Who processes the data
The controller of personal data is SIA "NutriPro", registration number 50203587541, ārstniecības iestādes kods 001000295.
For data protection enquiries: S.aleksejeva@gmail.com.
Privacy policy
What data is processed
The website forms process your name, contact details (phone and/or email), preferred language and contact channel, and a description of the purpose of your request. The form for organisations additionally processes the organisation name, contact person details and information about the event.
The website forms are not intended for sending diagnoses, test results or other sensitive medical information.
Purpose and legal basis
The data is used to reply to your request, to agree on a consultation time and preparation, and to answer enquiries from organisations. The legal basis is the consent of the data subject and preparation for entering into a service agreement.
Retention and recipients
Requests are stored in a secured database for 12 months from the date of the request, unless a longer period is required by law.
Data is not shared with third-party marketing services and is not used for advertising profiling.
Your rights
You have the right to request access to your data, its correction or deletion, and to withdraw your consent to data processing. Please use the contact details provided on the website.
Payments and Stripe
The website does not accept payments and does not collect payment card data. After a consultation is agreed, an individual payment link in Stripe is sent to you.
Payment data is processed directly by Stripe as an independent processor under its own terms and privacy policy. We receive only the payment confirmation, not card data.
FMD e-book purchases and the free day
Controller: SIA "NutriPro", reģ. Nr. 50203587541, Krišjāņa Barona iela 19, Jūrmala, LV-2010, Latvia, nutrition.aleksejeva@gmail.com.
What data: e-mail, order data (number, chosen books, amount, payment time, status), your consents when placing the order with date, time and text version, a download log (time, book, file size and a hash of the IP address instead of the address itself), withdrawal data (name and surname, time, channel, statement text), and free-day requests (e-mail, language, time, IP address hash) and newsletter consent if you gave it.
Purposes and legal bases: performing the contract - providing files, order and withdrawal e-mails (GDPR Art. 6(1)(b)); accounting and consumer-law obligations (Art. 6(1)(c)); proof of consents, security and abuse prevention, including request limits (Art. 6(1)(f)); newsletter only with your consent (Art. 6(1)(a)), which you can withdraw at any time.
Recipients: Stripe - payment processing, as a separate controller for payment data; hosting, database and e-mail service providers - as processors on our behalf.
Retention: download links work for 7 days, the free-day link for 7 days; IP address hashes from the withdrawal form are deleted automatically after one day. Orders, consents, the download log and withdrawal data are kept with the order as long as required by Latvian accounting law. Free-day requests are stored for 24 months, then deleted automatically. If you consented to receive e-mails, your e-mail and consent are kept until you withdraw consent.
Your rights: access, rectification, erasure, restriction, objection, portability and withdrawal of consent - write to nutrition.aleksejeva@gmail.com. You can complain to Datu valsts inspekcija (www.dvi.gov.lv).