Privacy Policy

Controller: The Foundation “Baltic Investigative Journalism Center Re:Baltica”, registration number – 40008181867 (hereinafter – the Foundation), Strēlnieku street 4A, Riga, LV-1010.

Email address: 

The Foundation respects your privacy and is committed to protecting your personal data. This privacy policy outlines how your information is collected, used, managed, and protected upon visiting the website If you have any questions regarding the processing of your personal data, you can contact us using the aforementioned contact information. 

In processing personal data, the Foundation adheres to the European Parliament and Council Regulation (EU) 2016/679 (27th April 2016) on the protection of natural persons with regard to the processing of personal data and the free movement of such data, thereby repealing Directive 95/46/EC (hereinafter General Data Protection Regulation), the Personal Data Processing Law, as well as other applicable regulatory acts in the field of personal data processing and protection. 

The Foundation processes personal data of individuals (partners, representatives/contact persons of partners, and other persons whose data may come into the possession of the Foundation within the scope of its activities), the procedure for exercising the rights of the data subject, and issues related to personal data protection. The Foundation’s privacy policy applies to all types of personal data processing that the Foundation conducts.

Purposes of Personal Data Processing

The Foundation uses personal data for:

  • Ensuring effective management processes;
  • When signing up to receive newsletters via email;
  • When providing information to public administration bodies and operational activity entities in cases and extents specified in external regulations;
  • When conducting direct communication;

This data may include your name, email address, phone number, and any other information you provide. The Foundation processes personal data only in cases where there is a legal basis:

  • The Foundation processes personal data to provide services, to fulfill legal obligations applicable to the Foundation, to enter into contracts, monitor their execution, fulfill the conditions of concluded contracts, before concluding a contract, identifying the data subject. Also, to ensure appropriate payment calculations and to communicate with you about service provision and/or contract execution issues (based on points b, c, and f of Article 6(1) of the Regulation).
  • The Foundation also processes personal data to fulfill obligations specified in regulatory acts, such as the requirements of accounting regulatory acts, the Archives Law, etc., and to provide responses to requests from state and law enforcement agencies in a manner prescribed by law and within the scope. The Foundation processes personal data for processing, storing, and keeping track of incoming and outgoing correspondence (mail letters, email messages) (Article 6(1)c of the Regulation).
  • The Foundation processes personal data to inform the public about significant events.
  • The Foundation’s economic activity is related to investigative journalism, therefore it is entitled within the framework of the Regulation and other current regulatory acts to process personal data of individuals for journalism needs, ensuring a balance between the right to personal data protection, the right to freedom of speech and information, especially the right to receive and disseminate information (based on Articles 32(1) and (2) of the Personal Data Processing Law).
  • This data may include your name, email address, phone number, and any other information you provide. The Foundation processes personal data only in cases where there is a legal basis:

Data Security

  • We have implemented appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. The Foundation stores personal data in accordance with the defined purposes of personal data processing (objectives) and regulatory requirements, as long as at least one of these criteria is met:
  • As long as the Foundation can realize its legitimate interests in the manner prescribed by external regulations (for example, to submit objections or file a lawsuit);
  • As long as there is a legal obligation for the Foundation to store the data;

As long as the consent of the data subject for the relevant personal data processing is valid, if there is no other lawful basis for processing.

Below are the adopted personal data storage terms:

  • Personal data necessary for fulfilling contractual obligations – the Foundation will store until the contract is executed and other storage periods expire (see below);
  • Personal data that must be stored to fulfill legal requirements, we will store for the terms specified in the respective regulations, for example, the law on accounting states that justification documents must be stored until the day they are necessary to determine the beginning of each economic transaction and track its progress, but not less than 5 years;

Data to prove the fulfillment of obligations, we will store for the general period of limitation of claims, according to the periods of limitation for claims specified in regulatory acts – 10 years in the Civil Law, 3 years in the Commercial Law, and other periods, also taking into account the terms specified in the Civil Procedure Law for filing claims.

  • If your personal data is no longer necessary for the specified purposes, the Foundation will delete or destroy it.

Your Rights

Under the GDPR, you have the right to:

  • Request access to your personal data;
  • Request correction or deletion of your data;
  • Object to the processing of your data;

Request data portability.

The data subject has the right to access their data (by submitting an application to the Foundation), request the restriction of personal data processing, deletion of personal data, data portability, object to personal data processing, or request correction of personal data, as well as other rights that arise from the Regulation’s provisions. The Foundation communicates with the data subject using the contact information provided by the data subject (telephone number, email address, address).

The Foundation ensures data processing and security in accordance with regulatory requirements; in the case of a data subject’s objection, the Foundation takes prompt action to find a solution to the situation. However, if the data subject believes that their rights to personal data protection have been violated, the data subject is entitled to file a complaint with the supervisory authority – the Data State Inspectorate.

To use all the listed rights, please contact us by writing to


Our website uses cookies to improve the user experience. The use of cookies is detailed in our Cookie Usage Policy.

Changes to the Privacy Policy

We reserve the right to make changes to this privacy policy. We will inform you of significant changes using our website or email.

Contact Information

If you have any questions or concerns about this privacy policy or the processing of your data, please contact us:


Address: Strēlnieku street 4a, Riga, LV-1010