English

Privacy Policy

1. Information about the LFTA

Association "Latvian Financial Technology Association" ( henceforth - LFTA), registration number: 40008310419, legal address: Ropažu county, Garkalne parish, Baltezers, Ričarda street 20, LV-2164.

You can contact us by phone: +371 29488209 or by writing to the e-mail address: info@lfta.lv.

2. The general characteristics of our personal data processing process

The aim of this notice is to describe how we process personal data that we may receive in the course of our activities. This notice regards the following categories of data subjects:

  • Nominated representatives of LFTA members or associate members (henceforth - members);
  • Cooperation partners, their representatives and contact persons;
  • Website visitors.

The aim of this notice is to give you an overview of our personal data processing activities and purposes, however, please note that other documents (such as cooperation agreements, regulations, website terms and conditions) may also contain additional information on the processing of your personal data. LFTA reserves the right to modify and update this notice as necessary.

We inform you that the rules for the processing of personal data contained in this notice apply to the processing of data of both natural and juridical persons.

LFTA is aware that personal data is of value to you. Your personal data will be processed complying with the confidentiality requirements and providing security for your personal data held by the LFTA.

3. For what purposes does the LFTA process your personal data and what is the legal basis for the processing of personal data?

LFTA will process your personal data only for pre-defined legitimate purposes, including:

a) Regulatory requirements applicable to the implementation of LFTA activities.

For this purpose, the LFTA would need to comply with the requirements of the Associations and Foundations Law, as well as the requirements of the accounting and tax laws, the requirements of the Archives Law and other regulatory enactments.

The main lawfull bases used to achieve these objectives are:

  • Fulfillment of legal obligations (Article 6 (1) (c) of the General Data Protection Regulation), for example by reporting on taxes paid for the employees.

b) Promotion of LFTA activities and provision of information activities

For this purpose, the LFTA may use the personal data of LFTA employees and nominated member representatives to create and distribute publicity materials (text, photo, video format), both created on purpose or obtained from various events, to promote the activities of the LFTA or its members and inform members or the general public about the activities of the LFTA.

At events organized by the LFTA and involving photography or video recording, participants shall be visibly warned on the processing of such data.

The main lawful bases used to achieve these objectives are:

  • Consent (Article 6 (1) (a) of the General Data Protection Regulation);
  • Legitimate interests of the controller (Article 6 (1) (f) of the General Data Protection Regulation).

c) Ensuring the internal operation of the LFTA.

For this purpose, it will be necessary for the LFTA to record information on the participants in the LFTA committee meetings and their course, as well as information on the experience and knowledge of the member candidates for the LFTA committees and working groups.

The main lawfull bases used to achieve these objectives are:

  • Legitimate interests of the controller (Article 6 (1) (f) of the General Data Protection Regulation).

d) Prevention and investigation of threats to security and property interests.

For this purpose, the LFTA will need to register information about the visitors of the LFTA premises, to ensure surveillance of the office and property, to use personal data processors if necessary, to disclose information to courts and other state institutions, to use the rights granted by regulatory enactments in order to ensure our legitimate interests.

The main lawfull bases used to achieve these objectives are:

  • Legitimate interests of the controller (Article 6 (1) (f) of the General Data Protection Regulation).

e) Processing of website cookies

The LFTA website uses cookies to recall whether you have already agreed to the use of cookies on this website that ensure the analysis of visitor activities on the website (connection time, duration, most viewed sections). The information associated with cookies is not used to personally identify you. Standard log information (connection time, duration, IP address) and anonymous information about your activities on the website is collected.

LFTA will not use your data for profiling or automated decision-making , that has legal consequences or that similarly significantly affects you.

4. How do we collect your personal data?

Your personal data can be obtained by the LFTA in one of the following ways:

  • From you if you submit your information to the LFTA;
  • From an LFTA member or other third parties, if the information is necessary to ensure the operation of the LFTA;
  • If you are an official member of LFTA.

Please remember! LFTA members, which are digital financial services institutions, do not provide data on its customers to LFTA and LFTA has no right to request such data.

5. Who could access your personal data?

We take appropriate steps to process your personal data in compliance with applicable legislation and to ensure that your personal data is not accessed by third parties who do not have an appropriate lawful basis for processing your personal data.

If needed, your personal data could be accessed by:

  • Persons authorized by LFTA members, to the extent necessary to achieve the objectives of LFTA;
  • Officials appointed by LFTA members, our employees or directly authorized persons who need the information for the performance of their duties;
  • Processors of personal data in accordance with the services provided by them - and only to the extent necessary. For example, auditors, financial management and legal advisers, information system developers / technical maintainers, other persons who are involved in the provision of controller's services;
  • State and local government institutions in cases specified by legal acts, for example, law enforcement institutions, local governments, tax administrations, sworn bailiffs;
  • Third parties, after careful consideration of whether there is an appropriate lawful basis and appropriate extent for such transfer.

