Data protection notice

In the following, the Office of Public Health, as the responsible body pursuant to Art. 13 and Art. 14 of the EU General Data Protection Regulation (GDPR), informs you about the manner and background of the processing of your personal data in connection with our activities. The following information applies to all persons affected by the data processing, such as applicants for a professional practice or activity requiring a permit, applicants to receive health project funding, applicants to receive an exemption from compulsory health insurance or for a health registration, applicants for the payment of a maternity allowance or to receive cost sharing from the state in the context of child and youth dental care, as well as contact persons of approved health insurance companies and EEA liaison offices.

The processing of personal data has the primary purpose of fulfilling the legal mandate incumbent upon us.

Mainly, we carry out the following processing activities:

• Capture and process applications for permits;
• Supervision of compulsory insurance;
• Claiming cost sharing including dunning, claiming credit balances from other states, processing cost invoices with other states, and cost control as the EEA liaison office in the area of health and accident insurance;
• The issuance and control of European forms and the verification of the entitlement to benefit assistance or the insurance obligation of persons under care;
• The administrative implementation of pediatric and adult preventive examinations;
• The administrative implementation as well as the decision on cost sharing of the country within the framework of child and adolescent dental care;
• Capture and process notifications;
• Processing of personal data collected in the context of controls on compliance with the provisions of special legal regulations. Exemplary here are occasion-related controls, for example, on the basis of a notice given or on the occasion of deficiencies identified in the context of inspections in the field of medicines, medical devices, radiation protection or also in inspections of medical practices or other practices of health professions subject to licensing.

The legal bases for the processing activities under the legal mandate are set out in special legal bases, which in conjunction with Art. 6 para 1 letter e) of the General Data Protection Regulation (GDPR) or in the context of the processing of health data Art. 9 para 2 g), h) or i) GDPR, or Art. 21 DSG allow the lawful processing of data. Outside the legal mandate, processing is carried out in accordance with Art. 6 (1) a) (consent) or Art. 9 (2) a) DSGVO or Art. 6 (1) b) (contract) DSGVO, depending on the circumstances.

In particular, the following personal data are collected during the performance of our activities, recorded depending on the application or the facts and further processed: First name, last name, date of birth, address, e-mail address, telephone number, in the case of inclusion in appropriate registers also various health data, professional qualifications, family situation, profession, employer.

Health data is processed in the case of notifiable communicable diseases, in the case of applications for narcotic substitution treatment requiring authorization, and in the context of the examination of applications for authorization to practice a health profession requiring authorization pursuant to the Medical and Health Acts, their implementing ordinances, and based on the Narcotics Act and the Narcotics Ordinance. The processing of health data in the context of child and adult preventive care, as well as child and adolescent dental care, is based on the Health Act, as well as on the Child and Adolescent Dental Care Act and the Ordinance on Child and Adolescent Dental Care.

If the data is not collected from you personally, the information on personal data comes from the following sources: Central Personal Register or Swiss Medical Professional Register (MedReg). With regard to health data concerning the obligation to report communicable diseases and concerning narcotics-assisted substitution treatment to be authorized, these are also transmitted directly to the Office of Public Health by laboratories or by the attending physicians. In the case of health data relating to persons suffering from cancer who are resident in Liechtenstein, these are sent to the Office of Public Health by the attending physicians or medical institutions where the persons concerned receive treatment.

We transmit your data to other public bodies only in cases prescribed and permitted by law. Recipients of your personal data may include: other official agencies, municipalities, EEA liaison offices, the Swiss Federal Office of Public Health, Swissmedic, the Swiss regulatory and supervisory authority for medicinal products and medical devices, as well as the Krebsliga Ostschweiz (Cancer League of Eastern Switzerland), which manages the cancer registry for Liechtenstein based on a concluded service agreement.

The storage period for data processing is based on special legal requirements regarding retention periods or the archiving law. Once the purpose of the data processing has been achieved and there are no legal retention periods that prevent the destruction of your data, the personal data and health data are generally transferred to the deletion concept.

For more information on data protection and, in particular, on your rights as a data subject, please refer to the Data Protection Policy of the Liechtenstein National Administration.

Furthermore, we refer you to the specific Data protection notice, which elaborates detailed information for processing activities occurring in the context of the corona virus.