Privacy Policy

Purpose

The purpose of the privacy policy of the State limited liability company “National Rehabilitation Centre “Vaivari”” (hereinafter – NRC “Vaivari”) is to provide the natural person - data subject - with information regarding the purpose, scope, protection, and duration of processing of personal data during the data collection and while processing the data subject's personal data.

Applicable Legislation

  • Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter – Regulation).
  • Law on the Protection of Personal Data.
  • Other regulatory acts in force in the Republic of Latvia in the field of processing and protection of personal data, including regulatory acts governing patient rights, information society services, etc.

Controller and its contact information

The controller of personal data processing is NRC “Vaivari”, unified registration No. 40003273900, legal address Jūrmala, Asaru prospekts 61, LV-2008.
NRC “Vaivari” contact information regarding personal data processing issues is - info@nrc.lv. By using this contact information or addressing NRC “Vaivari” at the legal address, questions regarding personal data processing can be asked.
The privacy policy will be published on NRC “Vaivari” website – nrcvaivari.lv

Scope and Objectives of the Document

Personal data is any information relating to an identified or identifiable natural person.

NRC “Vaivari” processes personal data in a mixed (electronic and manual) manner for the following purposes:

  • for medical purposes, the provision of healthcare services and their administration;
  • to provide individuals with technical aids;
  • to ensure appropriate healthcare;
  • for staff accounting;
  • for financial resource accounting;
  • to ensure the safety of individuals and the protection of property within the premises and territory of NRC “Vaivari”;
  • for research.

Vaivari has the following personal data processing systems:

  • Ārsta birojs;
  • Vaivaru Tehnisko palīglīdzekļu uzskaites programma;
  • Finanšu vadības sistēma (iekļauj grāmatvedības un personāllietu uzskaites sistēmas) (Horizon);
  • Dokumentu vadības sistēma (Namejs);
  • Telefonsarunas;
  • Videonovērošana.

The privacy policy applies to the protection of privacy and personal data concerning natural persons – patients, clients receiving rehabilitation services (including potential, former, and current), individuals provided with technical aids, employees, personal data processed in administrative and financial management information systems, as well as third parties who use the services provided by NRC "Vaivari" or are present, moving within the premises and territory of NRC "Vaivari", and also provide or obtain information containing personal data in telephone conversations (hereinafter - data subject).

NRC “Vaivari” cares for the privacy of data subjects and the protection of personal data, respecting clients' rights to the legality of personal data processing in accordance with applicable legislation - Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter - the regulation) and other applicable legislation in the field of privacy and data processing.

The privacy policy applies to data processing regardless of the form and/or medium in which the data subject provides personal data and in which NRC “Vaivari” systems or paper form they are processed.

A special processing type is established for the processing of sensitive data, which ensures an enhanced level of confidentiality.

For other specific purposes, of which the client is informed at the moment he provides the relevant data to NRC "Vaivari", he consents to its processing.

Legal basis for the processing of personal data

NRC "Vaivari" processes the client's personal data based on the following legal grounds:

  • compliance with regulatory acts – to fulfill the obligations set forth in the external regulatory acts applicable to NRC “Vaivari”;
  • legitimate interests – to realize the legitimate interests of NRC “Vaivari” arising from the obligations between NRC “Vaivari” and the data subject or from a concluded contract or law;
  • for the conclusion and performance of a contract -to conclude a contract at the request of the data subject and ensure its performance;
  • in accordance with the consent of the data subject.

Processing of personal data

NRC “Vaivari” processes the data subject's data using modern technological capabilities, taking into account existing privacy risks and the organizational, financial, and technical resources reasonably available to NRC “Vaivari”.

