PERSONAL DATA PROCESSING POLICY
Version: v.1
Last modified: 07.08.2025
Data Controller: LLC "The inner space"
Registration number: 40203660349
Legal address: Riga, Antonijas street 16A - 13
FULL TEXT OF PRIVACY POLICY
I. GENERAL PROVISIONS
The purpose of this Policy is to provide You with information about what purpose and what Your personal data THE INNER SPACE obtains and processes, about data volumes and data processing terms, about data protection, as well as to inform You about Your rights and obligations.
THE INNER SPACE has the right to make changes or additions to this Policy by publishing the current version of the Policy on THE INNER SPACE website, in the "Privacy Policy" section.
TERMS USED
- Processor – other legal entities, institutions or organizations that process your personal data on our behalf (for example, accountant).
- Data Subject – that's you – User or Specialist, depending on your role on the website.
- User – is a natural, adult person with legal capacity who, using the website, receives Specialist's services.
- Personal Data – is information that relates to you as an individual and by which you can be identified. This data reveals facts about your personality, for example, date of birth/age or your contact information.
- Controller – that's us – SIA "The inner space", registration number: 40203660349, legal address: Riga, Antonijas street 16A – 13; we choose and determine the purposes of personal data processing (why) and means (how), and we also have the controller's obligations established by law. Below, in the CONTROLLER'S CONTACT INFORMATION section, you will find information on how to contact us.
- Regulation – European Union Regulation No. 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).
- Cookies or cookie files (cookie) are small text files that are sent to your computer or mobile device during your visit to our website and which our website saves on your computer or mobile device when you open the site.
- Specialist – is a natural person with special knowledge, education and qualifications, who has registered on the website as a service provider and who, depending on their education and qualifications, is entitled to provide one of the following services: psychological consultations, coaching (personal growth promotion) services, psychological assistance, psychotherapeutic assistance.
- Website – is our internet website https://theinnerspace.online
II. CONTROLLER'S CONTACT INFORMATION (HOW TO CONTACT US?)
Controller's – SIA "The inner space", registration number: 40203660349, contact information is as follows: legal address: Riga, Antonijas street 16A – 13, email address: info@theinnerspace.online, website address: https://theinnerspace.online
To contact THE INNER SPACE, please write to: info@theinnerspace.online. Please note that THE INNER SPACE does not provide general consultations about the compliance of personal data processing with the Regulation and the Personal Data Processing Law, but provides general information about personal data processing performed by THE INNER SPACE.
III. WHAT CATEGORIES OF PERSONAL DATA DO WE PROCESS, FOR WHAT PURPOSE AND ON WHAT BASIS (What data of yours do we process? How do we process your data?)
Your responsibility is to provide only true data that is valid and necessary for the implementation of the purposes mentioned in this text. If personal data is inaccurate, You must correct it immediately. If you cannot fill in any of the mandatory fields, You must contact THE INNER SPACE.
III.1. PROCESSING OF USER PERSONAL DATA
If you are a website user and wish to receive or are receiving Specialist's services, then we process the following Your personal data for the following purposes:
BEFORE YOU CONCLUDE A CONTRACT WITH THE INNER SPACE
| Personal data categories/data | Purpose (why, for what purpose we process this data) | Legal basis |
|---|---|---|
| Initial registration data | ||
| username | necessary to ensure registration and create a private profile on our website, as well as to distinguish you from other users registered on our website | taking steps at Your request prior to entering into a contract; Article 6(1)(b) of the Regulation |
| necessary to verify your identity via email. This additional action ensures the security of your account. This way we confirm your identity and protect access to your future profile. | taking steps at Your request prior to entering into a contract; Article 6(1)(b) of the Regulation | |
AFTER YOU CONCLUDE A CONTRACT WITH THE INNER SPACE
| Personal data categories/data | Purpose (why, for what purpose we process this data) | Legal basis |
|---|---|---|
| Identification information | ||
| name and surname | We will process your name and surname only if you wish to exercise your right of withdrawal and fill in the withdrawal rights form available on our website | Compliance with legal obligations applicable to us – Article 6(1)(c) of the Regulation; Cabinet of Ministers Regulations No. 255 of May 20, 2014 "Regulations on Distance Contracts" |
| username | necessary to distinguish you from other users registered on the website and to provide you with individual access to your private cabinet and website services | processing is necessary for the performance of a contract to which the data subject is party; Article 6(1)(b) of the Regulation |
| Contact information | ||
