Personal data processing principles

Personal data are processed in order to provide visits to the exhibition and the repository, guided tours and educational classes, the purchase of souvenirs, premises rental and the use of collection items or their digital copies at the Energy Museum at Ķeguma prospekts 7/9, Ķegums, Ogre Municipality, visits to the Pļaviņas HPP history exhibition at Enerģētiķu iela 2, Aizkraukle, Aizkraukle Municipality, and the services offered by the Virtual Energy Museum (https://energetikasmuzejs.lv).

To ensure in-person access to the Energy Museum and/or the Pļaviņas HPP history exhibition, when you register for a visit, We will ask you to provide your first name and surname, telephone number, e-mail address, the number of adults/minors in the group, the date and time of the visit and your preferred tour language. If you submit comments, we will also process that information. In addition, for a visit to the Energy Museum, we will ask you to indicate whether you wish to visit the exhibition and/or the repository and to specify the preferred type of service – an educational class or a guided tour.

When you purchase tickets for an in-person visit to the Energy Museum, a guided tour or educational class, and souvenirs, we will process your first name and surname as the buyer, the type and quantity of the goods purchased, and the e-mail address to which we will send the purchased tickets and the invoice (delivery note, if applicable). If you wish to pay for the services by bank transfer, we will ask you to provide your VAT payer number, if you are a VAT payer, and the payment details for issuing and sending the invoice.

To enable you, as a consumer, to exercise the 14-day right of withdrawal from a distance contract provided for in laws and regulations, as well as the right to submit a claim regarding non-conformity of the goods with the contract, we will ask you to indicate in the withdrawal form or application your first name, surname, residential address and/or contact details, as well as information about the goods purchased.

If you reserve premises at the Energy Museum or wish to use collection items or their digital copies, we will ask you to provide your first name, surname, telephone number and e-mail address, the purpose of use, your VAT payer number, if you are a VAT payer, and the payment details for issuing and sending the invoice.

To ensure the protection of persons, property and legal interests, We may use data recorded by the video surveillance cameras installed at Latvenergo AS sites and adjacent territories – your and/or your vehicle’s image, the date, time and place of the recording, as well as information reflecting your behaviour and actions. We will also process information that you provide when communicating with Us, for example, in correspondence or a telephone conversation.

If you wish to visit the Energy Museum free of charge, at the entrance we will ask you to present a document certifying your status and confirming that you belong to one of the museum’s free-admission visitor groups: holder of the “Honour Family” (“3+ Family Card”) certificate, an orphan, a person with a disability and the person accompanying them, a politically repressed person, a member of the International Council of Museums (ICOM), a Latvian museum employee or a media representative covering events at the museum.

If you wish to request, in the Digital Collection section of the Virtual Energy Museum, the use of an image for your own purposes and/or to provide additional information about the item or event shown in the selected image, when sending a message to the Energy Museum we will ask you, in addition to your comment, to provide your name and e-mail address so that we can contact you.

In order to prepare for your reception at the Energy Museum and/or the Pļaviņas HPP history exhibition, ensure the conduct of the visit, and provide premises rental, the use of collection items or their digital copies and the purchase of Energy Museum souvenirs, we will process personal data on the basis of point (b) of Article 6(1) of the Regulation.

In order for Us to be able to contact you regarding a request submitted in the Digital Collection section of the Virtual Energy Museum and/or to the e-mail address muzejs@latvenergo.lv concerning the use of the image of a selected collection item for your own purposes and/or to provide additional information about the image, as well as to assess the validity of claims received from you, secure evidence and, in the event of a potential dispute, retain personal data for a specified period until the dispute is resolved, as well as defend our infringed legal interests and prevent and detect security risks for the protection of persons and property, we will process personal data to pursue Our legitimate interests, on the basis of point (f) of Article 6(1) of the Regulation.

When administering payments made by bank transfer, We will carry out accounting in accordance with point (c) of Article 6(1) of the Regulation and the Accounting Law.

Personal data will be processed by authorised employees of the Controller within the scope specified in their job duties, in compliance with the requirements of personal data protection and other laws and regulations, as well as the personal data processing requirements set out in the Controller’s internal regulations.

Personal data may be transferred to:

• the Controller’s outsourced service providers (processors), who are authorised to carry out certain data processing activities on behalf of and under the supervision of the Controller, for example, security service providers;
• service providers that ensure the exchange of information between the Controller and financial service providers;
• audit service providers;
• under certain circumstances (for example, if a complaint is received about the service concerned), data may be transferred to law enforcement or supervisory authorities, courts, as well as the Controller’s processors – providers of legal services.