When the data subject receives healthcare services, in accordance with the requirements of regulatory acts, NRC “Vaivari” as an institution has the obligation to process the data subject's identifying information and information that confirms the diagnosis, justifies examinations and treatment methods, as well as accurately reflects treatment outcomes. In this case, in order to achieve the purpose of providing healthcare services, the controller may process the widest possible range of personal data, which includes - first name, last name, personal identification number, contact information, lifestyle, information about past illnesses, information about received and ongoing healthcare services (which doctor, how often, which services are chosen) and other information that the relevant healthcare specialist will choose to clarify and record in the medical documentation in the specific situation.

In order to ensure the quality and efficiency of the data subject's personal data processing, NRC “Vaivari” may authorize its partners to perform certain service delivery activities, such as engaging a company providing hippotherapy services and similar, likewise NRC “Vaivari” may transfer the processing of the data subject's personal data to such a service-providing company by concluding a data processing agreement that ensures compliance with confidentiality standards.

If, in fulfilling these tasks, NRC “Vaivari” collaboration partners process the personal data of the data subject in the possession of NRC “Vaivari”, the respective NRC “Vaivari” collaboration partners shall be considered as data processors for NRC “Vaivari” and NRC “Vaivari” has the right to transfer to the collaboration partners the personal data of the data subject necessary for the performance of these activities to the extent required for the execution of these activities. The collaboration partners (in the capacity of data processors) shall ensure compliance with the requirements for the processing and protection of personal data in accordance with Article 28(3) of the General Data Protection Regulation, other legal acts, and only for the purposes for which they were initially processed.

When the data subject enters/arrives at the premises or territory of NRC “Vaivari”, where video surveillance is conducted, their video image and the time of their visit may be processed. Video surveillance is not conducted in areas where data subjects expect heightened privacy, such as rest areas, changing rooms, etc. The recording zones of video surveillance cameras are concentrated on hallways, entrances/exits, vehicles, and the flow of people in the area.

When calling the phone numbers provided by NRC “Vaivari”, the content of the communication will be recorded for the purpose of improving service quality.

When communicating in writing, the content of the communication and the time may be retained, as well as information about the communication tool used (email address, phone number, Skype username, etc., information indicated in the e-registration system).

The controller analyzes the website visit history using online identifiers, as well as information deliberately left by the data subject (for example, feedback on the provided service, website visit experience, navigation, information about the desire to apply for any of the services provided by the controller, etc.), in order to conduct market research and opinion analysis.

Protection of Personal Data

NRC “Vaivari” protects the data subject's data using modern technological capabilities, taking into account existing privacy risks and reasonably available organizational, financial, and technical resources.

Categories of Recipients of Personal Data

NRC “Vaivari” does not disclose the data subject's personal data or any information obtained during the provision of services and the execution of the contract to third parties, except for:

  • jif the relevant third party must be provided with data within the framework of a concluded contract to perform functions necessary for the execution of the contract or functions delegated by law (for example, to the National Health Service, the State Revenue Service, if the service is related to an EU-funded project, to the project holder and/or the CFLA (Central Finance and Contracting Agency) in accordance with the terms of the project and/or contract), for conducting research by researchers whose research applications have been approved in accordance with Section 13 of the Medical Treatment Law and the Cabinet of Ministers' recommendations No. 1 of January 13, 1998, on the Model Regulations of the Medical Ethics Committee and the internal regulations of the Medical Ethics Committee of November 17, 2016.
  • if the client clearly and unequivocally consents to the transfer of data;
  • if it is provided for in external regulatory enactments in the prescribed manner and volume.

Access to personal data by third country entities

If the need arises in specific cases, in accordance with the requirements of regulatory acts, NRC “Vaivari” allows access to personal data by developers or service providers located in third countries (that is, countries outside the European Union and the European Economic Area) in the capacity of a data processor (operator). NRC “Vaivari” will ensure compliance with the procedures for the processing and protection of personal data as stipulated in regulatory acts, ensuring a level of protection equivalent to that specified by the regulation.

