Privacy policy

Mani rēķini — www.manirekini.lv

1. What is the purpose of this privacy policy?

In this privacy policy (hereinafter – the Policy), you will find information about how we collect and otherwise process personal data relating to you (hereinafter – the Data), as well as information about your rights and the procedure for exercising them.

When processing the Data, we comply with the General Data Protection Regulation of the European Union (hereinafter – the GDPR), the relevant laws and regulations on the legal protection of personal data of natural persons, and other directly applicable legal acts governing the protection of Data.

2. Who is my Data Controller?

Name: SIA EasyBill Payments Latvia
Email address: info@easybill.lv
Website address: www.manirekini.lv (hereinafter – the Website)
Mobile application name: Mani rēķini (hereinafter – the Mobile Application)
Postal address: Dārzciema iela 60, Rīga, LV-1073
Registration No.: 40103762043
VAT payer code: LV40103762043
Phone: +371 67892114
You may contact our data protection specialists by email: info@easybill.lv.

3. What categories of my Data do you process?

  • Identification data: name, surname, personal identification number, photograph, gender, country, city, date of birth, country(-ies) of residence, permanent place of residence, identity document data: photograph, expiry date, copy of the document, signature, nationality(-ies), taxpayer identification number.
  • Financial transaction data: bank account number, payment type, payment purpose / deposit name, transaction ID, payer code, deposit code, time, amount, location.
  • Account data: name, surname, email address, phone number, user ID, account password, phone number, time of last login, time of account creation and deletion, date of last update of account data, usage habits, information on whether you agree to receive notifications about unpaid invoices, newsletters and offers, confirmation that you have read and agree to the terms of use and the agreement, account PIN code, payment history, ordered services, settings related to logging into the application using biometric data, log entries recording your activities carried out on our Website or Mobile Application, chosen language, your confirmations that you wish to participate in promotions.
  • Anti-money laundering information: name, surname, date of birth, personal identification number, identity document data, qualified signature data, transaction information, including the amount, type of account and transaction, signature, phone number, email address, copy of the identity document, photograph of the person, additional data obtained during enhanced due diligence and monitoring of the business relationship, information on amounts received, sanctions, other Data necessary for the prevention of money laundering, terrorist financing, tax evasion and the implementation of international sanctions.
  • Social media usage data: username, comments on posts, sharing of posts, information on “likes” and “follows”, information on reactions to posts, photograph, rating information, and any other information provided by you.
  • Request, inquiry or complaint data: the request, inquiry or complaint, attachments sent by you, recording of the conversation, date and time of the call, duration of the call.
  • CCTV data: image, place and time of visit, audio recording.
  • Legal data: documents and data giving rise to legal consequences, correspondence, legal documents, procedural documents, attachments, court documents, investigation information, information on convictions and criminal offences, other Data submitted in legal proceedings.

Please note! In this section, we have provided the main categories of Data that we process. However, given the specific nature of our activities, it is not possible to provide an exhaustive list of the categories of personal data processed in this Privacy Policy, and therefore this list is not final. The specific scope of the Data processed depends on the Services you use and your relationship with our company.

4. How and why do you process my Data?

4.1. Registration on our Website or Mobile Application

In order to provide you with the opportunity to create an account on our Website or Mobile Application, we will process the Data indicated below.

Legal basis for data processing

Relevant categories of Data

Is the provision of Data mandatory?

  

Contract (GDPR Article 6(1)(b))

Account data

Yes. If you do not provide the data, we will not be able to provide you with the opportunity to register on our Website or Mobile Application

4.2. Identification and verification of your identity, prevention of money laundering and terrorist financing, implementation of sanctions

Legal acts require, for the purposes of preventing money laundering and terrorist financing and implementing sanctions, that your identity be verified when you wish to use our services to their full extent (for example, to make payments through the Single Euro Payments Area, otherwise known as SEPA), as well as in other cases provided for in the legal acts on the prevention of money laundering and terrorist financing and the application of international sanctions. For this purpose, we will ask you to confirm your identity by submitting a photograph of an identity document, a photograph of your face, and other necessary Data, as described below.

Legal basis for data processing

Relevant categories of Data

Is the provision of Data mandatory?

