Provision of commercial activity:

• For ensuring the safety and continuity of energy supply operations by registering and managing the rights of contractor’s employees to work at Latvenergo AS energy installations and areas with certain electrical safety groups and special rights and training, by ensuring organisational processes, including documentation and site access management, and compliance with and the monitoring of safety requirements, conducting Latvenergo AS occupational safety briefings, reporting, as well as investigating and accounting processes of unsafe working conditions or environmental hazards.
• Ensuring the electronic recording, accounting and storage of recorded data regarding the working time of persons employed on-site as part of the construction process of energy supply facilities to meet the requirements of regulatory enactments, including the provision of data on the unified electronic working time accounting system
• For the management of the accounts, accounting and financial records, and the protection of financial interests 
• Organisation of competitive dialogue and procurements, including procurements with suppliers qualified by qualification systems, as well as the organisation of E-procurements
• Maintenance of the Supplier List and Qualification Systems

• Identification information
• Contact details
• Represented company
• Position
• Nationality
• Username
• Contract information
• Information contained in communication materials (for instance, in correspondence)
• Information on compliance with the requirements for the safety and continuity of electricity supply operations (for instance, information on electrical safety group and/or special rights, certificate number and expiry date, information on briefings)
• Audio recordings (such as telephone recordings)
• Video recordings
• Photos
• Authentication information
• Access information
• Information on time spent by a person on-site and other related information
• Information obtained as part of the investigation
• Information related to participation in competitive dialogue, information related to procurement and E-procurement, including data on professional eligibility, experience and education;
• Information included in the offer;
• Report contents
• Signature

If you have expressed a wish to provide your personal data in order, for example, to report unsafe working conditions or environmental hazards and/or to receive information about the situation, we will process your personal data on the basis of your consent.

In the cases specified by regulatory enactments, we will process personal data in order to fulfil the legal obligations specified by Latvenergo AS, as well as process the data in order to exercise, for example, the following legitimate interests of Latvenergo AS:

• to detect and prevent security risks at the energy supply facilities;
• to prevent potential financial and organisational risks;
• to maintain a list of suppliers and select and maintain a list of qualified suppliers;
• to organise and ensure procurement procedures, including price surveys and related activities below the public procurement contract price threshold, as well as to ensure the procurement process in the electronic procurement system of Latvenergo AS.

Protection of security and other legal interests:

• Provision of safety of the information systems of Latvenergo AS (including the maintenance of audit trails) and prevention and investigation of IT security incidents (for instance, in the case of unauthorised external access to the information systems, websites or apps of Latvenergo AS), as well as any kind of malicious activity against the information systems of Latvenergo AS, any websites or apps (such as DDoS attacks)
• Provision of physical security in the premises of Latvenergo AS, on the territory of sites or at the sites, including the performance of video surveillance and implementation of access control (for example, issuing of passes) and prevention and investigation of physical security incidents, protection of individuals and property, and the protection of legal interests
• Identifying risks of fraud and corruption and ensuring transparency
• Obtaining and summarising information for situation assessment, event investigation and obtaining evidence 
• Transfer of personal data of personnel carrying out work on critical infrastructure sites to national security authorities to assess compliance with national security interests

• Identification information
• Contact details
• Service provision address
• Contract information
• Information on opinion
• Information contained in communication materials (for instance, in correspondence) 
• Information about the meeting or conversation (time, date, place, topic, the most important aspects of the content of conversation)
• Information about the use of information systems
• Information obtained within customer due diligence for the purpose of compliance with regulatory enactments
• Audio recordings (such as telephone recordings)
• Video recordings
• Photos
• Authentication information
• Access information
• Vehicle information
• Represented company 
• Information on time spent by a person on-site and other related information
• Information related to participation in procurements
• Litigation information
• Information obtained as part of the investigation
• Nationality 
• Information provided in the replies by the national security authorities (presence/absence of information that would prevent access)
• Report contents

We will process personal data on the basis of your consent if you wish to disclose your identity as a whistleblower to others or if your report submitted on the alleged violation is not considered a whistleblower’s report but you want your personal data to be processed with the purpose of contacting you about the content of the report.

In the cases specified by regulatory enactments, we will process personal data in order to fulfil the legal obligations specified by Latvenergo AS, as well as process the data in order to exercise, for example, the following legitimate interests of Latvenergo AS:

• to protect personal rights through the services of authorised and competent authorities;
• to prevent and detect security risks (for example, by performing video surveillance at the sites and adjacent territories, providing a pass regime and controlling the access of visitors, by creating audit records);
• to detect and investigate incidents, and to obtain evidence (for instance, to keep personal data for a certain period of time in the event of a potential dispute);
• to introduce an organisational system to ensure that any person can submit a report on possible misconduct or dishonesty of an employee, with Latvenergo AS helping to monitor compliance with regulatory enactments and a set of ethical standards when performing the employee’s daily duties and representing the employer;
• to ensure openness and fairness in cooperation with third parties, as well as to identify and reduce possible cases of fraud and corruption;
• during the investigation and remediation of personal data breaches, to ascertain all specific circumstances in order to assess the impact of a personal data protection incident on the rights and freedoms of the data subject;
• to prevent and detect security risks by transferring personal data of personnel to national security authorities for the assessment of compliance with national security interests.

Provision of Latvenergo AS services, service development and quality assurance:

• For the consideration of applications, requests, claims, and proposals
• For the counselling of individuals
• For proving service provision (including communication) and the provision of quality control
• For the registration and authentication of individuals on mobile apps, information systems and websites
• For the provision of the functionality of websites, portals, mobile apps, and other information systems

• Audio recordings (such as telephone recordings)
• Authentication information
• Identification information
• Contract information
• Information about the use of information systems
• Information on opinion
• Information contained in communication materials (for instance, in correspondence)
• Contact details
• Access information
• Service provision address
• Video recordings
• Information on the language of communication
• Represented company

In the cases specified by regulatory enactments, we will process personal data in order to fulfil the legal obligations specified by Latvenergo AS, as well as process the data in order to exercise , for example, the following legitimate interests of Latvenergo AS:

• to protect the interests of the individual and Latvenergo AS, to have good knowledge of the quality of the provided services, and to provide evidence for communication;
• to ensure the provision of services and/or communication with the actual recipient of the service and/or the communication;
• to respond to requests for information and to ensure communication;
• to ensure business continuity and performance during the process of the correction of errors and the delivery of new solutions, and to verify that the developed information system solution and/or add-on is working as intended.

Compliance with the requirements of laws and regulations or exercise of the rights of Latvenergo AS in accordance with the laws and regulations:

• Provision of information to state and local government control and pre-trial investigation authorities as well as other state and local government authorities within the limits of their competence, such as the Police, the State Audit Office or archives;
• Compliance with the requirement of the prevention of money laundering and terrorism and proliferation financing and national and international sanctions.

In the cases specified in regulatory enactments, we will process personal data in order to fulfil the legal obligations specified by Latvenergo AS and perform the duty performed by Latvenergo AS in the public interest.

Within the framework of the purpose, we will process personal data, in order to exercise, for example, the following legitimate interests of Latvenergo AS:

• to protect personal rights through the services of authorised and competent authorities;
• to protect their rights by using information available from third parties regarding persons sanctioned under the laws and regulations in other countries and by analysing publicly available information;
• to protect their rights by using information available from third parties in accordance with regulatory enactments and by fulfilling the obligations specified in the Law on the Prevention of Money Laundering and Terrorist and Proliferation Financing.