Duration of personal data storage

NRC “Vaivari” stores and processes the personal data of the data subject as long as at least one of the following criteria exists:

  • while the regulatory acts impose an obligation on NRC “Vaivari” to retain data;
  • while NRC “Vaivari” or the data subject can exercise their legitimate interests in accordance with the procedures established by external regulatory acts;
  • while the data subject's consent for the relevant processing of personal data is in effect, unless there is another legal basis for data processing;

When providing healthcare services, NRC “Vaivari” complies with special regulatory acts that impose an obligation to retain certain data. If you wish to obtain detailed information, please contact NRC “Vaivari” using the contact information provided above.

Video surveillance recordings aimed at preventing or detecting criminal offenses related to the protection of persons and property, the legal interests of NRC “Vaivari” or third parties, and the vital interests of individuals, including the protection of life and health, will be stored for a period not exceeding 30 days, unless the relevant video recording reflects potentially unlawful actions or actions that may assist NRC “Vaivari” or third parties in safeguarding their legal interests. In this case, the relevant video recording may be retrieved and retained until the moment of safeguarding the legal interests.

Audio recordings of telephone conversations aimed at ensuring and improving the quality of services provided by NRC “Vaivari” and protecting the legal interests of NRC “Vaivari” will be stored for a period not exceeding 15 days, unless the respective audio recording reflects potentially unlawful actions or actions that may assist NRC “Vaivari” or third parties in safeguarding their legal interests. In this case, the respective audio recording may be retrieved and retained until the moment of safeguarding the legal interests.

The record of incoming and outgoing communications (e-mail messages, postal letters) to ensure the legitimate interests of NRC “Vaivari” will be kept for a period not exceeding two years, unless the relevant communication reflects potentially unlawful actions or actions that may assist NRC “Vaivari” or third parties in safeguarding their legal interests. In this case, the relevant document may be retained until the moment of safeguarding the legal interests.

After the retention period expires, personal data will be irreversibly deleted unless there is a legal obligation to retain it in accordance with regulatory acts.

Data Subject Rights

The data subject has the right to receive information regarding the processing of their data as stipulated by regulatory acts.

The data subject has the right to request access to their personal data in accordance with regulatory acts, as well as to request NRC “Vaivari” to carry out its supplementation, correction, or deletion, or to restrict the processing of the data subject's personal data, or the right to object to processing, as well as the right to data portability.

These rights are exercisable insofar as the data processing does not arise from the obligations imposed on NRC “Vaivari” by applicable regulatory acts, and which are carried out in the public interest.

The data subject may submit a request for the exercise of their rights:

  • in written form in person at the NRC “Vaivari” board office, presenting an identity document,
  • by electronic mail, signed with a secure electronic signature.

Upon receiving a request from the data subject regarding the exercise of their rights, NRC “Vaivari” will verify the identity of the data subject, assess the request, and fulfill it in accordance with regulatory enactments.

NRC “Vaivari” provides a written response, issuing it at the board office, obtaining confirmation from the data subject of receipt, or sends it by mail to the contact address specified by the data subject in a registered letter.

NRC “Vaivari” ensures compliance with data processing and protection requirements in accordance with regulatory acts and, in the event of a data subject's objection, takes appropriate actions to resolve the objection. However, if this is unsuccessful, the data subject has the right to appeal to the supervisory authority – the Data State Inspectorate.

Data subject's consent to data processing and the right to withdraw it

If the type of data processing requires obtaining the data subject's consent for the processing of personal data, where the legal basis is consent, the data subject has the right to withdraw the consent given for data processing at any time in the same manner as it was given, and in such case, further data processing based on the previously given consent for the specific purpose will not be carried out.

The withdrawal of consent does not affect the data processing that was carried out during the time when the data subject's consent was valid.

By withdrawing consent, the processing of data based on other legal grounds cannot be terminated.

Communication with the data subject

NRC “Vaivari” communicates with the data subject using the contact information provided by the data subject (telephone number, email address), during which general information is outlined, e.g., about the services provided by NRC “Vaivari”, the times of specialist consultations, payments to be made, the procedure for admission to inpatient care, the procedure for receiving outpatient services, etc.

