Data Protection Declaration of BBT Treuhand AG for visitors of our website as per Art. 13 GDPR

Please note that this is a translation of our German Data Protection Declaration. In case of deviations, the German version shall prevail.

With this Data Protection Declaration, we would like to provide you with an overview of the manner in which we process your data and your rights in this connection according to the provisions of the European General Data Protection Regulation (hereinafter called “GDPR”) and the Liechtenstein Data Protection Act (Datenschutzgesetz, hereinafter called “DSG”):

 

I. The Data Controller and the Data Protection Officer

Data Controller within the meaning of the GDPR is

BBT Treuhand AG
Landstrasse 158
Postfach 127
9494 Schaan
office@bbt-trust.com

You can reach our Data Protection Officer using office@bbt-trust.com or our postal address with the supplement « Data Protection Officer”.

 

II. Description and extent of data processing concerning our website

1. Providing the website

1.1. Visitor and usage data

Every time our website is accessed, the system of our host, cyon GmbH, Brunngässlein 12, CH-4052 Basel (in terms of a contract data processor pursuant to Section 28 (3) GDPR) automatically collects data and information from the computer system of the accessing computer. The following data is collected:

  • browser type and browser version
  • used operating system
  • referrer URL
  • hostname of the accessing computer
  • date and time
  • IP address
  • these data are not combined with other personal data sources

E-mail:

  • sender and recipient
  • date and time
  • sender IP address
  • sender hostname
  • file size
  • login/ logout of the individual accounts / e-mail addresses for fetching or sending e-mails

Processing this personal data is not required by law or contract, but is carried out due to our legitimate interest according to Art. 6 (1)(f) GDPR.

We obtain the data for following purposes:

  • to ensure a trouble-free connection to our website
  • to ensure a trouble-free use of our website
  • to ensure the security of the system
  • to ensure the stability of the system
  • to track and solve technical difficulties
  • to defend against and analyze attacks
  • to determine man-made errors
  • to generate visitor statistics
  • further administrative purposes

This data remains in the system of our Contract Data Processor/Host until the operational necessity ceases and the expiry of the legally or contractually stipulated periods and is then automatically deleted. For most data, this is a maximum of six (6) months.

1.2. Web statistics and log files

In addition, BBT TREUHAND AG has access to the weblogs (directory with the above-mentioned data from the use of the website) through the Contract Data Processor/Host and can use these for the analysis use of our website. This is done directly by evaluating the logs or with the web analysis tools AWStats, which are operated, collected and provided by our Contract Data Processor/Host (see above). Its main purpose is to optimize the website in terms of user-friendliness and to provide useful information about our services. This data is not combined with other personal data sources, or passed on to third parties.

The legal basis for the temporary storage of data and log files is Section 6 (1) (f) GDPR. No person-related evaluation takes place. The statistical evaluations are kept for 24 months.

2. Integration of third-party services and content

Based on our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer within the meaning of Section 6 (1) (f) GDPR), we use content or service offers from third parties within our online offer in order to integrate their content and services, such as interactive maps or fonts.

This always presupposes that the third party providers of this content perceive the IP address of the users, since without the IP address they could not send the content to their browser. The IP address is therefore required for the display of this content. Third party providers can theoretically evaluate information such as visitor traffic on the BBT TREUHAND AG site. The pseudonymous information may also be stored in cookies on the user’s device and may include technical information about the browser and operating system, referring websites, visiting time and other information about the use of our online offer, as well as be linked to such information from other sources. We make every effort to use only those contents whose respective providers use the IP-address solely for the delivery of the contents. BBT TREUHAND AG neither has the insight, nor stores or uses this (possibly collected) data from third providers.

This applies in particular, but not exclusively, to:

2.1. Fonts

We integrate fonts “Google Fonts” from Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA.

Privacy statement: https://www.google.com/policies/privacy
Opt-out: https://adssettings.google.com/authenticated

3. Data Security

We use the most widely used HTTPS (SSL/TLS) method in conjunction with the highest level of encryption supported by your browser. You can tell whether a single page of our website is transmitted in encrypted form by the display of the lock or key symbol in the address bar of your browser.

In addition, we apply further suitable technical and organizational security measures in order to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

 

IIII. Valid version

This is the currently valid Data Protection Declaration as of March 2019.

Due to the continued development of our website and associated services or organizational modifications within our law firm or on the grounds of amended legal or regulatory requirements, it may become necessary to amend this Data Protection Declaration. You can access and print out the respective current Data Protection Declaration on our website at any time.

 


 

Data Protection Declaration of BBT Treuhand AG for business partners, clients and potential clients as per Art. 13 and 14 GDPR

Please note that this is a translation of our German Data Protection Declaration. In case of deviations, the German version shall prevail.

