health information, we will assess whether it is necessary and, where there is no legal basis or need to retain it, delete it without undue delay.

Data collected during the provision of healthcare services may be processed under separate requirements applicable to patient data and medical records.

8. How long we retain data

Personal data received through the website contact or appointment request forms, together with related notifications and technical records, are retained for six months from the date on which the request was received and are then deleted.

9. Service providers and recipients

Access to personal data is limited to persons and service providers who need it to operate the website or respond to your request.

• Website, database and infrastructure hosting providers.
• Email or communication service providers.
• Technical support providers where access is necessary.
• Accounting or legal service providers where necessary.
• Public authorities where disclosure is required by law.

Service providers may process personal data only in accordance with our instructions, contractual arrangements and applicable data-protection requirements.

We do not sell your personal data.

10. International data transfers

Where a service provider processes data outside the European Economic Area, appropriate safeguards required by the GDPR will be used.

Transfers are based on a European Commission adequacy decision or other safeguards permitted by Chapter V GDPR, such as Standard Contractual Clauses and necessary supplementary security measures.

11. Protection of personal data

We apply technical and organisational measures appropriate to the processing risks in order to protect personal data.

• Restricted access rights and secure management of access credentials.
• Protection of data in transit, databases and backups.
• Software updates and monitoring of access and security incidents.
• Limits on the amount of data collected, access to it and its retention period.

12. Your rights

Subject to the conditions established by applicable law, you may have the right to:

• Request access to your personal data.
• Request correction of inaccurate or incomplete data.
• Request deletion of your data.
• Request restriction of processing.
• Object to processing based on legitimate interests.
• Request data portability where applicable.
• Withdraw consent at any time where processing is based on consent; withdrawal does not affect the lawfulness of processing performed before it.

To protect personal data, we may ask you to verify your identity before fulfilling a request.

We will respond within the period prescribed by law, normally within one month.

To exercise your rights, contact us at privacy@example.lv .

13. Right to lodge a complaint

If you believe that your personal data has been processed unlawfully, you may lodge a complaint with the Latvian Data State Inspectorate:

Datu valsts inspekcija
Elijas iela 17, Rīga, LV-1050
pasts@dvi.gov.lv
www.dvi.gov.lv

We encourage you to contact us first so that we can review the matter. This does not restrict your right to contact the Data State Inspectorate at any time.

14. Cookies

This website currently does not use analytics or advertising cookies. Strictly necessary technical mechanisms may be used to provide security and essential website functionality.

15. Automated decision-making

We do not use personal data submitted through the website for automated decision-making or profiling.

16. Changes to this policy

We may update this Privacy Policy when the website, data processing activities or legal requirements change. The current version will always be published on this page.