Effective from: 1 June 2026
This Privacy Policy describes how SIA “Dr. Vilkoites Vēdera klīnika” (hereinafter – the “Clinic”, “we”) processes your personal data when you visit the website vilkoite.lv, contact us, or use our services.
1. Data controller
SIA “Dr. Vilkoites Vēdera klīnika”
Registration No.: 40203660495
Healthcare facility code: 001000432
Legal address: Upeņu iela 19–99, Riga, LV-1084
Visiting address: Krišjāņa Valdemāra iela 118, Riga, LV-1013
Email: info@vilkoite.lv
Phone: +371 63 500 777
2. What data we process
2.1. Data you provide voluntarily
When you fill in our contact or appointment form, we process:
- your first and last name;
- email address;
- phone number;
- selected service or specialist (where applicable);
- the content of your message.
2.2. Technical data collected automatically
When you visit the site, we process limited information about your device and session (truncated IP address, browser type, pages visited). This data is collected only after you have given consent to analytics cookies (see section 6).
3. Purposes and legal bases of processing
| Purpose | Legal basis |
|---|---|
| Responding to your inquiry or appointment request | Performance and preparation of a contract (GDPR Art. 6(1)(b)) |
| Scheduling visits and communicating with patients | Performance of a contract (Art. 6(1)(b)) and provision of healthcare (Art. 9(2)(h)) |
| Website analytics via Google Analytics | Your consent (Art. 6(1)(a)) |
| Technically necessary cookies | Our legitimate interest in operating the site (Art. 6(1)(f)) |
| Compliance with legal obligations | Legal obligation (Art. 6(1)(c)) |
4. Data recipients and processors
Your personal data is processed only by authorised Clinic staff and the following processors:
- Hostinger – website hosting services (servers located in the European Union);
- Google Ireland Limited / Google LLC – Google Analytics 4 and Google Tag Manager services for anonymised website usage analytics;
- Email service provider – delivery of messages submitted through site forms.
We do not sell or share your personal data with third parties for advertising purposes.
5. Data transfers outside the EU/EEA
As part of Google Analytics 4, some data may be transferred to the United States. Google has signed the EU Standard Contractual Clauses and is certified under the EU–U.S. Data Privacy Framework, ensuring an adequate level of data protection. We use Google Consent Mode v2 with IP anonymisation and ads data redaction (ads_data_redaction).
6. Cookies
Our website uses the following categories of cookies:
- Strictly necessary – required for basic site functionality (language preference, storing consent). These cannot be disabled.
- Analytics – Google Analytics 4 (
_ga,_ga_H0T9G1Z3B1) for anonymous site usage statistics. These cookies are activated only with your explicit consent.
A full list of cookies and their descriptions is available in the cookie settings dialog, which you can open by clicking the Cookie settings link in the site footer. You can change your choice or withdraw consent at any time.
7. Data retention periods
- Contact form messages – up to 12 months after the communication is concluded;
- Appointment requests – in accordance with healthcare-related statutory retention periods;
- Cookies – according to their lifetime (typically from 1 day to 2 years);
- Cookie consent records – up to 12 months as evidence.
8. Your rights
Under the General Data Protection Regulation (GDPR), you have the right to:
- access your data and obtain a copy;
- request correction, deletion, or restriction of processing;
- object to processing based on legitimate interests;
- withdraw consent at any time (for analytics cookies or other consent-based processing);
- receive your data in a portable format (data portability);
- lodge a complaint with the supervisory authority – Data State Inspectorate of Latvia (Elijas iela 17, Riga, LV-1050, pasts@dvi.gov.lv).
To exercise your rights, please contact us by email at info@vilkoite.lv.
9. Data security
We use appropriate technical and organisational measures to protect your data from unauthorised access, disclosure, alteration, or destruction, including HTTPS encryption, access controls, and regular backups.
10. Changes to this policy
We may update this Privacy Policy from time to time. The current version is always available on this page. If changes are material, we will ask you to reconfirm your cookie preferences.