Legal obligation (GDPR Article 6(1)(c))

Identification data, Financial transaction data, Account data, Anti-money laundering and counter-terrorist financing information

Yes. If you do not provide the Data, you will not be able to use our services to their full extent (e.g., make SEPA payments)

Data processing is necessary for reasons of substantial public interest (GDPR Article 9(2)(g))

Information on whether you or your family members or close associates are classified as politically exposed persons, Anti-money laundering and counter-terrorist financing information

4.3. Account administration, payment initiation and provision of other services of the Company

In cases where, on our Website or Mobile Application, you use the payment initiation, money remittance, electronic money issuance and redemption, account information, account administration or any other services provided by the Company, we will process the Data indicated below.

Legal basis for data processing

Relevant categories of Data

Is the provision of Data mandatory?

Contract (GDPR Article 6(1)(b)); Legal obligation (GDPR Article 6(1)(c))

Identification data, Account data, Financial transaction data

Yes. If you do not provide the Data, you will not be able to use our services

4.4. Organisation of promotions

In cases where, by using our Website or Mobile Application, you participate in promotions organised by the Company, we will process the Data indicated below.

Legal basis for data processing

Relevant categories of Data

Is the provision of Data mandatory?

Consent (GDPR Article 6(1)(a))

Account data

No

4.5. Marketing

When you register on our Website or Mobile Application, you give us your consent, or we have a legitimate interest, and we will provide you with current offers, information about our services and goods or those of our partners, and we will also ask for your opinion about the services we provide. If you wish to unsubscribe from newsletters, you may click the unsubscribe link in the newsletter itself, remove the consent tick in your account (in the “Profile” –> “Settings” section), or send us a request by email to info@easybill.lv.

Legal basis for data processing

Relevant categories of Data

Is the provision of Data mandatory?

Consent (GDPR Article 6(1)(a)); Legitimate interest in informing you about services and goods (GDPR Article 6(1)(f)); Customer relationship (provisions of legal acts governing the electronic communications sector)

Account data

No

4.6. Analysis of customer behaviour and habits

During this process, we use the “Google Analytics” tool, with the help of which we analyse how you use our Mobile Application and Website in order to better understand customer behaviour and purchasing habits. This allows us to develop more convenient products and services, better tailored to your needs, as well as to improve the user experience, optimise the solutions offered and assess their effectiveness.

Legal basis for data processing

Relevant categories of Data

Is the provision of Data mandatory?

Legitimate interest in understanding customer needs and meeting expectations (GDPR Article 6(1)(f))

Account data

No

4.7. Administration of social media accounts

When you carry out active actions (for example, reacting to posts, writing a message, or following our accounts) on our social media accounts, we will process the Data indicated below.

Legal basis for data processing

Relevant categories of Data

Is the provision of Data mandatory?

Consent (GDPR Article 6(1)(a))

Social media usage data

No

4.8. Handling of your requests, inquiries and complaints

When you submit a request, inquiry or complaint to us by email or telephone, we process the Data indicated below.

Legal basis for data processing

Relevant categories of Data

Is the provision of Data mandatory?

Consent (GDPR Article 6(1)(a))

Identification data, Contact information data, Request, inquiry or complaint data

No

4.9. Video surveillance

In order to ensure the resolution of disputes with customers, as well as the security of property, employees and customers, we carry out video surveillance (together with audio recording) at some of the locations where our or our partners’ payment acceptance points are located. Please note that at locations where we carry out video surveillance, informational stickers are displayed warning you that video surveillance is taking place.

Legal basis for data processing

Relevant categories of Data

Is the provision of Data mandatory?

Legitimate interest in resolving disputes with customers and ensuring the security of property and persons (GDPR Article 6(1)(f))

CCTV data

No

4.10. Fulfilment of legal claims and protection of our legal interests

If you have entered into an agreement with us, then, in accordance with the limitation periods set out in the legal acts, we will retain the Data in order to be able to defend our rights and legal interests, should this be necessary. We must retain certain Data in order to comply with the requirements set out in legal acts in the fields of accounting, archiving and other areas. If you become involved in legal proceedings to which we are a party, we will use this Data for the purposes of those legal proceedings.

Legal basis for data processing

Relevant categories of Data

Is the provision of Data mandatory?

