NIC Privacy policy

Riga, 8 May 2018 (enters into force on 25 May 2018)
Amended on: 17 May 2019 (enters into force on 22 May 2019)

Data controller

1. The Network Solutions department (NIC.LV) of the Institute of Mathematics and Computer Science, University of Latvia is the Registry of the top level domain .LV. The Data Controller of the personal data collected by the top-level domain .LV Registry is:

Data Protection Officer

2. NIC.LV data protection officer – tel. +371 67085858, e-mail dns@nic.lv

The purpose and legal basis for data processing

Performance of the agreement pursuant to point (b) of the Article 6(1) of the General Data Protection Regulation.

3. NIC.LV is processing your data in order to conclude the agreement on the right to use the .LV domain name and ensure the performance of the agreement. In accordance with Article 1404 of the Civil Law of the Republic of Latvia in each lawful transaction the parties should be taken into account, therefore personal data processing is required in order to conclude the agreement.

4. NIC.LV website cookies are processed in order to ensure services in the NIC Online system. For more details see NIC Cookies policy.

Legal obligation pursuant to point © of the Article 6(1) of the General Data Protection Regulation

5. NIC.LV can process your data if it is necessary for compliance with legal obligations to which NIC.LV is subject to, e.g., if NIC.LV receives a request to disclose your personal data to public authorities.

6. NIC.LV website logs your requests; these log files are needed in order to ensure proper functioning of the website, security of the services and early detection and prevention of information technology security threats, as well as to overcome and remedy the effects of security incidents.

Categories of recipients of personal data

7. NIC.LV has the right to disclose personal data:

7.1. if the data subject himself/herself requests such information and NIC.LV can identify the requestor.

7.2. if, in cases provided by law, a public authority requests personal data in writing and the request is made pursuant to enactments of the Republic of Latvia.

8. A natural person has the right to request from NIC.LV information about recipients of his/her personal data, unless such information cannot be disclosed pursuant to enactments of the Republic of Latvia.

9. In accordance with the request of the domain name holder, NIC.LV has the right to disclose holder’s personal data to the Registrar of the domain name holder’s choice.

Access to personal data and data portability

10. You can access your data and update them via NIC On-line System, on-site at our Customer Service or by sending your request to our postal address Raina bulvaris 29, Riga, LV-1459, Latvia.

11. You have the right to receive your data processed by NIC.LV in a machine-readable format.

Data rectification, erasure of personal data or restriction of processing

12. You are responsible for providing valid, actual and complete data at the moment of concluding the agreement, as well as during the entire period of the performance of the agreement. If your domain names are managed by a Registrar, then valid, effective and complete data should be provided to the Registrar.

13. In case of any changes, it is your responsibility to update your data without undue delay via NIC On-line System or by informing NIC.LV or your Registrar.

14. If NIC.LV discovers that your data are false, obsolete or incomplete, you will receive a request to correct the data within a given period of time. If no answer is received or the data are not updated, NIC.LV has the right to terminate the Agreement on the Right to Use the Domain Name.

15. If a domain name holder objects to the processing of his/her personal data, NIC.LV will terminate the agreement, as personal data are necessary for the conclusion and performance of the agreement.

16. The procedure for waiving the status of the contact person, is defined in the Terms and Conditions of NIC On-line System Use.

Data storage limitations

17. The Data Controller is a derived public person, who is bound by the regulatory enactments regarding the national documentary heritage; therefore, personal data are stored in accordance with the procedures specified in the regulatory enactments of the Republic of Latvia, including the Law on Archives.

18. The log files are being stored for at least one year but no longer than two years after their creation.

19. The Data Controller deletes the NIC On-line system cookies after each finished session or after 30 minutes of session being idle.

Complaint procedure

20. A natural person has the right to lodge a complaint with the supervisory authority regarding a possible breach of personal data protection.

Change of policy

21. The NIC Privacy policy can be changed, if necessary. NIC.LV will publish all the changes to this policy on the website www.nic.lv.