Data protection notice Data protection office

Data protection notice of the Competence Center Data Protection

In accordance with Art. 13 and Art. 14 of the EU General Data Protection Regulation (GDPR), we hereby inform you about the manner in which and the background to the processing of your personal data in connection with our activities.

The following information applies equally to persons who are affected by the processing of their personal data by public authorities of the state administration and who wish to know or assert their rights under data protection law (applicants), to employees of the state administration and to third parties, for example legal representatives of data subjects.

Responsible body as data protection officer

Fachstelle Datenschutz

Peter-Kaiser-Platz 1

9490 Vaduz

Telefon: +423 236 73 08

E-Mail: [email protected]

Website: www.fds.llv.li

 Processing purpose

The processing of personal data has the primary purpose of fulfilling the legal mandate incumbent upon us. This includes general advice in connection with the rights of data subjects arising from data protection, informing, advising and monitoring the bodies within the FDS's area of responsibility with regard to compliance with data protection requirements: official bodies, government environment, diplomatic representations of the Principality of Liechtenstein abroad, complaints commissions, commissions and advisory boards, nine selected public-legal undertakings.

Principally, we perform the following processing activities:

·       Coordination of data subject rights

·       Advising, informing, controlling the bodies within the scope of competence

Legal Bases

The legal bases for the processing activities are set out in Articles 4 and 8 of the Data Protection Act (DPA) in conjunction with Article 6(1)(e) of the GDPR.

Data to be processed

The following personal data are collected, recorded and processed in the course of our activities:

Applicants, data subjects outside the national administration: name, address data, date of birth and / or PEID, request.

Affected persons within the state administration or agencies/employees within the jurisdiction: Name, employer, position/duty, concern.

 Data source

If the data is not collected from you personally, the information on personal data comes from the following source: Central Register of Persons

Data transfer

We transmit their data only in legally required and permitted cases to other public bodies. The recipients of your personal data may be the involved official bodies/public bodies for the purpose of proving compliance with data protection on the part of the responsible party.

Duration of the storage and erasure of personal data

The storage period of the data processing is based on special legal requirements regarding the retention periods or the archiving law. If the purpose of the data processing has been achieved and there are no legal retention periods opposing the destruction of your data, the personal data will generally be added to the respective deletion concept.

The deletion concepts include the following: Requests regarding data subject rights as well as their response and completion are generally discontinued in processing after the expiration of 12 months at the end of each year and marked as completed in the system. Final deletion takes place after expiry of the specified statutory retention period and provided that the documents are not classified as archived material. The deletion will happen in general ten years after finalization of the dossier; this time relates to the law on persons and companies.

Rights of data subjects

1. Right to request information:

You have the right at any time, informally and without providing grounds, to obtain infor-mation about the data stored about you. This also applies to their origin as well as recipients and furthermore to the purpose of the storage. This information will be provided free of charge (Art. 15 GDPR). Requests for information about your stored data should be ad-dressed directly to the relevant public body or to the Competence Center Data Protection.

2. Rectification, restriction of processing, erasure, complaint, withdrawal of consent, data transmission:

In addition, you have other rights, such as the right to correct inaccurate data, to restrict processing and to erase your personal data (Art. 16 GDPR, Art. 17 GDPR, Art. 18 GDPR), as well as data transmission, provided that the requirements are met (Art. 20 GDPR).

In the event of the assumption of unlawful data processing, you can file a complaint with the supervisory authority responsible for us, the Data Protection Authority (Datenschutzstelle – DSS), www.datenschutzstelle.li, at any time. If you have given your consent to the National Administration, you can revoke this consent at any time with effect for the future (Art. 7 GDPR).

3. Right to object:

Insofar as we process your personal data not on the basis of consent but instead on the basis of a legal circumstance such as e.g. Art. 6 Para. 1 e) GDPR, you may object to the future processing of your personal data for reasons arising out of the existence of your particular situation at any time (Art. 21 GDPR). The existence of a special situation is subject to individual consideration.

If you wish to exercise your aforementioned rights, we shall examine whether the statutory preconditions for this have been fulfilled.

Data Protection Authority as complaints instance

In the event of a complaint to be submitted by you about the Liechtenstein National Administration, the Data Protection Authority is the competent supervisory authority and can be contacted as follows:

Datenschutzstelle Fürstentum Liechtenstein, Städtle 38, Postfach 684, FL-9490 Vaduz, Telefon: +423 236 60 90, E-Mail: [email protected], Website: www.datenschutzstelle.li

Further information on data protection and in particular on your rights as a data subject can be found in the Declaration of the Data Protection of the Liechtenstein National Administration.