Personal data processing principles

Principles of personal data processing in intern selection processes

Principles of personal data processing at Latvenergo AS within the framework of video surveillance

In accordance with the conditions of Articles 13 and 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter – the Regulation), we inform you about the processing of personal data in the selection process of interns (hereinafter – the intern) (hereinafter collectively – the Principles).

Controller

Joint stock company “Latvenergo”, registration number: 40003032949, registered address: Pulkveža Brieža iela 12, Riga, LV-1230 (hereinafter – Latvenergo AS or the Controller)

Controller’s contact details

Registered address: Pulkveža Brieža iela 12, Riga, LV-1230;

E-mail: info@latvenergo.lv

Data protection officer’s contact details

Address: Pulkveža Brieža iela 12, Riga, LV-1230;

E-mail: fpda@latvenergo.lv

1. Purposes of personal data processing, categories of personal data and legal basis for data processing

Purpose of personal data processing	Categories of personal data	Legal basis for personal data processing
Evaluation of applications (CV, cover letter and/or application form) for a vacancy	Identification data Contact details Data on professional suitability, experience and education Information related to the organisation of the selection process Information on motivation to perform the duties of the position concerned Audio and/or video recording of a self-presentation (CV) Other unclassified and voluntarily provided data indicated in the CV and/or application Certificates issued by the educational institution on the results of the last semester or a transcript of grades and the internship programme/tasks, if required for the particular internship position Competency assessment obtained during the selection process	Within the scope of this purpose, we will process personal data in order to conclude a potential internship agreement.
Organisation of interviews	Identification data Contact details Information provided during the interview, including about contact persons who can provide references Completed tests or other assessment tasks, data obtained as a result of competency assessments Information related to the organisation of the selection process Audio and/or video recording Audio transcription (if applicable)	Within the scope of this purpose, we will process personal data in order to conclude a potential internship agreement, as well as to safeguard the legitimate interests of Latvenergo AS by establishing the circumstances of an incident, securing evidence of the lawful conduct of the recruitment process and providing information to law enforcement and supervisory authorities and courts.
Assessment of compliance with the job requirements and maintenance of documentation of the selection process results	Identification data Contact details Data on professional suitability, experience and education Audio and/or video recording of a self-presentation (CV) References (if applicable) Other unclassified and voluntarily provided data indicated in the CV and/or application Information provided during the interview Completed tests or other assessment tasks, data obtained as a result of competency assessments Certificates issued by the educational institution on the results of the last semester or a transcript of grades and the internship programme/ tasks, if required for the particular internship position Information related to the organisation of the selection process Audio and/or video recording	Within the scope of this purpose, we will process personal data in order to conclude a potential internship agreement. If you have agreed to provide contact persons whom we may contact to obtain references on your previous professional activity, we will process personal data on the basis of your consent. We will process personal data to pursue, for example, the following legitimate interests of Latvenergo AS: to establish the circumstances of an incident, secure evidence of the lawful conduct of the recruitment process and provide information to law enforcement and supervisory authorities and courts; to assess the suitability of interns for a repeat internship or for future recruitment and to offer to establish an employment relationship.
Maintenance of a list of potential candidates for future recruitment	Identification data Contact details Preferred field of activity Desired remuneration Education Work experience Audio and/or video recording of a self-presentation (CV) Competency assessment obtained during the selection process	If you have agreed to be included in the list of potential candidates for future recruitment, we will process personal data on the basis of your consent.

Artificial intelligence solutions may be used in intern selection and CV evaluation, providing significant support in information processing, increasing work efficiency and improving the quality of the intern selection process. These solutions are used, for example, to convert audio recordings of interviews into text, to create summaries and to classify interns’ CVs according to the criteria specified in the internship advertisement and relevant to the particular internship position. The final decision on whether or not to advance an intern to the next selection round and on accepting an intern for an internship is made by the responsible employee of Latvenergo AS.

2. Source of personal data

Your personal data may be obtained from you or, for example, from another person who provides information about you – the internship supervisor, a university, college or vocational education institution and/or its cooperation partner (RTU Development Fund).

3. Recipients of personal data

Your personal data will be processed by authorised employees of the Controller within the scope specified in their job duties, in compliance with the requirements of personal data protection and other laws and regulations, as well as the personal data processing requirements set out in the Controller’s internal regulations.

Personal data may be transferred to:

the Controller’s outsourced service providers (processors), who may be authorised to carry out certain data processing activities on behalf of and under the supervision of the Controller, for example, developers and maintenance service providers of information system solutions, service providers ensuring the exchange of information, and security and protection service providers;
a university, college or vocational education institution and/or its cooperation partner (for example, the RTU Development Fund), if provided for by an agreement between the Controller, you, the university, college or vocational education institution and the respective cooperation partner;
under certain circumstances (for example, if a complaint is received about the selection process), law enforcement authorities or supervisory authorities, courts, as well as the Controller’s processors – providers of legal services;
when organising a job interview using online communication solutions, in certain cases your personal data may be transferred to the provider of the respective service.

