Published: 20.03.2021.

General Privacy Policy of the Unified Website Platform

Your privacy and the protection of your personal data are very important to the controller of the Unified Website Platform. We assume that, before providing your personal data, you have read this Privacy Policy, which requests your consent to the processing of your personal data, and that you have consented to such processing.

Public administration is committed to openness and transparency. This Privacy Policy therefore describes how and for what purposes the Unified Website Platform processes the personal data you have provided for processing. Before personal data are processed, the lawfulness of the processing operations is assessed. Personal data are processed on the basis of official authority and the applicable legal obligations.

The purpose of the Unified Website Platform’s Privacy Policy is to provide general information about the personal data processing activities organised and carried out by the State Chancellery in accordance with the principles of personal data processing set out in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter referred to as the GDPR).

The controller of personal data on the Unified Website Platform is the State Chancellery (VK). The processors of personal data on the Unified Website Platform are the institutions whose websites are hosted on the Unified Website Platform; the platform maintainer, the State Digital Development Agency (VDAA); the web hosting provider, the Information Centre of the Ministry of the Interior (IeMIC); and the technical service provider, the Latvian State Radio and Television Centre (LVRTC).

Your personal data will be processed on the Unified Website Platform for the purposes of pursuing the legitimate interests of public administration institutions, complying with statutory obligations, fulfilling contractual obligations and informing the public, as well as for other purposes specified in advance.

The legal basis for processing personal data in connection with the services managed on the Unified Website Platform is established by the following legislation:

Employees of the parties involved in operating the Unified Website Platform process personal data solely for the performance of their official duties, on behalf of the institutions or within the scope of their authorisation, in compliance with the basic principles of personal data processing and the confidentiality requirements laid down in the institution’s internal documents.

Employees are prohibited from processing personal data obtained in the performance of their official duties for their own personal purposes or those of other persons. When processing personal data in the performance of their official duties, personal data processors minimise, as far as possible, the risk of personal data becoming accessible to unauthorised persons as a result of action or inaction.

Your personal data are processed on the Unified Website Platform in compliance with confidentiality requirements and with due regard for the security of the data held by the platform. The Unified Website Platform’s personal data processors implement various security measures to prevent unauthorised access to your data, disclosure of your data or other unauthorised uses. The proper processing and storage of data, and their integrity, are ensured by maintaining an appropriate level of security. Accordingly, proportionate and appropriate physical, technical and administrative procedures and measures are used to protect the personal data collected and processed. Security measures are continuously improved in accordance with the established security requirements and applicable data protection principles, to the extent necessary for the purposes of processing.

Personal data are protected through the use of data encryption tools, a firewall and other solutions for detecting data network security breaches. The Unified Website Platform’s personal data processors ensure data confidentiality and implement appropriate technical and organisational measures to protect personal data against unauthorised access, unlawful processing, disclosure, accidental loss, dissemination or destruction, in accordance with appropriate data protection procedures and to the extent necessary for the purposes of processing. Personal data protection measures are continuously improved and developed to ensure that the level of protection is maintained.

Personal data protection principles apply to:

  • personal data processed within the information technology infrastructure, including servers, local area networks and application software;
  • personal data transmitted over the data transmission network, where applicable;
  • information systems used to support operations and administered by the institutions whose websites are hosted on the Unified Website Platform;
  • electronic documents containing personal data that are created, registered or circulated.

You have the right to withdraw your consent to the collection, processing and use of your personal data at any time, provided that your consent has been requested and you have given it. The controller of personal data on the Unified Website Platform will assess your requests in accordance with its legitimate interests. If personal data are no longer necessary for the previously specified purposes of processing, they will be deleted.

The controller of the Unified Website Platform is responsible for the processing of personal data and uses safeguards to prevent their misuse, unauthorised disclosure or alteration.

To improve communication by public administration institutions, the controller monitors the personal data received. These data may be used in aggregate form to prepare summary reports that may be circulated within public administration. These reports are anonymised and do not contain personal data.

The Unified Website Platform holds access data for registered and public users, usernames, information selection settings, traffic data and information about the Internet Protocol (IP) addresses used to access the platform. The Unified Website Platform uses cookies to obtain information about visitors’ activities on the website, page views, referral sources and the time spent on the website. This information is collected to improve the website’s usability and compile information about visitors’ interests, ensuring that you receive the best possible service. Only the minimum amount of personal data necessary to achieve the intended purpose of processing is processed.

