Privacy Policy

IBSC Privacy Policy

The purpose of the privacy policy is to provide the natural person – the data subject, or you as the Customer – with information about the purpose, scope, protection and processing term of personal data processing during data acquisition and when processing the data subject’s personal data. IBSC takes care of your privacy and the protection of personal data, respects your right to the protection of personal data and the legality of processing in accordance with the applicable legislation: Regulation 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and free circulation of such data (General Data Protection Regulation), the laws and regulations of the Republic of Latvia, this Privacy Policy and other applicable laws in the field of privacy and data processing.

The IBSC Privacy Policy applies to data processing, regardless of the form and/or medium in which you provide personal data (www.IBSC.lv, self-service portal, paper format, electronic, telephone, mobile application) and in which systems or paper form they are processed.

Who is responsible for processing personal data?

The controller of personal data processing is:
1. IBSC SIA, registered in the Commercial Register of the Republic of Latvia with registration no. 40103321215, legal address: Bieķensalas iela 21, Riga, LV-1004, Latvia.

IBSC contact information for issues related to personal data processing:
info@ibsc.lv, legal address: Bieķensalas iela 21, Riga, LV-1004, Latvia. Using this contact information or contacting IBSC’s legal address with a written submission, you can ask a question about the processing of personal data to IBSC’s data protection specialist. IBSC’s supervisory authority in relation to personal data protection is the Data State Inspectorate, however, in any case, we invite you to contact us first with your request.

For what purpose and with what legal basis are personal data processed?

If you wish to receive program products or service services, IBSC will request and process your data (for example, name, surname, personal identification number, contact information, current account number, responsible persons, beneficiaries and, depending on the program product, also other information, such as information about computerized systems, real estate, information systems, network infrastructure, etc.) in order to prepare the offer of program products and services, assess risks and conclude a cooperation agreement.

IBSC will request and process your personal data (for example, information about the circumstances of the service incident, video surveillance recordings and images, etc.) in order to evaluate the procedure for the execution of the cooperation agreement and make a decision on the provision of service services. In order to provide high-quality customer service, as well as the service of cooperation agreements and the recording of evidence, we will record your conversations with the Customer Call Service Center or other employees of IBSC.

The personal data provided by you will be processed by IBSC :

1. For the purposes of providing services:
– to identify the client;
– for the preparation and conclusion of the contract;
– to fulfill contractual obligations;
– for ensuring and maintaining the operation of services;
– for improving services, developing new services;
– for advertising and distribution of services or for commercial purposes;
– for customer service;
– for consideration and processing of objections and complaints;
– for maintaining cooperation, increasing loyalty, measuring satisfaction;
– for settlement administration;
– for risk assessment;
– for fraud and credit risk assessment;
– for maintaining and improving the operation of websites and mobile applications.

2. For business planning and analytical purposes:
– for statistics and business analysis;
– for planning and accounting;
– for efficiency measurement;
– for data quality assurance;
– for conducting market and public opinion research;
– for the preparation of reports;
– for customer surveys;
– for the prevention and investigation of criminal offences;
– within the framework of risk management, audit, operational compliance activities.

3. For other purposes:
– for providing information to state administrative authorities and subjects of operational activity in the cases and to the extent specified in external regulatory acts;
– for specific purposes, about which we will inform you at the time you provide the relevant data to IBSC.

Personal data is processed mainly based on the following legal grounds:

– for concluding and executing the contract – to conclude the contract after receiving your application and ensure its execution;
– for the execution of regulatory acts – to fulfill the obligations set out in the binding external regulatory acts of IBSC;
– in accordance with your consent as a data subject;
– in legal (legitimate) interests – to realize IBSC’s legal (legitimate) obligations arising from the existing obligations between you and IBSC, the mutually concluded agreement or the law.

