» Privacy policy

Updated on April 28, 2026 (translation from original Latvian language available at https://ocvision.eu/lv/privatuma-politika/ ).

Clients / Patients are our greatest value, therefore OC VISION, as a responsible company, complies with the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (also known as the General Data Protection Regulation).

This privacy policy, hereinafter – the Policy, describes the procedure by which LLC OC VISION, registration No. 40003105710, Ulbrokas iela 34, Riga, LV-1021, hereinafter – OC VISION, processes personal data.

The term OC VISION also includes OC VISION group companies – LLC “VISION EXPRESS BALTIJA”, registration No. 40003047732, Ulbrokas iela 34, Riga, LV-1021, as well as the brands OptiO, Vision Express, VIZIONETTE, Lornete, Dr.Lensor, Opptica, Diviniti, and the websites www.ocvision.eu, www.optio.lv, www.visionexpress.lv, www.vizionette.lv, www.lornete.lv, www.lensor.eu, www.opptica.eu, www.diviniti.eu, www.redzesparbaude.lv, www.dzirdesparbaude.lv.

This Policy is applicable if the Client / Patient uses, has used, or has expressed a desire to use the services provided by OC VISION, or is in any other way connected with the services provided by OC VISION, including in relations with the Client / Patient established before this Policy entered into force.

This Policy is also applicable in cases when a person has turned to us with a request to provide a healthcare service. In such cases, the person, in accordance with the regulatory enactments, is referred to as a “Patient”. This Policy applies both to cases where a natural person is in the status of a Client and to cases where a natural person is in the status of a Patient.

1. Definitions

Processing – is any operation or set of operations performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Controller – OC VISION, actual service provision address: both the Controller’s legal address and the Controller’s stores, the list of which is available at www.ocvision.eu and is updated as soon as a new store is opened, OC VISION online stores, and in exceptional cases, mobile trading places.

Client / Patient – any natural person who uses, has used, or has expressed a desire to use any services provided by the company, goods sold, or is in any other way connected to them.

Personal data – any information relating to an identified or identifiable natural person (data subject); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, phone number, email address, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

2. Applicable Legal Acts

2.1. Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (April 27, 2016).

2.2. Personal Data Processing Law.

2.3. Medical Treatment Law.

2.4. Patients’ Rights Law.

2.5. Consumer Rights Protection Law.

2.6. Regulations regarding Distance Contracts.

2.7. Advertising Law.

2.8. Cabinet Regulation No. 265 “Procedures for the Keeping of Medical Documents”.

2.9. Information Society Services Law, etc.

3. General Provisions

3.1. This Policy provides general information on how OC VISION processes personal data. More detailed information on personal data processing is provided to Clients / Patients in response to requests, by informing them personally, or is included in contracts and other documents related to OC VISION services, as well as on the websites indicated by OC VISION.

3.2. OC VISION, within the framework of applicable regulatory enactments, ensures the confidentiality of personal data and has implemented appropriate technical and organizational measures to protect personal data from unauthorized access, unlawful processing or disclosure, accidental loss, alteration or destruction.

3.3. OC VISION may use personal data processors at its own discretion for the processing of personal data. In such cases, OC VISION takes the necessary measures to ensure that such personal data processors process personal data in accordance with OC VISION instructions, ensuring an appropriate level of security, as well as in accordance with applicable regulatory enactments. Information on which processors OC VISION cooperates with can be obtained by contacting us, writing to the email address specified in this policy.

3.4. If OC VISION updates this Policy, the current version of the Policy will be published on OC VISION websites, while previous versions of the Policy can be reviewed by contacting us, writing to the email address specified in this policy.

3.5. In order to provide the Client / Patient with better and more suitable products and services, as well as to ensure, maintain, protect and improve existing products and services, OC VISION processes data compiled from the provision of services.

3.6. To remind the Client / Patient about the need to perform a vision check, OC VISION may contact the Client / Patient using the contact information provided by them.