Your personal data are retained on the websites only for as long as necessary for the purposes for which they were collected. The Unified Website Platform’s personal data processors who have access to these data are trained to handle them in accordance with the applicable legal requirements for data security.

Personal data are retained for as long as there is a legal obligation to retain them. At the end of the retention period, the data are securely deleted or anonymised so that they can no longer be linked to the data subject.

Personal data held by the Unified Website Platform are considered restricted-access information and may be disclosed to third parties only in the cases, in accordance with the procedures and to the extent specified in legislation or concluded agreements. When personal data are transferred to the Unified Website Platform’s contractual partners acting as independent controllers, additional provisions governing personal data processing are incorporated into the agreements.

The websites contain links to other websites that have different terms of use and personal data protection policies.

The institutions involved in implementing the Unified Website Platform cooperate with one another in accordance with the legislation in force. If you have any questions or complaints about the processing and protection of personal data on the Unified Website Platform, please contact the State Chancellery by email at pasts@mk.gov.lv, or contact the State Chancellery’s specialist responsible for personal data processing, Aldis Apsītis, at aldis.apsitis@mk.gov.lv.

The staff member responsible for personal data processing on [link to your institution’s website, for example, www.mk.gov.lv] is [first name and surname of your institution’s responsible data controller] (email address: [email address of the responsible data controller]).

Data subjects have the right to lodge a complaint about the use of their personal data with the Data State Inspectorate (www.dvi.gov.lv) if they consider that the processing of their personal data infringes their rights and freedoms under the applicable legislation.

Cookies

The Unified Website Platform uses cookies and informs website users and visitors of their use.

The Unified Website Platform uses cookies to fulfil the obligation to collect visitor and usage statistics under Paragraph 23 of Cabinet Regulation No. 399 of 4 July 2017, “Procedures for the Accounting, Quality Control and Provision of State Administration Services”, and Section 10 of the State Administration Structure Law, in order to improve the platform’s usability. You are given the opportunity to read the Cookie Policy and choose whether to consent to the collection of statistics, as well as whether to enable content sharing on social media. In the cookie consent window, you can prevent cookies from being set by selecting “Reject”. The exception is the strictly necessary technical cookie, which is stored in your browser for the duration of the session. You can change your cookie preferences by selecting the “Change cookie settings” link in the website footer.

Cookies are small text files sent to the storage of your computer or mobile device when you visit a website. On each subsequent visit, cookies are sent back to the website from which they originated or to another website that recognises the cookie. Cookies act as a website’s memory, allowing it to recognise your computer or mobile device on subsequent visits. Among other things, cookies can remember your settings or improve usability.

The cookies used can be divided into strictly necessary cookies, without which the service cannot technically be provided or its provision would be significantly impaired; analytics and statistics cookies; and social media cookies.

By using the website, you consent to the use of the analytics and statistics cookies placed on this website for the purpose of improving the quality of services, in accordance with the principle laid down in Section 10 of the State Administration Structure Law that public administration must be organised in a manner that is as convenient and accessible as possible for private individuals, and with the obligation of public administration to improve the quality of services provided to the public and simplify and improve procedures for the benefit of private individuals.

When you use third-party resources embedded in this website, such as YouTube, Flickr and others, cookies from those resources may be placed in your web browser.

The following cookies are used on this website:

  • Strictly necessary cookies:
    • SESS<ID> — this cookie is required only for content administrators, for authentication purposes. A unique name is generated each time in place of “ID”.
    • maintenance_message — this cookie is required for all users to prevent messages from the content or platform administrator from being displayed again after the user has read them and clicked “Close”.
    • allowCookies — this cookie records whether you have agreed to the terms of cookie use and determines whether the cookie notice should be displayed again.
  • Analytics and statistics cookies. This website uses Google Analytics, a statistics collection tool provided by Google. Google Analytics uses cookies that are stored on your computer and enable an analysis of how you use the website. The information generated by these cookies about your use of the website is transmitted to and stored on Google’s servers. When IP anonymisation is used, your IP address is truncated within the European Union or the European Economic Area. Google uses this information to evaluate your use of the website, prepare reports on website activity for the website maintainers and provide other services related to website and internet use. Google does not associate the IP address received in this way with any other information held by Google. Where necessary, Google may disclose this information to third parties if required by law or if those third parties process such data on Google’s behalf.
    • _ga, _gat, _gid — these three cookies are required for all users to enable visit data to be transmitted to Google Analytics.

If you do not consent to the use of statistics cookies, your visit data will not be included in Google Analytics statistics.

