Data protection notice
In accordance with Art. 13 and Art. 14 of the EU General Data Protection Regulation (GDPR), the Office of Finance informs you below about the manner and background to the processing of your personal data in connection with our activities. The following information applies equally to creditors, debtors and other persons affected by the data processing.
Responsible body
Office of Finance
Aeulestrasse 38
9490 Vaduz
Telephone: +423 236 64 24
Email: [email protected]
Website: www.llv.li/af
You can address questions about data protection directly to us or to the Competence Center Data Protection as our Data Protection Officer.
Contact details of the Data Protection Officer
Data Protection Office
Peter-Kaiser-Platz 1
9490 Vaduz
Phone: +423 236 73 08
Email: [email protected]
Website: www.fds.llv.li
Purpose of the processing
The primary purpose of processing personal data is to fulfill our legal obligations
We primarily carry out the following processing activities:
- Recording creditors (creditors) as part of the processing of payment transactions
- Recording debtors (debtors) as part of the invoicing, collection and management of receivables
Legal bases
The legal bases for the processing activities are set out in Art. 29 FHG, Art. 32, 33, 37, 38 and 43 FHV and Art. 17, 26, 29, 32 and 33 Maintenance Advance Act. If the personal data is not processed on the basis of the public mandate, the legal basis of Art. 6 para. 1 let. b) and c) of the General Data Protection Regulation (GDPR) is relevant in individual cases.
Data to be processed
The following personal data is collected, recorded and processed in the course of our activities: First name, surname, address, telephone number, e-mail, bank details, invoice data, proof of income and assets (debt collection), date of birth (advance payment of maintenance).
Data source
If the data is not collected from you personally, the information on the personal data comes from the following sources Central Register of Persons (ZSD) and court orders.
Data transfer
We only transfer your data to other public bodies in cases prescribed and permitted by law. Receptions of your personal data may include: other public authorities, debt collection offices, banks (payment information).
Storage duration
The storage period for data processing is based on special legal requirements regarding the retention periods or the Archiving Act. Once the purpose of the data processing has been achieved and there are no statutory retention periods preventing the deletion of your data, the personal data is generally added to the respective deletion concept.
Rights of data subjects
When your personal data is processed, you have various rights under data protection law: information, rectification, erasure, restriction of processing, data portability, objection, complaint to the supervisory authority.
You can exercise your rights by submitting an informal application or request to the controller without giving reasons. However, it is recommended that you submit the application or request in writing or in a secure electronic form.
1. Right to request information
With the right to information in accordance with Art. 15 GDPR, you as the data subject are entitled to request information from the data controller about which data about you is stored or processed by the data controller.
In addition, you will receive additional information from the controller, e.g. about the purposes of processing, the origin of the data if it was not collected directly from you, or about the recipients to whom your data is transmitted.
The right to access information enables you to maintain an overview and therefore control over which of your personal data is processed, for what purpose and on what legal basis.
2. Right to obtain rectification
If you discover that your personal data is incorrect, you can demand that the controller rectify it without undue delay in accordance with Art. 16 GDPR. Immediately means without undue delay on the part of the controller, which means that a certain amount of time must be allowed for the request to be processed.
3. Right to erasure
With the right to erasure in accordance with Art. 17 GDPR, you can in principle request the controller to erase your personal data without undue delay if one of the grounds in Art. 17 (1) a) to f) applies, e.g. the data is no longer necessary for the purposes of the processing, consent has been withdrawn, an objection has been successfully lodged, the processing was unlawful, etc.
However, there may be exceptions to the right to erasure, which are listed in Art. 17 para. 3 GDPR. The controller must regularly check whether statutory retention periods or the Archiving Act preclude erasure.
4. Right to restriction of processing
The right to restrict processing in accordance with Art. 18 GDPR can only be asserted under certain conditions, which are listed in letters a) to d) of the article. For example, if you request the rectification of your incorrect data or have objected to the processing, the processing of your data must be restricted by the controller until its verification has been completed. Furthermore, processing must be restricted if you expressly request restriction instead of erasure due to unjustified processing. Processing must also be restricted if the controller no longer needs your data for its own purposes, but you still wish to use it to pursue your own claims.
5. Right to data portability
If you have provided your data to the controller, you can request to receive this data in a commonly used, machine-readable format in accordance with Art. 20 GDPR. This is intended to make it easier for you to transfer your data to another controller. The right to data portability applies if the processing is based on consent or a contract and is carried out using automated procedures.
6. Right to object
Art. 21(1) GDPR grants you the right to object, on grounds relating to your particular situation by way of exception, to data processing which is lawful in itself, provided that the legal basis for the processing of your data is a weighing of interests by the controller whose interests have prevailed in the weighing.
7. Right to file a complaint
If you, as the data subject, believe that the data is being processed unlawful, you can file a complaint with the competent supervisory authority at any time.
Contact details of the supervisory authority
The supervisory authority responsible for data protection in Liechtenstein is the Data Protection Authority with the contact details:
Data Protection Authority for the Principality of Liechtenstein
Städtle 38
P.O. Box 684
FL-9490 Vaduz
Phone: +423 236 60 90
Email: [email protected]
Website: www.datenschutzstelle.li
Further information on data protection, in particular regarding the website of the Liechtenstein National Administration, can be found in the Declaration of the Data Protection.