3.7. This Privacy Policy is prepared in the Latvian language, which is the original, governing instrument and the basis of the parties’ agreement. In the event of any contradictions, ambiguities or different interpretations arising between the Latvian version of this document and any of its translations into another language, the Latvian version shall prevail and be legally binding.

4. Purpose of Personal Data Processing and Categories of Processed Personal Data

4.1. Purpose – Client / Patient identification

Identification data – name, surname, personal identification code (if there is no personal code, then date of birth, place), data of a personal identification document.
Contact information – phone number, email, place of residence.
Other personal data (in certain cases) – basis of representation, gender, communication language, profession, etc.

4.2. Purpose – Registration and processing of an appointment / visit

Identification data – name, surname, personal identification code (if there is no personal code, then date of birth, place), data of a personal identification document.
Contact information – phone number, email, place of residence.
Health insurance policy data.
Other personal data (in certain cases) – basis of representation, gender, communication language, profession, etc.
Data indicating the need to perform a vision check, complaints, diagnosis, justification for examination, results.
Data of a reminder about the need to perform a vision (or hearing) check, including voice recording if a call was made regarding the need to perform a vision (or hearing) check.
Data of the made / canceled appointment (place, time, specialist, in exceptional cases the need for wheelchair access).

4.3. Purpose – Registration of the provision of healthcare service, execution, ordering of glasses and other vision-correcting tools, ordering of a hearing aid, adaptation and issuance of the mentioned tools, guarantees, claims

Identification data – name, surname, personal identification code (if there is no personal code, then date of birth, place), data of a personal identification document.
Contact information – phone number, email, place of residence.
Health data, i.e., vision (or hearing) check data, complaints, diagnosis, justification for examination, results, prescription for purchasing vision-correcting means, documentation indicating the need to purchase a hearing aid.
Biometric data – photo of the retina and/or iris (taken with a Fundus camera), audiogram.
Data of a reminder about the need to perform a vision (or hearing) check, including voice recording if a call was made regarding the need to perform a vision (or hearing) check.
Payment data – (invoice / receipt No., bank, account No., card No., payable amount, insurance policy data and covered amount, information on sending data to the State Revenue Service (SRS)).
Purchase history.
Loyalty program data.
Guarantee data – conditions, term, type of guarantee.

4.4. Purpose – Execution, storage, and use of patient medical documentation specified in regulatory enactments

Identification data – name, surname, personal identification code (if there is no personal code, then date of birth, place), data of a personal identification document.
Contact information – phone number, email, place of residence.
Health data, i.e., vision (or hearing) check data, complaints, diagnosis, results, prescription data for buying glasses, prescription data for buying contact lenses.
Purchase history.

4.5. Purpose – Provision of healthcare services

Identification data – name, surname, personal identification code (if there is no personal code, then date of birth, place), data of a personal identification document.
Contact information – phone number, email, place of residence, workplace.
Health data.
Payment data – (invoice / receipt No., bank, account No., card No., payable amount, insurance policy data and covered amount).
Data on a person’s limited mobility (in exceptional cases).

4.6. Purpose – Organizing, administering, and dispatching purchases in the store and online store

Identification data – name, surname, personal identification code (if there is no personal code, then date of birth, place), data of a personal identification document.
Contact information – phone number, email, place of residence, delivery address.
Payment data – (invoice / receipt No., bank, account No., card No., payable amount, insurance policy data and covered amount, information on sending data to the SRS).
Communication data – data on notifications to Clients / Patients that the order is ready, etc.
Data necessary for ordering and adapting glasses, contact lenses, and hearing aids.
Virtual glasses try-on data.
Creditworthiness check in case of an installment purchase.
Purchase history.
Cookies – saves the abandoned cart of the e-store, saves the choices left by the client, saves the authorization (logged in or not logged in) status.

