Data protection notice
Data protection notice
In accordance with Art. 13 and Art. 14 of the EU General Data Protection Regulation (GDPR), we inform you below about the manner and background to the processing of your personal data in connection with our activities. The following information applies equally to applicants and applicants, contractual partners and persons subject to reporting obligations as well as other persons affected by data processing.
Responsible body
Office for Foreign Affairs
Giessenstrasse 3
9490 Vaduz
Telephone: +423 236 60 58
E-mail: [email protected]
Website: www.aaa.llv.li
You can address questions about data protection directly to us or to the Competence Center Data Protection, which acts as the Data Protection Officer of the Liechtenstein National Administration.
Contact details Data Protection Officer
Data Protection Office
Peter-Kaiser-Platz 1
9490 Vaduz
Telephone: +423 236 73 08
E-mail: [email protected]
Website: www.fds.llv.li
Purpose of the processing
The primary purpose of processing personal data is to fulfill our legal mandate.
We primarily carry out processing activities in the following functions:
- Consular assistance for Liechtenstein nationals abroad
- Sending information material to interested persons and organizations
- Invitations to events
- Answering individual inquiries.
Legal bases
The legal bases for processing activities are in particular
- Law on the Organisation of Government and Administration
- Exchange of letters between the Liechtenstein Legation in Bern and the Swiss Federal Council concerning the representation of Liechtenstein's interests by Switzerland in those countries in which Liechtenstein is not itself represented
- Exchange of notes between Liechtenstein and Switzerland on the representation of Liechtenstein's consular interests by Switzerland in countries where Liechtenstein itself is represented
- Vienna Convention on Consular Relations
- Vienna Convention on Diplomatic Relations
in conjunction with Art. 6 para. 1 let. e GDPR (public mandate).
Processed data
The following personal data is collected, recorded and processed in the course of our activities
- Address lists with name, postal address, email address and telephone number
- In the context of consular assistance, the following data is also processed depending on the case: personal data, health data, contact details, family details, financial circumstances.
Origin of the data
In the context of consular assistance, the source of the personal data is regularly not only the persons concerned themselves, but information is also passed on to the Office by their relatives, the Liechtenstein Ambassadors abroad or the Swiss Ambassadors abroad.
Recipients
We only transfer your data to other public bodies in cases prescribed and permitted by law.
Storage period
The storage period for data processing is based on special legal requirements regarding retention periods and the Archive Act. If the purpose of the data processing has been achieved and there are no statutory retention periods preventing the deletion of your data, the personal data will generally be forwarded to the respective deletion concept of the Liechtenstein National Administration.
Rights of the data subjects
When your personal data is processed, you have various rights under data protection law: information, rectification, erasure, restriction of processing, data portability, objection, complaint to the supervisory authority.
You can exercise your rights by submitting an informal application or request to the controller without giving reasons. However, it is recommended that you submit the application or request in writing or in a secure electronic form.
1. Right to access information:
With the right to access information in accordance with Art. 15 GDPR, you as the data subject are entitled to request information from the data controller on which data is stored or processed about you by the data controller.
You are also entitled to receive additional information from the controller, e.g. about the purposes of processing, the origin of the data if it was not collected directly from you, or about recipients to whom your data is transmitted.
The right to access information enables you to maintain an overview and thus control over which of your personal data is processed, for what purpose and on what legal basis.
2. Right to obtain rectification
If you discover that your personal data is incorrect, you can demand that the controller rectify it immediately in accordance with Art. 16 GDPR. Immediately means without undue delay on the part of the controller, i.e. a certain amount of time must be allowed for the request to be processed.
3. Right to erasure
With the right to erasure in accordance with Art. 17 GDPR, you can in principle request the controller to erase your personal data without undue delay if one of the grounds in Art. 17 para. 1 a) to f) applies, e.g. the data is no longer necessary for the purposes of the processing, consent has been withdrawn, an objection has been successfully lodged, the processing was unlawful, etc. The right to erasure may, however, be subject to exceptions.
However, there may be exceptions to the right to erasure, which are listed in Art. 17 para. 3 GDPR. The controller must regularly check whether statutory retention periods or the Archive Act preclude erasure.
4. Right to restriction of processing
The right to restrict processing in accordance with Art. 18 GDPR can only be asserted under certain conditions, which are listed in letters a) to d) of the article. For example, if you request the rectification of your incorrect data or have objected to the processing, the processing of your data must be restricted by the controller until its verification has been completed. Furthermore, processing must be restricted if you expressly request restriction instead of erasure due to unjustified processing. Processing must also be restricted if the controller no longer needs your data for its own purposes, but you still wish to use it to pursue your own claims.
5. Right to data portability
If you have provided your data to the controller, you can request to receive this data in a commonly used, machine-readable format in accordance with Art. 20 GDPR. This is intended to make it easier for you to transfer your data to another controller. The right to data portability applies if the processing is based on consent or a contract and is carried out using automated procedures.
6. Right to object
Art. 21 para. 1 GDPR grants you the right to object, on grounds relating to your particular situation, by way of exception, to data processing which is lawful in itself, provided that the legal basis for the processing of your data is a weighing of interests by the controller whose interests have prevailed in the weighing.
7. Right to file a complaint
If you, as a data subject, believe that your data is being processed unlawfully, you can file a complaint with the competent supervisory authority at any time.
Contact details of the supervisory authority for data protection in the Principality of Liechtenstein
The supervisory authority responsible for data protection in Liechtenstein is the Data Protection Authority with the contact details:
Data Protection Authority Principality of Liechtenstein
Kirchstrasse 8
P.O. Box 684
FL-9490 Vaduz
Telephone: +423 236 60 90
E-mail: [email protected]
Website: www.datenschutzstelle.li
Further information on data protection, in particular regarding the website of the Liechtenstein National Administration, can be found in the privacy policy.