Privacy Policy
1 General Information
This privacy policy provides transparent information on how SIA "Nordic Medical Group", Reg. No. 40203590821 (hereinafter – the Company), processes personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and other applicable regulatory enactments of the Republic of Latvia and the European Union.
The Company respects the privacy and personal data protection of patients and website visitors, observing data subjects' rights to lawful personal data processing.
2 Data Controller & Contact Information
3 Purposes of Personal Data Processing and Legal Basis
Personal data is processed for the following purposes:
- Provision, diagnostics, and administration of healthcare services;
- Patient scheduling, prompt communication, and settlement processing;
- Maintenance of medical records (case history, diagnostic findings, conclusions);
- Quality control and healthcare service enhancement;
- Transfer of data to health insurers upon patient request or contract;
- In accordance with legal acts – submission of information to state institutions (e.g., E-Health system).
Legal basis for data processing:
4 Video Surveillance
Video surveillance is conducted in the common areas of AZO Clinic to ensure the safety of clients, patients, employees, and clinic assets, as well as to prevent and detect offenses.
Legal basis: Video surveillance is conducted pursuant to GDPR Article 6(1)(f) (legitimate interests). Monitored areas are marked with clear warning signs.
5 Data Retention Periods
Personal data is stored only as long as necessary to achieve the processing purpose or in accordance with statutory retention periods:
6 Data Recipients
Personal data may be transferred to third parties only in cases and to the extent specified by law:
- • Partner medical institutions, consulting physicians, and diagnostic laboratories;
- • Health insurance companies according to the patient’s chosen payment terms;
- • State bodies, law enforcement, and supervisory authorities in cases prescribed by law;
- • Data processors (IT infrastructure, accounting, and system maintainers) under confidentiality agreements.
7 Data Subject Rights
According to GDPR, patients and data subjects have the following rights:
If data deletion is requested regarding medical records (patient charts, history, diagnostic protocols, etc.), the Company as a healthcare provider cannot grant such deletion. The laws of Latvia – including the Patient Rights Law and Medical Documentation Rules – mandate storing these records for a specified statutory timeframe.
The right to erasure applies to data processed based on consent or when no longer needed for the specific purpose.
8 Cookie Usage
The Company website (azoklinika.lv) uses technical (functional) and analytical cookies to ensure proper website operation, enhance user experience, and gather anonymous visit statistics.
Users may control, restrict, or delete cookies at any time via web browser settings. Cookies are not used to track individuals without prior consent.
9 Questions & Inquiries
If you have questions about this privacy policy, the processing of your personal data, or wish to exercise data subject rights, please contact us: