Privacy Policy
Last updated: 2026-05-05
This privacy policy describes how MedCena collects, uses, and protects your personal information when you use our website medcena.lv. We comply with the General Data Protection Regulation (GDPR) and Latvian law.
Data controller
The data controller is MedCena. Questions about how we process your personal data can be sent to:
info@medcena.lvWhat data we collect
We collect only the data needed for the website to function. All categories are described below.
Account data
If you create an account, we store your name, email address, and password (hashed). This data is needed for authentication and optional two-factor authentication.
Cookies
We use necessary cookies for core site functions (sessions, language selection, comparison cart) and optional cookies for analytics and personalised ads. The detailed list and settings are available in the cookie settings in the footer.
Server logs
Our servers automatically record technical data — IP address, User-Agent, requested pages — for security and incident investigation. Logs are kept for at most 30 days.
Correspondence
If you contact us by email, we keep your message and our replies for as long as needed to resolve the matter and meet compliance obligations.
Legal basis for processing
We process personal information on the following legal bases (GDPR Article 6): for account data and correspondence — performance of a contract and our legitimate interest; for optional cookies — your consent; for server logs — our legitimate interest in keeping the site secure and functional.
Data retention periods
Account data is kept while your account is active. After account deletion, data is removed within 30 days, except where we are required to keep it by law. Cookies — per your settings (session to 12 months). Correspondence — up to 3 years. Server logs — up to 30 days.
Your rights
Under the General Data Protection Regulation (GDPR) you have the following rights regarding your personal data:
- Right to access your data
- Right to correct inaccurate data
- Right to erasure ("right to be forgotten")
- Right to data portability
- Right to object to processing
- Right to lodge a complaint with the Data State Inspectorate (dvi.gov.lv)
Requests about your data
To exercise any of the rights above, contact us:
privacy@medcena.lvPolicy updates
We may update this policy. Material changes will be announced on the site. The date at the top of the page shows the last update.