Privacy statement on websites

I. Name and address of the responsible person and the data protection officer (if appointed pursuant to Article 37 of the GDPR)

The responsible person according to the General Data Protection Regulation (GDPR) is:
Lopag Trust reg., Industriering 14 in 9491 Ruggell, Liechtenstein
Tel.: +423 377 36 36
E-Mail: dsb(at)lopag.li
Webseite: www.lopag.li

II. Data processing in general 

1. Scope of the processing of personal data

The processing of personal data is limited to data that is required to operate a functional website and for the provision of content and services. The processing of personal data of our users is based on the purposes agreed or on a legal basis (GDPR). We only collect personal data that is necessary to implement and process our tasks and services or if you provide data voluntarily.

2. Your rights (rights of the persons affected)

You have the right to request information about any of your personal data we process. In particular, you have the right to request information about the purpose of the processing, the categories of personal data, the categories of recipients who will have access or were disclosed with your data, the duration periods for saving the personal data, whether there is a right to adjust/correct, erase, restrict or object, transmission of data[1], the source of your data if not collected through us and if we use automatic decision-making technologies including profiling.  

Additionally, you have the right to revoke a previously granted consent to use your personal data at any time.

If you believe that the processing of your personal data is inconsistent or contradicts the applicable data protection laws you have the possibility to lodge a complaint with the data protection office.

III. Description and scope of data processing

1. Provision of the website

Our system records data and information about the computer used by the user automatically and with every visit on our website.
The following data are collected:

• Information regarding the type and version of internet browser used     to access the website
• Operating system
• Internet service provider
• IP address
• Date and time of each access
• Web page from which the user was redirected to our page

The data mentioned above are saved for a maximum time period of 6 months. This storing is done due to security reasons to ensure the stability and integrity of our systems.

We do not perform any web analysis on our website and do not use any web analysis tools (e.g. Google Analytics). The previously mentioned user and visitor data will not be evaluated or analyzed.

2. Cookies

We use cookies on our website to ensure a user-friendly experience. Cookies are small files that are managed by the user’s web browser and are directly stored on the respective device (Laptop, Tablet, Smartphone etc.) whenever you visit our website. Cookies are stored as long as you do not don’t delete them. This process allows us to recognize your browser on your next visit.

If you do not wish to use cookies you can change the settings in your browser accordingly. You will then be notified whenever your browser attempts to create a cookie and you can decide whether you want to allow the cookie. However, please note that a deactivation of cookies may result in a limited user experience and you may not be able to use every function of our website.

Legal basis for the processing of data through cookies is Article 6 (1) lett. f GDPR.

IV. Data security

We use SSL-encryption, a common encryption technology in connection with the highest encryption levels that are supported by your browser. If a page on our website was/is being transmitted encrypted it is shown by the lock symbol in the address bar of your browser.

Additionally, we use appropriate technical and organizational security measures to protect your data from accidental or intentional manipulation, partial or complete loss, destruction, or to prevent unauthorized access by third parties. Our security measures are continuously upgraded according to the latest technological developments.

Privacy statement for clients

I. Name and address of the responsible person and the data protection officer (if appointed pursuant to Article 37 of the EU General Data Protection Regulation [GDPR])

The responsible person according to the General Data Protection Regulation (GDPR) is:
Lopag Trust reg., Industriering 14 in 9491 Ruggell, Liechtenstein
Tel.: +423 377 36 36
E-Mail: dsb(at)lopag.li
Webseite: www.lopag.li
The operational data protection officer of Lopag Trust reg. is available at said address c/o Data Protection Officer, resp. at dsb(at)lopag.li.

II. Data processing in general

1. Scope of the processing of personal data

The processing of personal data is limited to data that is required to operate a functional website and for the provision of content and services. The processing of personal data of our users is based on the purposes agreed or on a legal basis (GDPR). We only collect personal data that is necessary to implement and process our tasks and services or if you provide data voluntarily.

2. Your rights (rights of the persons affected)

You have the right to request information about any of your personal data we process.

Additionally, you have the right to revoke a previously granted consent to use your personal data at any time.

If you believe that the processing of your personal data is inconsistent or contradicts the applicable data protection laws you have the possibility to lodge a complaint with the data protection office.

III. Description and scope of data processing

1. Purpose of data processing

We process our clients’ personal data for the following purposes:

• Activities pursuant to Article 2 of the Liechtenstein Professional Trustees Act (Treuhändergesetz – TrHG) in conjunction with the Liechtenstein Persons and Companies Act (Personen- und Gesellschaftsrecht – PGR), in particular:
  • Client mandate management (including administration of legal entities)
  • Compliance with statutory accounting requirements
  • Correspondence
• Compliance with legal obligations, in particular:
  • PGR, TrHG, due diligence laws, tax legislation and treaties

2. Categories of data

The following categories of data are processed in our data directories pursuant to Article 4(1) of the GDPR for the purposes of our activities outlined under Section 1 above:

3. Legal basis

The data listed under Section 2 above will be processed

• on the basis of our contractual relationship with our clients (Article 6(1)(b) of the GDPR);
• in order to fulfil a legal obligation (Article 6(1)(c) of the GDPR);
• to carry out a task in the public interest or in the exercise of official authority (Article 6(1)(e) of the GDPR); or
• for the purposes of the legitimate interests pursued by the data controller or a third party (Article 6(1)(f) of the GDPR).

Processing for the purposes of our legitimate interests may include:

• Processing for the purpose of internal administration
• Evaluations
• Defending against unjustified claims

4. Recipients of personal data

Clients’ personal data will only be processed by us to carry out our contractual, statutory and regulatory obligations for the purposes listed under Section 1 above.

