Privacy Policy
Data is processed fairly and lawfully.
Data processing is carried out for specific purposes and only in accordance with those purposes.
Data is adequate (not excessive).
Data is accurate.
Data is not stored longer than necessary.
Data is processed in accordance with your rights.
Data is secure.
Data is not transferred to other organisations, institutions or foreign countries without adequate secure protection.
1. Data Controller: Association “”PSYPHY” fiziskās un psiholoģiskās rehabilitācijas centrs”” (Reg. No. 40008282191), legal address: Riga, Lubānas iela 129 k-1 – 59, LV-1021; actual address: Elizabetes iela 45/47, Riga, LV-1010, e-mail: info@psy-phy.com, telephone: +371 29133963.
2. What personal data we process and where it is obtained from
Identification and contact data: name, e-mail, telephone number (provided by you when making a booking or communicating with us).
Transaction data: booking time, type of service, payment (status, method).
3. Payment processing is provided by the payment platform makecommerce.lv; therefore, the Association transfers the personal data necessary for processing payments to the platform owner Maksekeskus AS.
4. Purposes and legal bases
Your e-mail addresses are used to personally inform you about the Association’s services and events, as well as to conduct client surveys, the results of which are necessary for achieving the objectives set out in the Articles of Association, carrying out tasks, including protecting the interests of the Association. Your consent is requested for marketing purposes.
Booking administration and responding to requests — performance of a contract or measures taken prior to entering into a contract.
Payment processing and accounting.
Fraud prevention, security, incident investigation.
Marketing communications by e-mail/SMS — only with your consent, which you may withdraw at any time.
Cookies for analytics/marketing — only with your consent.
In order to fulfil its obligations towards you, the Data Controller has the right to transfer your personal data to cooperation partners and data processors who carry out the necessary data processing on our behalf, for example, accountants, courier services, etc.
Upon request, we may transfer your personal data to state and law enforcement authorities in order to protect our legal interests where necessary by preparing, submitting and defending legal claims.
5. Recipients and categories
We care about your privacy; therefore, under no circumstances will your personal data be disclosed or sold to third parties for purposes not specified in this Policy. Data may be provided to law enforcement authorities on the basis of a request from a competent state official. At the same time, we inform you that we are obliged to disclose client information to law enforcement authorities if there is suspicion of criminal activity.
6. Retention periods
Personal data is processed in Latvia and is not transferred outside the European Union or the European Economic Area. The Association takes reasonable measures to maintain the correctness and accuracy of personal data and to ensure data security.
Client profile and booking data: until the service has been provided + 2 years for the purposes of the limitation period for disputes (unless there are other legitimate interests).
Accounting and payment documents: 10 years.
Marketing consent records: until consent is withdrawn + 1 year for evidentiary purposes.
7. Your rights
By consenting to the use of your personal data for a specific purpose, you have the right to change your mind and withdraw your consent at any time; however, this will not affect processing that has already been carried out. If we use your personal data on the basis of legitimate interests, you have the right to object to such data processing, although in some cases this may mean that the service will no longer be available to you.
You have the right to:
request the correction of your personal data if it is inadequate, incomplete or incorrect;
object to the processing of your personal data where the use of personal data is based on legitimate interests, including profiling for direct marketing purposes, for example, receiving marketing offers or participating in surveys;
request the deletion of your personal data, for example, if the personal data is processed on the basis of consent and you withdraw your consent. This right does not apply if the personal data whose deletion is requested is processed on another legal basis, for example, a contract or obligations arising from applicable laws and regulations;
withdraw your consent to the processing of your personal data by informing us thereof on the website or in writing;
receive your personal data that you have provided and that is processed on the basis of consent and/or performance of a contract, in written form or in one of the commonly used electronic formats and, where possible, transfer such data to another service provider (data portability).
If you wish to exercise your rights or have questions regarding data protection, you can contact us by e-mail at info@psy-phy.com.
If you are not satisfied with the solutions offered by us or, in your opinion, we do not take the necessary actions, you have the right to lodge a complaint with the Data State Inspectorate (www.dvi.gov.lv).
8. Cookies
See the Cookie Policy and consent settings (you can withdraw your consent on the website at any time).
9. Final provisions
The Privacy Policy has been developed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (27 April 2016) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), as well as the applicable laws and regulations of the Republic of Latvia and the European Union.
The Data Controller has the right to make changes or additions to the Privacy Policy at any time and without prior notice. Amendments enter into force after their publication on the website www.psy-phy.com.
