Who we are
The controller of your personal data is SIA Open finance, registration number 40203776887, Latvia (“Open finance”, “we”, “us”).
For any question about this policy or your personal data, contact us at info@openfinance.lv.
What this policy covers
This policy explains how we process personal data when you visit our website, send us a financing request or otherwise contact us. Our services are intended for businesses, so the personal data we receive usually belongs to company representatives — directors, owners, employees and other contact persons.
If you become our client, the processing of data for the financing relationship (including customer due diligence) is described in the contract documentation and related notices provided at that stage.
What data we process and why
We process personal data in the following situations:
Financing requests submitted through the website
- Data
- Full name, company name, work email, phone number (optional), the type of financing you are interested in and anything you write in your message.
- Purpose
- To respond to your request, assess whether and how we could finance your business, and take the steps you ask for before any agreement is concluded.
- Legal basis
- Taking steps at your request prior to entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in communicating with representatives of businesses that contact us (Art. 6(1)(f) GDPR).
- Retention
- Up to 24 months after our last contact if no financing relationship follows. If one does, for as long as required by the contract and by applicable law, including accounting and anti-money laundering legislation.
Emails and other correspondence
- Data
- Your name, contact details and the content of your messages.
- Purpose
- To answer your questions and keep a record of our communication.
- Legal basis
- Our legitimate interest in responding to enquiries and managing business correspondence (Art. 6(1)(f) GDPR).
- Retention
- Up to 24 months after our last contact, unless the correspondence forms part of a financing relationship.
Website operation and security
- Data
- Technical data your browser sends when you visit the site, such as IP address, browser type, requested pages and time of the request (server logs).
- Purpose
- To deliver the website, keep it secure and investigate errors or abuse.
- Legal basis
- Our legitimate interest in operating a secure website (Art. 6(1)(f) GDPR).
- Retention
- Server logs are kept for a short period, as set by our hosting provider, unless needed to investigate a security incident.
Website analytics (only with your consent)
- Data
- Pseudonymous online identifiers stored in cookies, pages viewed, time on site, approximate location derived from your IP address, device and browser information, and how you arrived at the site.
- Purpose
- To understand how the website is used and improve it. We use Google Analytics 4 with advertising features and Google Signals switched off.
- Legal basis
- Your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time via “Cookie settings” at the bottom of every page; withdrawing does not affect processing that took place before.
- Retention
- Analytics cookies expire after 2 years. Google Analytics keeps event data for the retention period configured in our account (no longer than 14 months).
You are not obliged to provide personal data, but without your contact details we cannot respond to your request.
Who we share data with
We do not sell your personal data. We share it only where necessary, with:
- Service providers acting on our behalf — our website hosting provider; Resend, which delivers financing requests from the website to our mailbox; our email provider; and, if you consent, Google (Google Ireland Limited) for Google Analytics. They process data only on our instructions and under data processing agreements.
- Professional advisers such as lawyers, auditors and accountants, where needed for our legitimate business purposes and under duties of confidentiality.
- Public authorities, courts and law enforcement where we are required to do so by law.
International transfers
Some of our service providers, or their sub-processors, are located outside the European Economic Area — for example in the United States. Where data is transferred outside the EEA, we rely on an adequacy decision of the European Commission (such as the EU–US Data Privacy Framework for certified companies) or on the European Commission’s Standard Contractual Clauses, together with additional safeguards where needed. You can ask us for more information about these safeguards.
Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you and receive a copy;
- have inaccurate data corrected or incomplete data completed;
- have your data erased, where there is no longer a reason for us to keep it;
- restrict how we use your data in certain circumstances;
- receive data you provided to us in a portable format, where processing is based on consent or a contract;
- object to processing based on our legitimate interests;
- withdraw your consent at any time, where processing is based on consent.
To exercise your rights, write to info@openfinance.lv. We may need to verify your identity and will reply within one month. You also have the right to lodge a complaint with the Data State Inspectorate of Latvia (Datu valsts inspekcija, www.dvi.gov.lv) or with the supervisory authority in the EU country where you live or work.
How we protect your data
We use appropriate technical and organisational measures to protect personal data, including encrypted connections (HTTPS), access limited to staff who need the data for their work, and careful selection of service providers. No method of transmission over the internet is completely secure, so please do not send us sensitive information through the website form.
Automated decision-making
We do not make decisions that produce legal or similarly significant effects for you based solely on automated processing of the data collected through this website. Financing decisions are made by our team on a case-by-case basis.
Changes to this policy
We may update this policy when our services or legal requirements change. The current version is always available on this page, with the date of the last update shown at the top. Back to the home page.