eDraw

In accordance with Art. 13 and Art. 14 of the EU General Data Protection Regulation (GDPR), we, the Migration and Passport Office (APA), as the responsible body, inform you below about the manner and background to the processing of your personal data in connection with our activities. The following information applies equally to applicants and applicants, contractual partners and other persons affected by data processing

The primary purpose of processing personal data is to fulfill our legal mandate. This includes your participation in the draw for the residence permit (B) and in the preliminary and final draws. Those drawn in the preliminary draw have the opportunity to take part in the final draw if they meet the requirements.

We primarily carry out the following processing activities:

• Receiving registrations for the preliminary and final draws;
• Check the registration data (eligibility requirements, compliance with deadlines);
• Control and receipt of participation fees;
• Conducting the preliminary and final draws;
• Notification of drawn and undrawn persons and participants in the event of non-fulfilment of the requirements or reasons for exclusion;
• Complaints procedure

The legal basis for the processing activities is set out in the following laws and regulations:

• Act on the free movement of EEA and Swiss nationals (PFZG), Section V, Part B Drawing procedures Art. 37 - Art. 39, Art. 61 Legal protection, Art. 58 and Art. 69 and Art. 20 para. 1 let. a;
• Ordinance on the free movement of EEA and Swiss nationals (PFZV), Section IV, Part B Drawing procedure Art. 23 - Art. 31;
• Ordinance on the levying of fees in immigration law Art. 11;

The following personal data is collected, recorded and processed in the course of our activities:

Registration for the advance draw

Information on the applicant group (employed or non-employed), surname, first name, date of birth, gender, nationality, full residential address, e-mail address, information on whether a power of attorney is available, if yes: surname, first name, date of birth, e-mail address and corresponding power of attorney

Registration for the final draw

Same as for the advance draw. The following data is also collected: Name at birth, place and country of birth, marital status, in the case of previous convictions: current criminal record extract, duration of planned residence in FL, telephone number, personal details of father and mother, personal details of partner, copy of passport or identity card, proof of employment (with employment) and proof of assets (without employment).

We only transfer your data to other public bodies in cases prescribed and permitted by law. The following are possible recipients of your personal data:

Liechtenstein National Police, Princely Court of Justice, Liechtenstein National Financial Accounting Office

The storage period for data processing is based on special legal requirements regarding retention periods or the Archiving Act. Once the purpose of the data processing has been achieved and there are no statutory retention periods preventing the deletion of your data, the personal data is generally forwarded to the respective deletion concept. The deletion concepts are as follows: All data submitted by participants will be deleted after 14 days at the latest if they are not drawn. A list of participants is kept and stored in accordance with the statutory retention periods. Submitted data of drawn participants will be stored and processed for the purpose of issuing a residence permit.

Legal Divisions of the data subjects

When your personal data is processed, you have various rights under data protection law: information, rectification, erasure, restriction of processing, data portability, objection, complaint to the supervisory authority.

You can exercise your Legal Division rights by submitting an informal application or request to the controller without giving reasons. However, it is recommended that the application or request be submitted in writing or in a secure electronic form.

Legal Division of information

With the right to information in accordance with Art. 15 GDPR, you as the data subject can request information from the data controller about which data about you is stored or processed by the data controller.

In addition, you will receive additional information from the controller, e.g. about the purposes of processing, the origin of the data if it was not collected directly from you, or about the recipients to whom your data is transmitted.

The right of access enables you to maintain an overview and thus control over which of your personal data is processed, for what purpose and on what legal basis.

Right to rectification

If you discover that your personal data is incorrect, you can request that the controller rectify it without undue delay in accordance with Art. 16 GDPR. Immediately means without undue delay on the part of the controller, which means that a certain amount of time must be allowed for the request to be processed.

Legal Division on erasure

With the Legal Division to erasure in accordance with Art. 17 GDPR, you can request the controller to erase your personal data without undue delay if one of the grounds in Art. 17 para. 1 a) to f) applies, e.g. the data is no longer necessary for the purposes of the processing, consent has been withdrawn, an objection has been successfully lodged, the processing was unlawful, etc.

However, there may be exceptions to the right to erasure, which are listed in Art. 17 para. 3 GDPR. The controller must regularly check whether statutory retention periods or the Archiving Act preclude erasure.

Right to restriction of processing

The Legal Division to restrict processing in accordance with Art. 18 GDPR can only be asserted under certain conditions, which are listed in letters a) to d) of the article. If, for example, you request the rectification of your incorrect data or have objected to the processing, the processing of your data must be restricted by the controller until the conclusion of its examination. Furthermore, processing must be restricted if you expressly request restriction instead of erasure due to unjustified processing. Processing must also be restricted if the controller no longer needs your data for its own purposes, but you still wish to use it to pursue your own claims.

Legal Division on data portability

If you have provided your data to the controller, you can request to receive this data in a commonly used, machine-readable format in accordance with Art. 20 GDPR. This is intended to make it easier for you to transfer your data to another controller. The Legal Division on data portability applies if the processing is based on consent or a contract and is carried out using automated procedures

Right to object

Art. 21 para. 1 GDPR grants you the right to object, on grounds relating to your particular situation, to data processing which is lawful in itself, provided that the legal basis for the processing of your data is a balancing of interests on the part of the controller whose interests have prevailed in the balancing of interests carried out.

Legal Division to lodge a complaint

If you, as the data subject, believe that your data is being processed unlawfully, you can lodge a complaint with the competent supervisory authority at any time.

Right to lodge a complaint and contact details of the data protection supervisory authority

The supervisory authority responsible for data protection in Liechtenstein is the Data Protection Authority with the contact details:

Data Protection Authority for the Principality of Liechtenstein
Städtle 38
P.O. Box 684
FL-9490 Vaduz

Phone: +423 236 60 90

Email: info.dss@llv.li

Website: www.datenschutzstelle.li

Further information on data protection and in particular on your rights as a data subject can be found in the Data Protection Declaration on the website of the Liechtenstein National Administration

Contact details:

Migration and Passport Office (APA)
Städtle 38
P.O. Box 684
9490 Vaduz
Telephone: +423 236 61 41
E-mail: dsk.apa@llv.li or info.apa@llv.li;