Privacy and Personal Data Protection Policy for the RoyalDent Dental Clinic Website
I. General Provisions
1.Website royaldent.lv (hereinafter referred to as the "Website") is owned by SIA "Royal Dent" (registration number 40203129158, legal address: Jūrmala, Piestātnes iela 11A), владелица — Tamāra Kušnere (далее — «Компания»). Все объекты интеллектуальной собственности, размещённые на Сайте, кроме случаев, когда указано иное, являются собственностью Компании.
2.This Privacy and Personal Data Protection Policy (hereinafter referred to as the "Policy") applies solely to the use of this Website and does not apply to third-party websites, even if the user accesses them via links from our Website.
3.This policy has been developed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation, GDPR) and the Law of the Republic of Latvia "On the Processing of Personal Data" (Fizisko personu datu apstrādes likums) and establishes a set of legal, administrative, organizational, and technical measures taken by the Company to ensure the privacy and protection of the personal data of Website users.
4.The purpose of this Policy is to prevent unauthorized access, disclosure, or misuse of the personal data of Website users.
5.The company takes all necessary measures to comply with the requirements of this Policy.
II. What data is processed and on what basis
1.The company processes the following categories of data:
- First and Last Name;
- Contact information: phone number, email address;
- Message content, if the user has filled in the "Message" field;
- Technical data that is automatically recorded when accessing the Site: IP address, browser type, date and time of access. This data is recorded in the hosting provider's logs.
2.Data is provided voluntarily by the user when submitting a feedback form or an appointment booking form. The legal basis for processing is the user's consent (Article 6(1)(a) of the GDPR), as well as the need to take steps at the user's request prior to entering into a contract (Article 6(1)(b) of the GDPR).
3.This website uses cookies. Cookies necessary for the website to function and remember user choices are always installed. Analytics and advertising cookies are installed only after the user's explicit consent, which is requested upon the first visit and can be revoked at any time on the "Cookie Usage" page. Analytics and advertising tools are not loaded and no data is collected until consent is granted.
4.Health information is not collected through the Website. Medical data is processed directly at the Clinic based on separate documents signed by the patient upon application.
III. Sharing data with third parties
1.The following categories of data recipients are involved in the operation of the Website:
- The hosting provider that hosts the Website and maintains technical access logs;
- Google Ireland Limited — when displaying the embedded map and, only after analytics consent, when using Google Analytics 4; the user’s IP address and technical device information may be transmitted by the browser;
- Plerdy — only after analytics consent, to analyse interface usability and page interactions without transmitting the contents of form fields.
2.Data may be transferred to third parties only if expressly provided for by law or if the user has given separate consent.
3.The Company does not sell or transfer personal data to third parties for marketing purposes.
4.The company is not liable if the user voluntarily posts their personal data publicly in open sources.
IV. Data storage period and location
1.Personal data shall be stored for the period necessary to achieve the purposes of processing, or until the user’s consent is revoked, unless a longer storage period is provided for by the regulatory enactments of the Republic of Latvia.
2.Data is stored and processed within the European Union or the European Economic Area. Data transfer outside of these territories is permitted only if the safeguards provided for by the GDPR are in place.
3.Clinic's physical address: Jūrmala, Piestātnes iela 11A.
V. User Rights
1.In accordance with Chapter III of the GDPR, the user has the right to:
- Obtain information about the sources of collection, storage location, and purposes for which your personal data is processed;
- access to and receive a copy of their personal data (Article 15 of the GDPR);
- Request the correction of inaccurate or supplemental data (Article 16 of the GDPR);
- Request deletion of data - "the right to be forgotten" (Article 17 of the GDPR);
- Request a restriction on processing (Article 18 of the GDPR);
- Receive your data in a structured, machine-readable format and transfer it to another operator (Article 20 of the GDPR);
- Object to data processing (Article 21 of the GDPR);
- Revoke consent to processing at any time - this does not affect the legality of processing performed prior to the revocation;
- File a complaint with the supervisory authority, the Latvian State Data Inspectorate (Datu valsts inspekcija).
2.To exercise your rights, you can send a request to the email address: info@royaldent.lv or Call us +371 27 057 783. Компания отвечает на запрос в срок, установленный GDPR.
VI. Deletion and destruction of personal data
1.Personal data is subject to deletion or destruction in the following cases:
- After achieving the purposes for which it was collected;
- After the user revokes consent to their processing, unless there is another legal basis for further storage;
- by a court decision or an order from the State Data Inspectorate (Datu valsts inspekcija).
2.Once deleted or destroyed, data cannot be restored.
