Processing of personal data
9. Processing of personal data using the integrator of the State Information Systems
The Enterprise Register shall ensure the possibility of receiving data services in a standardised manner, using the API Manager sharing components of the National Information System integrator (ALL). Information about available web services (services) is available here. The Enterprise Register shall process as a controller the data of the natural persons (users of services) indicated in the data importer's application.
Legal basis for the processing of personal data
- Article 6(1)(c) of the General Data Protection Regulation (processing is necessary to fulfil a legal obligation applicable to the controller);
- 4 of the Law On the Enterprise Register of the Republic of Latvia. Article 8, fourth paragraph.
Purpose of processing personal data (purpose)
- to transfer information to the State Regional Development Agency for the establishment of access, which ensures the receipt of information from registers carried by the Enterprise Register;
- where necessary, for contacts with the persons identified in the application in the various data exchange issues.
Personal Data Categories
- the identifying information of the natural person identified in the data importer's application;
- contact details of the natural person indicated in the data importer's application.
Rights of the data subject
- the right to lodge a complaint with the State Data Inspectorate.
Date of storage of personal data
10 years
Transfer of personal data
The data referred to in the data application may be transmitted to the law enforcement authority on the basis of a reasoned request.
Data shall not be transmitted to third parties or third countries.
We are informed that the personal data indicated in the data importer's application is also processed by the National Regional Development Agency (Valsts reģionālās attīstības aģentūra or VRAA):
Legal basis for the processing of personal data by the VRAA
- Article 6(1)(c) of the General Data Protection Regulation (processing is necessary to fulfil a legal obligation applicable to the controller);
- Section 10, Paragraph two of the Law on State Information Systems;
- Cabinet Regulation No. 374, Regulations Regarding the Integration of State Information Systems, 14.06.2016;
- Cabinet Regulation No. 442 of 28.07.2015, Procedures for ensuring compliance of information and communication technology systems with minimum safety requirements, paragraph 15.10.
Purpose of processing personal data (purpose)
- ensuring the circulation of data between VRAA and third party systems;
- ensure verification of the identity and access rights of the users of the national information system;
- ensure the existence of service metadata and personal identity certificates for investigations or claims processing.
For the receipt of information regarding the State Regional Development Agency as curators, the data protection specialist and the processing of data carried out shall be invited to refer to the State Regional Development Agency - https://www.vraa.gov.lv/en/privacy-policy