For these purposes, data may be shared with the following:

• Companies within our group of companies for the purpose of internal administration
• External services providers and offices:
  • Banks
  • Asset managers
  • Insurance companies
  • Lawyers
  • Auditors
  • Other cooperation partners
  • Associations
  • Public interest organisations in Liechtenstein and abroad

If we have statutory or regulatory obligations to fulfil, personal data may be sent in particular to the following:

• Public offices and authorities (e.g. supervisory authorities, courts)
• Tax authorities (including in the scope of AEOI and FATCA)
• Authorities of third countries or international organisations

5. Sharing data with third countries or international organisations

If we transfer clients’ personal data to other countries, it is protected and transferred in accordance with the statutory provisions. Transmission of data outside of the European Economic Area is done with the following guarantees:

• The country to which we are transmitting the personal data has assured the European Commission of an appropriate level of protection of personal data.
• The recipient has signed a contract based on the Standard Contractual Clauses confirmed by the European Commission, undertaking to protect personal data.
• If the recipient is located in the USA, the recipient is a certified member of the EU-US Privacy Shield Framework.

Additional information about the protection of personal data when it is transmitted outside the European Economic Area can be provided on request.

6. Data sources

We collect data either directly (e.g. in meetings or through correspondence with clients; internal background and due diligence checks) or partially from third-party service providers.

Third-party service providers may include:

• Banks
• Asset managers
• Auditors
• Intermediaries

7. Storage periods

Personal data will be processed and stored for the duration of the business relationship within the framework of the statutory provisions. Once the business relationship has been terminated, these data are retained for 10 years on the basis of statutory provisions (PGR, DDA, Liechtenstein Civil Code [Allgemeines bürgerliches Gesetzbuch – ABGB]). Longer retention periods will be enforced only on the basis of statutory or contractual requirements to retain data or for the purpose of maintaining evidence within any applicable statutory limitation periods.

8. Automated decision-making (Article 22 of the GDPR)

No automated decision-making processes are applied to clients’ personal data. Where such processes are used in individual cases, we inform the clients to the extent required by the law.

9. Necessity of the data (Article 13(2)(e) of the GDPR)

Provision of the data listed under Section 2 above is mandatory in order to allow us to offer our clients the services they require and fulfil our statutory obligations. In addition to possible statutory reporting obligations to the responsible supervisory authorities, failure to provide data will result in the non-establishment or termination of the business relationship.

IV. Data security

We use SSL-encryption, a common encryption technology in connection with the highest encryption levels that are supported by your browser. If a page on our website was/is being transmitted encrypted it is shown by the lock symbol in the address bar of your browser.

Additionally, we use appropriate technical and organizational security measures to protect your data from accidental or intentional manipulation, partial or complete loss, destruction, or to prevent unauthorized access by third parties. Our security measures are continuously upgraded according to the latest technological developments.

Privacy statement for job applicants

I. Name and address of the responsible person and the data protection officer (if appointed pursuant to Article 37 of the EU General Data Protection Regulation [GDPR])

The responsible person according to the General Data Protection Regulation (GDPR) is:
Lopag Trust reg., Industriering 14 in 9491 Ruggell, Liechtenstein
Tel.: +423 377 36 36
E-Mail: dsb(at)lopag.li
Webseite: www.lopag.li
The operational data protection officer of Lopag Trust reg. is available at said address c/o Data Protection Officer, resp. at dsb(at)lopag.li.

II. Data processing in general

1. Scope of the processing of personal data

The processing of personal data is limited to data that is required to operate a functional website and for the provision of content and services. The processing of personal data of our users is based on the purposes agreed or on a legal basis (GDPR). We only collect personal data that is necessary to implement and process our tasks and services or if you provide data voluntarily.

2. Your rights (rights of the persons affected)

You have the right to request information about any of your personal data we process. In particular, you have the right to request information about the purpose of the processing, the categories of personal data, the categories of recipients who will have access or were disclosed with your data, the duration periods for saving the personal data, whether there is a right to adjust/correct, erase, restrict or object, transmission of data[1], the source of your data if not collected through us and if we use automatic decision-making technologies including profiling.  

Additionally, you have the right to revoke a previously granted consent to use your personal data at any time.

If you believe that the processing of your personal data is inconsistent or contradicts the applicable data protection laws you have the possibility to lodge a complaint with the data protection office.

[1] As long as it oes not cause a disproportionate effort to transmit these data

III. Description and scope of data processing

1. Data collected from job applicants

We hereby inform you that on receipt of your application forms we process personal data such as your name, title, address, telephone number, date of birth, education, work experience, salary expectations and any data and images that are contained in the accompanying letter, CV, letter of motivation, certificates and other documents and records that you send to us, for the purpose of personnel selection.

2. Legal basis

We process your personal data in the scope of our recruitment process on the basis of Section 1173a Article 28a of the Liechtenstein Civil Code (Allgemeines bürgerliches Gesetzbuch – ABGB) and of Article 6(1)(b) of the GDPR. If an applicant wishes their information to be retained in a pool of applicants for the purpose of potential subsequent cooperation, we require consent for this in accordance with Article 6(1)(a) of the GDPR.

3. Transfer of data

Your data will not be transferred to third parties without your consent. No automated decision-making in accordance with Article 22 of the GDPR is carried out.

4. Duration

If no appointment is made, we will retain your data for up to six months for the purposes of documentation in any eventual legal proceedings before erasing it.​​​​​​​

IV. Data security

We use SSL-encryption, a common encryption technology in connection with the highest encryption levels that are supported by your browser. If a page on our website was/is being transmitted encrypted it is shown by the lock symbol in the address bar of your browser.

Additionally, we use appropriate technical and organizational security measures to protect your data from accidental or intentional manipulation, partial or complete loss, destruction, or to prevent unauthorized access by third parties. Our security measures are continuously upgraded according to the latest technological developments.