The information that the data subject wishes to receive, which qualifies as general information, but relating it to themselves personally, for example, regarding the approximate time frame for receiving the service. NRC “Vaivari”, balancing the data subject's right to receive information and the data subject's right to data protection, conducts at least a triple verification of the data subject's identity to ensure that the information is provided to the data subject or their legal representative.

By leaving their contact information (email, phone), the data subject agrees that NRC “Vaivari” may contact them using the provided contact information.

Website visits and cookie processing

To ensure the best and most comprehensive www.vtpc.lv user experience, cookies are used on the Vaivari website. By using this site, you consent to the use of cookies.

The website of the NRC "Vaivari" Technical Aids Center may contain links to third-party websites, which have their own terms of use and personal data protection policies, for which NRC "Vaivari" bears no responsibility.

Terms of Use for Social Media

The purpose of NRC “Vaivari” social media is to serve as a discussion platform for individuals interested in community activities. However, NRC “Vaivari” assumes no responsibility for comments posted by users on social network pages. We reserve the right to delete any content that is contrary to these terms of use or otherwise deemed inappropriate.

Respect other users and their opinions, and adhere to general courtesy. It is prohibited to post inappropriate content or materials on NRC “Vaivari” social network pages that are dangerous, incite ethnic or racial hatred, are pornographic, or offensive to religious beliefs, as well as materials that are considered advertising or violate copyright. Users who violate these terms of use may be banned from commenting on the page.

Other provisions

NRC “Vaivari” has the right to make amendments to the Privacy Policy, making the current version available to the client on the NRC “Vaivari” website.

NRC “Vaivari” retains previous versions, which are available on the NRC “Vaivari” website.

Purpose

The purpose of the privacy policy of the state limited liability company “National Rehabilitation Center “Vaivari”” (hereinafter – NRC “Vaivari”) is to provide the natural person - data subject - with information regarding the purpose, scope, protection, and duration of processing of personal data during the data collection and while processing the data subject's personal data.

Applicable legislation

  • Regulation (EU) 2016/679 of the European Parliament and of the Council (April 27, 2016) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter – Regulation).
  • Law on the Protection of Personal Data.
  • Other regulatory acts in force in the Republic of Latvia in the field of processing and protection of personal data, including regulatory acts that govern patient rights, information society services, etc.

Controller and its contact information

The controller of personal data processing is NRC “Vaivari”, unified registration No. 40003273900, legal address Jūrmala, Asaru prospekts 61, LV-2008.

NRC “Vaivari” contact information regarding personal data processing issues is - info@nrc.lv. By using this contact information or addressing NRC “Vaivari” at the legal address, questions about personal data processing can be asked.

The privacy policy will be published on NRC “Vaivari” website – nrcvaivari.lv

Scope and purposes of the document

Personal data is any information relating to an identified or identifiable natural person.

NRC “Vaivari” processes personal data in a mixed (electronic and manual) manner for the following purposes:

  • for medical purposes, provision of healthcare services and their administration;
  • to provide individuals with technical aids;
  • to ensure appropriate healthcare;
  • for staff accounting;
  • for financial resource accounting;
  • for the safety of individuals and property protection within the premises and territory of NRC “Vaivari”;
  • for research.

Personal data processing systems

NRC “Vaivari” has the following personal data processing systems:

  • Doctor's office;
  • Program for the accounting of technical aids in Vaivari;
  • Financial management system (including accounting and personnel record-keeping systems) (Horizon);
  • Document management system (Namejs);
  • Telephone conversations;
  • Video surveillance.

Application of the Privacy Policy

The privacy policy applies to the protection of privacy and personal data concerning natural persons – patients, clients receiving rehabilitation services (including potential, former, and current), individuals provided with technical aids, employees, personal data processed in administrative and financial management information systems, as well as third parties who use the services provided by NRC "Vaivari" or are present and move within the premises and territory of NRC "Vaivari", as well as provide or obtain information containing personal data in telephone conversations (hereinafter – data subject).

