Processing of Personal Data

Purposes and legal basis of personal data processing

For performance of the tasks set out in the legal acts of the Financial and Capital Market Commission that have been carried out in the public interest or in the exercise of official authority vested in the controller.

Categories of personal data

Personal data may be collected from the data subject, financial and capital market participants and business partners pursuant to the regulatory provisions, agreements, as well as from public registers.

Categories of personal data that have been processed are as follows:

• Identifiers such as a name, an identification number, birth date or year, identity document data, education and professional performance data.
• Contact details, for example, address (including product delivery address), phone number, e-mail address.
• Information related to ensuring supervision over the financial and capital market participants that may include personal data in individual cases.
• Information in the submissions received by the Financial and Capital Market Commission (including information and documentation submitted by the person on their own initiative).

Broader data processing is possible for exercising the functions laid down in laws and regulations, for example, to perform customer due diligence in accordance with the provisions of anti-money laundering and counter-terrorist financing regulations.

Recipients of the personal data

Personal data have been processed in the information systems of the Financial and Capital Market Commission by the employees of the Financial and Capital Market Commission or their authorised persons for the performance of their duties.

Data recipients outside the Financial and Capital Market Commission

Authorities and cooperation partners (including the financial sector regulators, the European Central Bank, the Bank of Latvia, law enforcement institutions, etc.) in accordance with the procedures laid down in legal acts.

Data processing location, data storage and protection

Personal data are being processed in the European Union /European Economic Area (EU/EEA). In individual cases, personal data may be transmitted outside the EU/EEA territories in accordance with the procedures laid down in legal acts.

The Financial and Capital Market Commission processes and stores the personal data as long as necessary for exercising the functions laid down in laws and regulations and as long as it is justified by statutory provisions. To prevent the data from unauthorised access, processing or disclosure, as well as their alteration or destruction, relevant technical and organisation measures have been implemented for the data protection.

Rights of the data subject

• In cases referred to in laws and regulations, to receive information whether the Financial and Capital Market Commission processes personal data of individual person and, if yes, to have access to the data. However, it should be taken into account that any information processed by the Financial and Capital Market Commission in exercising its duties and tasks is of restricted use and therefore this information is not provided and disclosed in accordance with laws and regulations.
• To request rectification of personal data concerning the data subject in case of incomplete or incorrect data in accordance with the provisions of laws and regulations.
• To submit complaints to the Data State Inspectorate (www.dvi.gov.lv), in case the data subject considers that his/her interests and rights are infringed by processing personal data.

Contact details:

Financial and Capital Market Commission
Kungu iela 1, Rīga, Latvija
LV-1050
For further information regarding data protection: datu.aizsardziba@fktk.lv