This Privacy Policy sets out the procedures for processing and protecting the personal data of users of the MentalPro website and individuals seeking services from the clinic. By using the website, completing contact forms, or booking a consultation, you confirm that you have read and understood this Policy.

1. PERSONAL DATA CONTROLLER

SIA “MentalPro”
Registration No.: 40203460614
VAT No.: LV40203460614
Medical institution code: 001000135
Registered address: Lazdonas iela 1A, Madona, Madonas novads, LV-4801
Actual address of the medical institution: Miera iela 15, Rīga, LV-1001

Contact information regarding the processing of personal data:
Phone: +371 20 681 994
Email: mentalpro.lv@gmail.com
Website: www.mentalpro.lv

For any questions regarding the processing of personal data, the use of personal data, or the exercise of data subject rights, individuals may contact SIA “MentalPro” using the contact information provided above.



2. WHAT PERSONAL DATA WE PROCESS
Depending on how an individual interacts with us, the service selected, and the purpose of the data processing, SIA “MentalPro” may process the following categories of personal data:

• identification data — first name, surname, and other information necessary to identify the individual;
• contact data — telephone number, email address, and preferred method of communication;
• appointment and communication data — information about the selected service or specialist, preferred consultation format and time, as well as information that the individual voluntarily provides in contact or appointment forms, email correspondence, or through other communication channels;
• data related to the provision of services — information necessary for organising and providing consultations, psychological, psychiatric, psychotherapeutic, or other services offered by the clinic;
• special categories of personal data, including information about the individual’s physical or mental health, health condition, diagnoses, treatment, medications being taken, and other health-related information, where the processing of such data is necessary for the provision of the relevant service or where the individual voluntarily provides such information;
• payment and accounting data — information necessary for processing payments, preparing invoices and other accounting documents, and maintaining accounting records;
• technical and website usage data — IP address, device and browser information, website visit data, and information relating to cookies in accordance with the cookie settings selected by the individual.

SIA “MentalPro” processes only the personal data necessary to achieve the specific purpose of the data processing. Detailed information about the cookies used on the website, their categories, purposes, and retention periods is available in the separate Cookie Policy.


3. PURPOSES OF DATA PROCESSING
SIA “MentalPro” processes personal data for specific and predetermined purposes, including:

• to receive and process requests for consultations and other services provided by the clinic;
• to communicate with individuals regarding requests, appointments, consultations, or other enquiries;
• to organise and provide psychological, psychiatric, psychotherapeutic, and other services offered by the clinic;
• to organise the treatment process and, where applicable, maintain medical and other documentation related to the provision of services;
• to prepare invoices, record payments, and comply with accounting and tax requirements;
• to fulfil the legal obligations of SIA “MentalPro” established by applicable laws and regulations;
• to ensure the technical operation and security of the website and to prevent possible misuse;
• to analyse website usage and improve its performance and user experience, where the individual’s consent has been obtained for such processing in cases where consent is required;
• to ensure and improve the quality of the services provided by the clinic;
• to protect the legitimate interests of SIA “MentalPro” and, where necessary, to establish, exercise, or defend legal claims.

Personal data shall not be used for purposes incompatible with the original purpose for which they were collected unless there is an appropriate legal basis for such further processing.



4. LEGAL BASES FOR THE PROCESSING OF PERSONAL DATA
SIA “MentalPro” processes personal data only where an appropriate legal basis exists. Depending on the specific purpose of the processing, personal data may be processed on the basis of:

• the individual’s consent — Article 6(1)(a) of the General Data Protection Regulation (GDPR), for example, where the individual has consented to the use of certain non-essential cookies, analytics tools, or other consent-based solutions. The individual may withdraw their consent at any time. The withdrawal of consent does not affect the lawfulness of processing carried out before the consent was withdrawn;
• the performance of a contract or taking steps at the request of the individual prior to entering into a contract — Article 6(1)(b) GDPR, for example, for receiving and processing a request, arranging an appointment, communicating regarding the selected service, and ensuring the provision of the relevant service;
• compliance with a legal obligation to which SIA “MentalPro” is subject — Article 6(1)(c) GDPR, for example, to comply with obligations established by applicable laws and regulations in the fields of healthcare, accounting, taxation, and other applicable areas, including the maintenance and retention of required documentation where prescribed by law;
• the legitimate interests of SIA “MentalPro” — Article 6(1)(f) GDPR, for example, to ensure the security of the website and information systems, prevent fraud or misuse, protect the rights and legitimate interests of SIA “MentalPro”, and establish, exercise, or defend legal claims, provided that such interests are not overridden by the interests, fundamental rights, and freedoms of the data subject.

Processing of Special Categories of Personal Data, Including Health Data
Where health data or other special categories of personal data referred to in Article 9 GDPR are processed in connection with the provision of a service, such processing shall take place only where, in addition to a legal basis under Article 6 GDPR, an appropriate condition under Article 9(2) GDPR also applies.