4.7. Purpose – Quality control of provided services / sold goods, monitoring of Client / Patient satisfaction

Client / Patient claims, reviews, and evaluations – their compilation, analysis, solutions.
Guarantees, analysis of their usage.
Client / Patient surveys.
Communication with clients / patients in this regard.

4.8. Keeping accounting records, providing declarations and notifications, information on received payments to authorities

Identification data – name, surname, personal identification code.
Contact information – phone number, email.
Payment data – (invoice / receipt No., bank, account No., card No., payable amount, insurance policy data and covered amount), outstanding liabilities balance.
Received (used) services / purchased goods.
Purchase history.

4.9. Purpose – Reminding about the need to perform a vision (or hearing) check

Identification data – name, surname.
Contact information – phone number, email.
Date of previous vision check and/or purchase of vision-correcting means / Date of previous communication.
Data of previous hearing check and/or rental or purchase of a hearing aid / Date of previous communication.
Data of the appointment made with a specialist.
Consent to communicate (if applicable).

4.10. Purpose – Maintenance of the loyalty program

Identification data – name, surname, assigned loyalty No.
Contact information – phone number, email.
Consent data – data on consent or non-consent to receive marketing communications.

4.11. Purpose – Sending marketing communications

Identification data – name, surname.
Contact information – phone number, email.
Consent data – data on consent to receive marketing communications.

4.12. Purpose – Website maintenance and ensuring operations

Consent to respective cookie types.
Visit information, habits.
Profile, username, profile history, purchase history, payment data in the online store.

4.13. Purpose – Ensuring payments, email hosting, use of courier and postal services, use of call center services, etc., i.e., attraction of cooperation partners

Identification data – name, surname.
Contact information – phone number, email, delivery address.
Correspondence data.
Voice recording data.

4.14. Video surveillance data from stores where video surveillance is carried out.

4.15. Photos and videos from public OC VISION events.

5. Legal Basis for Data Processing

5.1. Client / Patient consent (Article 6(1)(a) of the General Data Protection Regulation) – The Client / Patient, as a personal data subject, gives their own consent to the collection and processing of personal data for specific purposes. The Client’s / Patient’s consent for participation in the loyalty program, for direct marketing purposes, in order to make new and individual offers based on the analysis of their purchase history or expressed wishes. The Client’s / Patient’s consent is their free will and independent decision, which can be given at any time, thus allowing OC VISION to process personal data for the specified purposes. The Client’s / Patient’s consent is binding if it is given orally and a note about it is made in OC VISION systems, drawn up in writing or electronically, for example, by filling out the consent for participation in the loyalty program or by sending an electronic request after identifying the Client / Patient. The Client’s / Patient’s consent can also be given by conclusive actions, for example, the Client / Patient themselves enter their data into OC VISION systems, sends and transfers the data to OC VISION themselves. If the Client / Patient has given their consent to OC VISION to process their data, it is considered that the Client / Patient has given consent to process their data within the OC VISION group, also in the context of the brands represented by OC VISION. The Client / Patient has the right to receive information about the processing of their data at any time and has the right to withdraw their previously given consent at any time, using the indicated communication channels with OC VISION. The requested changes will take effect within three working days. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. OC VISION, for the purpose of data minimization and resource economy, has the right not to store the consents given in writing by Clients / Patients for a long time.

5.2. Conclusion and execution of a contract (Article 6(1)(b) of the General Data Protection Regulation) – for OC VISION to be able to conclude and execute a contract with the Client / Patient, qualitatively providing services and serving the Client / Patient, it must collect and process certain personal data obtained before the conclusion of the contract with OC VISION or during an already concluded contract, providing a service, selling a good. In cases where the Client / Patient has chosen to receive the purchased good using a postal or courier service, OC VISION is entitled to transfer the Client’s / Patient’s delivery data and contact information to the postal / courier service provider. The processing of personal data justified by the conclusion and execution of a contract is considered to be the processing of personal data when contacting the client and reminding the person about an appointment made with our specialist.

