Privacy and Cookie Policy

Last updated: 31 October 2026

1. General information

This policy explains how SIA “Republikas laukuma klīnika” (the Clinic) processes personal data and uses cookies on www.republikaslaukumaklinika.lv. We process personal data in accordance with the General Data Protection Regulation (GDPR) and the laws of the Republic of Latvia.

2. Data controller

3. Why we process data and on what legal basis

PurposeDataLegal basis
Answering enquiries by email, phone or WhatsAppName, phone number or email, message contentSteps prior to entering into a contract (GDPR Art. 6(1)(b)) and our legitimate interest in replying (Art. 6(1)(f))
Booking an appointmentData you provide when bookingSteps prior to entering into a contract (Art. 6(1)(b))
Website statisticsCookie data (see section 5)Your consent (Art. 6(1)(a))
Measuring advertising effectivenessCookie data (see section 5)Your consent (Art. 6(1)(a))
Video surveillance on Clinic premisesVideo recordingsLegitimate interests (Art. 6(1)(f)), see section 4

Booking via Piearsta.lv. If you book through the link to Piearsta.lv, your data is also processed by the platform operator under the platform’s own privacy terms.

Health data. If you share information about your health while contacting us, we use it only to plan and provide medical care. The legal basis is GDPR Art. 9(2)(h) (health care). Only staff who need it for their work and who are bound by confidentiality can access this data. Please do not send detailed medical information by email or WhatsApp unless necessary.

Medical records created while providing services are processed and stored in accordance with the Latvian Law on the Rights of Patients and other legislation.

4. Video surveillance

Video surveillance is carried out on the Clinic’s premises (Republikas laukums 3–18, Riga). Signs at the entrance inform visitors about it.

  • Purpose: safety of people and property, crime prevention and incident investigation.
  • Legal basis: the Clinic’s legitimate interests (GDPR Art. 6(1)(f)).
  • Retention: up to 30 days, after which recordings are deleted automatically. They are kept longer only if needed to investigate a specific incident.
  • Access: authorised staff only, and law enforcement authorities upon a justified request.

5. Cookies

Cookies are small text files that a website stores on your device. We use three types:

  • Necessary – enable basic functions (language choice and saving your cookie preferences). They are always active and do not require consent.
  • Analytics – Google Analytics helps us understand how visitors use the site (pages viewed, device type, visit duration). Data is aggregated into statistics, and we do not use it to identify individuals.
  • Advertising – Google Ads lets us measure how effective our ads are (for example, whether a visitor books an appointment after clicking an ad).

Analytics and advertising cookies are set only after you give consent in the cookie banner. Until then, Google tools run in a restricted mode (Google Consent Mode) and do not set cookies.

CookieProviderTypePurposeExpiry
pll_languageClinicNecessaryRemembers your language1 year
cmplz_* (e.g. cmplz_banner-status, cmplz_statistics, cmplz_marketing)ClinicNecessaryStores your cookie choices1 year
_gaGoogleAnalyticsDistinguishes unique visitors2 years
_ga_RFY46LXW2QGoogleAnalyticsStores session state2 years
_gcl_auGoogleAdvertisingMeasures ad conversions90 days
IDE, test_cookie and other google.com / doubleclick.net cookiesGoogleAdvertisingMeasures ad conversionsup to 13 months

Changing your choice. You can change or withdraw your consent at any time below or with the “Cookie settings” button in the corner of the screen. You can also delete cookies in your browser settings.

6. Who receives data

We do not sell your data or share it with advertisers. Data may be received by:

  • service providers who support the Clinic’s operations: website hosting and IT maintenance, the booking system (Piearsta.lv);
  • Google Ireland Limited – Google Analytics and Google Ads (only with your consent);
  • WhatsApp Ireland Limited – if you contact us via WhatsApp;
  • public authorities – where required by law.

Transfers outside the EU. Data processed by Google and WhatsApp (Meta) may also be processed in the USA. Such transfers rely on the EU-US Data Privacy Framework or on standard contractual clauses approved by the European Commission.

7. How long we keep data

  • Correspondence (emails, messages): up to 12 months after the last contact, unless a patient relationship has been established.
  • Medical records: for the period required by law.
  • Video recordings: up to 30 days (see section 4).
  • Cookies: see the table in section 5.

8. Data security

Data transmitted via the website is protected by SSL encryption. Only authorised staff can access data, and physical media are kept in restricted-access areas.

9. Your rights

Under the GDPR you have the right to:

  • access your data and obtain a copy;
  • have inaccurate data corrected;
  • request erasure (“the right to be forgotten”) where there is no basis to keep it;
  • restrict processing;
  • object to processing based on our legitimate interests;
  • receive your data in a structured, machine-readable format (data portability);
  • withdraw consent at any time, including for cookies;
  • lodge a complaint with the Data State Inspectorate of Latvia (www.dvi.gov.lv).

We will respond within one month. To protect your data, we may ask you to confirm your identity.

10. Contact and changes to this policy

Send questions about data processing and requests to info@republikaslaukumaklinika.lv or submit them at the Clinic, Republikas laukums 3–18, Riga.

We may update this policy. The current version is always available on this page, with the date of the last change shown at the top.