| necessary to send you information related to contract performance, reminders about booked sessions, notifications about changes in our or specialist's services, about profile deletion | processing is necessary for the performance of a contract to which the data subject is party; Article 6(1)(b) of the Regulation | |
| address | We will process your address only if you wish to exercise your right of withdrawal and fill in the withdrawal rights form available on our website | Compliance with legal obligations applicable to us – Article 6(1)(c) of the Regulation; Cabinet of Ministers Regulations No. 255 of May 20, 2014 "Regulations on Distance Contracts" |
| phone number | We will process your phone number only if you provide it yourself when registering on our website, and will use it to send reminders about upcoming sessions | processing is necessary for the performance of a contract to which the data subject is party; Article 6(1)(b) of the Regulation |
| Payment information | ||
| payment type, bank account number, payment purpose description, invoice number, transaction amount, transaction (payment) date, payer's name and surname, etc. | this data is necessary for bookkeeping, for example: to prepare and submit reports to the State Revenue Service, notifications, preparation of balance sheets and annual reports, etc. to identify payments received from you to be able to refund the fee paid for the service in accordance with the terms of the distance contract or credit it to the next session |
to comply with a legal obligation to which the controller is subject; Article 6(1)(c) of the Regulation |
| Communication data | ||
| email content, correspondence with us in your private profile | We hope this won't happen, but we cannot exclude situations where You may have claims against us, or we against You; therefore communication data is necessary for claim review and management | Our legitimate interests (e.g., to bring a lawsuit or defend against Your claims) and compliance with legal requirements applicable to us (complaint management, evidence provision); Article 6(1)(c) and (f) of the Regulation |
III.2. PROCESSING OF SPECIALIST'S PERSONAL DATA
If you wish to register on the website as a Specialist and provide services to website users, then we process the following Your personal data for the following purposes:
BEFORE YOU CONCLUDE A CONTRACT WITH THE INNER SPACE
| Personal data categories/data | Purpose (why, for what purpose we process this data) | Legal basis |
|---|---|---|
| Initial registration data |
||
| username | necessary to ensure registration and create a private profile on our website, as well as to distinguish you from other specialists registered on our website | taking steps at Your request prior to entering into a contract; Article 6(1)(b) of the Regulation |
| necessary to verify your identity via email. This additional action ensures the security of your account. This way we confirm your identity and protect access to your future profile. | taking steps at Your request prior to entering into a contract; Article 6(1)(b) of the Regulation | |
| Identification information | ||
| Copy of ID card or passport containing the following data: name, surname, date of birth and/or personal code, photo, ID card issue date and expiry date, issuing authority name, place of birth | necessary for identity verification and checking (to distinguish you from other specialists with identical names or surnames, as well as to ensure that you have the necessary special education to provide services on the website) | taking steps at Your request prior to entering into a contract; Article 6(1)(b) of the Regulation |
| Education information | ||
| Documents confirming special education (diplomas, certificates, etc.) | necessary to ensure that you have the necessary special education to provide services on the website and that the information provided is true | taking steps at Your request prior to entering into a contract; Article 6(1)(b) of the Regulation |
| Work experience information | ||
| CV, reviews, recommendation letters and other documents you submit to us | necessary to ensure that you have the necessary work experience to provide services on the website and that the information provided is true | taking steps at Your request prior to entering into a contract; Article 6(1)(b) of the Regulation |
AFTER YOU CONCLUDE A CONTRACT WITH THE INNER SPACE
| Personal data categories/data | Purpose (why, for what purpose we process this data) | Legal basis |
|---|---|---|
| Profile data | ||
| username | to allow you to use and manage your account (profile) on the website, provide services to website users | processing is necessary for the performance of a contract to which the data subject is party; Article 6(1)(b) of the Regulation |
| Profile data | ||
| Contact information phone number |
Your phone number is necessary so we can send you reminders about appointments with you or appointment cancellations or rescheduling | processing is necessary for the performance of a contract to which the data subject is party; Article 6(1)(b) of the Regulation |
| necessary to send you information related to contract performance, reminders about user appointments with you, notifications about changes in our documents, about user cancellations of sessions or their rescheduling | processing is necessary for the performance of a contract to which the data subject is party; Article 6(1)(b) of the Regulation | |