NRC “Vaivari” cares for the privacy of data subjects and the protection of personal data, respecting clients' rights to the legality of personal data processing in accordance with applicable legislation – Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter – the regulation), as well as other applicable legal acts in the field of privacy and data processing.

Application of the Privacy Policy

The privacy policy applies to data processing regardless of the form and/or environment in which the data subject provides personal data and in which NRC “Vaivari” systems or paper form they are processed.

A special processing type is established for the processing of sensitive data, which ensures an increased level of confidentiality.

For other specific purposes, of which the client is informed at the moment he provides the relevant data to NRC "Vaivari", he consents to its processing.

Legal basis for the processing of personal data

NRC "Vaivari" processes the client's personal data based on the following legal grounds:

  • compliance with regulatory acts – to fulfill the obligations set forth in the external regulatory acts applicable to NRC “Vaivari”;
  • legitimate interests – to realize the legitimate interests of NRC “Vaivari” arising from the obligations between NRC “Vaivari” and the data subject or from a concluded contract or law;
  • for the conclusion and execution of a contract – to conclude a contract at the request of the data subject and ensure its execution;
  • in accordance with the consent of the data subject.

Processing of personal data

NRC “Vaivari” processes the data subject's data using the capabilities of modern technology, taking into account existing privacy risks and the organizational, financial, and technical resources reasonably available to NRC “Vaivari”.

Upon receiving healthcare services, in accordance with the requirements of regulatory acts, NRC “Vaivari” as an institution is obligated to process the data subject's identifying information and information that confirms the diagnosis, substantiates examinations and treatment methods, as well as accurately reflects treatment outcomes. In this case, in order to achieve the purpose of providing healthcare services, the Controller may process the broadest possible scope of personal data, which includes - first name, last name, personal identification number, contact information, lifestyle, information about past illnesses, information about received and ongoing healthcare services (which doctor, how often, which services are chosen) and other information that the relevant healthcare professional will choose to clarify and record in the medical documentation in the specific situation.

In order to ensure the quality and efficiency of the data subject's personal data processing, NRC “Vaivari” may authorize its partners to carry out specific service provision activities, such as engaging a company providing hippotherapy services and similar, likewise NRC “Vaivari” may transfer the processing of the data subject's personal data to such a service-providing company by concluding a data processing agreement that ensures compliance with confidentiality standards.

If, in carrying out these tasks, NRC “Vaivari” collaboration partners process the personal data of the data subject in the possession of NRC “Vaivari”, the respective NRC “Vaivari” collaboration partners shall be considered as data processors of NRC “Vaivari”, and NRC “Vaivari” has the right to transfer to the collaboration partners the personal data of the data subject necessary for the performance of these activities to the extent required for the execution of these activities. The collaboration partners (in the capacity of data processors) shall ensure compliance with the requirements for the processing and protection of personal data in accordance with Article 28(3) of the General Data Protection Regulation, other legal acts, and only for the purposes for which they were originally processed.

When the data subject enters/arrives at the premises or territory of NRC “Vaivari”, where video surveillance is conducted, their video image and the time of their visit may be processed. Video surveillance is not conducted in areas where data subjects expect heightened privacy, such as relaxation areas, changing rooms, etc. The recording zones of the video surveillance cameras are concentrated on hallways, entrances/exits, vehicles, and the flow of people in the area.

When calling the phone numbers provided by NRC “Vaivari”, the content of the communication will be recorded for the purpose of improving service quality.

When communicating in writing, the content of the communication and the time may be retained, as well as information about the communication tool used (email address, phone number, Skype username, etc., information indicated in the e-registration system).

The controller analyzes the website visit history using online identifiers, as well as information deliberately left by the data subject (for example, feedback on the provided service, website visit experience, navigation, information about the desire to apply for any of the services provided by the controller, etc.), in order to conduct market research and opinion analysis.