  • Social media cookies:
    • _cfduid — this cookie is required for all users to enable them to share content on social media.

Opting out of cookies

You have the right to object to the creation, collection and processing of these statistics by manually disabling the cookie processing mechanism in your browser at any time.

You can change your cookie settings or delete cookies in your web browser’s settings. For your convenience, links to cookie management information for the most commonly used browsers are provided below:

Further information on managing cookies in the browser used on your device is available at www.aboutcookies.org.

1. Data controller

Transport Accident and Incident Investigation Bureau (hereinafter referred to as the Bureau)
Brīvības iela 58, Riga
Telephone: +371 67288140
Email: pasts@taiib.gov.lv

When processing personal data, the Bureau applies Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the General Data Protection Regulation), the Personal Data Processing Law and other legislation in force governing the processing of personal data.

The Bureau processes your personal data in compliance with confidentiality requirements and takes care to ensure the security of the personal data it holds. The Bureau uses various security measures to prevent unauthorised access to data, disclosure of data or other improper uses of personal data. We use proportionate and appropriate physical, technical and administrative procedures and safeguards to protect the personal data we collect and process. The security measures in place are continuously improved in line with security requirements. Employees who have access to personal data are trained to handle them appropriately and in accordance with the data security rules applicable to the Bureau.

This Privacy Policy applies to every natural person whose personal data are processed by the Bureau. It applies regardless of how you or any other natural person have provided the personal data: through the Bureau’s website, on paper, electronically or by telephone.

2. Contact details of the Data Protection Officer

To find out more about the Bureau’s personal data processing policy, you may contact the Data Protection Officer by email at datiaizsardziba@gmail.com or write to the Bureau at Brīvības iela 58, Riga, LV-1011, marking your correspondence “For the attention of the Data Protection Officer”.

3. Personal data processed

The Bureau primarily processes the following categories of personal data:

  • Identification data, such as first name, surname, personal identity number, date of birth, gender, age and passport or identity card details.
  • Contact details, such as residential address or an address for communication purposes, correspondence address, telephone number and email address.
  • Data relating to employment or civil service relationships, including information on employment contracts or orders and amendments to them, leave, business trips, remuneration and performance appraisals.
  • Professional and employment data, such as information on education, work experience, language skills, current employment, positions held, professional activities and certificates.
  • Information about property owned by a person, such as a vessel (name and registration number) or a car (registration number).
  • Transaction and contract data, such as the transaction number, date, remuneration, name and type.
  • Communication data, such as the type, reference number and date of incoming or outgoing communications, and information contained in correspondence.
  • Payment data, such as account number, invoice number, date and amount.
  • Data relating to the registration, investigation and reporting of civil aviation accidents and incidents, railway accidents, and marine casualties and incidents, including dates, reference numbers and details of investigating staff, crew members, victims and other persons involved.
  • Photographs and videos taken at the Bureau and at public events outside our premises.
  • Information collected through cookies used on websites, which allows us to obtain information about visitors’ activities, page views, traffic sources and time spent on the website. We collect this information to improve the website’s usability and ensure that you receive the best possible service.

The Bureau does not process special categories of personal data, including, but not limited to, data concerning your health, ethnicity, religious beliefs or political opinions, except in cases provided for by legislation or where you disclose and submit such data to the Bureau yourself.

4. Purposes and legal basis for processing

The Bureau processes personal data to perform the public administration functions specified in Cabinet Regulation No. 973 of 20 December 2005, “By-law of the Transport Accident and Incident Investigation Bureau”, in the areas of investigating civil aviation accidents and incidents, serious railway accidents and serious incidents, and marine casualties and incidents.

The Bureau also processes personal data to perform its functions and tasks and exercise its rights under the State Administration Structure Law, the Law on Submissions, the Administrative Procedure Law and other legislation, to fulfil contractual obligations and to pursue legitimate interests. These purposes include, but are not limited to:

  • identifying persons submitting requests or applications;
  • preparing final reports on investigations into civil aviation accidents and incidents, final reports on investigations into railway accidents, and reports on investigations into marine casualties and incidents;
  • registering and investigating civil aviation accidents and incidents, railway accidents, and marine casualties and incidents;
  • preparing, concluding and performing private-law transactions or contracts necessary for the Bureau’s operations;
  • administering payments;
  • informing the public about the Bureau’s activities;
  • safeguarding and pursuing legitimate interests arising from concluded contracts, existing obligations or legislation;
  • conducting recruitment competitions and safeguarding the Bureau’s legitimate interests insofar as they relate to recruitment.