| Payment information | ||
| Stripe registered name, Stripe account ID, your bank country | this data is necessary for two purposes: 1) bookkeeping, for example: to prepare and submit reports to the State Revenue Service, notifications, preparation of balance sheets and annual reports, etc., and 2) so you can receive payment for your services | 1) to comply with a legal obligation to which the controller is subject; Article 6(1)(c) of the Regulation; 2) processing is necessary for the performance of a contract to which the data subject is party; Article 6(1)(b) of the Regulation |
| Identification information | ||
| ID card or passport number, expiry date, name and surname, date of birth and/or personal code | necessary for identity verification and to be able to identify you (distinguish from other specialists) in case of user complaints or state institution requests | 1) to comply with a legal obligation to which the controller is subject (complaint management, providing information upon request of state institution/official); Article 6(1)(c) of the Regulation; 2) processing is necessary for the performance of a contract to which the data subject is party; Article 6(1)(b) of the Regulation |
| Education information | ||
| Number of document confirming special education, name of educational institution, date of issue of education document | so that in case of complaints about your education/qualifications or upon request of state institutions we can prove that you have appropriate education and that we checked it before allowing you to provide services on the website | to comply with a legal obligation to which the controller is subject (complaint management, providing information upon request of state institution/official); Article 6(1)(c) of the Regulation |
| Work experience information | ||
| Name of document submitted during initial registration, date, brief description of content | so that in case of complaints about your work experience/qualifications or upon request of state institutions we can prove that you have appropriate education and that we checked it before allowing you to provide services on the website | to comply with a legal obligation to which the controller is subject (complaint management, providing information upon request of state institution/official); Article 6(1)(c) of the Regulation |
| Communication data | ||
| email content, correspondence with us in your private profile | We hope this won't happen, but we cannot exclude situations where You may have claims against us, or we against You; therefore communication data is necessary for claim review and management | Our legitimate interests (e.g., to bring a lawsuit or defend against Your claims) and compliance with legal requirements applicable to us (evidence provision); Article 6(1)(c) and (f) of the Regulation |
IV. FROM WHAT SOURCES DO WE OBTAIN PERSONAL DATA? (How do we obtain your data?)
We obtain Your personal data when You provide them to us:
- When registering on our website
- When entering into contractual relations with us
- When contacting us via mail, email or website
- When fulfilling payment obligations
V. DISCLOSURE OF PERSONAL DATA (In what situations and with whom do we share your data?)
THE INNER SPACE does not use and does not share the obtained information that You provide to us, except in the following cases:
- If data must be transferred to the relevant third party for the performance of a concluded contract or for the performance of a function delegated by law, for example, to a credit institution for settlements or to an accounting service provider for bookkeeping purposes.
THE INNER SPACE transfers the data necessary for bookkeeping to a privately practicing accountant – a natural person, who acts on behalf of THE INNER SPACE as a processor. Considering that the accountant is a natural person, the Regulation provisions apply to them and therefore, protecting the accountant's personal data, their name is not disclosed in this document.
THE INNER SPACE uses Stripe Technology Europe, Limited services for payments (Dublin, Ireland, 549300T7WU87LQYO0K16, R161769, https://stripe.com/en-lv, hereinafter – Stripe). Stripe provides online payment transactions and, depending on your role on our website, gives you the opportunity to pay by bank card on our website (for Clients) or receive payment for your services (for Specialists). Stripe acts as an independent controller with the received personal data in accordance with the binding European Union regulation. You can familiarize yourself with Stripe's personal data processing principles here https://stripe.com/en-lv/privacy and here https://stripe.com/en-lv/legal/cookies-policy, but more detailed information about data processing performed by Stripe can be obtained by writing to dpo@stripe.com.
For sending messages to your phone we use Link Mobility Poland Sp. z.o.o. services (https://www.smsapi.com, Gliwice (44-117), Poland, Toszecka street 101, registration number (KRS) 0000350201, NIP: 969-156-67-36, REGON: 241520885). You can familiarize yourself with Link Mobility Poland Sp. z.o.o. (smsapi.com) personal data processing principles here https://www.smsapi.com/en/privacy. You can contact Link Mobility Poland Sp. z.o.o. personal data processing specialist here https://www.smsapi.com/en/contact.
