Published: 28.08.2018 Updated: 30.12.2022

Latvijas Banka ensures the processing of natural person data in accordance with the requirements of laws and regulations.

Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) applies from 25 May 2018. This is general information on the purposes of and the legal framework for the personal data processing as well as the categories of personal data and their recipients.

Detailed information on personal data processing can be provided under the respective sections of Latvijas Banka's website (www.bank.lv) as well as included in contracts or provided upon request.

  1. Ensuring the Credit Register operation: for the performance of a task carried out in the exercise of official authority vested in the controller pursuant to the Law on Credit Register. More information 
  2. Managing cash transactions (inter alia, exchanging euro banknotes and coins for other denominations, exchanging damaged banknotes and coins and exchanging the lats for the euro): for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller pursuant to the Law on Latvijas Banka; for compliance with the legal obligation to which the controller is subject pursuant to laws on prevention of money laundering. More information
  3. Managing the physical security of Latvijas Banka's objects (including the storage and processing of cash) by making video and phone call recordings and by maintaining a pass regime (including the clearance of persons who will perform work on premises): for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller pursuant to the Law on Latvijas Banka.
  4. Providing information to individuals by phone or e-mail: for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller pursuant to the Law on Latvijas Banka; for compliance with the legal obligation to which the controller is subject pursuant to laws governing national authorities' communication with the public.
  5. Ensuring the sales of numismatic products on Latvijas Banka's online sales platform for coin purchase, including the processing of orders: for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract. 
  6. Ensuring the registration of participants taking part in conferences, competitions and other events organised by Latvijas Banka or its cooperation partners: for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract; for compliance with a legal obligation to which the controller is subject pursuant to the Law on Archives as well as laws on the payment of taxes and received awards.
  7. Investigating payments: for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller pursuant to Paragraph 9 of the Law on Latvijas Banka and Paragraph 103 of the Law on Payment Services and Electronic Money.
  8. Supervision of financial and capital market participants: for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller pursuant to the Law on Latvijas Banka and laws on prevention of money laundering.
  9. Proxy Registry “Instant Links” -  the online database for linking mobile phone number or other identifier to credit institution customer account number for easy making of instant payments. More information
  10. Recruitment: carried out by processing a candidate's application, evaluating the information provided therein, organising the interview procedure, conducting interviews and obtaining evidence demonstrating the lawfulness of the respective process in order to comply with the legal obligation of the controller pursuant to the Labour Law.
  11. Communication related to statistical issues: processing of contact information to perform a task in the exercise of the official authority vested in the controller pursuant to the Law on Latvijas Banka.
  12. Internal processes, including personnel management, internal audit to implement a task which is in the public interest or to perform a task in the exercise of the official authority vested in the controller pursuant to the Law on Latvijas Banka in order to comply with a legal obligation to which the controller is subject pursuant to the laws inter alia governing the legal employment relationships, financial transactions and occupational safety.

Personal data may be collected from the person itself, from cooperation partners pursuant to the terms and conditions stipulated in laws or contracts as well as from public registers.

Categories of personal data subject to processing are as follows:

  • Identification data, e.g. name, surname, personal identity number, the date or year of birth, data of the person's identity document (including a copy of the passport or ID card).
  • Contact details, e.g. address (including product delivery address), phone number,
    e-mail.
  • Person's appearance and locationat a particular place and time captured on a video, in a photograph or a voice recording during a phone call.
  • Information related to the settlement of payments(including information on the payment made, the settlement account number).
  • Information related to ensuring the supervision of the financial and capital market participants which in some cases includes personal information.
  • Informationnecessary to ensure the participation in an event or competition (including educational institution, grade, workplace, position).
  • Information provided in applications(including the information provided on the person's own initiative or pursuant to the procedure for executing the transaction).

To pursue certain purposes of data processing, data may be processed in a broader sense, e.g. pursuant to the Law on Credit Register and Latvijas Banka's Regulation for the Credit Register; to ensure customer due diligence pursuant to the requirements of the Law on the Prevention of Money Laundering and Terrorism and Proliferation Financing and the Law on International Sanctions and National Sanctions of the Republic of Latvia.

Personal data are processed by Latvijas Banka's information systems as well as by Latvijas Banka's staff in the discharge of their official duties.

Data recipients outside Latvijas Banka:

  • Credit Register participants, consumer's creditors, national authorities and officials authorised to receive Credit Register data pursuant to the Law on Credit Register.
  • Users of Proxy Registry “Instant Links”.
  • Staff responsible for the maintenance of Latvijas Banka's websites and the processing of personal data related to the deployment of data on servers and the granting of access to authorised users.
  • Law enforcement authorities as stipulated by law.

Personal data are processed in the European Union/European Economic Area (EU/EEA.)

Personal data are only processed as long as necessary. The period of data storage may be subject to laws and regulations (e.g. the Law on Latvijas Banka, the Law on Credit Register, laws on accounting, laws on the prevention of money laundering), the contract with the data subject and the legitimate interests of the persons involved. All or part of information obtained during a recruitment contest shall be stored for no longer than a year.

Latvijas Banka takes appropriate technical and organisational measures to ensure personal data protection from unauthorised access, unauthorised processing or disclosure, modification or deletion.

Data subjects have the right to:

  • be notified of the processing of the personal data by Latvijas Banka and to have access to the processed data.
  • request the rectification of personal data where they are inadequate, incomplete or inaccurate.
  • submit complaints on the use of personal data to the Data State Inspectorate (www.dvi.gov.lv) where the data subject believes that the processing of its personal data violates his/her rights and interests.

Latvijas Banka's contact details are available on its website: www.bank.lv.

Contact details of data protection specialists: datuaizsardziba@bank.lv.