Data protection information suppliers and service providers

• 0. Controller / Data protection officer

  Controller
  Liechtensteinische Landesbank AG, Städtle 44, 9490 Vaduz Liechtenstein,
  phone: +423 236 88 11

  Contact data of the data protection officer
  Liechtensteinische Landesbank AG, Datenschutzbeauftragter, Städtle 44, 9490 Vaduz, Liechtenstein
  phone: +423 236 88 11
  e-mail: datenschutz@llb.li

• 1. Which data is processed (data categories) and from which sources does it come from?

  We collect and process personal data that we receive as part of contract negotiations, onboarding and for accounting purposes. Personal data may be processed at any stage and may differ depending on the group of people. The data processed also affects your employees, for example during the onboarding process.

  By personal data we mean in particular the following data categories:

  • Personal identification data (e.g. name, ID details, addresses, telephone number, employee names, relevant onboarding information)
  • Personal characteristics (e.g. information on work performance and billing)
  • Physical characteristics (e.g. photos, video or voice recordings)
  • Banking and financial data (e.g. payment information)
  • Identification data from public departments (e.g. relevant onboarding information such as criminal records extracts from employees)
  • Media, means of communication (e.g. e-mail correspondence, business correspondence)

• 2. For what purposes and on what legal basis is your data processed?

  We process personal data in accordance with the provisions of the GDPR for the following purposes:

  • Contract negotiations
  • Fulfilment of contractual obligations
    Legal basis: Art. 6(1)(b) GDPR (implementation of pre-contractual measures and performance of a contract)
  • Compliance with internal and regulatory requirements
  • Fulfilment of legal record-keeping, documentation, and retention

  Legal basis: Art. 6(1)(c) GDPR (compliance with a legal obligation)

  Where processing is necessary for the purposes of legitimate interests, such processing is carried out additionally on the basis of Art. 6(1)(f) GDPR. In particular, the legitimate interest consists of the efficient management of business relationships and ensuring sound corporate governance.

• 3. Who has access to the personal data?

  Both positions inside and outside the bank can have access to your data. Within the bank, only departments or employees are allowed to process your data if they need it to protect legitimate interests. Subject to data confidentiality, other service providers or vicarious agents may also receive personal data for these purposes. Processors can be companies in the categories of IT services, logistics, printing services, advice and consulting as well as sales and marketing.

  Data will only be transferred to countries outside the EU or the EEA (so-called third countries) if

  • this is necessary to carry out pre-contractual measures or to fulfill a contract (Art. 6(1)(b) GDPR),
  • you have given us your consent (Art. 6(1)(a) GDPR).

• 4. How long is the data stored?

  We process and store the personal data in accordance with statutory retention periods after successful conclusion of the contract or claims.

• 5.  Is automated decision making in use, including profiling?

  No automated decision-making, including profiling, takes place as part of the business relationship.

• 6. What data protection rights do you have?

  You have the right to access your personal data (Art. 15 GDPR), request the rectification of inaccurate data (Art. 16 GDPR), request the erasure of your personal data (“right to be forgotten”, Art. 17 GDPR), request the restriction of processing (Art. 18 GDPR), receive your personal data in a structured, commonly used and machine-readable format (right to data portability, Art. 20 GDPR), and object to the processing of your personal data (Art. 21 GDPR).

  Where processing is based on your consent, you have the right to withdraw your consent at any time with effect for the future. In addition, subject to the applicable legal requirements, you have the right not to be subject to a decision based solely on automated processing, including profiling.

  You also have the right to lodge a complaint with a competent data protection supervisory authority (Art. 77 GDPR).

  To exercise your rights, you may contact the Controller or the Data Protection Officer at any time. You can reach us by post or by e-mail using the contact details provided above.

• 7. Updates

  In particular due to technical developments, changed legal or official requirements or due to organisational changes, we will adapt or update this data protection information and publish it on our website https://llb.li/privacy. Upon request, we will also provide the current data protection information as a file (PDF) or in written form. However, we recommend that you always check our website for the current status. In the event of changes, we will check whether there is an obligation to actively notify you of the changes and, in these cases, fulfill our obligations accordingly. Otherwise, we will only replace files or printouts distributed by us with current versions upon further request.