Data protection notice Rental Contributions Bureau
In accordance with Art. 13 and Art. 14 of the EU General Data Protection Regulation (GDPR), we inform you below about the manner and background to the processing of your personal data in connection with our activities. The following information applies equally to applicants and applicants, contractual partners and other persons affected by data processing.
Responsible office
Office of Social Services
Postplatz 2
P.O. Box 63
9494 Schaan
T +423 236 72 72
info.asd@llv.li
www.asd.llv.li
You can address questions about data protection directly to us or to the Data Protection Office as our data protection officer.
Contact data protection officer
Data Protection Office
Peter-Kaiser-Platz 1
9490 Vaduz
T +423 236 73 08
datensch utz@regierung.li
www.fds.llv.li
Purpose of the processing
The primary purpose of processing personal data is to fulfill our legal mandate. This includes the payment of Rental Contributions for families in accordance with the Rental Contributions Bureau Act.
We primarily carry out the following processing activities:
- Checking applications from tenants regarding eligibility for Rental Contributions Bureau
- Payment of Rental Contributions to eligible families
- Annual checks of personal and financial circumstances
Legal bases
The legal basis for the processing activities is set out in Articles 2, 14, 15 and 15a of the Rent Contributions Act of September 13, 2000 (MBG; LGBl. 2000 No. 202) and in Article 6(1)(e) of the General Data Protection Regulation (GDPR).
Data to be processed
The following personal data is collected, recorded and processed in the course of our activities
- Name and contact details
- Date of birth
- Bank details
- PEID
- Gender
- Marital status
- Family status
- Residential relationship (tenancy agreement)
- Proof of assets
- Proof of income (salary statements/pay slips/confirmation of income for self-employed persons)
- Employment and apprenticeship contracts
- School certificates and proof of studies
- audited tax assessment
- Tax return
- Proof of maintenance (child maintenance, spousal maintenance)
- all data required for the calculation of the Rental Contributions Bureau
Origin of the data
If the data is not collected from you personally, the information on the personal data comes from the following sources:
- State and municipal authorities (tax assessment, certificate of income)
- Central register of persons (ZPR)
- various services/bureaus within the Office
- Appeals authority (Administrative Appeals Commission)
- AHV/IV institutions
- Social insurance bodies (health insurance, accident insurance, Unemployment Insurance Division, pension insurance, etc.)
- other bodies, insofar as this is necessary for the fulfillment of tasks
Reception
We only transfer your data to other public bodies in legally prescribed and permitted cases. The following are possible recipients of your personal data
- State authorities
- various services/bureaus within the Office (e.g. Social Service Division)
- Municipalities
- Health insurance companies
- AHV-IV-FAK institutions
- Social insurance bodies (health insurance, accident insurance, Unemployment Insurance Division, pension insurance, etc.)
- Appeals body (Administrative Appeals Commission)
- other bodies, insofar as this is necessary for the fulfillment of tasks
Third countries
The transfer of personal data to a third country, such as Switzerland, is carried out in fulfillment of the legal mandate for the purpose of granting Rental Contributions Bureau for families. The transfer to this third country is made possible on the basis of an adequacy decision by the EU Commission in accordance with Article 45 GDPR.
Storage period
The storage period for data processing is based on special legal requirements regarding retention periods and the Archiving Act. Once the purpose of the data processing has been achieved and there are no statutory retention periods preventing the deletion of your data, the personal data is generally transferred to the respective deletion concept. The deletion concepts include the following: The data will be stored for as long as is necessary for the provision of benefits under the Family Rental Contributions Bureau Act, taking into account statutory retention periods. Due to the statutory limitation period for reimbursement claims defined in Art. 8 Para. 4 MBG and the accounting obligation defined in Art. 1059 of the Persons and Companies Act of January 20, 1926 (PGR; LGBl. 1026 No. 4), personal data is stored for ten years.
Legal Division of data subjects
When your personal data is processed, you have various rights under data protection law: access, rectification, erasure, restriction of processing, data portability, objection, complaint to the supervisory authority.
You can exercise your Legal Division rights by submitting an informal application or request to the controller without giving reasons. However, it is recommended that yousubmittheapplication or request in writing or in a secure electronic form.
1 Legal Division of information:
With the right to information in accordance with Art. 15 GDPR, you as the data subject can request information from the data controller about which data about you is stored or processed by the data controller.
You will also receive additional information from the controller, e.g. about the purposes of processing, the origin of the data if it was not collected directly from you, or about recipients to whom your data is transmitted.
The right of access enables you to maintain an overview and thus control over which of your personal data is processed, for what purpose and on what legal basis.
2 Legal Division to rectification
If you discover that your personal data is incorrect, you can demand that the controller rectify it without undue delay in accordance with Art. 16 GDPR. Immediately means without undue delay on the part of the controller, i.e. a certain amount of time must be allowed for the request to be processed.
3 Legal Division to erasure
With the Legal Division to erasure in accordance with Art. 17 GDPR, you can in principle request the controller to erase your personal data without undue delay if one of the grounds in Art. 17 para. 1 a) to f) applies, e.g. the data is no longer necessary for the purposes of the processing, consent has been withdrawn, an objection has been successfully lodged, the processing was unlawful, etc. The right to erasure may, however, be subject to exceptions.
However, there may be exceptions to the right to erasure, which are listed in Art. 17 para. 3 GDPR. The controller must regularly check whether statutory retention periods or the Archiving Act preclude erasure.
4 Legal Division to restriction of processing
The Legal Division to restrict processing in accordance with Art. 18 GDPR can only be asserted under certain conditions, which are listed in letters a) to d) of the article. For example, if you request the rectification of your incorrect data or have objected to the processing, the processing of your data must be restricted by the controller until its verification has been completed. Furthermore, processing must be restricted if you expressly request restriction instead of erasure due to unjustified processing. Processing must also be restricted if the controller no longer needs your data for its own purposes, but you still wish to use it to pursue your own claims.
5 Legal Division on data portability
If you have provided your data to the controller, you can request to receive this data in a commonly used, machine-readable format in accordance with Art. 20 GDPR. This is intended to make it easier for you to transfer your data to another controller. The Legal Division on data portability applies if the processing is based on consent or a contract and is carried out using automated procedures.
6 Legal Division to object
Art. 21 para. 1 GDPR grants you the right to object, on grounds relating to your particular situation, by way of exception, to data processing which is lawful in itself, provided that the legal basis for the processing of your data is a weighing of interests by the controller whose interests have prevailed in the weighing.
7 Legal Division to lodge a complaint
If you, as a data subject, believe that your data is being processed unlawfully, you can lodge a complaint with the competent supervisory authority at any time.
Contact details of the data protection supervisory authority
The supervisory authority responsible for data protection in Liechtenstein is the Data Protection Authority with the following contact details:
Data Protection Authority Principality of Liechtenstein
Städtle 38
P.O. Box 684
9490 Vaduz
T +423 236 60 90
info.dss@llv.li
www.datenschutzstelle.li
Further information on data protection, in particular regarding the website of the Liechtenstein National Administration, can be found in the data protection declaration.