Translated by machine translator

The Enterprise Register (UR) API Web services (services) can be obtained through the API Manager, which is a sharing component of the national information systems Compatibility maintained by the national Digital Development Agency (VDAA).

Types of UR API Web services What information does it contain? Who can get?

Public (general) information services on legal entities registered in the registers of the Enterprise Register

Entries, documents and other information from the registers of the Enterprise Register in the scope referred to in the first part of Section 4, paragraph 15 of the Law On the Enterprise Register of the Republic of Latvia

Any person within the limits prescribed by law

Non-public (restricted access) information services on legal entities registered in the registers of the Enterprise Register

Information in accordance with Section 4, paragraph 15, second and third parts of the Law on the Enterprise Register of the Republic of Latvia

Law enforcement authorities, as well as the Financial Intelligence Unit and supervisory and control authorities in the field of prevention of money laundering and terrorist and proliferation financing, without restrictions; for more details, see the section “Conditions for receiving non‑public section services”.

List of Enterprise Register web services (services), including links to descriptions and documentation (LV).

  1. The requester/datatee is investigating the API Manager Developer Portal Service Catalog to get information about the available services to use in its solution.
  2. In order to apply for a service subscription, the data importer shall complete and submit to the Enterprise Register an application for permission to access the web services of the Enterprise Register.
  3. The Enterprise Register shall examine the application of the data importer and, in case of harmonisation, prepare and send the application TO THE VDAA regarding the granting of user rights to the data importer concerned (at the same time informing the data importer regarding the transmission).
  4. VDAA, upon receipt of the Enterprise Register application, shall within 5-10 working days create a user for the data importer and grant him or her rights in the developer portal, register a certificate for calling services and assign a data exchange identification number. VDAA informs you of the users created and the rights assigned by emailing the contact specified by the data importer.
  5. The data importer authenticates to the portal and makes a “Customer Usage” registration, which will be used to subscribe to and call the required services.
  6. The data importer subscribes to the selected service.
  7. The data importer and its developer representatives can receive consultative support for the API manager by emailing the atbalsts@vraa.gov.lv.
  8. Learn more: VDAA information about the API subscription procedure and documentation for creating data exchange.

In order to apply for access to Enterprise Register services in a test/production environment, the data importer must submit an application for an Enterprise Register authorisation/consent:


Application form for access to the Enterprise Register’s web services

If the data importer is a legal person, the application form shall be signed by its manager.
When sending an application for access only to the test environment, it will be necessary to re-prepare an application for access to the Enterprise Register information Service in the production environment.

 

Electronically

  • The application shall be signed with a secure electronic signature and sent to the Enterprise Register to an e-address or e-mail: pasts@ur.gov.lv

By post

  • A signed application may be sent to the Enterprise Register

Non-public part (restricted access) information services shall contain restricted access information specified in Section 4.15, paragraphs two and three of the Law on the Enterprise Register of the Republic of Latvia, which may be received only by the persons specified in Paragraph four of the Section referred to in the Law, therefore services shall be technologically protected by operation (scope).


In accordance with the Law, restricted access information may be received:

  • law enforcement institutions - without restrictions for the performance of the tasks specified in regulatory enactments. In the context of the law, law enforcement authorities are: Constitution Protection Bureau, Defence Intelligence and Security Service, State Security Service, Internal Security Bureau, State Police, State border Border Guard, Corruption Prevention and Combating Bureau, Prison Administration, tax and Customs Police of the State Revenue Service, Internal Security Office of the State Revenue Service, Prosecutor's Office of the Republic of Latvia, Military Police, masters of seagoing ships on long journeys and Commander of a unit of the Latvian national Armed Forces located in a foreign territory, as well as courts, namely institutions which in conformity with the competence specified in regulatory enactments are subjects of investigation institutions or operational activities and courts;

  • financial Intelligence Service and supervisory and control institutions IN the field of PREVENTION of NILLTPF (money laundering and financing of terrorism and proliferation), for example, State Revenue Service, insolvency Control Service, etc. . - without restrictions for the performance of the tasks specified in regulatory enactments.

For the purposes of this section, the Enterprise Register shall provide information on its processing of personal data contained in applications submitted to the Enterprise Register.

In accordance with the requirements of Article 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General data Protection Regulation), the data importer must inform him/her as a data subject by including employee data in the application to the Enterprise Register that:

    1. the processing of the personal data referred to in the application shall be carried out by the Enterprise Register as controller for the following purposes:
      (a) to transmit the information to the national Digital Development Agency for the creation of access ensuring receipt of the information from registers held in the Enterprise Register;
      (b) where necessary, to communicate with the persons referred to in the application on various matters of data exchange.;
    2. information on the Enterprise Register as a data controller and its data protection officer is available in the processing of personal data of natural persons section;
    3. the Enterprise Register will not transfer the personal data indicated in the applications to third parties, except if such obligation is provided for by regulatory enactments, and will not transfer to third countries;
    4. applications received in the Enterprise Register will be kept for 10 years in accordance with the nomenclature of files.
    At the same time, the processing of personal data, which are indicated in the applications submitted to the Enterprise Register, shall also be performed by the State Regional Development Agency as a controller for the following purposes:

    (a) to ensure the circulation of data between ALL and third party systems (Cabinet Regulation No. 374 of 14 June 2016, Regulations of the national information systems integrator);
    B) to ensure verification of the identity and access rights of users of the State information system (Section 10, Paragraph two of the State information systems Law);
    C) to ensure the existence of service metadata and personal identity certifications for cases of investigation or processing of claims (Cabinet Regulation No. of 14 June 2016 .374 “Regulations of the integrator of State information systems” and Cabinet Regulation No. 442 of 28 July 2015, procedures by which conformity of information and Communication Technology systems with minimum Security requirements is ensured”, Paragraph 15.10).

    We invite you to contact the national Digital Development Agency for information about the national Digital Development Agency, as well as the controller, data protection specialist and data processing performed.

    In matters regarding the processing of personal data, including regarding the use of the rights of the data subject or complaints regarding the use of personal data in the specified data processing processes, the data subject may contact the data protection specialist of the Enterprise Register (contact information on the home page in the section processing of personal data) or the data protection specialist of the State Digital Development Agency or with the data security specialist thereof: vdar@vraa.gov.lv or personasdati@vraa.gov.lv.

    Where the data subject considers that the use of its data infringes its rights and freedoms, the data subject shall have the right to lodge complaints regarding the use of the data for the Data State Inspectorate.