We are aware that personal data is a value, and we process it while observing confidentiality requirements and taking care of the security of the personal data in our possession.
Our aim is to give you a general overview of the personal data processing activities we carry out and their purposes. However, please note that other documents (for example, contracts and other documents related to the service) may contain additional information about the processing of your personal data.
1. Definitions
Client — any natural person who has used or uses the services provided by SIA DUBULTU DOKTORĀTS, or who is otherwise connected with the services provided by SIA DUBULTU DOKTORĀTS.
Controller (pārzinis) — SIA DUBULTU DOKTORĀTS or its structural unit determining the purposes and means of personal data processing.
In case of any ambiguity, the terms of this policy are interpreted in the meaning of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, GDPR).
2. Controller and its contact details
The controller of personal data processing is SIA DUBULTU DOKTORĀTS, unified registration No. 40003591773, legal address: Jūrmala, Strēlnieku prospekts 16 (hereinafter also — Doktorāts).
Phone of the SIA DUBULTU DOKTORĀTS data protection specialist: 26834178, e-mail address: liigajaunzeme@inbox.lv
Using the contact details indicated or by contacting the legal address of Doktorāts, you can ask questions of interest related to personal data processing.
Data processing is carried out at the following locations:
-
Jurmala branch of SIA DUBULTU DOKTORĀTS — Strēlnieku prospekts 16, Jūrmala, LV-2015
-
Riga branch of SIA DUBULTU DOKTORĀTS — Bauskas iela 33-103, Rīga, LV-1004
On the Doktorāts account on the social network “FACEBOOK” platform, there is an opportunity to receive information about healthcare services and about registering an appointment for a visit.
Doktorāts has no control over the actions carried out by “FACEBOOK”. The purpose and scope of data collection, as well as how “FACEBOOK” processes and uses it, are described in the “FACEBOOK” data protection rules.
Automated decision-making in relation to you as a data subject is not carried out.
3. What personal data do we process?
Doktorāts obtains and processes only the data and to the extent necessary for the previously specifically defined purposes of personal data processing, and only in accordance with them. Doktorāts observes the principle of personal data minimisation — we do not request, collect or process personal data that is not necessary to achieve the purpose: to provide services, receive information, fulfil obligations imposed by law, and realise legitimate interests.
Doktorāts takes all necessary actions to ensure the most transparent processing of personal data possible and so that you can be sure of the security and fairness of the data processing. Doktorāts is not liable for incorrect, incomplete or erroneously submitted data on the part of the Client. The Client is responsible for the accuracy of the information provided.
4. For what purposes is your personal data processed?
We process your personal data for the purpose of providing quality services, which also includes the preparation, conclusion and performance of contracts, the development and improvement of the service, and the performance of other related functions. We may use your personal data to ensure the protection of the security, life, health and other rights of Doktorāts, Clients and visitors, and to respond to your requests and questions. Data may be used for the planning, conduct and analytics of commercial activity, the administration of settlements, debt recovery, risk management, and to ensure the fulfilment of obligations laid down in regulatory acts — for example, to ensure data security or compliance with the principle of market transparency.
For other specific purposes where data may be used, the information is provided to the person at the moment the data is obtained.
Doktorāts processes personal data on the following legal grounds:
-
for the conclusion and performance of a contract — to conclude a contract at the Client’s request and ensure its performance;
-
for compliance with regulatory acts — to fulfil the obligations laid down in the regulatory acts binding on Doktorāts;
-
on the basis of the consent of the Client — the data subject;
-
on the basis of legitimate interests — to realise the legitimate interests of Doktorāts and/or the Client arising from existing obligations, a concluded contract or the law, for example: the Client’s health, the health of society or other people, the protection of property, ensuring the quality of the service, etc.
5. To whom and in which cases does Doktorāts pass your personal data?
Doktorāts does not disclose the Client’s personal data or any information obtained during the provision of services and the term of the contract to third parties without a legal basis.
Cases in which data may be disclosed:
The Client has given clear and unambiguous consent to the disclosure of their data, for example, to receive health insurance services.
-
if the data must be passed to a third party within the framework of a concluded contract in order to perform a function necessary for the performance of the contract or established by law;
-
to fulfil obligations imposed by law, data is disclosed only to the extent established by law and to the institutions established by law (for example, the SRS (VID), the SSIA (VSAA), law enforcement institutions, etc.);
-
to ensure the protection of the legitimate interests of Doktorāts, data may be passed to debt recovery institutions, auditors, legal advisers, and other persons who may be involved in providing the service to the Client, for example, postal service providers.