5.3. Legitimate interests of OC VISION (Article 6(1)(f) of the General Data Protection Regulation) – observing OC VISION’s interests, which are based on the provision of quality services and timely support to the Client / Patient, as well as the protection of its property, OC VISION has the right to process the Client’s / Patient’s personal data to the extent objectively necessary for this. Processing of personal data carried out for internal administrative processes (registration of a purchase/order, monitoring of execution, consideration of complaints, after-sales monitoring, and related services, etc.) is also considered a legitimate interest. OC VISION’s legitimate interests include personal data processing by performing direct marketing, as a result of which new and/or individual offers of OC VISION products and services are made to the Client / Patient, the creation of internal client / patient databases, video surveillance carried out in several stores, etc. OC VISION’s legitimate interests include personal data processing when contacting the client and reminding him/her about an appointment made with our specialist. Taking into account that OC VISION has several group companies and brands it represents, within the OC VISION group, companies are entitled to mutually send personal data to other group companies for internal administrative purposes, as well as to offer all OC VISION group clients / patients their services and goods, provided they have agreed to receive such communications. The aforementioned actions are attributable to OC VISION’s legitimate interest. Reminders about the need to perform a vision check, a visit to a specialist, as well as communication about made orders, etc., are not considered direct marketing communications.

5.4. Fulfillment of legal obligations (Article 6(1)(c) of the General Data Protection Regulation) – OC VISION is entitled to process personal data to fulfill the requirements of regulatory enactments, for example, to submit necessary reports and declarations, etc., as well as to provide answers to lawful requests of state and municipal institutions.

5.5. Protection of vital interests (Article 6(1)(d) of the General Data Protection Regulation and Article 5, Paragraph 5 of the Patients’ Rights Law) – OC VISION is entitled to process personal data to protect the vital interests of the Client / Patient or another natural person, e.g., if the processing is necessary for humanitarian purposes, for monitoring natural disasters and human-induced events, particularly epidemics and their spread, or in humanitarian emergencies (acts of terrorism, man-made disaster situations, etc.).

5.6. Performance of official authority or public interest (Article 6(1)(e) of the General Data Protection Regulation) – OC VISION is entitled to process data to perform a task carried out in the public interest or in the exercise of official authority legally vested in OC VISION. In such cases, the basis for personal data processing is included in regulatory enactments.

6. Rights of the Client / Patient as a Data Subject

The Client / Patient has rights regarding the processing of their data, which according to applicable regulatory enactments are classified as personal data. Overall, these rights are as follows:

6.1. To receive information about the processing of their personal data, to access their personal data.

6.2. To request the correction of their personal data if they are inappropriate, incomplete, or incorrect.

6.3. To object to the processing of their personal data.

6.4. To request the erasure of their personal data, for example, if the personal data is processed based on consent and the Client / Patient has withdrawn their consent. This right does not apply if the personal data whose deletion is requested is processed also on another legal basis, for example, a contract or obligations arising from relevant regulatory enactments, or their retention is determined by the requirements of applicable regulatory enactments.

6.5. To restrict the processing of their personal data in accordance with applicable regulatory enactments, for example, while OC VISION is evaluating whether the Client / Patient has the right to the deletion of their data.

6.6. To receive their personal data, which the Client / Patient has provided to OC VISION and which is processed on the basis of consent and contract execution, in a written format or in one of the commonly used electronic formats and, if possible, to transmit such data to another service provider (data portability).

6.7. To withdraw their consent to the processing of their personal data.

6.8. Not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects the Client / Patient.

6.9. To submit complaints regarding the use of personal data to the Data State Inspectorate (www.dvi.gov.lv) if the Client / Patient believes that the processing of their personal data violates their rights and interests under applicable regulatory enactments.

