I am visually impaired
#deeptechatelier2022

Personal Data Processing

Personal Data Processing Security Regulations for Participation in the Technology Conference
“Deep Tech Atelier”

  1. General Provisions

The Regulations prescribe the procedure by which the the Controller –

Investment and Development Agency of Latvia (hereinafter – LIAA), registration number: 90001739473, address: Pērses iela 2, Rīga, LV-1442.

Contact information: phone: + 371 67039499, e-mail: datu.aizsardziba@liaa.gov.lv

ensures the processing, security, and protection of data of moderators, experts, mentors, and Participants (hereinafter all together – Participants) of the technology conference “Deep Tech Atelier”, (hereinafter referred to as the Event). To ensure the conduct of the Event, LIAA may engage a Processor who processes personal data on behalf of LIAA in accordance with these regulations.

The terms used in the Regulations*:

2.1. Processing – any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;

2.2. Processor – a natural or legal person which processes personal data on behalf of LIAA in accordance with these Regulations. Within the event LIAA processor is Brella, Ltd. (reg. No. FI27650767) – providing the registration site and event platform for the Participants (https://next.brella.io/join/deeptechatelier2024/tickets);

2.3. Participant – the person who has registered for participation in the Event, filling in the Application form;

2.4. Controller – Investment and Development Agency of Latvia;

2.5. Personal data – the Participant’s name, surname, e-mail address, other information provided in the registration form (education, specialisation), as well as photo and video recording material that allows identification of a Person;

2.6. Third party – a natural or legal person, public person, agency, or body that is not a data subject.

The purpose of these Regulations is to provide the Participant with complete information on the purposes and legal basis of the processing of their personal data.

*GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation)

  1. Purpose and Legal basis of Personal data processing

Personal data is collected and further processed to ensure LIAA the fulfilment of the task referred to in Clause 4.5 of Cabinet Regulation No. 857 of 11 December 2012 “Regulations of the Investment and Development Agency of Latvia,” as well as to ensure the Participant’s participation in the Event.

The purpose of processing personal data is to:

5.1. Ensure participation in the Event (name, surname, e-mail address). Legal basis for data processing is consent (Article 6(1) a);

5.2. ensure Event supervision by Central Finance and Contracting Agency (name, surname). Legal basis is the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller (Article 6(1) e);

5.3. ensure the exchange of organisational and operational information of the Event (name, surname, e-mail). Legal basis for data processing is consent (Article 6(1) a);

5.4. for creating and improving the content of the Event (confirmation of the Participant’s urge to get involved in the masterclasses organised within the Event (Ignition Event), the Participant’s: specialisation, occupation, education; communication languages, opinion about the Event; the Participant’s inquiries about the process of the Event etc). Legal basis for data processing is consent (Article 6(1) a);

5.5. provide the publicity of the Event, promotion and informing the public (the Participant’s Linkedin profile name, the Participant’s confirmation of receiving information for the purpose of personalizing and optimizing conference experience  of the Commercialisation Reactor, the information sources the Participant used regarding the Event, photographic and video recording during the Event etc.). Legal basis is the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller (Article 6(1) e).

 

III. Registration of Personal Data at the Event

  1. The Participant registers for the Event on the application registration site provided by LIAA, (TBA) , where the Participant enters the personal data and is introduced to the regulation; the Participant shall not enter data of other persons unless it has been directly provided for in this regulation.
  2. Upon registering for the event, the Participant is required to provide the following necessary personal data:

7.1. Name;

7.2. Surname;

7.3. Email address;

7.4. Specialisation;

7.5. Occupation;

7.6. Education;

7.7. Country of residence.

  1. Additionally, the Participant may voluntarily provide the following information:

8.1. Opinion about the Event;

8.2. Inquiries about the process of the Event;

8.3. Linkedin profile name;

8.4. Confirmation of receiving information about the events of the Commercialisation Reactor including personalized agenda;

8.5. Information sources the Participant used regarding the Event.

  1. It is recommended to carefully consider the voluntary nature of the additional information and ensure that participants are explicitly informed about the purpose of collecting such data. Participants should also be given the option to provide or withhold these additional details based on their comfort and preferences.
  2. Time Limits for the Collection, Storage, and Deletion of Personal Data
  3. The collection of personal data is carried out by the registration deadline of the Event.
  4. Participant Personal Data is not processed outside the European Union/European Economic Area (EU/EEA) or in a country that does not provide adequate safeguards for the processing of personal data or has not adopted a decision of the European Commission on the adequacy of the processing of personal data in that country.
  5. Personal data shall only be stored and processed to the extent and for the time period necessary for the fulfilment of the purposes specified in these Regulations:

12.1. the personal data indicated in clause 5 of this Regulation – until 31 December 2034;

12.2. video – until the end of the live video broadcast, if such is provided during the Event;

12.3. photo and video capture materials (photographs and fragments of video) – permanently (creating an archive of the Controller’s events or informing the public about the course of the Event);

12.4. Name, surname, e-mail address of the Participant – individually, to provide information to the Participant about other events organised by LIAA.

  1. Upon individual request the Controller may transfer the Participant’s personal data (name, surname) to the Central Finance and Contracting Agency for supervisory purposes.