Legal obligation (GDPR Article 6(1)(c)); Legitimate interest in defending our rights and legal interests (GDPR Article 6(1)(f))

Identification data, Legal data, request, inquiry or complaint data, other data necessary for processing in legal proceedings or in accordance with legal acts

No

5. For how long do you retain my Data?

We retain your Data for no longer than is required by the purposes of the Data processing, or by legal acts, if they establish a longer Data retention period:

  • Copies of identity documents, beneficial owner identity data, payout recipient identity data, recordings of live video broadcasts (live video streaming), other data obtained during identification, account and/or contract documents (originals of documents or documents stored in electronic form, in accordance with the applicable procedure for the electronic storage of such documents) are retained for 5 years from the end date of the transaction or business relationship with you (in accordance with the legal acts governing the prevention of money laundering and terrorist financing).
  • Documents and data confirming monetary transactions or transactions, or other legally binding documents and data related to carrying out monetary transactions or concluding transactions, are retained for 5 years (in accordance with the legal acts governing the prevention of money laundering and terrorist financing).
  • Correspondence related to the business relationship (e.g., communication with you by email) is retained for 5 years from the end date of the transaction or business relationship with you (in accordance with the legal acts governing the prevention of money laundering and terrorist financing).
  • Recordings of conversations are retained for 12 months, except for conversations related to the prevention of money laundering and terrorist financing, to which a 5-year period from the end date of the transaction or business relationship with you applies (in accordance with the legal acts governing the prevention of money laundering and terrorist financing).
  • CCTV data is retained for 30 days, except in cases where the Data is necessary to resolve a dispute that has arisen or to record a violation – in such cases, the Data is retained for the duration of the examination of the dispute or violation.
  • Data necessary for the protection of our legal interests is retained for 10 years (the general limitation period for claims), calculated in accordance with the rules set out in the relevant legal acts.
  • We retain other data for 5 years from your inactivity in the account or from another active action performed (for example, giving consent to receive newsletters).

Please note! Data may be retained for longer if there is a dispute with you, legal proceedings, or a pre-trial investigation is being carried out. In such a case, the Data may be retained for as long as the dispute, investigation or legal proceedings continue. Likewise, if a reasoned instruction is received from a competent authority, the retention period of the Data stored in accordance with the relevant legal acts may be extended for a period not exceeding 5 years.

6. Where do you obtain my Data from?

We obtain most of the Data from you. Where necessary for the purposes indicated below, we obtain Data from other sources.

Source of Data

Purpose of Data processing

Banks and financial institutions, payment service providers, institutions and organisations

For the purpose of making payments, identification and verification of identity, prevention of money laundering and terrorist financing, and implementation of sanctions

State authorities administering population registers and registers of legal entities

For the purpose of identification and verification of identity, prevention of money laundering and terrorist financing, and implementation of sanctions

Publicly available lists of politically exposed persons and sanctioned persons

For the purpose of identification and verification of identity, prevention of money laundering and terrorist financing, and implementation of sanctions

Our Clients, when they provide your Data as data of a spouse or other person related by family or kinship ties

For the purpose of identification and verification of identity, prevention of money laundering and terrorist financing, and implementation of sanctions

Legal entities, when you are a representative, employee, founder, shareholder, member, beneficial owner, member of a management body, etc. of such legal entities

For the purpose of identification and verification of identity, prevention of money laundering and terrorist financing, and implementation of sanctions

Social media service providers

For the purpose of administering social media accounts

From courts or other state authorities (when we are a party to legal proceedings or other legal processes with which you are involved, or when we must comply with other legal requirements)

For the purpose of fulfilling legal claims and protecting our legal interests

7. To whom do you transfer my Data?

When necessary for the purposes mentioned above and taking into account the applicable laws, we share the Data with the following recipients:

  • Affiliated companies: UAB “Perlas Network
  • UAB “Front IT” (provider of IT systems development, maintenance and improvement services)
  • Omnisend (provider of newsletter sending services)
  • Google Ireland Limited (Ireland) and Google LLC. (USA) (provider of analytics tools)
  • Insurance service providers, educational institutions, credit and debt collection companies, telecommunications companies, property management companies, heat and gas suppliers, and other companies to which you make payments using our Website or Mobile Application
  • Banking, payment and transaction service providers, and organisations through which payments are made
  • Providers of IT services, email, communication, website hosting, website content management, video broadcasting, marketing, analytics, work tools, cloud computing, social media, audit, accounting and other services
  • Courts, tax authorities, law enforcement and other state authorities, notaries, bailiffs, parties to legal proceedings
  • Potential or actual transferees of the company or part thereof, and their authorised consultants or persons

In cases where we transfer Data outside the European Economic Area, we rely on a decision of the European Commission recognising that the relevant third country, territory, or one or more specified sectors within that third country, or the relevant international organisation, ensures an adequate level of Data protection. If no such decision has been adopted, we may transfer the Data to a third country or international organisation if we have put in place appropriate safeguards (for example, if we have signed the standard data protection clauses approved by the European Commission (GDPR Article 46(2)(c))). If no adequacy decision has been adopted and no appropriate safeguards have been established, we will transfer the Data if at least one of the exceptions provided for in GDPR Article 49 applies (for example, we have obtained your explicit consent).