- For the protection of THE INNER SPACE legitimate interests in the manner prescribed by regulatory acts, for example, by applying to court or other state institutions against a person who has violated THE INNER SPACE legitimate interests, or for debt collection, by transferring data to a debt recovery service provider.
- To persons specified in external regulatory acts upon their justified request (for example, law enforcement agencies);
VI. WHERE DO WE PROCESS YOUR PERSONAL DATA? (In which countries does your data processing take place?)
We process Your personal data within the boundaries of the European Union/European Economic Area.
VII. HOW LONG ARE MY PERSONAL DATA STORED? (How long do we store your data?)
THE INNER SPACE stores and processes Your personal data as long as at least one of these criteria exists:
- the contract concluded with You is in force;
- as long as THE INNER SPACE or You can exercise your legitimate interests;
- as long as either party has a legal obligation to store data (for example, according to the Accounting Law, we must store issued invoices for at least 5 years, etc.);
- as long as Your consent to data storage is valid (applies only to cases where there is no other legal basis for personal data storage (for example, in cases where data is obtained through marketing activities)).
After none of the legal bases for data processing exist, Your personal data is deleted.
Your personal data is deleted after one year if you have not used our website during this year (have not logged into the platform, have not used Specialist's services) and if there is no other legal basis for data processing.
Initial registration data is stored until you conclude a contract with THE INNER SPACE; after concluding the contract, initial registration data becomes data of another category.
Payment information – for fulfilling accounting requirements according to Article 28, paragraph 5 of the Accounting Law – for ensuring payment supporting documents – we store for 5 years.
Copies of Specialists' identity documents, education documents and work experience confirming documents are stored for one week after the Specialist's registration and approval to provide services on the website; after one week, copies of the mentioned documents are deleted.
VIII. HOW DO WE ENSURE DATA SECURITY (How do we ensure the security of your data?)
THE INNER SPACE protects Your personal data using modern technologies, taking into account existing risks to the privacy of natural persons, as well as reasonably available technical, organizational and financial resources to THE INNER SPACE, including using the following personal data protection security measures:
- Use of antivirus software
- Data encryption (HTTPS SSL protocol)
- Connection is established directly between devices without using external communications
- Creating data backup copies once a week
However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals or other unauthorized third parties will not be able to breach our security and inappropriately collect, access, steal or modify your information.
IX. YOUR RIGHTS
Data protection laws grant You a number of rights regarding the processing of Your personal data.
- Access to personal data
You have the right to request confirmation from us whether we process personal data related to You, and in such cases request access to the personal data we process. To exercise the aforementioned rights, you can write us an application. - Rectification of personal data
Furthermore, if you believe that information about You is incorrect or incomplete, You have the right to ask us to correct it. - Withdrawal of consent
If we process Your personal data based on Your consent, You have the right to withdraw your consent to personal data processing at any time. You can change your preferences and withdraw consent by writing us an application. - Objection to processing based on legitimate interests
You have the right to object to personal data processing based on our legitimate interests. However, we will continue to process Your data even if You have objected to it, if we have compelling legitimate grounds to continue processing the data. To exercise the aforementioned rights, please write us an application. - Erasure
In certain circumstances You have the right to request us to delete Your personal data. However, this does not apply to cases where the law requires us to retain the data. You can request the deletion of specific data by writing us an application. - Restriction of processing
In certain circumstances You have the right to restrict the processing of your personal data. Please note: if you request restricted processing of Your data, this may affect Your ability to receive our services. To exercise the aforementioned rights, please write us an application. - Data portability
Finally, You have the right to receive or transfer your personal data to another data controller ("data portability"). These rights apply only to data that you have provided to us based on your consent or contract, and if the processing is carried out automatically. To exercise the aforementioned rights, please write us an application.
X. WHO CAN YOU CONTACT IF YOU HAVE QUESTIONS?
If You have questions about the processing of your personal data, please contact us; contact information is as follows: legal address: Riga, Antonijas street 16A – 13, email address: info@theinnerspace.online, website address: https://theinnerspace.online.
XI. FILING COMPLAINTS
If you are not satisfied with our response to Your application or believe that we are violating personal data protection regulations, You have the right to file a complaint with the Data State Inspectorate: +371 67223131 · pasts@dvi.gov.lv · Elijas street 17, Riga, LV-1050.