With this Data Protection Declaration, we would like to provide you with an overview of the manner in which we process your data and your rights in this connection according to the provisions of the European General Data Protection Regulation (hereinafter called “GDPR”) and the Liechtenstein Data Protection Act (Datenschutzgesetz, hereinafter called “DSG”):

 

I. Name and address of the Data Controller

Data Controller within the meaning of the GDPR is

BBT Treuhand AG
Landstrasse 158
Postfach 127
9494 Schaan
office@bbt-trust.com

You can reach our Data Protection Officer using office@bbt-trust.com or our postal address with the supplement « Data Protection Officer”.

 

II. General information concerning processing data on business partners, clients and potential clients

1. Collection and storage of personal data and nature and purpose of the use of data

We only process necessary data. We guarantee to this using the utmost diligence in order to protect you from a possible misuse. What is necessary may differ, depending on the particular extent of our mandate. BBT Treuhand AG generally does not process special categories of personal data, unless the data becomes necessary for a pre-contractual or contractual agreement.

As soon as you contact or mandate us, we collect the following information in particular:

  • Personal details (e.g. salutation, first name, last name)
  • Address and contact details (e.g. address, e-mail address, phone number)
  • Information necessary in order to provide you with the agreed and contractual service or for the fulfilment of our mandate
  • Possibly scanned or copied documents as proof of identification or possession
  • Possibly your date of birth as proof of identification
  • Data included in the contract/agreement
  • Possibly account data or information on ownership structure

The purpose of the collection of this data is:

  • to enable us to identify you as our client;
  • to provide you with proper advice;
  • to conduct correspondence with you;
  • to perform our contract with you;
  • to provide you with the agreed services;
  • for invoicing purposes;

Without this data, we are as a rule unable to enter into or maintain a client relationship. It is possible that we process data that is not collected directly from you, but for example from third parties, from publicly accessible sources or from other data subjects.
Generally, the data is processed upon your request for representation and is necessary pursuant to Art. 6 Para. 1 lit b GDPR for the aforementioned purposes (performance of contracts or pre-contractual measures) for the adequate handling of the mandate and for the mutual fulfilment of obligations arising from the client relationship.
Furthermore, your data is processed in order to fulfil legal duties (Art. 6 Para. 1 lit. c GDPR) or due to public interest (Art. 6 Para. 1 lit. e GDPR), in particular in order to adhere to statutory and supervisory requirements (e.g. Data Protection Act, Trustee Act, Asset Management Act, provisions concerning due diligence, anti-money laundering and prevention of market abuse, tax laws and agreements).

In addition, your data can be processed to protect legitimate interests by us or third parties (Art. 6 Para. 1 lit. f GDPR) for specifically defined purposes, in particular to assert and enforce claims, to ensure IT security and IT operations as well as for building and equipment security.

In other respects, your data may be processed based on your consent (Art. 6 Para. 1 lit. a GDPR). You have the right to withdraw your consent at any time. This also applies to consent given prior to the entry into force of the GDPR. The withdrawal of consent shall, however, not affect the lawfulness of the data processed prior to the withdrawal of consent.

We also reserve the right to further process personal data that has been collected for one of the aforementioned purposes for the other purposes as well, if this is compatible with the original purpose, permitted, or provided for by law (e.g. possible reporting obligations).

2. Recipients or categories of recipients of the personal data

Within BBT Treuhand AG, employees may process your data if they are required in order to comply with our contractual, statutory and supervisory obligations and to protect legitimate interests. Third parties may also obtain personal data for these purposes; this includes processors, for example in the category of IT services or bookkeeping.

Your personal data will also be transferred to third parties, insofar as this is necessary in the context of business relationships and legal obligations, e.g. to banks, bookkeepers, auditors, courts and other public authorities.

A disclosure to third parties never takes place without the prior knowledge and consent of the contracting party concerned and even then only if this is mandatory under a contract.

3. Transfer of personal data to third party states

Data is only transferred to countries outside the European Economic Area (so-called third countries) within the context of adequacy decisions of the European Commission or if this is necessary for the implementation of pre-contractual measures or the performance of a contract, if you have given us your explicit consent (e.g. within the context of specific services), if the transfer is necessary for significant reasons of public interests or is stipulated by law.

4. Storage period of personal data

Generally, the personal data collected by us for purpose of the mandate shall be retained until expiration of the statutory retention period (after a period of 10 years, calculating from the date the mandate ends) and thereafter be deleted, unless we deem a longer retention period necessary pursuant to Art. 6 Para. 1 lit. c GDPR on the basis of statutory obligations under tax-, company- or supervisory law with regard to retention and documentation (in particular arising out of PGR, SPG or SteG/MwStG) or if you have given your consent to longer retention in accordance with Art. 6 Para. 1 lit. a GDPR. Further processing and longer storage may be conducted for reasons of preservation of evidence, for example for the duration of the applicable statutes of limitation.

