Processing of personal data

1. Ensuring the Credit Register operation: for the performance of a task carried out in the exercise of official authority vested in the controller pursuant to the Law on Credit Register. More information about the Credit Register
2. Managing cash transactions (inter alia, exchanging euro banknotes and coins for other denominations, exchanging damaged banknotes and coins and exchanging the lats for the euro): for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller pursuant to the Law on Latvijas Banka; for compliance with the legal obligation to which the controller is subject pursuant to laws on prevention of money laundering. More information about the Cashier's Office
3. Managing the physical security of Latvijas Banka's objects (including the storage and processing of cash) by making video and phone call recordings and by maintaining a pass regime (including the clearance of persons who will perform work on premises): for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller pursuant to the Law on Latvijas Banka.
4. Service of private individuals by receiving an application and providing information : for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller pursuant to the Law on Latvijas Banka; for compliance with the legal obligation to which the controller is subject pursuant to laws governing national authorities' communication with the public.
5. Ensuring the sales of numismatic products on Latvijas Banka's online sales platform for coin purchase, including the processing of orders: for the performance of a contractto which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract. 
6. Ensuring the registration of participants taking part in conferences, competitions and other events organised by Latvijas Banka or its cooperation partners: for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract; for compliance with a legal obligation to which the controller is subject pursuant to the Law on Archives as well as laws on the payment of taxes and received awards.
7. Ensuring the operation of payment systems: for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller pursuant to Paragraph 9 of the Law on Latvijas Banka and Paragraph 103 of the Law on Payment Services and Electronic Money. More information about Payment Systems
8. Supervision of financial and capital market participants: for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller pursuant to the Law on Latvijas Banka and laws on the operation of the financial market and prevention of money laundering. More information about supervision
9. Deposit Guarantee Fund - the accrual, management of the assets, payment of the guaranteed compensation and supervision of the Fund members: for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller pursuant with the Deposit Guarantee Law. More information about the Deposit Guarantee Fund
10. Proxy Registry “Instant Links”-  the online database for linking mobile phone number or other identifier to credit institution customer account number for easy making of instant payments. More information about "Instant Links"
11. Recruitment: carried out by processing a candidate's application, evaluating the information provided therein, organising the interview procedure, conducting interviews and obtaining evidence demonstrating the lawfulness of the respective process in order to comply with the legal obligation of the controller pursuant to the Labour Law.
12. Communication related to statistical issues: processing of contact information to perform a task in the exercise of the official authority vested in the controller pursuant to the Law on Latvijas Banka.
13. Internal processes, including personnel management, internal audit to implement a task which is in the public interest or to perform a task in the exercise of the official authority vested in the controller pursuant to the Law on Latvijas Banka in order to comply with a legal obligation to which the controller is subject pursuant to the laws inter alia governing the legal employment relationships, financial transactions and occupational safety.

Personal data may be collected from the person itself, from cooperation partners pursuant to the terms and conditions stipulated in laws or contracts as well as from public registers.

Categories of personal data subject to processing are as follows:

• Identification data, e.g. name, surname, personal identity number, the date or year of birth, data of the person's identity document (including a copy of the passport or ID card).
• Contact details, e.g. address (including product delivery address), phone number,
  e-mail.
• Person's appearance and locationat a particular place and time captured on a video, in a photograph or an audiorecording during a phone call or a meeting.
• Information related to the settlement of payments(including information on the payment made, the settlement account number, personal data may be included in a free format field of the transaction message).
• Other information related to ensuring the supervision and the resolution of the financial and capital market participants which includes personal information (including professional data, criminal record data).
• Information necessary to ensure the participation in an event or competition (including educational institution, grade, workplace, position).
• Information provided in applications(including the information provided on the person's own initiative or pursuant to the procedure for executing the transaction).

To pursue certain purposes of data processing, data may be processed in a broader sense, e.g. pursuant to the Law on Credit Register and Latvijas Banka's Regulation for the Credit Register; to ensure customer due diligence pursuant to the requirements of the Law on the Prevention of Money Laundering and Terrorism and Proliferation Financing and the Law on International Sanctions and National Sanctions of the Republic of Latvia; legislation in the field of licensing.

Personal data are processed by Latvijas Banka's information systems as well as by Latvijas Banka's staff in the discharge of their official duties.

Data recipients outside Latvijas Banka:

• Credit Register participants, consumer's creditors, national authorities and officials authorised to receive Credit Register data pursuant to the Law on Credit Register.
• Users of Proxy Registry “Instant Links”.
• Payment system providers and participants.
• European Central Bank, etc. institutions involved in financial market supervision.
• Staff responsible for the maintenance of Latvijas Banka's websites and the processing of personal data related to the deployment of data on servers and the granting of access to authorised users.
• Law enforcement authorities as stipulated by law.

Personal data are processed in the European Union/European Economic Area (EU/EEA.)

Personal data are only processed as long as necessary. The period of data storage may be subject to laws and regulations (e.g. the Law on Latvijas Banka, the Law on Credit Register, laws on accounting, laws on the prevention of money laundering, laws in the field of supervision of financial and capital market), the contract with the data subject and the legitimate interests of the persons involved. All or part of information obtained during a recruitment contest shall be stored for no longer than a year.

Latvijas Banka takes appropriate technical and organisational measures to ensure personal data protection from unauthorised access, unauthorised processing or disclosure, modification or deletion.

Data subjects have the right to:

• be notified of the processing of the personal data by Latvijas Banka and to have access to the processed data.
• request the rectification or erasure of personal  data where they are inadequate, incomplete or inaccurate.
• A data subject does not have the right to receive the information if it is prohibited to disclose such information in accordance with the laws and regulations regarding ensuring of supervision of financial market participants and functioning of guarantee systems thereof, application of regulation and macroeconomic analysis.
• submit complaints on the use of personal data to the Data State Inspectorate (www.dvi.gov.lv) where the data subject believes that the processing of its personal data violates his/her rights and interests.

Latvijas Banka's contact details are available on its website: www.bank.lv.

Contact details of data protection specialists: datuaizsardziba@bank.lv.