1. General Terms
The limited liability company "Vides investīciju fonds" (hereinafter – the Fund) implements delegated state administration functions and tasks, which often necessitates the processing of personal data. In its operations, the Fund complies with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter – the Regulation), the Personal Data Processing Law, and requirements set forth in other regulatory enactments regarding the lawfulness and protection of personal data processing.
2. Purpose of the Data Privacy Policy
The purpose is to provide information on the main purposes of personal data processing carried out by us, their legal basis, and other information in accordance with Article 13 of the Regulation:
- Data controller: Limited liability company "Vides investīciju fonds"
- Address: Latgales street 165, Rīga, Latvija, LV-1019
- Registration No.: 40003339615
- Phone: +371 67845111
- E-mail: pasts@lvif.gov.lv
3. Contact Information of the Data Protection Officer
4. Main Purposes of Personal Data Processing:
- Processing of personal data of recipients of support for the acquisition of zero-emission and low-emission vehicles;
- Processing of personal data of recipients of support for the use of renewable energy sources;
- Processing of personal data included in accounting records;
- Processing of personal data included in personnel files;
- Registry of applicants;
- Registry of records management documents.
5. Legal Basis for Personal Data Processing
The lawfulness of our personal data processing is determined by at least one of the following legal bases:
- The data subject (natural person) has given consent to the processing of their personal data for one or more specific purposes;
- Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;
- Processing is necessary for compliance with a legal obligation to which the controller is subject under the laws in force in the Republic of Latvia;
- Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.
6. Additional Sources of Personal Data Collection
Information provided by the data subject. For specific purposes, personal data is also obtained from state information systems.
7. Period of Personal Data Storage
The storage period depends on the respective purpose of personal data processing, not exceeding the term determined by the regulatory enactments of the Republic of Latvia.
8. Recipients of Personal Data
- The data subject (natural person) regarding themselves;
- Authorized employees of the controller;
- A processor who provides a specific service to the controller in accordance with a mutual agreement concluded;
- State supervisory authorities (if they have appropriate authorization).
Personal data is not transferred to third countries or international organizations.
9. Rights of the Data Subject
Your rights are defined and regulated by the Regulation, including, but not limited to:
- Right to be informed: You have the right to be informed by receiving transparent and understandable information about the personal data processing carried out.
- Right of access to personal data: You have the right to request information from the Controller regarding the processing of your personal data.
- Right to rectification of personal data: If you believe that the information about you is incorrect or incomplete, you have the right to request the controller to correct it. Taking into account your request, the controller will ensure the correction of your personal data if they are inappropriate, incomplete, and/or inaccurate. If the controller decides not to correct your personal data, they will provide you with an explanation.
- Right to withdraw consent: To the extent the controller processes your personal data based on your consent, you have the right to withdraw your consent at any time. In this case, the controller will cease processing your personal data for that specific purpose.
- Right to erasure ("Right to be forgotten"): Under certain circumstances, you have the right to request the controller to delete your personal data (e.g., if the legal basis for processing is solely based on your consent). However, if your data processing is regulated by external legal acts, the controller likely will not have the right to delete your data.
- Right to restriction or objection: Under certain circumstances, you have the right to request the controller to temporarily restrict the processing of your personal data (e.g., if you have identified inaccuracies and time is needed for verification, or if you object to profiling, direct marketing, etc., unless processing is necessary for a task carried out in the public interest). Note that restricting or objecting to processing may affect your ability to receive services from the controller.
- Right to data portability: You have the right to receive or transmit your personal data to another third party. If processing is based on consent or a contract and is carried out by automated means, you have the right to transmit data directly from one controller to another, where technically feasible. This right does not apply to data processed for compliance with a legal obligation or public interest tasks.
- Right not to be subject to automated individual decision-making, including profiling: Every data subject has the right not to be subject to a decision based solely on automated processing (without human involvement), including profiling, which produces legal effects or similarly significantly affects them. We inform you that the controller does not carry out automated decision-making.
- Right to lodge a complaint: If you are dissatisfied with the controller's response or believe that data processing violates regulations, you can submit a complaint to the supervisory authority—the Data State Inspectorate (Datu valsts inspekcija)—or the controller's designated Data Protection Officer.
10. Decision-Making
No automated decision-making, including profiling, is used in the processing of personal data.
11. Final Provisions
Upon the entry into force of these Rules, the internal regulations of the Fund dated December 30, 2021, “Personal Data Protection (Privacy) Policy” shall lose effect.
Information on the main purposes of personal data processing of the limited liability company "Vides investīciju fonds" in accordance with Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council.