7. Client / Patient Obligations

7.1. The Client / Patient does not have the right to transfer their access data to OC VISION systems to other persons; each Client / Patient is responsible for any access to OC VISION systems with their access data.

7.2. Each Client / Patient is responsible for the accuracy of their data submitted to OC VISION. In cases where the Client’s / Patient’s personal data changes, it is the Client’s / Patient’s obligation to notify OC VISION.

7.3. In cases where the Client / Patient visits an OC VISION healthcare specialist, it is the Client’s / Patient’s obligation to present a valid personal identification document, which in the Republic of Latvia is a passport or an identity card (ID card); in cases where the Client / Patient wishes to use an insurance policy or any discounts, the Client / Patient must present the relevant document. The insurance policy may only be used by the person in whose name the policy is issued.

7.4. In cases where the Client / Patient is logged into the OC VISION system (portal), the Client / Patient is responsible for logging out / terminating the work session from the OC VISION system (portal) when the work is finished.

8. Profiling of Client / Patient Personal Data as Data Processing

8.1. Profiling is any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning that natural person’s personal preferences, interests, reliability, behavior, location, or movements.

8.2. When processing the Client’s / Patient’s personal data, OC VISION may perform profiling, but this will not produce legal effects for the Client / Patient. The Client / Patient has the right at any time to object to automated decision-making and not to be the subject of such a decision made.

8.3. Direct marketing and the basis for sending commercial communications to the Client: If the Client / Patient has ever given their freely given consent and has not withdrawn it, OC VISION carries out direct marketing, distributing commercial communications to the Client, so that the Client / Patient is always informed about new, modern, and/or products and services created specifically for the Client / Patient, as well as special contract terms (e.g., discounts). The Client / Patient has the right at any time and free of charge to opt-out of receiving commercial communications by informing OC VISION.

9. Cookies

9.1. Cookies are small text files that are created and saved on the Client’s / Patient’s device (computer, tablet, mobile phone, etc.) when visiting OC VISION websites. Cookies “remember” user experience and basic information and thus improve the convenience of using OC VISION websites.

9.2. By using cookies, overall user habits and website usage history are processed, problems and shortcomings in the operation of the website are diagnosed, statistics on user habits are collected, and full and convenient use of the website’s functionality is ensured.

9.3. If the Client / Patient does not wish to allow the use of cookies or any type of them, the Client / Patient can do so in their browser settings, however, in such a case, the use of the website may be significantly disrupted and complicated. The deletion of saved cookies is possible in the browser settings section of your device by deleting the saved cookie history.

9.4. Websites maintained by OC VISION use necessary, statistical, and marketing cookies.

10. Retention Period

Personal data will be processed only as long as it is necessary to fulfill the purpose of processing, for example:

the data is necessary for the purpose for which it was collected;
while the contract concluded with you is in force or the service is being provided;
until what is mentioned in the application is fully reviewed and/or fulfilled;
while OC VISION or the Client / Patient can realize their legitimate interests according to the procedures specified in regulatory enactments;
while OC VISION is bound by a legal obligation to store the data;
while the Client’s / Patient’s consent to the respective processing of personal data is valid, if there are no other legal bases for data processing.

The retention period may be based on the legitimate interests of OC VISION or applicable regulatory enactments (e.g., laws on accounting, laws on the storage of medical records, the Law on the Prevention of Money Laundering and Terrorism and Proliferation Financing, the Civil Law, product safety periods provided by the manufacturer, guarantees, etc.), the need to complete legal proceedings, etc.

The Client / Patient can find out more details about personal data retention periods by contacting us, writing to the email address indicated in this policy.

OC VISION stores the Client’s / Patient’s consent to be a member of the loyalty program and / or consent to receive direct marketing offers for the entire validity period of the loyalty program and / or 5 (five) years.

