This website uses cookies to ensure you get the best experience on our website. Learn more

Ok

Privacy Policy

This Privacy Policy explains how JSC “Ceļu satiksmes drošības direkcija” (hereinafter – CSDD) handles data of natural persons, the order of implementing the data subject’s rights and other personal data protection issues.

CSDD, as the controller, processes personal data in accordance with General Data Protection Regulation No. 2016/679 (hereinafter – Regulation), the Personal Data Processing Law, the Road Traffic Law, the Maritime Code, as well as other regulatory enactments in force in Latvia.

Contact information of CSDD: registered office: Riga, 6 S.Eizenšteina Street, LV-1079, phone: +371 67025777, e-mail: csdd@csdd.gov.lv.

The data subject can access his/her personal data processed by CSDD, using CSDD provided e-services on the website https://e.csdd.lv.

Within the framework of the applicable regulatory enactments, CSDD ensures the confidentiality of personal data and has implemented appropriate technical and organisational measures for the protection of personal data. Personal data protection specialist is involved in ensuring the compliance of CSDD with personal data processing. Personal data protection specialist is available at: datu.specialists@csdd.gov.lv.

The purposes, technical basis and principles of personal data processing

CSDD implements state delegated functions in the field of road safety, as well as provides a range of services and therefore processes a large amount of different personal data relating to vehicles or watercrafts owned by the person and the licences to drive them, as well as various related restrictions.

CSDD mainly processes personal data for the following purposes:

  • for the provision of public interests in the field of road safety;
  • for the provision of CSDD basic services (vehicle registration, technical inspection, issuing of driving licences, issuing of bicycle certificates, registration of watercraft and their engines, etc.) and their quality control;
  • for the provision of CSDD e-services and their quality control;
  • for recording violations stated with speed cameras;
  • for the collection of taxes and penalties within the competence of CSDD;
  • for the processing of payments;
  • for personnel management.

The legal basis for the personal data processing of CSDD is the execution of legal obligation, the legitimate interests, the exercising of public law functions and, in separate cases – the consent of the data subject.

CSDD protects personal data using the capabilities of modern technologies, taking into account the existing privacy risks and the organisational, financial and technical resources that are reasonably available to CSDD. Within personal data processing CSDD implements risk management and information circulation security measures in accordance with LVS/ISO/IEC 27002:2013 “Information technology. Security techniques. Code of practice for information security controls.”

Sources of personal data collection

In general CSDD acquires personal data from the data subject, when performing tasks specified in the regulatory enactments and when providing services (for example, when registering a vehicle, issuing a driving licence, granting the status of a historic vehicle, charging fees, etc.). In cases and according to the procedures specified in regulatory enactments, CSDD also obtains personal data from other information systems and registers of the Republic of Latvia (for example, the Register of Residents, the Register of Penalties, etc.), foreign information systems, state and municipal institutions, medical institutions, educational institutions, etc.

CSDD also obtains personal data via the CSDD websites: www.csdd.lv, https://e.csdd.lv etc.

Video surveillance and audio recording

CSDD carries out video surveillance with or without audio recording capabilities in qualification vehicles, CSDD buildings and territories, including at CSDD departments, technical inspection sites, the premises of Riga Motor Museum, car parks, etc.

Video surveillance is primarily implemented with the purpose:

  • to ensure the protection of the legitimate interests of individual data subjects by reducing the possible risks of infringement of property rights and administrative procedural rights;
  • to prevent security threats of persons (clients, employees, visitors, etc.);
  • to identify and to prevent the presence of unauthorised persons;
  • to supervise the activities of state officials and employees in the performance of their duties, ensuring their lawfulness and implementing the tasks of public authority, which are entrusted to CSDD.

Audio recordings of the consultative and helpdesk phone calls are being made to improve the quality of customer service.

Information about video surveillance and audio recordings is presented in the form of warning signs before the video surveillance area, while information on conducting audio recordings of the consultative and helpdesk phone calls is played back before the call is put through.

Duration of the storage of personal data

CSDD stores personal data in accordance with the defined personal data processing purposes and the legal basis for the processing of personal data, as long as at least one of the following criteria exists:

  • CSDD has a legal obligation to store the data;
  • CSDD has to implement its legitimate interests;
  • CSDD has to implement its undertaken contractual obligations;
  • the consent of the data subject to the processing of relevant personal data is in force.

Recipients of personal data:

CSDD does not transfer information to third parties without a legal basis, as well as, in accordance with the procedures specified in the regulatory enactments, it registers the persons who have obtained information from CSDD.

Information about a vehicle belonging to a natural person in identifying personal data is restricted access information and can be obtained by the person himself/herself on the vehicles owned by him/her, by law enforcement authorities, by state and local government authorities, by other persons specified in the law, as well as by persons appointed by the Cabinet of Ministers and who require information for the performance of work or service functions.

In accordance with the regulatory enactments personal data is received from CSDD by: Information Centre of the Ministry of the Interior, State Police, State Border Guard, State Revenue Service, the Register of Enterprises of the Republic of Latvia, prosecutor’s offices and court authorities, municipalities and their institutions, insurance companies, Motor Insurers’ Bureau of Latvia, sworn bailiffs, sworn advocates, insolvency process administrators, medical practitioners, the employees of CSDD, etc. CSDD may exchange information with the registries of other European countries, if there is a legal basis for the exchange of personal data and if an appropriate request has been received. In accordance with the international obligations and regulatory enactments CSDD provides the exchange of information with the competent authorities of other countries.

CSDD may use personal data processors for personal data processing. In such cases CSDD shall take the necessary steps to ensure that such data processors process personal data in accordance with CSDD guidelines and in accordance with the applicable regulatory enactments, and shall require the implementation of appropriate security measures.

Access to own personal data and other rights of the data subject

The generally available information held by CSDD may be obtained in accordance with the procedures set out in the Freedom of Information Law, Law on Submissions and Road Traffic Law.

In order to receive information about personal data that CSDD processes about a person, the person can use e-services provided by CSDD on the website https://e.csdd.lv. Within the order as provided by the regulatory enactments, a person has the right to address CSDD and to also obtain information using other ways of obtaining information.

The data subject has the right to request the restriction of personal data processing, to object to the processing of personal data, to request the correction of personal data in accordance with the provisions of the Regulation.

CSDD communicates with the data subject, using the contact details provided by the data subject or by mailing the dispatches to the person’s declared place of residence.

In cases of stating personal data breaches or in cases of concern about a possible breach, everyone is encouraged to address any CSDD department or to contact the CSDD Data Protection Officer. Complaints regarding a personal data protection breach may also be submitted to the Personal Data Supervisory Authority in accordance with the procedures specified in the regulatory enactments.

Amendments to the Privacy Policy

CSDD has the right to make changes to the Privacy Policy at any time, by publishing them on the website www.csdd.lv.

This document was last updated on 19 September 2018.