It is not intended to transfer personal data to recipients outside the European Union or the European Economic Area.

The information provided in a visit, premises rental or collection use service request will be retained for no longer than 1 (one) month from the day the service is received.

Information recorded by video surveillance cameras will be retained for no longer than 60 (sixty) days, except where the video recording shows unlawful conduct or conduct that may help the Controller or third parties to protect their legal interests, in which case the video recording concerned may be retained until the legal interest has been secured.

A message sent to the Energy Museum regarding a specific image in the Digital Collection section of the Virtual Energy Museum, your name and e-mail address will be retained for no longer than 1 (one) year from the day the message is received.

Information on invoices issued and information related to payments will be retained for no less than 5 (five) years, in compliance with the provisions of the Accounting Law.

If a complaint is received or a legal interest of the Controller is infringed, for example, if there is a dispute about a service received or damage has been caused during a visit, the relevant information may be retained until the dispute is resolved, for example, until the relevant court judgment enters into force.

Right of access. You have the right to access your personal data and to receive information from Latvenergo AS about the processing of your personal data. Using the Controller’s contact details, you may request information on the processing of your personal data if the information provided in these Principles does not seem sufficiently comprehensive.

Right to rectification. If you notice inaccuracies in your personal data, you have the right to request that Latvenergo AS rectify the inaccurate personal data.

Right to erasure. You have the right to request that Latvenergo AS erase your personal data if:

• the personal data are no longer necessary in relation to the purposes specified in the Principles for which they were processed;
• the personal data have been processed unlawfully;
• you have objected to the processing and the legitimate grounds of Latvenergo AS do not override your legitimate grounds;
• the personal data must be erased in accordance with the requirements of laws and regulations.

Please note that the right to erasure does not apply in cases where, under laws and regulations, Latvenergo AS is obliged to process the personal data, or where the processing is necessary for archiving, for the exercise of tasks in the public interest or for statistical purposes, as well as for the establishment, exercise or defence of legal claims.

Right to restriction of processing. You have the right to request that Latvenergo AS restrict the processing of your personal data if:

• you believe that the data are being processed unlawfully or are inaccurate (the restriction will apply while the contestation process is under way);
• you believe that the processing is unlawful, but you do not wish to have the personal data erased;
• you have objected to the processing and pending verification of whether the legitimate grounds of Latvenergo AS override your legitimate grounds;
• Latvenergo AS no longer needs your data for a specific purpose, but you need them to defend your legal interests and rights.

Right to object to processing. You have the right to object at any time to the processing of your personal data that is based on the legitimate interests specified in the Principles. Latvenergo AS has the right to continue processing your personal data if Latvenergo AS demonstrates compelling legitimate grounds for the processing that override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims.

Right to data portability. You have the right to receive the personal data that you have submitted to Latvenergo AS in a structured, commonly used and machine-readable format, and you have the right to request that these data be transmitted to another controller if the personal data are processed on the basis of a contract under point (b) of Article 6(1). Please note that you may request the exercise of the right to data portability only in respect of the personal data that you have submitted to Us.

Right to lodge a complaint. You have the right to lodge a complaint with Latvenergo AS, as well as with the Data State Inspectorate (Elijas iela 17, Riga, pasts@dvi.gov.lv), if you believe that Latvenergo AS has violated your rights or has not sufficiently protected your personal data. However, before contacting the Data State Inspectorate, we ask you to approach Latvenergo AS.

To exercise all of the above rights, you may use the contact details of Latvenergo AS specified in these Principles, indicating the following personal data in your request: first name, surname, personal identity number, postal address (if you wish to receive the reply by registered mail) or e-mail address (if you wish to receive the reply by e-mail).

We encourage you to submit your request in one of the following ways:

• send a free-form application electronically to info@latvenergo.lv, muzejs@latvenergo.lv or fpda@latvenergo.lv, signing the application with a secure electronic signature;
• send your signed free-form application by post to: Latvenergo AS, Pulkveža Brieža iela 12, Riga, LV-1230;
• submit your signed free-form application in person at the Controller’s address at the Energy Museum, Ķeguma prospekts 7/9, Ķegums, Ogre Municipality, or at the Pļaviņas HPP history exhibition, Enerģētiķu iela 2, Aizkraukle, Aizkraukle Municipality.

The Controller may make changes to the Principles at any time and will inform of them by publishing the current version of the Principles on its website.