11. Methods of Obtaining Personal Data

OC VISION obtains the Client’s / Patient’s personal data when the Client / Patient:

11.1. makes an appointment with a specialist;

11.2. undergoes a vision and/or hearing check;

11.3. creates their client profile on the OC VISION website, enters their personal data in it, visits the created profile, performs various actions in it;

11.4. purchases and/or uses and/or receives OC VISION products or services, including guarantees offered by OC VISION;

11.5. applies for the loyalty program and/or signs up to receive news or other services from OC VISION;

11.6. asks OC VISION for more detailed information about the product or service purchased by the Client / Patient;

11.7. contacts OC VISION regarding a complaint or a request for information;

11.8. expresses objections, requests guarantees regarding the goods sold or services provided by OC VISION;

11.9. participates in contests, lotteries, surveys, provides feedback/evaluation regarding the purchased goods, received service;

11.10. visits or browses OC VISION websites, performs actions on them;

11.11. is filmed by OC VISION video surveillance equipment in OC VISION stores;

11.12. is filmed and photographed, interviewed at OC VISION public events, etc.

12. Client Data Protection

12.1. OC VISION provides, continuously reviews, and improves protective measures to protect the Client’s / Patient’s personal data from unauthorized access, accidental loss, disclosure, or destruction. To ensure this, OC VISION uses modern technologies, technical and organizational requirements, including the use of firewalls, intrusion detection, analysis software, and data encryption.

12.2. OC VISION carefully checks all service providers that process the Client’s / Patient’s personal data on behalf of and on the instructions of OC VISION, as well as evaluates whether cooperation partners (personal data processors) apply appropriate security measures so that the processing of the Client’s / Patient’s personal data occurs in accordance with OC VISION’s delegation and the requirements of regulatory enactments. Cooperation partners are not allowed to process the Client’s / Patient’s personal data for their own purposes.

12.3. OC VISION assumes no liability for any unauthorized access to personal data and/or loss of personal data if it is independent of OC VISION, for example, due to the Client’s / Patient’s fault and/or negligence.

12.4. If a Client / Patient visits any OC VISION website, the processing of their data (for example, IP address) is initiated; by continuing to visit the website, the data processing continues; by clicking on Facebook, Instagram, or other links, at the moment of clicking them, the processing of the Client’s / Patient’s data is initiated by the respective website operators, for example, Facebook, Instagram, etc., and they will access the Client’s / Patient’s data in accordance with their own terms, which we recommend reviewing on the respective service provider’s website. OC VISION assumes no responsibility for how personal data is processed by other service providers.

13. Processing Territory

13.1. Usually, personal data is processed within the European Union/European Economic Area (EU/EEA), however, in certain cases, it may be transferred and processed in countries outside the EU/EEA.

13.2. The transfer and processing of personal data outside the EU/EEA can occur if there is a legal basis for it, namely, to fulfill a legal obligation, to conclude or execute a contract, or based on the Client’s / Patient’s consent, and appropriate security measures have been taken. Appropriate security measures include, for example:

An agreement has been concluded, including EU standard contractual clauses or other approved terms, codes of conduct, certifications, etc., which are approved in accordance with the General Data Protection Regulation;
In the non-EU/EEA country where the recipient is located, an adequate level of data protection is ensured in accordance with an EU Commission decision;

13.3. Upon request, the Client / Patient can receive more detailed information about the transfer of personal data to countries outside the EU/EEA.

14. Contact Information

14.1. The Client / Patient can contact OC VISION regarding this privacy policy, its application, regarding issues related to the processing of their personal data, regarding the withdrawal of consent, regarding requests, regarding the exercise of data subjects’ rights, and complaints regarding the processing of personal data.

14.2. OC VISION contact information is available on the website: www.ocvision.eu in the contacts section.

14.3. OC VISION Data Protection Officer contact information: gdpr@ocvision.eu or Ulbrokas iela 34, Riga, LV–1021 with the note “Data Protection Officer”.

Privacy policy

OC VISION brands

Contacts