Data protection information clients / potential clients

• 0. Controller / Data protection officer

  Controller
  Liechtensteinische Landesbank AG, Städtle 44, 9490 Vaduz Liechtenstein,
  phone: +423 236 88 11

  Contact data of the data protection officer
  Liechtensteinische Landesbank AG, Datenschutzbeauftragter, Städtle 44, 9490 Vaduz, Liechtenstein
  phone: +423 236 88 11
  e-mail: datenschutz@llb.li

• 1. Which data is processed (data categories) and from which sources does it come from?

  We collect and process personal data that we receive as part of our business relationship. Personal data may be processed at any stage of the business relationship and may vary depending on the group of people; your data may also be used for profiling purposes, provided you have given your consent.

  By personal data we mean in particular the following data categories:

  • Personal identification data (e.g. name, date of birth, nationality, addresses, telephone number, ID details, signature samples)
  • Identification data of public departments (e.g. tax numbers)
  • Physical characteristics (e.g. video or voice recordings)
  • Area of life of the person concerned (e.g. family circumstances and events, hobbies, preferences, wishes, professional activity)
  • Banking and financial data (e.g. investment experience, investment profiles, advisory protocols, sales data, portfolio and account numbers, creditworthiness data, origin of assets)
  • Media, means of communication (e.g. e-mail correspondence, business correspondence)
  • Credit-relevant events within the financing portfolio (e.g. risk-oriented credit monitoring for mortgage-backed and commercial financing for private and corporate clients).

• 2. For what purposes and on what legal basis is your data processed?

  We process personal data in accordance with the provisions of the GDPR for the following purposes and on the basis of the corresponding legal grounds:

  • Establishing, initiating and maintaining business relationships
  • Provision of services
  • Execution of orders
    Legal basis: Art. 6(1)(b) GDPR (performance of pre-contractual measures and fulfilment of a contract)
  • Compliance with legal and regulatory obligations
    Legal basis: Art. 6(1)(c) GDPR (compliance with a legal obligation)
  • Ensuring an efficient and secure business operation
    Legal basis: Art. 6(1)(f) GDPR (legitimate interests)

  Our legitimate interest lies in the efficient organisation of our business processes, group-wide management of customer relationships, risk management, and the further development of our products and services.

  Where required, processing of personal data on the basis of your consent, in particular for certain marketing and communication activities
  Legal basis: Art. 6(1)(a) GDPR (consent)

  Joint Controllership

  As part of selected services, joint controllership with cooperation partners may exist. In such cases, an agreement pursuant to Art. 26 GDPR governs the respective responsibilities of the parties involved.

• 3. Who has access to the personal data?

  Both positions inside and outside the bank can have access to your data. Within the bank, only departments or employees may process your data if they need it to fulfill our contractual, legal and supervisory obligations and to protect legitimate interests. Subject to bank client and data secrecy, other group companies, service providers or vicarious agents may also receive personal data for these purposes. Processors can Companies in the categories banking services, sales agreements, IT services, logistics, printing services, debt collection, advice and consulting as well as sales and marketing.

  Data will only be transferred to countries outside the EU or the EEA (so-called third countries) if

  • this is necessary to carry out pre-contractual measures or to fulfill a contract, to provide services or to process orders (e.g. executing payment orders and securities transactions or issuing a credit card) (Art. 6(1)(a) GDPR ),
  • you have given us your consent (e.g. client service by another group company of the bank) (Art. 6(1)(a) GDPR)
  • this is necessary for important reasons of public interest (e.g. money laundering) (Art. 6(1)(e) GDPR)
  • this is required by law (e.g. tax reporting obligations) (Art. 6(1)(c) GDPR)

• 4. How long is the data stored?

  We process and store personal data for the entire duration of the business relationship and the consequent legal retention period.

• 5.  Is automated decision making in use, including profiling?

  Based on your consent, your data can also be processed and evaluated automatically, i.e. electronically, in order to evaluate certain personal characteristics or behavior and to identify different interests and personal needs for marketing purposes, product and service offerings and services (profiling).

  If we base our decisions exclusively on automated data processing, you have the right to obtain the intervention of an employee, to express your own point of view and to challenge the decision.

• 6. What data protection rights do you have?

  You have the right to access your personal data (Art. 15 GDPR), request the rectification of inaccurate data (Art. 16 GDPR), request the erasure of your personal data (“right to be forgotten”, Art. 17 GDPR), request the restriction of processing (Art. 18 GDPR), receive your personal data in a structured, commonly used and machine-readable format (right to data portability, Art. 20 GDPR), and object to the processing of your personal data (Art. 21 GDPR).

  Where processing is based on your consent, you have the right to withdraw your consent at any time with effect for the future. In addition, subject to the applicable legal requirements, you have the right not to be subject to a decision based solely on automated processing, including profiling.

  You also have the right to lodge a complaint with a competent data protection supervisory authority (Art. 77 GDPR).

  To exercise your rights, you may contact the Controller or the Data Protection Officer at any time. You can reach us by post or by e-mail using the contact details provided above.

• 7. Updates

  In particular due to technical developments, changed legal or official requirements or due to organisational changes, we will adapt or update this data protection information and publish it on our website https://llb.li/privacy. Upon request, we will also provide the current data protection information as a file (PDF) or in written form. However, we recommend that you always check our website for the current status. In the event of changes, we will check whether there is an obligation to actively notify you of the changes and, in these cases, fulfill our obligations accordingly. Otherwise, we will only replace files or printouts distributed by us with current versions upon further request.