Association
“PSYPHY” fiziskās un psiholoģiskās rehabilitācijas centrs”” 

We have developed Privacy Policy principles that govern the collection, use, disclosure, transfer, and storage of personal data. Our activities are carried out in accordance with the laws of the Republic of Latvia and the applicable legal acts of the European Union.

We kindly ask you to review our Privacy Policy principles.
This document explains your rights and options regarding how we use information about you. If you do not agree with the terms of this Privacy Policy, you have the right not to use our services. You may withdraw from our services at any time in accordance with the provisions set out in the agreement.

Data Protection Principles

  • Data are processed lawfully and fairly.
  • Data processing is carried out for specific purposes and only in accordance with those purposes.
  • Data are adequate and not excessive.
  • Data are accurate.
  • Data are not retained longer than necessary.
  • Data are processed in accordance with your rights.
  • Data are kept secure.
  • Data are not transferred to other organizations, institutions, or countries without appropriate safeguards.

1. Data Controller

Association
“PSYPHY” fiziskās un psiholoģiskās rehabilitācijas centrs”” 

Registration No.: 40008282191
Legal address: Lubānas iela 129 k-1 – 59, Riga
Actual address: Elizabetes iela 45/47, Riga, LV-1010
Email: info@psy-phy.com
Phone: +371 29133963

2. What Personal Data We Process and Their Sources

  • Identification and contact data: name, email address, phone number (provided directly by you when making a reservation or contacting us).
  • Transaction data: booking time, type of service, payment information (status and method).

3. Payment Processing

Payment processing is provided by the payment platform MakeCommerce.lv. Therefore, for the purpose of executing payments, we transfer the necessary personal data to the platform owner, Maksekeskus AS.

4. Purposes and Legal Bases

Your email address is used to personally inform you about the association’s services and events, as well as to conduct client surveys necessary to achieve the objectives defined in the association’s statutes, fulfill its tasks, and protect its legitimate interests.

Your consent is required for marketing purposes.

Personal data are processed for the following purposes:

  • Administration of bookings and responding to inquiries — performance of a contract or steps prior to entering into a contract.
  • Payment processing and accounting.
  • Fraud prevention, security, and incident investigation.
  • Marketing messages via email/SMS — only with your consent, which you may withdraw at any time.
  • Cookies for analytics/marketing — only with your consent (see Cookie Policy).

In order to fulfill our obligations to you, the Data Controller has the right to transfer your personal data to cooperation partners and data processors who carry out necessary data processing on our behalf (for example, accountants, courier services, etc.).

Payment processing is provided by MakeCommerce.lv; therefore, personal data necessary for payment execution are transferred to Maksekeskus AS.

Upon request, we may transfer your personal data to state authorities and law enforcement institutions where necessary to protect our legal interests, including preparing, filing, and defending legal claims.

4. Recipients and Categories

We value your privacy; therefore, your personal data will not be disclosed or sold to third parties for purposes not specified in this Policy.

Data may be disclosed to law enforcement authorities upon request of a competent state official. We are also obligated to disclose client information if there are suspicions of criminal activity.

5. Retention Periods

Personal data are processed in Latvia and are not transferred outside the European Union or the European Economic Area.

The association takes reasonable measures to ensure the accuracy, correctness, and security of personal data.

  • Client profile and booking data: until service provision + 2 years for limitation period purposes (unless other legal grounds apply).
  • Accounting and payment documents: 10 years.
  • Marketing consent records: until withdrawal of consent + 1 year for evidentiary purposes.

6. Your Rights

By consenting to the use of your personal data for a specific purpose, you have the right to change your decision and withdraw your consent at any time. Withdrawal does not affect processing already carried out.

If we process your personal data based on legitimate interests, you have the right to object to such processing, although in certain cases this may mean the service will no longer be available to you.

You have the right to:

  • request correction of your personal data if they are inaccurate or incomplete;
  • object to the processing of your personal data where processing is based on legitimate interests, including profiling for direct marketing purposes;
  • request deletion of your personal data where processing is based on consent and consent is withdrawn (this right does not apply where data are processed on other legal grounds, such as contractual or statutory obligations);
  • withdraw your consent to data processing via the website or in writing;
  • receive the personal data you have provided, processed on the basis of consent and/or contract, in writing or in a commonly used electronic format and, where possible, transmit such data to another service provider (data portability).

If you wish to exercise your rights or have questions regarding data protection, you may contact us at: info@psy-phy.com

If you are not satisfied with our response or believe that we are not taking necessary actions, you have the right to lodge a complaint with the supervisory authority in Latvia — the Data State Inspectorate (Datu valsts inspekcija) at www.dvi.gov.lv.

7. Cookies

Please see our Cookie Policy and consent settings (you may withdraw your consent at any time on the website).

8. Final Provisions

This Privacy Policy has been developed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation – GDPR), as well as the applicable laws of the Republic of Latvia and the European Union.

The Data Controller reserves the right to amend or supplement this Privacy Policy at any time without prior notice. Amendments take effect upon publication on the website www.psy-phy.com.