BUSINESS.GOV.LV Privacy Policy

General Provisions

1. The Investment and Development Agency of Latvia (hereinafter – LIAA www.liaa.gov.lv) is a direct administrative institution under the supervision of the Minister of Economics. In order to perform the tasks assigned to LIAA, the agency develops and maintains the information system “National Platform for Business Development – BUSINESS.GOV.LV” (hereinafter – BUSINESS.GOV.LV), which is available online at www.business.gov.lv as well as through the LIAA mobile application “BUSINESS.GOV.LV”. The mobile application is available on Google Play Store and Apple App Store.
2. BUSINESS.GOV.LV collects data to:

• enhance the export capacity of Latvian companies and promote foreign trade;
• promote the involvement of foreign investment in the Latvian economy;
• encourage business startup and development;
• support innovative business in Latvia, including fostering cooperation between the research and business sectors, and promoting technology transfer and commercialization of technology rights;
• implement measures in accordance with state support programs;
• administer activities co-financed by European Union funds and other foreign financial instruments;
• implement the functions defined in the Tourism Law.

3. LIAA ensures the confidentiality of personal data processed within the scope of BUSINESS.GOV.LV and implements appropriate technical and organizational measures to protect personal data from unauthorized access, unlawful processing or disclosure, accidental loss, alteration, or destruction.
4. Within BUSINESS.GOV.LV, personal data is processed on the following legal bases (in order of priority):

• The conclusion and execution of transactions by LIAA or its representatives, including contracts where the data subject is a party;
• Fulfillment of obligations set or arising from legal regulations;
• The performance of a task carried out in the public interest;
• The legitimate interests of LIAA or its representatives;
• The data subject's consent.
• In accordance with Article 10 of the Freedom of Information Law, LIAA provides access to certain information in the form of open data. LIAA’s open data sets are published and available on the Latvian open data portal.

5. LIAA processes personal data within BUSINESS.GOV.LV regarding the following individuals:

• LIAA clients – natural persons;
• LIAA clients – contact persons of legal entities;
• Business partners, including subcontractors and associated natural persons;
• Recipients of LIAA informational and personalized messages;
• Participants in events organized by LIAA.

6. Personal data is collected both directly from the data subject and from external sources (i.e., national information systems) to minimize the need for users to re-enter data already available in other systems.

The categories of personal data processed include:

• Identification data – name, surname, and personal ID number (if logging in via www.latvija.lv);
• Contact details – phone number, email address, declared and actual address;
• Preferences within BUSINESS.GOV.LV – preferred areas of support, industries, and topics;
• Records of services received within BUSINESS.GOV.LV;
• Data describing business activities;
• Bank account details;
• IP address and login date/time are stored in audit logs to preserve evidence for resolving potential disputes or complaints;
• If a user registers for an LIAA event via the mobile app, a personalized QR code is generated and stored;
• Cooperation and real estate offers – these may be published on both business.gov.lv and the Open Data Portal. At the time of submission, the user is not informed of this;
• If a company profile is submitted and marked for publication, it will be made public on www.business.gov.lv.

Data subject rights

1.    The data subject has the following rights in relation to personal data stored on BUSINESS.GOV.LV:

• to access their personal data and receive the information specified in Article 15 of the Regulation;
  • to request the LIAA to correct their personal data;
  • request the LIAA to erase their personal data;
  • request the LIAA to restrict the processing of their personal data or to object to such processing in accordance with Articles 17 and 21 of the Regulation;
  • withdraw their consent to the processing of personal data at any time.

2.    The data subject may submit a request to exercise their rights in writing in person at the LIAA Customer Service Department, presenting a personal identification document, or by e-mail, signed with a secure electronic signature and sent to pasts@liaa.gov.lv. If the data subject has submitted a request to exercise their rights in writing by e-mail without signing with a secure electronic signature, LIAA will only provide information about the data received in messages from the e-mail address of the sender of the request.

3.    The data subject can access their personal data processed within the framework of "BUSINESS.GOV.LV" using the LIAA application "BUSINESS.GOV.LV", as well as on the website www.business.gov.lv.

4.    The data subject's right to request the erasure of their personal data or the restriction of processing (including the right to object to processing in accordance with Articles 17 and 21 of the Regulation) may be exercised if LIAA has no legal basis and/or obligation to continue processing in accordance with applicable regulatory enactments.

5.    The data subject has the right to lodge a complaint with the data protection supervisory authority (State Data Inspectorate www.dvi.gov.lv) regarding the use of personal data if the data subject considers that their rights and interests have been violated in accordance with applicable regulatory enactments.

6.    The LIAA undertakes to notify the data subject without delay of any personal data security breach, if the personal data breach could result in a high risk to the rights and freedoms of the data subject.

Storage period

1. Personal data is processed for as long as necessary for the relevant purpose of personal data processing. The storage period may be determined or justified by a contract with the customer, the legitimate interests of LIAA or applicable regulatory enactments. Once the legal basis for the storage of personal data expires, the personal data is deleted.

Places where personal data is processed and its transfer to the processor

1.   Personal data is processed at the LIAA premises (Pērses iela 2, Riga) and on information processing servers owned and/or used by the LIAA, which are located in the European Union or the EEA.

2.    The LIAA may transfer personal data for processing to:

• A person who provides the functionality of "BUSINESS.GOV.LV", data processing or IT services (information technology service providers, cloud-based software service providers, website content hosting and management, data analysis, data backup, security and storage service providers (LIAA stores personal data on servers located in secure data centres within the EU or EEA));
  • a person to whom LIAA must provide information in the course of performing its functions as specified in regulatory enactments.

3.    For the processing of personal data within the framework of LIAA "BUSINESS.GOV.LV", one or more processors may be engaged to process personal data on behalf of LIAA (hereinafter referred to as the processor).

4.    The LIAA shall conclude an agreement with each processor, which shall also include a provision on compliance with the privacy policy of "BUSINESS.GOV.LV" and the terms of use of "BUSINESS.GOV.LV", insofar as they apply to the processor, in the process of personal data processing. The processor must also apply appropriate technical and organizational measures to ensure the protection of personal data.

Personal data controller

1.    The personal data controller is the Investment and Development Agency of Latvia, Pērses iela 2, Riga, LV-1442, tel. 67039400, e-mail: pasts@liaa.gov.lv

2.    For questions regarding the data processing process, please contact LIAA:

• by writing to the data protection specialist at datu.aizsardziba@liaa.gov.lv or  pasts@liaa.gov.lv or
  • by submitting the relevant application in person or by post.

3.    The controller has the right to unilaterally amend this privacy policy at any time in accordance with applicable regulatory enactments, informing data subjects thereof by e-mail or via the website www.business.gov.lv.

Cookies

Information about cookies can be found here.