Processes personal data, in Liechtenstein

Datenschutzgesetz (DSG), LGBl. 2018 Nr. 272, Articles 10, 40 to 42 and 44 · Read the law's page

• Compensate any person who suffers material or immaterial damage through your violation of the GDPR or of Chapter I or II of the DSG, whether you are the controller or the processor.
• Do not obtain, without authority, personal data that is not freely accessible from a data processing system.

Datenschutzgesetz (DSG), LGBl. 2018 Nr. 272, Articles 69 and 75 · Read the law's page

• If you process personal data for a Liechtenstein authority responsible for criminal prosecution or the enforcement of penalties, keep a record of the categories of processing you carry out for it, and make it available to the Datenschutzstelle on request.
• In an automated system that processes personal data for such an authority, log collection, alteration, consultation, disclosure including transfer, combination and erasure, record the justification, date and time and, as far as possible, the person and the recipient for consultations and disclosures, erase the logs at the end of the year after they were generated, and make them available to the Datenschutzstelle on request.

Datenschutzgesetz (DSG), LGBl. 2018 Nr. 272, Articles 77 to 80, 84 and 85; Regulation (EU) 2016/679, Articles 44 to 49; EEA Joint Committee Decision No. 154/2018 · Read the law's page

• Before moving personal data of a person in Liechtenstein to a country outside the European Economic Area, meet a condition of GDPR Chapter V, such as an adequacy decision under Article 45 or appropriate safeguards under Article 46.

Datenschutzgesetz (DSG), LGBl. 2018 Nr. 272, dated 4 October 2018, in effect 1 January 2019; Regulation (EU) 2016/679 as incorporated into the EEA Agreement by EEA Joint Committee Decision No. 154/2018 · Read the law's page

• Establish a lawful basis under Article 6 of the GDPR, which applies in Liechtenstein as EEA law, before processing personal data of a person in Liechtenstein, including data collected by crawling.
• Comply with the GDPR as EEA law in Liechtenstein; the DSG implements the Regulation and does not apply insofar as EEA law, in particular the GDPR, applies directly.

Regulation (EU) 2016/679, Articles 33 and 34; Datenschutzgesetz (DSG), LGBl. 2018 Nr. 272, Articles 43, 64 and 65 · Read the law's page

• Notify the competent supervisory authority, the Datenschutzstelle in Liechtenstein, of a personal data breach without undue delay and, where feasible, within 72 hours of becoming aware of it, unless the breach is unlikely to result in a risk to the rights and freedoms of natural persons.
• If you process personal data on behalf of a controller, notify the controller without undue delay after becoming aware of a personal data breach (Article 33(2)).
• Communicate a personal data breach that is likely to result in a high risk to the rights and freedoms of natural persons to the data subjects without undue delay.

Regulation (EU) 2016/679, Arts. 12-21; Datenschutzgesetz (DSG), LGBl. 2018 Nr. 272, Arts. 27(4), 35(1) · Read the law's page

• Honor a person's request to access, rectify, erase, restrict, port, or object to processing of their personal data in Liechtenstein within one month of receipt.
• You may restrict the rights of access, rectification, restriction and objection in Liechtenstein to the extent they would likely make scientific or historical research or statistics impossible or seriously impair it, and refuse access to data needed for scientific research where giving it would take disproportionate effort, under DSG Article 27(4).
• Where erasing a person's data in Liechtenstein is impossible or disproportionately costly because of how it is processed or stored, and their interest in erasure is low, restrict its processing instead of erasing it, unless the data were processed unlawfully, under DSG Article 35(1).