Protection of personal data

NRC “Vaivari” protects the data subject's data using the capabilities of modern technology, taking into account existing privacy risks and reasonably available organizational, financial, and technical resources.

Categories of recipients of personal data

NRC “Vaivari” does not disclose the data subject's personal data or any information obtained during the provision of services and the execution of contracts to third parties, except for:

  • ja attiecīgajai trešajai personai dati jānodod noslēgtā līguma ietvaros, lai veiktu līguma izpildei nepieciešamu vai ar likumu deleģētu funkciju (piemēram, Nacionālajam veselības dienestam, Valsts ieņēmumu dienestam, ja pakalpojums saistīts ar ES finansētu projektu, projekta turētājam un/vai CFLA (Centrālā finanšu un līgumu aģentūra) atbilstoši projekta un/vai līguma noteikumiem), pētījumu veikšanai pētniekiem, kuru pētījumu pieteikumi ir akceptēti saskaņā ar Ārstniecības likuma 13. pantu un 1998. gada 13. janvāra Ministru kabineta ieteikumiem Nr. 1 “Medicīnas ētikas komitejas paraugnolikums” un 2016. gada 17. novembra iekšējiem noteikumiem “Medicīnas ētikas komitejas nolikums”;
  • ja klients skaidri un nepārprotami piekrīt datu nodošanai;
  • ja tas tiek paredzēts ārējos normatīvajos aktos noteiktajā kārtībā un apjomā.

Access to personal data by third country entities

If the need arises in specific cases, in accordance with regulatory requirements, NRC “Vaivari” may allow access to personal data by developers or service providers located in third countries (that is, countries outside the European Union and the European Economic Area) in the capacity of a data processor (operator). NRC “Vaivari” will ensure the procedures for the processing and protection of personal data, which are equivalent to those stipulated in the Regulation.

Duration of storage of personal data

NRC “Vaivari” stores and processes the personal data of the data subject as long as at least one of the following criteria exists:

  • while the regulatory acts impose an obligation on NRC “Vaivari” to retain data;
  • while NRC “Vaivari” or the data subject can exercise their legitimate interests in accordance with external regulatory acts;
  • while the data subject's consent for the relevant processing of personal data is in effect, unless there is another legal basis for data processing;

In providing healthcare services, NRC “Vaivari” complies with special regulatory acts that impose an obligation to retain certain data. If you wish to obtain detailed information, please contact NRC “Vaivari” using the contact information provided above.

Video surveillance records

Video surveillance recordings for the purpose of preventing or detecting criminal offenses related to the protection of persons and property, the protection of the legal interests of NRC “Vaivari” or third parties, and the vital interests of individuals, including the protection of life and health, will be retained for a period not exceeding 30 days, unless the relevant video recording reflects potentially unlawful actions or actions that may assist NRC “Vaivari” or third parties in safeguarding their legal interests.

In this case, the relevant video recording may be retrieved and retained until the moment of safeguarding the legal interests.

Telephone conversation audio recordings

Audio recordings of telephone conversations for the purpose of ensuring and improving the quality of services provided by NRC "Vaivari" and protecting the legal interests of NRC "Vaivari" will be stored for a period not exceeding 15 days, unless the respective audio recording reflects potentially unlawful actions or actions that may assist NRC "Vaivari" or third parties in safeguarding their legal interests.

In this case, the respective audio recording may be retrieved and retained until the moment of safeguarding the legal interests.

Incoming and outgoing communication

Incoming and outgoing communications (emails, postal letters) will be recorded to ensure the compliance with the legitimate interests of NRC “Vaivari”, and will be retained for a period not exceeding two years, unless the relevant communication reflects potentially unlawful actions or actions that may assist NRC “Vaivari” or third parties in safeguarding their legal interests.

In this case, the relevant document may be retained until the moment the legal interests are secured.