8. What rights do I have in relation to the processing of my Data?

Taking into account the conditions, restrictions and exceptions established in applicable laws, you have the following rights:

Right Summary of the right
Right to access data The right to obtain confirmation from us as to whether Data relating to you is being processed and, where such Data is being processed, you have the right to access the Data and information about its processing.
Right to request rectification of data The right to request that we correct inaccurate Data relating to you.
Right to request erasure of data (“right to be forgotten”) – if the Data is no longer necessary for the purposes for which it was collected or otherwise processed;
– if you withdraw the consent on which the Data processing is based, and there is no other legal basis for the Data processing;
– if you object to the Data processing and there are no overriding legitimate grounds for the Data processing, or if you object to the Data processing for direct marketing purposes;
– if the Data has been processed unlawfully;
– if the Data must be erased in order to comply with a legal obligation;
– if the Data was collected in relation to the direct offering of information society services, based on consent.
Right to restrict data processing – if you contest the accuracy of the Data;
– if the Data processing is unlawful and you oppose the erasure of the Data and request the restriction of its use instead;
– if we no longer need the Data for the specified purposes, but you need it for the establishment, exercise or defence of legal claims;
– if you have objected to the Data processing, pending verification as to whether our legitimate interests override your interests.
Right to data portability when you wish to receive the Data you have provided, or to transfer this Data to another Data Controller, and the Data processing is based on consent or a contract and is carried out by automated means.
Right to object when we collect and use the Data based on a task carried out in the public interest, the exercise of official authority, or our legitimate interests, or for direct marketing purposes.
Right to withdraw consent when the Data processing is based on consent and you wish to withdraw it at any time, without affecting the lawfulness of the Data processing based on consent before its withdrawal.
Right to lodge a complaint The right to lodge a complaint with a supervisory authority if you consider that your Data has been processed in breach of the requirements of the GDPR and other personal data protection legal acts; however, we recommend that you first contact us, and together with you we will try to resolve all your requests.

Please note! We may refuse to consider a request received from you regarding the exercise of data subject rights if the request is manifestly unfounded or excessive, in particular because of its repetitive character, as well as in other cases established in the legal acts governing Data protection.

9. Automated decision-making, including profiling

We do not apply decisions based solely on automated Data processing, including profiling, which would produce legal effects concerning you or similarly significantly affect you.

10. Cookies and similar technologies

The cookies and similar technologies indicated below are used on our Website to store information or to enable the use of information already stored on your devices.

A cookie is a small amount of data that a website stores on a visitor’s computer or mobile device. Cookies help a website remember information about your visit, making it easier to revisit the website and making the website more useful to you. Other technologies may also be used for these purposes, including unique identifiers designed to identify a browser, application or device, pixels, and local storage.

To manage your consent settings regarding cookies, you may click the cookie settings icon located at the bottom of the screen.

11. How can I refuse cookies and similar technologies?

Most browsers allow you to manage cookie settings and usage, as well as delete cookies and browsing data: Chrome, Safari, Firefox, Opera.
If you wish to consent to the use of cookies and similar technologies or withdraw your consent, you may manage the settings in the cookie manager at the bottom of the screen.

12. How can I contact your data protection specialists and submit a request?

You may contact our data protection specialists by email: info@easybill.lv
You may submit a request or complaint by email: info@easybill.lv. We will respond to your requests within 1 month. If necessary, this period may be extended by a further 2 months, taking into account the complexity of the request, the volume of Data being processed, and the number of services provided.

13. Can this Policy be amended?

This version of the Policy was published on 2026-07-30 and replaces the privacy policies published prior to this date. All references to previously effective Mani rēķini privacy policies shall be deemed references to this Policy. Should any questions arise regarding the processing of Data, we encourage you to review this Policy on a regular basis.