It is not intended to transfer personal data to recipients outside the European Union, the European Economic Area, or to countries and organisations in respect of which the European Commission has not adopted a decision on an adequate level of protection, except where, for example, an interview takes place using online communication solutions, in which case your personal data may be processed in third countries to provide the respective service, or where your university, college or vocational education institution is located in a third country and you wish Latvenergo AS to transfer to it information related to your internship.

4. Personal data retention period

Information obtained when an intern applies for an internship position and within the selection process will be stored, in full or in part, for no longer than six months from the end of the particular selection process. If an internship agreement is concluded with you, the information may be retained for the entire duration of the contractual relationship.

References on your previous professional activity obtained within the selection process may be retained until you withdraw your consent, but for no longer than six months from the end of the particular selection process.

If you have chosen to be included in the list of potential candidates for future recruitment, the information will be stored until you withdraw your consent, but for no longer than two years from the end of the particular intern selection process.

If a complaint is received about the selection process concerned, all information obtained in the selection process may be retained until the complaint has been examined and fully resolved (for example, until the relevant court judgment enters into force).

5. Rights of the data subject (you)

Right of access. You have the right to access your personal data and to receive information from Latvenergo AS about the processing of your personal data. Using the Controller’s contact details, you may request information on the processing of your personal data if the information provided in these Principles does not seem sufficiently comprehensive to you.

Right to rectification. If you notice inaccuracies in your personal data, you have the right to request that Latvenergo AS rectify the inaccurate personal data by sending an appropriate request to the contact details specified by Latvenergo AS.

Right to erasure. You have the right to request that Latvenergo AS erase your personal data if:

the personal data are no longer necessary in relation to the purposes specified in the Principles for which they were processed;
you withdraw your consent on which the processing of personal data was based;
the personal data have been processed unlawfully;
you have objected to the processing and the legitimate grounds of Latvenergo AS do not override your legitimate grounds;
the personal data must be erased in accordance with the requirements of laws and regulations.

In certain cases we will not be able to comply with your request to erase personal data. This applies to cases where, under laws and regulations, Latvenergo AS is obliged to process your personal data. Likewise, data erasure is not possible if the processing of personal data is necessary, for example, to establish, exercise or defend legal claims. That is, in the cases mentioned, the right to request erasure of your personal data is restricted.

Right to restriction of processing. You have the right to request that Latvenergo AS restrict the processing of your personal data if:

you believe that the data are being processed unlawfully or are inaccurate;
you believe that the processing is unlawful, but you do not wish to have the personal data erased;
you have objected to the processing and pending verification of whether the legitimate grounds of Latvenergo AS override your legitimate grounds;
Latvenergo AS no longer needs your data for a specific purpose, but you need them to establish, exercise or defend your legal claims.

Right to object to processing. You have the right to object at any time to the processing of your personal data that is based on the legitimate interests specified in the Principles. Latvenergo AS has the right to continue processing your personal data if Latvenergo AS demonstrates compelling legitimate grounds for the processing that override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims.

Right to withdraw consent. Where you have given consent to the processing of certain personal data, you have the right to withdraw it at any time; however, such withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. To withdraw consent, you may use the contact details specified in the Principles.

Right to data portability. You have the right to receive the personal data that you have submitted to Latvenergo AS in a structured, commonly used and machine-readable format (processed electronically or in information systems), and you have the right to request that these data be transmitted to another controller (service provider) if the data are processed on the basis of a contractual relationship or consent. The right to data portability applies only to data that you, as a data subject, have submitted to Latvenergo AS.

Right to lodge a complaint. You have the right to lodge a complaint with Latvenergo AS, as well as with the Data State Inspectorate (Elijas iela 17, Riga, pasts@dvi.gov.lv), if you believe that Latvenergo AS has violated your rights or has not sufficiently protected your personal data. However, before contacting the Data State Inspectorate, we encourage you to approach Latvenergo AS or the data protection officer in order to find a solution.

6. Procedure for submitting requests

To exercise all of the above rights, you may use the contact details of Latvenergo AS specified in these Principles, indicating the following personal data in your request: first name, surname, personal identity number, postal address (if you wish to receive the reply by registered mail) or e-mail address (if you wish to receive the reply by e-mail).

We encourage you to submit your request in one of the following ways:

send a free-form application electronically to info@latvenergo.lv or fpda@latvenergo.lv, signing the application with a secure electronic signature;
send your signed free-form application by post to: Latvenergo AS, Pulkveža Brieža iela 12, Riga, LV-1230;
submit your signed free-form application in person at the Controller’s address.

7. General provisions

Latvenergo AS has the right to make changes to these Principles and to inform of them by publishing the current version of the Principles on its website.

These Principles were updated on 24 July 2026.