When processing data in the context of a contract/agreement, we act according to the instructions of our customers and legal obligations. Possible pre-contractual data are immediately deleted, if the contract has not been concluded. Contractual data is retained until the contract has been concluded and for a longer period in order to fulfill contractual or legal duties as well as to fulfill possible warranty or similar duties. An evaluation in this connection takes place every 5 years.

5. Your data protection rights as a client of BBT Treuhand AG

As our client or in general as a data subject, ensuring preservation of trustee secrecy, you are entitled information on your personal data. In particular, you are entitled to be informed about its purpose, the categories of personal data, the categories of recipients of the data, the planned storage time, the right to rectification, data portability (as far as it does not involve a disproportionate effort), the origin of your data (if the data was not obtained from you) as well as the use of automated decision making including profiling. You have the right to withdraw any given consent to use your personal data at any time.

If you are of the opinion that our processing of your personal data is in breach of applicable data protection law or that your statutory data protection rights have been infringed otherwise, you may file a complaint with the competent supervisory authority. In Liechtenstein, the Data Protection Office (www.datenschutzstelle.li) is the competent authority.

We kindly request you to inform us of any changes to your personal data.

 

III. Valid version

This is the currently valid Data Protection Declaration as of March 2019.

Due to the continued development of our website and associated services or organizational modifications within our law firm or on the grounds of amended legal or regulatory requirements, it may become necessary to amend this Data Protection Declaration. You can access and print out the respective current Data Protection Declaration on our website at any time.

 


 

Data Protection Declaration of BBT Treuhand AG for job applicants as per Art. 13 GDPR

Please note that this is a translation of our German Data Protection Declaration. In case of deviations, the German version shall prevail.

With this Data Protection Declaration, we would like to provide you with an overview of the manner in which we process your data and your rights in this connection according to the provisions of the European General Data Protection Regulation (hereinafter called “GDPR”) and the Liechtenstein Data Protection Act (Datenschutzgesetz, hereinafter called “DSG”)

 

I. Name and address of the Data Controller and the Data Protection Officer

Data Controller within the meaning of the GDPR is:

BBT Treuhand AG
Landstrasse 158
Postfach 127
9494 Schaan
office@bbt-trust.com

You can reach our Data Protection Officer under office@bbt-trust.com or our postal address with the supplement « Data Protection Officer”.

 

II. General information concerning processing data of job applicants

1. Collection and storage of personal data and nature and purpose of the use of data

We only process necessary data.

By submitting your job application documents, you give your consent to processing your personal data and images included in the cover letter, curriculum vitae, reference letters or other documents you provide us with, for the purpose of our personnel selection procedure. Your data will not be passed on to third parties without your prior consent. Moreover, no automated individual decision-making (“profiling”) as per Art. 22 GDPR will be conducted. The data processing is based on Art. 6 para. 1 lit. b GDPR.

As soon as you contact or mandate us, we collect the following information in particular:

  • Personal details (e.g. salutation, first name, last name)
  • Address and contact details (e.g. address, e-mail address, phone number)
  • Date of birth
  • Educational and professional background
  • Desired salary
  • Data and images from your CV, reference letters or other documents provided

Without this data, we are as a rule unable to take your job application into consideration and potentially enter into or maintain an employment with you. It is possible that we process data that is not collected directly from you, but for example from third parties, from publicly accessible sources or from other data subjects.

2. Recipients or categories of recipients of the personal data

Within BBT Treuhand AG, employees may process your data if they are required in order to comply with our contractual, statutory and supervisory obligations and to protect legitimate interests.

3. Transfer of personal data to third party states

Data is not transferred to countries outside the European Economic Area (so-called third countries).

4. Storage period for personal data

If you are not employed your data will be deleted immediately. There is the possibility to store your personal data for a longer period of time, if you give your explicit consent. Should your job application be successful we will retain your personal data until expiration of the statutory retention period. Further processing and longer storage may be conducted for reasons of preservation of evidence, for example for the duration of the applicable statutes of limitation.

5. Your data protection rights

As job applicant or in general as a data subject, you are entitled to be informed about your personal data at any time, in particular about its origin and recipients, as well as the purpose of the data processing. You additionally have the right to rectification, data portability, to object and to restriction of the processing or deletion of incorrect or improperly processed data.
You have the right to withdraw any given consent to use your personal data at any time. The exercising of your right of access, deletion, rectification, objection and/or data portability may be addressed to the contact details listed under item I. of this Declaration.
If you are of the opinion that our processing of your personal data is in breach of applicable data protection law or that your statutory data protection rights have been infringed otherwise, you may file a complaint with the competent supervisory authority. In Liechtenstein, the Data Protection Office (www.datenschutzstelle.li) is the competent authority.

 

III. Valid version

This is the currently valid Data Protection Declaration as of March 2019.

Due to the continued development of our website and associated services or organizational modifications within our law firm or on the grounds of amended legal or regulatory requirements, it may become necessary to amend this Data Protection Declaration. You can access and print out the respective current Data Protection Declaration on our website at any time.