For the purpose of providing the service, data is passed to approved personal data processors. In such cases Doktorāts takes the necessary measures to ensure that such processors process personal data in accordance with the instructions of Doktorāts and in accordance with regulatory acts, and requires the processors to take appropriate security measures.
For personal data processing, Doktorāts uses the following approved data processors: SIA “CENTRĀLĀ LABORATORIJA” (reg. No. 40003210801), Rīga, Šarlotes iela 1B, LV-1001.
6. How is the protection of your data ensured?
Doktorāts protects the Client’s data against unauthorised access, improper use, disclosure, loss or destruction, using the possibilities of modern technology, taking into account the existing privacy risks and the organisational, financial and technical resources reasonably available to Doktorāts.
To ensure data protection, Doktorāts uses, among others, the following means: data is stored in lockable rooms and lockable cabinets, password protection is used for electronically stored data, and video surveillance is carried out; access to information and data is restricted and possible only for selected and authorised Doktorāts employees, using a specifically assigned username and password that is periodically renewed, etc.
Employees who have access to the Client’s data are informed about the principles of data processing and instructed on security measures.
7. How is data stored and updated?
Personal data is processed only for as long as necessary to achieve the specified processing purpose. The storage period may be justified by a contract with the Client, the legitimate interests of Doktorāts, or applicable regulatory acts (for example, laws on accounting, on the prevention of money laundering, civil law, etc.).
We strive to ensure the accuracy and relevance of the personal data in our possession, deleting unnecessary data and updating outdated data.
Our ability to offer the best recommendations and information about our services also depends on how well we know you and how accurate and correct the data we process is. Therefore it is important that the information you provide is accurate and correct, and that you inform us of any changes in the data.
8. What are your rights as a data subject?
You have the right to receive information about whether Doktorāts processes your personal data and, if it does, to access it, to request the correction of your personal data if it is inaccurate, incomplete or incorrect, to object to the processing of your personal data if its use is based on legitimate interests, and to withdraw your consent if the personal data is processed on the basis of consent. Withdrawal of consent does not affect processing carried out while the consent was in force.
You have the right to request the deletion of your personal data, for example, if it is processed on the basis of consent. This right does not apply if the personal data whose deletion is requested is also processed on another legal basis — for example, a contract or an obligation established by regulatory acts — as well as the right to restrict the processing of your personal data, for example, during the period while Doktorāts assesses whether the Client has the right to have their data deleted.
You have the right to receive your personal data processed on the basis of consent and performance of a contract in written form or in one of the most commonly used electronic formats and, where possible, to transfer such data to another service provider (data portability).
You have the right to submit a complaint about the use of personal data to the Data State Inspectorate (www.dvi.gov.lv) if you consider that the processing of personal data violates your rights and interests under the applicable regulatory acts. You can contact Doktorāts regarding the withdrawal of consent, requests, the exercise of your rights as a data subject, and complaints about the use of personal data using the contact details indicated in section 2.
A data subject may submit a request to exercise their rights in the following ways:
-
in written form in person at the premises of Doktorāts, presenting an identity document (for example, a passport or ID card);
-
by e-mail, signing it with a secure electronic signature. In this case, it is presumed that the data subject has identified themselves by submitting a request signed with a secure electronic signature. At the same time, Doktorāts reserves the right, in case of doubt, to request additional information from the data subject if it considers this necessary.
The data subject is obliged to specify as precisely as possible in their request the date, time, place and other circumstances that would help to fulfil the request.
For the purposes of confidentiality and data processing security, before issuing information, Doktorāts takes appropriate measures to verify the Client’s identity.
9. Video surveillance
Video surveillance is carried out in the indoor premises of the controller SIA “Dubultu Doktorāts”.
The purpose of video surveillance: to prevent and detect criminal offences related to the protection of property, to record the commission of unlawful actions, to ensure the protection of people’s vital interests, including life and health, to identify persons who have caused harm or losses, and to obtain evidence for the defence of legitimate interests.
- SIA “DUBULTU DOKTORĀTS” is entitled at any time to unilaterally amend the Privacy Policy in accordance with regulatory acts, making the current version of the Privacy Policy available to the Client by placing information about data processing on the website www.arsti.lv or by notifying the Client of the amendments by post, e-mail or otherwise.