The Bureau’s main legal bases for processing personal data are:

  1. Compliance with a legal obligation to which the Bureau is subject (Article 6(1)(c) of the General Data Protection Regulation, the State Civil Service Law, the Labour Law, the Procedures for the Investigation of Civil Aviation Accidents and Incidents, the Procedures for the Classification, Investigation and Registration of Railway Traffic Accidents, the Procedures for the Investigation of Marine Casualties and Marine Incidents, etc.). This basis applies where processing is prescribed by legislation and is necessary for the Bureau to perform the functions and tasks conferred on it by legislation, for example, processing the personal data of applicants in recruitment competitions or investigating accidents and incidents.
  2. Performance of a task carried out in the public interest or in the exercise of official authority vested in the Bureau (Article 6(1)(e) of the General Data Protection Regulation, the By-law of the Transport Accident and Incident Investigation Bureau, etc.). This basis applies where data processing is not specified in legislation but is necessary for the Bureau to perform its functions and tasks.

Additional legal bases for processing personal data may include:

  1. The data subject’s consent to the processing of their personal data for one or more specific purposes (Article 6(1)(a) of the General Data Protection Regulation). For example, in relation to the submission of a CV.
  2. Preparing or entering into a contract with the data subject, performing a contract or taking steps prior to entering into a contract (Article 6(1)(b) of the General Data Protection Regulation). For example, entering into an employment contract or a contract for services with the Bureau.
  3. Protecting the vital interests of the data subject or another natural person (Article 6(1)(d) of the General Data Protection Regulation).
  4. Pursuing the legitimate interests of the controller or a third party, except where those interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child (Article 6(1)(f) of the General Data Protection Regulation). For example, participating in legal proceedings in the event of a dispute. When the Bureau receives your application for a vacant position, it has a legitimate interest in processing the application by assessing the information provided, organising and conducting interviews, and ensuring that evidence is available to demonstrate that the recruitment procedure was conducted lawfully.

5. Recipients of personal data

To perform the Bureau’s functions and tasks and exercise its rights, we need to transfer personal data to other recipients in the cases prescribed by legislation.

Recipients of personal data may include central and local government authorities, your legal or authorised representatives, recruitment selection panels, persons entrusted with central or local government tasks, law enforcement and supervisory authorities, partners and contractors (for example, independent auditors, financial auditors and data processors), the media and other persons in accordance with the legislation in force.

6. Sources of personal data not obtained from the data subject

Personal data may be obtained from publicly available sources (for example, Lursoft or the State Revenue Service database) and from central and local government authorities, where provided for by externally binding laws and regulations, and only in the cases, to the extent and in accordance with the procedures specified in that legislation.

7. Retention period for personal data

Your personal data will be retained for as long as necessary to achieve the relevant purposes of processing, in accordance with legislative requirements, after which your personal data will be deleted.

Different retention periods may apply under the Bureau’s records classification and retention schedule, depending on the document containing the personal data. The data are retained for the period specified in that schedule.

8. Data subject rights in relation to data processing

  • You have the right to receive the information prescribed by legislation concerning the processing of your personal data.
  • You have the right to request access to your personal data, find out which of your personal data the Bureau processes, and request that the data be completed or rectified.
  • You have the right to object to the processing of your personal data. This right may be exercised insofar as the processing does not arise from the Bureau’s functions, tasks and rights under the legislation in force. The Bureau will assess your request in accordance with legislation and provide you with a response.
  • If filming or photography takes place at the Bureau’s premises or at events it organises elsewhere, you have the right to object to the publication of photographs or video recordings in the media. In such cases, you must notify the Bureau in advance. This right may be exercised insofar as the processing does not arise from the Bureau’s functions, tasks and rights under the legislation in force. The Bureau will assess your request in accordance with legislation and provide you with a response. The Bureau may continue processing your personal data despite your objection if it cites its functions, tasks and rights as overriding your interests, rights and freedoms.
  • To examine a data subject’s request, the Bureau must verify the data subject’s identity. A request to exercise your rights must be submitted:
    • in writing and in person at the Bureau, Brīvības iela 58, Riga, LV-1011, upon presentation of an identity document;
    • electronically, signed with a secure electronic signature and sent to pasts@taiib.gov.lv, or using the online forms available on the Unified State and Local Government Services Portal (www.latvija.lv).
  • If a data subject refuses to identify themselves or fails to do so in accordance with the procedures prescribed by legislation, the Bureau may refuse to accept the data subject’s application or comply with the request.