Data Deletion

After the retention period expires, personal data will be irreversibly deleted, unless there is a legal obligation to retain them according to regulatory acts.

Data Subject Rights

The data subject has the right to receive information as stipulated by regulatory acts regarding the processing of their data.

The data subject has the right to request access to their personal data, as well as to request NRC “Vaivari” to carry out its supplementation, correction, or deletion, or to restrict the processing of the data subject's personal data, or the right to object to processing, as well as the right to data portability.

These rights are exercisable insofar as the data processing does not arise from the obligations imposed on NRC “Vaivari” by applicable laws and which are carried out in the public interest.

Procedure for exercising rights

The data subject may submit a request for the exercise of their rights:

  • in written form in person at the NRC “Vaivari” board office, presenting an identity document;
  • by electronic mail, signed with a secure electronic signature.

Upon receiving a request from the data subject regarding the exercise of their rights, NRC “Vaivari”:

  • will verify the identity of the data subject;
  • will assess the request;
  • will fulfill it in accordance with regulatory enactments.

NRC “Vaivari” provides a written response, which:

  • issued at the board office, receiving a confirmation of receipt, or
  • sent by mail to the specified contact address in a registered letter.

NRC “Vaivari” ensures compliance with data processing and protection requirements in accordance with regulatory enactments and takes appropriate actions to resolve the data subject's objections. However, if this is unsuccessful, the data subject has the right to appeal to the supervisory authority – the Data State Inspectorate.

Data subject's consent to data processing and its withdrawal

If the type of data processing requires obtaining the data subject's consent for the processing of personal data, the legal basis of which is consent, the data subject has the right to withdraw the given consent at any time in the same manner in which it was given.

In such a case, further data processing based on the previously given consent for a specific purpose will not be carried out.

The withdrawal of consent does not affect the data processing that was carried out while the consent was in effect.

Upon withdrawing consent, data processing based on other legal grounds cannot be terminated.

Communication with the data subject

NRC “Vaivari” communicates with the data subject using the contact information provided by the data subject (telephone number, email address), providing general information, for example, about:

  • Services provided by NRC “Vaivari”;
  • Appointment times for specialists;
  • Payments to be made;
  • Procedure for admission to inpatient care;
  • Procedure for receiving outpatient services, etc.

Information that the data subject wishes to receive about themselves personally (for example, regarding the approximate timeframe for receiving a service), NRC “Vaivari”, balancing the data subject's right to receive information and data protection requirements, conducts at least a triple verification of identity to ensure that the information is provided to the data subject or their legal representative.

By leaving your contact information (email, phone), the data subject agrees that NRC “Vaivari” may contact them using the provided contact information.

Website Visits and Cookie Processing

To ensure the best and most complete experience of using www.nrcvaivari.lv and www.vtpc.lv, cookies are used on the Vaivari website. By using this site, you agree to the use of cookies.

Links to third-party websites may be placed on the NRC “Vaivari” website, which have their own terms of use and personal data protection regulations, for which NRC “Vaivari” bears no responsibility.

Terms of Use for Social Media

The purpose of NRC “Vaivari” social media is to serve as a discussion platform for individuals interested in community activities. However, NRC “Vaivari” assumes no responsibility for comments posted by users on social network pages. We reserve the right to delete any content that is contrary to these terms of use or otherwise deemed inappropriate.

Respect other users and their opinions, and adhere to general courtesy. It is prohibited to post inappropriate content or materials on NRC “Vaivari” social network pages that are dangerous, incite ethnic or racial hatred, are pornographic, or offensive to religious beliefs, as well as materials that are considered advertising or violate copyright. Users who violate these terms of use may be banned from commenting on the page.

Other provisions

NRC “Vaivari” has the right to make amendments to the Privacy Policy, making the current version available to the client on the NRC “Vaivari” website.

NRC “Vaivari” retains previous versions, which are available on the NRC “Vaivari” website.