IBSC’s legitimate (lawful) interests:

– perform commercial activities;
– provide service services;
– check your identity as a customer before concluding the contract;
– to ensure the fulfillment of contractual obligations;
– prevent unreasonable financial risks for your commercial activity (including performing a risk assessment before providing services and during contract execution);
– save your applications for the provision of services, other applications and submissions, notes about them, including those made verbally when calling the call center, on the website and in the self-service environment;
– analyze the operation of the IBSC website, websites and mobile applications, develop and implement their improvements;
– administer the client account on the IBSC website, self-service websites and mobile apps;
– perform actions to retain customers;
– segment the customer database for more efficient provision of services;
– develop and develop services;
– advertise your services by sending commercial messages;
– send other reports on the progress of contract execution and events relevant to contract execution, as well as conduct customer surveys about services and their experience of use (NPS);
– prevent fraud;
– to provide corporate management, financial and business accounting and analytics;
– ensure effective company management processes;
– to ensure the efficiency of service provision;
– to ensure and improve the quality of services;
– administer payments;
– administer outstanding payments;
– apply to state administration and operational institutions and to the court for the protection of their legal interests;
– to inform the public about its activities.

To whom does IBSC transfer your data?

IBSC may not disclose confidential information about your cooperation agreement and personal data. Access to your data is limited to those employees who need it for the performance of their duties. However, in cases determined by law or contract, based on your consent or in accordance with IBSC’s legitimate interest, IBSC may provide information to the following persons:

Outsourcer:
IBSC works with individual outsourcers to fulfill IBSC’s contractual and legal obligations, such as IT service providers, software developers or experts.

To a cooperation partner:
IBSC can transfer your personal data to cooperation partners related to the provision of services to IBSC clients, such as program security manufacturers, IT service providers.

Other recipients:
IBSC may be obliged to transfer your personal data to further recipients, such as state and local government entities, in order to fulfill a legal obligation to notify, such as the State Revenue Service, law enforcement authorities or supervisory authorities (Financial and Capital Market Commission, Consumer Rights Protection Center , etc.).

Does IBSC transfer your data to other countries outside the European Union?

Your personal data is basically processed in the territory of the European Union and the European Economic Area. If IBSC transfers your data to service providers outside the European Union and the European Economic Area, it will be done in accordance with the valid regulatory acts of the European Union in the field of data protection.

How long does IBSC keep your data?

IBSC processes your personal data for as long as it is necessary to achieve the purposes of personal data processing defined in the IBSC Privacy Policy.

Personal data storage terms are determined in accordance with the cooperation agreement concluded between IBSC and the Client, the requirements of regulatory acts (for example, the Law on the Processing of Personal Data of the Republic of Latvia, the Civil Law, laws concerning the prevention of money laundering, etc.), as well as the legitimate interests of IBSC implementation and protection.

For example, IBSC stores your data, which has been obtained with the purpose of assessing the risk of cooperation, concluding and executing a cooperation agreement, as well as evaluating the conditions of service provision, during the validity of the cooperation agreement, as well as for another 10 years after its termination, in order to provide evidence that can derive from contractual obligations.

In the event that the contract is not concluded after receiving the cooperation offer, IBSC keeps your personal data for another 36 months and then deletes them.

What are your rights?

You have the right:
– to withdraw your consent to the processing of your personal data at any time, but the fact that you withdraw said consent will not affect the legality of data processing, which was based on this consent before its withdrawal;
– object to the processing of your personal data for advertising purposes by sending a reply e-mail to info@ibsc.lv;

– receive information about the personal data processed about you;
– request to correct your personal data if they are incomplete or inaccurate;
– ask IBSC to delete your personal data;
– IBSC ensures the deletion of your personal data upon your request (for example, when data processing is based on your consent and you withdraw it). However, the mentioned condition will not apply if the personal data that you request to be deleted is processed by IBSC in accordance with another legal basis, for example, to ensure contractual obligations or to fulfill the requirements of regulatory acts;
– receive personal data that you yourself have submitted to IBSC, which relate specifically to you, and whose processing is based on your consent or the performance of your concluded contract (right to data portability).

If you want to view your data or correct it, you can contact IBSC in writing using the address provided. If IBSC does not have up-to-date contact information, you may not receive important notifications.

Filing complaints about the processing of your data

You have the opportunity to contact IBSC’s data protection specialist with a written submission at IBSC’s legal address or contact IBSC by sending an e-mail to info@ibsc.lv;

Privacy Policy Review

IBSC will regularly review and update this policy. The current version is published by IBSC on the website www.ibsc.lv.