General

Data protection is closely tied to safeguarding the trust you place in our company. Therefore, we only process the data necessary. We do so with due diligence, not least to protect you from potential misuse.

With this privacy policy, we would like to provide you with an overview of how your data is processed and inform you of your rights under the General Data Protection Regulation (referred to as "GDPR") and the Liechtenstein Data Protection Act (referred to as "DSG"):

Name and Address of the Data Controller
The data controller, as defined by the GDPR, is:

CCA TRUSTLESS TECHNOLOGIES ASSOCIATION e. V.,
Dr. Grass-Strasse 12, 9490 Vaduz, Liechtenstein,
hoi@cryptocountry.li

Collection and Storage of Personal Data and the Nature and Purpose of Its Use
We process only the necessary data, which may vary depending on the group of individuals involved.

If you contact or engage us, we particularly collect the following information:

• Personal details (e.g., title, first name, last name);
• Address and contact details (e.g., address, email, landline/mobile number);
• Any other information necessary to provide our services or fulfill our contractual obligations.

The collection of this data is necessary to:

• Identify you as our customer;
• Provide you with appropriate advice and services;
• Correspond with you;
• Invoice you.

Without this data, we generally cannot enter into or maintain a client relationship. We may also process data not directly collected from you but from third parties, publicly available sources, or other affected parties.

Data processing is carried out based on your request and is necessary under Article 6(1)(b) GDPR for the performance of a contract or pre-contractual measures to appropriately handle the mandate and fulfill the obligations arising from the mandate relationship.

Your data will also be processed to fulfill legal obligations (Article 6(1)(c) GDPR) or in the public interest (Article 6(1)(e) GDPR), particularly to comply with statutory and regulatory requirements (e.g., DSG, Trustee Act, Due Diligence Act, Anti-Money Laundering regulations, tax laws, and agreements).

Additionally, your data may be processed for the legitimate interests of us or third parties (Article 6(1)(f) GDPR) for specific purposes, such as fulfilling a contract with a third party, ensuring IT security, and potentially building and facility security.

Your data may also be processed based on your consent (Article 6(1)(a) GDPR). You have the right to revoke your consent at any time, which applies to consents given before the GDPR came into effect. Revoking your consent does not affect the lawfulness of data processing based on consent before its withdrawal.

We reserve the right to continue processing personal data collected for one of the above purposes for other purposes if they are compatible with the original purpose or if this is legally permitted or required (e.g., mandatory reporting requirements).

Recipients or Categories of Recipients of Personal Data
Within our company, employees may only process your data if it is necessary to fulfill our contractual, legal, and regulatory obligations or to protect legitimate interests. For these purposes, third parties, including service providers (e.g., in IT services), may also receive personal data.

Your personal data will only be shared with third parties as necessary to provide our services.

Transfer of Personal Data to Third Countries
Data transfers to countries outside the European Economic Area (so-called third countries) only occur within the framework of adequacy decisions by the European Commission or when necessary for pre-contractual measures or the performance of a contract, if you have given your explicit consent (e.g., as part of specific services), if it is necessary for reasons of public interest, or if required by law.

Duration of Storage of Personal Data
The personal data collected by us will generally be stored until the expiration of the statutory retention periods and then deleted unless a longer storage period is required under Article 6(1)(c) GDPR due to tax, corporate, or regulatory retention and documentation obligations (in particular from PGR, SPG, or SteG/VATG) or you have consented to further storage under Article 6(1)(a) GDPR. Further processing and storage may also be required for evidence preservation reasons, for example, during the applicable statute of limitations.

Your Data Protection Rights
As a customer or affected party, you have the right—while respecting fiduciary confidentiality—at any time to request information about your personal data, particularly its origin, recipients, and the purpose of processing. You also have the right to rectification, data portability, objection, restriction of processing, or deletion of incorrect or unlawfully processed data.

If your personal data changes, please notify us accordingly.

You may revoke your consent to the use of your personal data at any time. To exercise your right to information, deletion, rectification, objection, and/or data portability, please contact the address listed in point 1 of this declaration.

If you believe that the processing of your personal data by us violates applicable data protection law or your data protection rights have been infringed in some other way, you have the option of filing a complaint with the relevant supervisory authority. In Liechtenstein, this is the Data Protection Office.

Current Version
This privacy policy is valid as of May 2018.

Due to the further development of our website and offerings or organizational changes within the company, or due to changes in legal or regulatory requirements, it may become necessary to amend this privacy policy. The current privacy policy can be accessed and printed at any time on our website.

Website

Provision of the Website
Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing device.

The following data is collected:

• Information about the browser type and version used;
• The user’s operating system;
• The user’s internet service provider;
• The user’s IP address;
• Date and time of access;
• The referring website.

These last three types of data are stored only in summary form, meaning it is not possible to associate IP addresses with referring websites or access times. It is only possible to determine from which websites and at what times the most accesses occur.

We store this information in accordance with legal regulations. Data processing is carried out for data security reasons to ensure system stability and operational security. The legal basis is Article 6(1)(f) GDPR.

We use the web analysis tool "Google Analytics" on our website. This is exclusively for optimizing the website’s usability and providing helpful information about our services. Google Analytics uses cookies (see point 2), which are stored on your computer. The information contained in them about the website and internet usage of visitors can be processed and evaluated by Google. Data collected by Google may be transferred to countries outside the EU and the EEA, particularly to the USA. However, Google is subject to the Privacy Shield Framework. More information about your rights under this framework can be found at European Commission Guide.

We ensure that data collection is anonymized, so no personal analysis takes place. It is not possible to draw conclusions about individual persons or to combine this data with other sources of personal data. Data is not shared with third parties.

Cookies
We use cookies on our website to make our offering user-friendly. Cookies are small files that your browser automatically creates and stores on your device (computer, tablet, smartphone, etc.) when you visit our website. This allows us to recognize your browser on subsequent visits.

If you do not wish this, you can set your browser to notify you about the placement of cookies. However, disabling cookies may result in your inability to use all functions of our website.

The legal basis for data processed by cookies is Article 6(1)(f) GDPR.

Temporary cookies remain valid for the duration of the session and are then deleted by your browser. Permanent cookies remain in your browser according to your own settings or until manually deleted.

Contact Form/Email
If you fill out a contact form or send us an email or other electronic message, your information will only be stored for processing the request and for correspondence.

The legal basis for processing your request is Article 6(1)(b) GDPR.

We will delete your email address once your inquiry is resolved.

File Downloads
We do not require any personal information from you to download files from our website.

October 2024