Processor (operator of the Enterprise Register information system):

• Association of persons Visma consulting Ltd, Unified registration No. 40103916493, legal address – Sporta Street 11, Riga, and SIA 'OAK software', Unified registration No. 40103504819, legal address – Slokas Street 185-13, Riga;
• State joint stock company 'Courthouse Agency', Unified registration No. 40003334410, legal address – Baldones Street 1B, Riga

Within the scope of its competence the Enterprise Register shall evaluate, register, record and update information regarding the application of sanctions specified by the Member State of the International and national and North Atlantic Treaty Organisation to legal entities or persons registered or entered in public registers.

Legal justification for the processing of personal data:

• Paragraphs 1(c) (processing is necessary to fulfil a legal obligation relating to the controller) and (e) (performance of public administration tasks in the public interest or in the exercise of official powers vested in the controller) of the general data protection regulaspant;
• section 4, Clause 5 of the Law on the Enterprise Register of the Republic of Latvia. paragraph ¹⁵, second, third and fourth paragraphs of Article ², 4. ¹⁰ Twelfth (4) and (4). points (d) and (e) of the first paragraph of Article ¹⁵, paragraph 49 of the transitional provisions;

Purpose (purpose) of processing personal data

• registration of sanctioning entities in order to ensure public access to information on sanctioning entities and sanction risks.

Categories of personal data

• personal identification information.

Sources of personal data

• laws, decisions, information provided by other bodies;
• Information in the registers kept by the Enterprise Register and documents at the disposal of the Enterprise Register.

Availability of personal data

Data identifying natural persons of sanction subjects: given name, surname, personal identity number (if the person does not have a personal identity number - date of birth) and nationality, shall be freely and free of charge available on the website of the Enterprise Register, including unidentified users. Until the development of the appropriate technical solution, but no later than 02.06.2025, details of the sanctions subjects shall be published on the Enterprise Register website in the form of a summarised list (https://www.ur.gov.lv/lv/sanem-informaciju/bezmaksas-pakalpojumi/dati-par-piemerotajam-sankcijam/).

Period of retention of personal data

• Current and historical data of rightholders and legal facts, i.e. entries in registers and registered information, shall be permanently stored in the information system of the Enterprise Register (4 of the Law on the Enterprise Register of the Republic of Latvia. section ⁹, Paragraph two).

Rights of the data subject

• The right of access pursuant to Article 15 of the General data Protection Regulation to request and receive data processing information: legal basis for processing, purposes, categories of personal data and recipients thereof, etc.
• The right to lodge a complaint with the data State Inspectorate.

Limitation of the data subject's rights

• The right to rectify and erase personal data is limited to Section ¹ of the Law on the Enterprise Register of the Republic of Latvia – in order to promote the security and stability of the economic and legal environment, to ensure public credibility and availability of records of registers and the integrity and unity of documents, a person does not have the right to rectify or erase personal data in records kept by the Enterprise Register, in the information registered in other registers, as well as in documents included in the registration file of rightholders and legal facts until the relevant information or documents are stored in the registers kept by the Enterprise Register.

The right to data portability is limited by the third paragraph of Article 20 of the General data Protection Regulation.