Privacy policy

Privacy policy

Latvian Hydro-ecology Institute (hereinafter – LHEI), reg. 90002129621, address: 4 Voleru Street, Riga, LV-1007, e-mail address:, website address: privacy policy has been developed in accordance with the requirements for the processing and protection of natural persons’ data of the European Parliament and of the Council 2016. Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing and circulation of personal data, the General Data Protection Regulation (hereinafter referred to as the “Data Regulation”), as well as other current laws and regulations controlling data protection and processing.

The purpose of this Privacy Policy is to provide an identified or identifiable natural person (hereinafter referred to as the “Data Subject”) with information about the processing of data carried out by LHEI. Data is any information relating to a Data Subject or an identifiable natural person who can be identified, directly or indirectly, by identifiers such as that person’s name, personal identification number, age information, declared or actual address, contact details, medical information, bank details, photographs, video and audio material, location data and online identifiers. Data processing means any operation performed upon data or sets of data, whether or not by automated means, such as recording, filing, storing, transforming, consulting, using, disclosing, disseminating, erasing. The Privacy Policy applies to the following subjects: employees, former and potential employees, business staff, providers and recipients of LHEI services, visitors to the LHEI office and website.

LHEI processes personal data for the performance of the Institute’s tasks and the provision of services in order to:

  • Collect the necessary data for statistical purposes and obtain the information needed to analyse, plan, improve and monitor LHEI’s activities;
  • Protect workers’ rights;
  • Provide LHEI services, billing, drafting and concluding contracts, ensuring compliance and follow-up of commitments;
  • Communicate with partners, service providers and beneficiaries and improve communication methods;
  • To inform the public about the Institute’s activities and ensure transparency in its operations and decision-making processes;
  • Provide information to public and private parties and operational subjects in the cases and to the extent required by external and internal laws and regulations;
  • Verify the identity of the data subject before entering into a contract;
  • For other purposes, by informing the persons about whom the processing of personal data is carried out.

LHEI processes data in accordance with the obligations set out in laws and regulations, for the fulfilment of contractual obligations and for the purposes of informing the public.

LHEI shall ensure the confidentiality of personal data within the framework of the relevant laws and regulations and has implemented appropriate technical and technological measures to protect personal data against unauthorised access, unlawful processing or disclosure, accidental loss, alteration or deletion. The security measures in place are being improved in line with the security requirements laid down in the laws and regulations. LHEI administration staff have been trained on how to carry out data processing in accordance with the rules. LHEI employees are only entitled to access their own personal data or data related to their direct job duties.

LHEI has the right to store and process the data of natural persons as long as it has at least one of the following:

  • The data are necessary to achieve the stated objectives;
  • While LHEI has a legal obligation to keep data;
  • If there is no other lawful basis for processing the data, the data will be stored only with the consent of the natural person.

LHEI has the right to transfer the data for processing without the consent of the Data Subject in the cases and in accordance with the procedures established by the regulatory enactments. When transferring data of natural persons, LHEI shall ensure the procedures for processing personal data established by the regulatory enactments. LHEI may take photographs and video recordings for public information purposes. Where the processing of personal data requires the written consent of the individual, LHEI may seek permission for the recording and disclosure of individuals. If a person gives his or her consent to the taking and disclosure of photographs and video recordings, he or she is deemed to have given his or her consent to the processing of his or her personal data. The photos or videos taken may be posted on the LHEI website, in the press and on social media profiles, including for use in representational material.

Rights of the data subject

The data subject shall have the right to apply to the controller and request information about the processing of his or her personal data, as well as to request the rectification, erasure or objection to the processing of his or her personal data. The data subject shall have the right to withdraw consent to the processing of his or her data, but this shall not affect the lawfulness of the processing operations when the consent was valid. The data subject shall have the right to lodge a complaint regarding unlawful processing of his/her personal data with the LHEI, the Data Protection and Information Technology and Security Centre of Riga City Council or the Data Inspectorate.

Notice on the processing of personal data of applicants, referees and other data subjects involved in the recruitment process” can be found at here.

Scroll to Top