DataverseLV Privacy Policy 

About the Privacy Policy 

The DataverseLV Repository (hereinafter – the Repository) Privacy Policy sets out the procedure for processing personal data of users and persons whose data appear in dataset metadata, including the principles and purposes for their collection, use, storage, and protection. The Privacy Policy has been developed in accordance with the General Data Protection Regulation (GDPR) and the Personal Data Processing Law of Latvia. 
Personal data means any information relating to an identified or identifiable natural person, as defined in Article 4(1) of the GDPR. 
By using the Repository (including any of its collections and sub-collections), you acknowledge that you have read this Privacy Policy and agree to the processing of your personal data in accordance with it. 

Data Controller and Processor 

As the maintainer and operator of the Repository, the Association “Higher Education and Science Information Technology Shared Service Center” (VPC) acts as both the data controller and data processor for user data and personal data included in dataset metadata. 
VPC is not the data controller for personal data contained within datasets or their descriptions. If you have questions or objections concerning such data, please contact the researcher or institution that deposited the dataset and is responsible for it. You may also contact VPC, and we will make every effort to help resolve your inquiry. 

1. User Personal Data 

Purpose of Processing

User personal data is processed to ensure the operation of the Repository, including authentication, linking of data with specific user accounts, and enabling access to Repository functionalities. 
Data are processed in accordance with Article 6(1)(a) (data subject consent) and 6(1)(b) (contract performance) of the GDPR.

Processed User Data 

Data type  Description  Source 
Contact information  Name, email, institution (optionally – position) for user communication.  User registration 
Session information and cookies  Usage information for authentication and functional purposes.  System interactions 
Log (system records)  IP address, user ID, browser, and related data for system security and analytics.  System interactions 

2. Personal Data in Metadata 

Personal data included in repository metadata records are publicly accessible and processed in accordance with the Personal Data Processing Law and Article 6(1)(f) of the GDPR (processing based on legitimate interests). This ensures transparency of published data, accountability of responsible persons, and enables communication regarding data use. 

Processed Personal Data in Metadata 

Data type  Description  Source 
Repository metadata record  Name and contact of dataset contact person, depositor, authors, institution, IDs (e.g., ORCID, ROR).  Recorded in the Repository or obtained from external sources 

Personal Data Retention 

Personal data are stored until one of the following conditions is met: 
  • The purpose of data processing has been fulfilled. 
  • User data (except access logs) are kept as long as the corresponding dataset remains in the Repository. 
  • The user deletes their account. 
  • The data controller discontinues the operation of the Repository.
    System logs and backups are stored for up to one year. 

Disclosure of Personal Data to Third Parties 

User personal data are not shared with third parties and are accessible only to Repository administrators from VPC, and collection maintainers as necessary to ensure Repository operations. 
Personal data appearing in metadata are publicly available to all users to ensure data traceability and transparency. 

Data Security 

User personal data processed within the Repository is protected. All data related to user accounts are encrypted. 
The data processor regularly conducts risk and vulnerability analyses and tests the Repository’s security to ensure the protection of your personal data. 

Your Rights 

Right to Information and Access
You have the right to know how your personal data are processed and to access them. Repository users may view their data under “Account Information” and “My Data” after logging in. Additional information can be requested by contacting the data controller. 
Right to Rectification
You have the right to correct or request correction of inaccurate or incomplete personal data. 
Right to Erasure (“Right to be Forgotten”)
You may request the deletion of your personal data, including deletion of your user account (which also terminates your access to Repository services) and removal of personal data from dataset metadata, if applicable. 
Right to Lodge a Complaint
If you believe your data is not being processed properly, you may submit a complaint to the Repository’s data controller. 

Contact Information 

Contact VPC 
Email: info@vpc.lv
Phone: +371 67 969 580
Address: Zigfrīda Annas Meierovica Bulvāris14, Riga
Website: https://dataverse.lv/