Last updated: 15 July 2026

1. Information about the Controller
1.1. The data controller is SIA LUMERA ESTETIKA, registration No. 40203713576, registered office: Ģertrūdes iela 65-12, Riga, LV-1011, operating address: Ģertrūdes iela 65-1N, Riga, LV-1011, hereinafter referred to as the “Clinic”.
1.2. Information regarding the processing of personal data: info@lumera.lv, www.lumera.lv.

2. General Provisions
2.1. This Privacy Policy explains how the Clinic processes and protects clients’ personal data obtained through our website, social media channels or services. Data security is maintained in accordance with the applicable legislation of the European Union and the Republic of Latvia.

3. Processing of Personal Data
3.1. The Clinic collects and processes the following personal data:
3.1.1. Contact details, including first name, surname, telephone number, email address and address;
3.1.2. Personal identification data, including personal identity number and date of birth;
3.1.3. Information regarding the client’s health condition, complaints and previous medical treatment.
3.2. Where necessary, the Clinic collects and processes additional information required for the proper provision of specific services.
3.3. By completing the application form on the website, the user confirms that they have read this Privacy Policy and consent to the processing of their personal data in accordance with the conditions set out herein.
3.4. Payment processing is provided by the makecommerce.lv payment platform; therefore, our company transfers the personal data necessary for processing payments to the platform's owner, Maksekeskus AS.

4. Purposes of Data Processing
4.1. The Clinic processes personal data for the following purposes:
4.1.1. To identify the client;
4.1.2. To arrange the client’s appointment;
4.1.3. To prepare the client’s medical and non-medical documentation;
4.1.4. To provide medical, healthcare or beauty treatment services;
4.1.5. To provide client service and communication;
4.1.6. To maintain the website and improve its quality;
4.1.7. To ensure the safety of clients and Clinic employees;
4.1.8. To prepare reports and statements;
4.1.9. To administer payments;
4.1.10. To send clients reminders regarding appointments and services;
4.1.11. To improve the quality of the Clinic’s services.
4.2. Personal data is collected and may be used to provide information to public authorities and to ensure operational activities in the cases and to the extent prescribed by applicable laws and regulations.
4.3. Personal data may be disclosed to:
4.3.1. Medical practitioners;
4.3.2. Laboratories;
4.3.3. Public authorities;
4.3.4. Accounting service providers;
4.3.5. IT service providers;
4.3.6. Payment service providers.

5. Data Protection
5.1. Clients’ personal data is stored in a secure environment. The applicable retention periods are determined by the Law on the Rights of Patients and the Procedures for Keeping Medical Documents. Personal data is retained for as long as required by applicable laws and regulations or as necessary to achieve the relevant purpose of data processing.
5.2. Personal data is processed on the basis of:
5.2.1. Regulation (EU) 2016/679 of the European Parliament and of the Council — the General Data Protection Regulation (GDPR);
5.2.2. The Law on the Rights of Patients;
5.2.3. The Medical Treatment Law;
5.2.4. Regulations of the Cabinet of Ministers;
5.2.5. The agreement concluded with the client;
5.2.6. Compliance with legal obligations prescribed by applicable laws and regulations.

6. Client Rights
The client has the right to request access to their personal data and, where necessary, to request its partial or complete rectification, restriction of processing or erasure, provided that this does not conflict with the laws and regulations of the Republic of Latvia.
The client has the right to object to the processing of their personal data, withdraw their consent or submit a complaint to the State Data Inspectorate.

7. Video Surveillance
Video surveillance is carried out on the Clinic’s premises for security purposes. Video recordings are stored on the Clinic’s internal servers for up to 30 days.

8. Use of Cookies
Our website uses cookies to improve the user experience and ensure the proper functioning of the website. The use of cookies may be disabled; however, doing so may limit certain website features. When cookies are used, technical data may be processed in accordance with applicable laws and regulations.

9. Amendments to the Privacy Policy
The Clinic reserves the right to amend this Privacy Policy at any time to reflect current legal requirements or changes to the Clinic’s services. Users are encouraged to review this Policy regularly to stay informed of any updates.

10. Contact Information
If you have any questions regarding the Privacy Policy of SIA LUMERA ESTETIKA or the processing of your personal data, please contact us:
Registered office: Ģertrūdes iela 65-12, Riga, LV-1011
Email: info@lumera.lv
Telephone: +371 28335591