9. Right to withdraw consent

Where the processing of your personal data is based on consent, you have the right to withdraw your consent at any time. In that case, further processing based on your previously given consent for the specific purpose will cease.

However, withdrawing your consent does not affect the processing carried out while your consent was in effect.

10. Right to lodge a complaint

If you have any objections, concerns or complaints regarding the processing of your personal data, we encourage you to contact the Bureau first. If the matter cannot be resolved within the Bureau, you have the right to lodge a complaint with the Data State Inspectorate.

11. Automated decision-making

The Bureau does not use your data for automated decision-making.

12. Contacting us about personal data processing

If you have any questions regarding the processing of your personal data, you may contact the Bureau:

  1. By emailing the Data Protection Officer at datiaizsardziba@gmail.com.
  2. By submitting an application in person or contacting the Bureau using the methods specified in the fifth paragraph of Section 8 of this Policy.

The Bureau may amend or supplement this notice by publishing the updated version on this website.

Data Protection Officer contact details: datiaizsardziba@gmail.com

1. Data controller

Transport Accident and Incident Investigation Bureau (TAIIB)
Brīvības iela 58, Riga
Telephone: +371 6228140
Email: pasts@taiib.gov.lv

2. Personal data processed

In performing its statutory functions and complying with the General Data Protection Regulation (hereinafter referred to as the Regulation) and the requirements of the legislation of the Republic of Latvia concerning the protection of personal data, TAIIB may process various types of personal data. These may include first name, surname, personal identity number, birth details, contact details (telephone number, email address and address), the name of the institution or company represented, the employer’s name, position held, photographs, video and voice recordings, information about education and work experience, and other data identifying an individual.

3. Purpose and legal basis of data processing

TAIIB processes personal data to perform the functions specified in Paragraph 3 of Cabinet Regulation No. 973 of 20 December 2005, “By-law of the Transport Accident and Incident Investigation Bureau”, and the tasks set out in other international and national legal instruments.

The legal basis for data processing derives from Paragraph 5 of Cabinet Regulation No. 973 of 20 December 2005, “By-law of the Transport Accident and Incident Investigation Bureau”. Under this provision, to perform its assigned tasks, the Bureau has the right to involve other specialists in investigations into civil aviation accidents and incidents, railway accidents, and marine casualties and incidents, as well as to request and obtain from legal and natural persons the information and documents necessary for an investigation.

4. Recipients of personal data

Your personal data may be disclosed to the responsible officials of TAIIB or specifically authorised persons, data processors (including organisers of joint events), and state, municipal and law enforcement authorities in the cases provided for by law.

5. Personal data retention period

Your personal data will be retained for as long as necessary to achieve the relevant purposes of processing, in compliance with legal requirements. They will then be deleted unless a longer retention period is provided for by law.

6. Rights of data subjects in relation to data processing

Individuals whose personal data are processed have the right to request that their data be completed, rectified or erased, to request restriction of processing, to data portability, to object to the processing of their personal data, and to withdraw consent to such processing.

These rights may be exercised to the extent that the processing does not arise from obligations imposed on TAIIB by applicable legislation and performed in the public interest or for the purposes of pursuing legitimate interests. TAIIB will assess each request in accordance with applicable legislation and provide a response.

When attending events organised by TAIIB, please let us know if you do not wish to be photographed or filmed or to have the resulting material subsequently published.

7. Safeguards against the misuse of personal data

TAIIB processes your personal data with due regard for their security, using various security measures, such as data encryption and firewall protection, and complying with confidentiality requirements to prevent misuse, improper use, unauthorised disclosure, dissemination or alteration, and unauthorised access.

8. Transfers of personal data to third countries

Your personal data may be transferred to third countries outside the European Union (EU) and the European Economic Area (EEA) only in the cases provided for by applicable legislation, in strict compliance with its provisions and while ensuring an adequate level of protection.

9. Right to lodge a complaint

If you have any objections, concerns or complaints regarding the processing of your personal data, we invite you to contact TAIIB first. If the matter cannot be resolved within TAIIB, you have the right to lodge a complaint with the Data State Inspectorate.

10. Automated decision-making

TAIIB does not use your personal data for automated decision-making.

11. Contacting us about personal data processing

If you have any questions about the processing of your personal data, you may contact TAIIB by:

  1. Emailing the Data Protection Officer at datiaizsardziba@gmail.com.
  2. Submitting a written request in person or sending it by post.

Apliecinājums
Iesniegums
Vienošanās