6. Which partners for the processing of personal data, or processors of personal data do we choose?

We take the appropriate measures to ensure that your personal data is processed, protected and transferred to data controllers in compliance with applicable legislation. We carefully select the processors of personal data and, when transferring data, assess the need for it and the amount of data to be transferred. The transfer of data to processors is carried out in compliance with the requirements of confidentiality and security of personal data processing.

We are currently able to work with the following categories of processors:

  • Outsourced accountants, auditors, financial management and legal consultants;
  • IT infrastructure, database owners / developers / technical maintainers
  • Archiving services.

The categories of data controllers are subject to change. If changes occur, we will modify this section of the Privacy Policy accordingly.

7. Is your personal data sent to countries outside the European Union (EU) or the European Economic Area (EEA)?

We process personal data primarily at our registered office or at events outside the LFTA, or by our contracted personal data processors.

We do not transfer personal data to countries outside the European Union or the European Economic Area.

8. How long will the LFTA keep your personal data?

Your personal data will be stored for as long as it is necessary for the relevant purposes of the personal data processing and in accordance with the requirements of applicable law.

When evaluating the retention period of personal data, we take into account the requirements of applicable laws and regulations, as well as our legitimate interests. If your personal data is no longer needed for the specified purposes, we will delete or destroy it.

Below we list the most common retention periods for personal data:

  • Cookie information - depending on the type of cookie, no longer than the end of the session (eg for the duration of the visit), 24 hours (for recording unique visits) up to one year (for example, for recording the first visit);
  • Information on the work of LFTA committees and working groups and its members - on an ongoing basis. Information provided to assess the LFTA applicant's suitability - until the moment when the applicant is in the relevant position at LFTA.

9. What are your rights as a data subject regarding the processing of your personal data?

According to the General Data Protection Regulation, you have the right to access your personal data at our disposal, request the rectification of the data, erasure of the data, processing restrictions, you hold the right to object to the processing of your data, as well as the right to data portability in the cases and according to the General Data Protection Regulation.

LFTA respects your right to access and control your personal data. If we receive your request, we will respond to it within the time limits set by law (usually no later than one month, unless there is a specific request that takes longer to prepare the answer) and, if possible, we will comply with your request.

You may obtain information about your personal data collected by us or exercise your other rights as a data subject in any of the following ways:

  • By submitting the relevant application and sending it to us by post to the following address: Ropažu county, Garkalne parish, Baltezers, Ričarda street 20, LV-2164.
  • By submitting the relevant application and sending it to our email: info@lfta.lv, signed with a secure electronic signature.

As we receive your application, we will evaluate its content and the possibility of your identification, and depending on the situation, we reserve the right to ask you to identify yourself additionally in order to ensure the security and disclosure of your data to the person concerned.

Description of rights:

  • Right to information and access to your data

    You have the right to receive information about the processing of your data. Basic information about your personal data processing is described in this LFTA privacy policy document.

    If you wish to receive answers to questions that are not described in the privacy policy document, LFTA will, to the possible extent, provide answers to questions that cover the information you required to provide, given that it does not infringe on the data subject's other interests or trade secrets.

    In case you want to access other specific personal data that we have, you will have to submit a request on the specific types of data, as well as a justification for the need for such data.

  • Right to rectify data

    If there has been a change in the personal data you have provided to us, such as a change in your personal code, contact address, telephone number or e-mail, please contact us and provide us with the up-to-date data.

  • Right of cancellation

    You have the right to ask us to delete personal data that is no longer necessary for the purpose of the processing or if the processing has been unjustified.

  • Right to restrict processing

    You have the right to request a restriction on the data processing while we check the accuracy of the data or the justification for the processing if you have asked us to correct your personal data or have objected to the processing of personal data (see below).

  • Right to object

    You have the right to object to the processing if you believe that we do not have the right to process your personal data on the basis of a legitimate interest. However, we may continue to process your data if we can provide compelling reasons that outweigh your interests, rights and freedoms.

  • Right to data portability

    You may have the right to request that your personal data submitted to us for processing on the basis of consent or performance of the contract is disclosed to you or sent to another data controller in a structured, widely used and machine-readable format.

  • Withdrawal of consent

    If the processing of your personal data is based on your consent, you have the right to withdraw it at any time and we will not further process your personal data on the basis of your consent. However, processing based on other lawful bases may continue.

10. Where can you file a complaint about personal data processing issues?

If you have any questions or concerns regarding the processing of your personal data by us, please contact us first.

However, if you believe that we have not been able to resolve the issue and you believe that we are still violating your right to the protection of personal data, you have the right to lodge a complaint with the Data State Inspectorate. Samples of applications to the Data State Inspectorate and other related information can be found on the website of the Data State Inspectorate (http://www.dvi.gov.lv/lv/datu-aizsardziba/privatpersonam/iesniegumu-paraugi/).

11. Why do you have to give us your personal data?

We mainly process your personal data in order to fulfill our legal obligations and to fulfill our legitimate interests. In these cases, obtaining certain information from us is necessary to achieve the respective purposes, therefore, failure to provide such information may jeopardize the commencement of the business relationship or the fu of the contract.