Health data may be processed where such processing is necessary for the provision of healthcare or medical services, assessment of the individual’s health condition, organisation of the treatment process, or management of healthcare systems and services in accordance with Article 9(2)(h) GDPR and applicable laws and regulations.

Where no other legal basis under Article 9(2) GDPR applies to the specific processing of special categories of personal data, such processing may be carried out on the basis of the individual’s explicit consent in accordance with Article 9(2)(a) GDPR, where such consent is applicable in the particular circumstances.



5. DATA RECIPIENTS, PROCESSORS, AND DISCLOSURE OF DATA TO THIRD PARTIES
SIA “MentalPro” does not sell personal data or disclose it to third parties for their own independent marketing purposes. Personal data may be transferred or access to such data may be granted only to the extent necessary to provide a specific service, fulfil the legal obligations of SIA “MentalPro”, or achieve other purposes specified in this Privacy Policy.

Depending on the services used, recipients or processors of personal data may include:

• the website platform, hosting, and customer management system service provider — Tilda Publishing, which ensures the operation and maintenance of the website, hosting, technical processing of forms submitted through the website, management of requests, and website statistics functionality;
• the provider of email, data storage, online communication, and other digital services — Google, including Gmail / Google Workspace, Google Drive, and Google Meet, which are used for communication, processing requests, storing data and documents, and facilitating remote interaction;
• communication platform providers — WhatsApp, Instagram, Facebook Messenger, and Telegram, where the individual chooses to communicate with SIA “MentalPro” through the respective platform;
• the remote communication service provider — Zoom, where this platform is used for remote interaction or online consultations;
• providers of website analytics and other technologies — Google Analytics, Tilda Analytics, and Meta Pixel, which may be used to analyse website traffic and usage, as well as the effectiveness of services, where the individual has provided the necessary consent to the use of the relevant analytics or marketing technologies;
• providers of external website content and functionality — Google Maps, where the relevant service is used on the website;
• banks and payment service providers, where the individual makes a payment by bank transfer to the bank account specified by SIA “MentalPro”;
• providers of accounting, legal, IT, and other professional services, where access to personal data is necessary for the provision of the relevant service or for SIA “MentalPro” to fulfil its legal obligations;
• healthcare professionals and other specialists of SIA “MentalPro” who require personal data in order to organise or provide the relevant service and who are required to comply with confidentiality and personal data protection requirements;
• state and municipal authorities, law enforcement authorities, courts, and other competent authorities, where the disclosure of data is required by applicable laws and regulations or is necessary for SIA “MentalPro” to fulfil its legal obligations or protect its rights.

SIA “MentalPro” grants access to personal data only to those persons and service providers who require such access to perform a specific task or provide the relevant service. Service providers that process personal data on behalf of SIA “MentalPro” are required to comply with applicable data protection, security, and confidentiality requirements.

Transfer of Personal Data Outside the European Economic Area
Certain providers of technological, analytics, or communication services used by SIA “MentalPro” may process personal data or provide access to such data outside the European Union or the European Economic Area (EEA).

Where personal data are transferred to a country outside the EEA, SIA “MentalPro” ensures that there is an appropriate legal basis for such transfer under Chapter V of the GDPR and that appropriate personal data protection safeguards are applied, such as an adequacy decision adopted by the European Commission, Standard Contractual Clauses approved by the European Commission, or another data transfer mechanism provided for under the GDPR.

More detailed information about specific recipients of personal data, the locations where data are processed, and the applicable safeguards is available upon request by contacting SIA “MentalPro” using the contact information provided in this Privacy Policy.



6. RETENTION PERIODS FOR PERSONAL DATA
SIA “MentalPro” retains personal data only for the period necessary to achieve the specific purpose of the data processing, fulfil contractual relationships, protect the legitimate interests of SIA “MentalPro”, or comply with obligations established by applicable laws and regulations.

The retention period depends on the category of data and the purpose of its processing:

• data from requests and contact forms submitted through the website are retained for as long as necessary to process the relevant request or enquiry and ensure further communication, as well as until the expiry of the applicable limitation period for potential claims, where relevant;
• data related to communication with clients or patients, including emails and other electronic communication data, are retained for as long as necessary to fulfil the purpose of the communication, provide the relevant service, or protect SIA “MentalPro” against potential claims and safeguard its legitimate interests;
• personal data and medical records related to the provision of medical and healthcare services are retained for the periods prescribed by applicable laws and regulations governing healthcare and medical practice;
• personal data contained in contracts, invoices, payment records, and accounting documents are retained for the periods prescribed by applicable laws and regulations governing accounting and taxation;
• data processed on the basis of the individual’s consent are processed until the consent is withdrawn or until the specific purpose of the processing has been achieved, unless another legal basis exists for the continued retention of the data;
• technical and analytical website data and cookie data are retained in accordance with the retention period established for the relevant service or cookie. Detailed information about cookie retention periods is provided in the Cookie Policy.