 

  1. Participant’s Statement for Personal Data Processing
  2. The Participants submitting the personal data confirm they have read the security Regulations for the processing of personal data, and also agreed to the processing of their personal data, observing the scope, purpose, and term specified in these Regulations.
  3. Without providing the personal data, LIAA cannot provide the Participant’s participation in the Event.
  4. If the Participant withdraws their consent to the processing of personal data, the Controller and the Processor shall delete all submitted personal data, except for in cases where it is not possible to delete personal data for technical reasons or it requires a disproportionate effort (e.g., in the case of already printed materials, published photographs or audiovisual material).

 

  1. Audio and Audiovisual Recording
  2. The Participant, confirming that they have read the Regulations of personal data processing, confirms that the Participant is informed that they may be photographed and filmed during the Event.
  3. The Controller is entitled to use the material created as a result of the photographic records in whole or in part for providing any kind of information about the course of the Event. The Participant is informed that the Controller will exercise these rights freely at its own discretion, including the right to transfer these rights to third parties. The Participant has the right to request information from the Controller about third parties to whom the right to use the material created as a result of video and photo recording has been transferred.
  4. The Participant may only object to the actions set out in this section and request that they be stopped if the person in the particular video or photograph is directly identifiable and it is technically possible for the Controller to delete and/or not to use the particular photograph.

 

VII. Rights of the Participant

  1. Rights of the Participant:

20.1. to request the Controller to provide information about a person at any time as defined in the General Data Protection Regulation [1] Article 13;

20.2. to access the relevant data and receive the information specified in Article 15 of the General Data Protection Regulation by contacting the LIAA;

20.3. to request the Controller to rectify, erase, or restrict the processing of their personal data, or the right to object to such processing in accordance with Articles 17 and 21 of the General Data Protection Regulation.

 

VIII. Duties of the LIAA When Processing Personal Data

  1. Within the framework of personal data processing, the LIAA provides:

21.1. information to the Participant in accordance with Article 13 of the General Data Protection Regulation;

21.2. carrying out technical and organisational measures for the security and protection of personal data;

21.3. upon the receipt of an appropriate request from the Participant, to rectify or delete the personal data provided by the Participant.

  1. The Controller undertakes to notify the Participant without delay of a personal data breach, in the case if a personal data breach could pose a high risk to the rights and freedoms of a natural person.

 

  1. Communication and Procedures for Exercising the Participant’s Rights
  2. The Participant can exercise their rights, including the right to object or ask questions to the Controller by contacting via e-mail: pasts@liaa.gov.lv, or phone: 67039400.
  3. If the personal data information provided by the person changes, the person is entitled to request to rectify (correct) their personal data by contacting us, writing to the e-mail: pasts@liaa.gov.lv; or phone: 67039400.
  4. The Participant shall have the right to lodge a complaint with the data protection supervisory authority (the Data State Inspectorate (www.dvi.gov.lv) address: Elijas iela 17, Rīga, LV-1050) regarding the use of personal data if the Participant considers that his/her rights and interests have been violated in accordance with applicable laws and regulations.

 

  1. The Processor that Processes Personal Data on Behalf of the LIAA
  2. The Processor shall process the personal data of the Participant in accordance with the purpose of the processing specified in these Regulations, and:

26.1. will not collect, use, and disclose personal data of the Participant, unless the regulatory enactments provide for this, or it is necessary for the protection of rights and interests provided for in the regulatory enactments;

26.2. shall ensure the corresponding technical and organisational measures when performing data processing, in order to provide data protection;

26.3. shall ensure that the persons who are authorised to process data have undertaken to comply with confidentiality requirements;

26.4. shall ensure the inaccessibility of data to third persons and will immediately inform the Controller about cases where unauthorised or third parties had access to personal data;

26.5. shall ensure that any natural person who acts on behalf of the Processor and has access to personal data does not process the data without the instructions of the Processor.

  1. In the course of the administrative organisation of the Event, the Processor may, if necessary, involve other Processors (design of application registration forms, manufacturers of identification cards, photographers, etc.) by concluding agreements with them, which will include a provision on compliance with these Regulations.
  2. If the Processor engages other processors who process personal data in the administrative organisation of the event, the Processor may transfer the following amount of personal data to them: name, surname. The Processor shall give the Controller access to the personal data transferred to another processor.
  3. If another processor is involved, the Processor will ensure that this other processor is required to comply with these Regulations.

 

  1. Processing User Security Requirements
  2. Taking into account the state of the art, the cost of implementation, and the nature, scale, context, and purposes of the processing, as well as risks of different probability and severity to the Participant’s rights and freedoms, the Controller and Processor shall take appropriate technical and organisational measures to ensure an appropriate level of security.
  3. The Controller and the Processor shall implement the mandatory technical protection of personal data by physical and logical means of protection, ensuring:

31.1. protection against a threat to personal data by physical action;

31.2. protection implemented by means of software, passwords, encoding, encryption, and other logical means of protection.

  1. When processing personal data, the Controller and the Processor shall ensure:

32.1. access of authorised persons to the technical resources that are used for personal data processing and protection (including to personal data);

32.2. that media containing personal data are processed by persons authorised for this;

32.3. that the resources used in the processing of personal data are transferred by duly authorised persons.

 

[1] Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) is available at: https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679&from=EN

 

Close