When determining the specific retention period for personal data, SIA “MentalPro” takes into account the purpose of the processing, the scope and nature of the data, applicable legal requirements, limitation periods for potential claims, and the need to protect the rights and legitimate interests of SIA “MentalPro” or the data subject.

Upon expiry of the applicable retention period, personal data are securely deleted or anonymised unless their continued retention is required by applicable laws and regulations.



7. PROTECTION OF PERSONAL DATA
SIA “MentalPro” implements appropriate technical and organisational security measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, access, or other forms of improper processing.
Access to personal data is granted only to those employees, healthcare professionals, specialists, and service providers of SIA “MentalPro” who require such access to perform their professional duties or provide a specific service.

Persons who have access to personal data are required to comply with confidentiality and personal data protection requirements. SIA “MentalPro” regularly assesses the security measures in place and improves them where necessary, taking into account the nature and scope of the personal data processed, as well as the potential risks.



8. COOKIES
The www.mentalpro.lv website uses cookies and similar technologies to ensure the proper and secure operation of the website and, depending on the user’s choices, to analyse website traffic and usage and provide analytics and marketing functionality.
Cookies that are strictly necessary for the operation of the website may be used without the user’s consent. Analytics, marketing, and other non-essential cookies are used only after obtaining the user’s consent where such consent is required under applicable laws and regulations.

When visiting the website, users are given the option to accept or reject non-essential cookies and to manage their preferences through the cookie settings. Users may change their preferences or withdraw previously given consent at any time.
Detailed information about the types of cookies used on the website, specific cookies, their purposes, service providers, and retention periods is available in the separate Cookie Policy.



9. ПРАВА СУБЪЕКТА ДАННЫХ
В соответствии с Общим регламентом по защите данных (GDPR) и другими применимыми нормативными актами лицо в отношении обработки своих персональных данных имеет право:

• получать информацию об обработке персональных данных и выяснять, обрабатывает ли SIA «MentalPro» его персональные данные;
• получать доступ к своим персональным данным и получать копию персональных данных, находящихся в распоряжении SIA «MentalPro»;
• требовать исправления персональных данных, если они являются неточными или неполными;
• требовать удаления персональных данных («право быть забытым») в случаях, предусмотренных GDPR и другими нормативными актами;
• требовать ограничения обработки персональных данных в случаях, предусмотренных GDPR;
• возражать против обработки персональных данных, если обработка осуществляется на основании законных интересов SIA «MentalPro» или в других случаях, предусмотренных GDPR;
• получать и переносить свои персональные данные в структурированном, широко используемом и машиночитаемом формате, если применимо предусмотренное GDPR право на переносимость данных;
• в любое время отозвать ранее предоставленное согласие, если обработка персональных данных основана на согласии. Отзыв согласия не влияет на законность обработки данных, осуществлённой до момента отзыва согласия;
• подать жалобу в Государственную инспекцию по защите данных (Datu valsts inspekcija), если лицо считает, что обработка его персональных данных нарушает применимые требования в области защиты данных.

Для реализации своих прав лицо может направить запрос в SIA «MentalPro», используя контактную информацию, указанную в настоящей Политике конфиденциальности. Отдельные права субъекта данных могут быть ограничены в случаях, предусмотренных нормативными актами, например, если SIA «MentalPro» обязано в силу закона продолжать хранение или обработку определённых персональных данных.

10. КОНТАКТНАЯ ИНФОРМАЦИЯ
По вопросам обработки персональных данных, применения настоящей Политики конфиденциальности или реализации прав субъекта данных лицо может связаться с SIA «MentalPro»:
Телефон: +371 20 681 994
Электронная почта: mentalpro.lv@gmail.com
Веб-сайт: www.mentalpro.lv

SIA «MentalPro» рассмотрит запрос лица и предоставит ответ в порядке и в сроки, установленные применимыми нормативными актами. При необходимости SIA «MentalPro» может запросить дополнительную информацию для подтверждения личности лица с целью предотвращения необоснованного раскрытия персональных данных другим лицам.

11. ИЗМЕНЕНИЯ В ПОЛИТИКЕ КОНФИДЕНЦИАЛЬНОСТИ
SIA «MentalPro» имеет право при необходимости вносить изменения или дополнения в настоящую Политику конфиденциальности, например, в случае изменения процессов обработки персональных данных, используемых услуг, технологий или требований применимых нормативных актов.

Актуальная версия Политики конфиденциальности всегда доступна на официальном веб-сайте SIA «MentalPro» — www.mentalpro.lv.

В случае существенных изменений SIA «MentalPro» может проинформировать о них на веб-сайте или иным подходящим способом.

Дата последнего обновления Политики конфиденциальности: 10 августа 2026 года.