Privacy Policy GIVAG AG (CreatorConX)
Preamble
We take the protection of your personal data very seriously. This Privacy Policy informs you about the type, scope, and purpose of the processing of personal data (hereinafter referred to as data or personal data) within our website and its associated web pages, functions, and content as well as external online presences and related services (hereinafter collectively referred to as the website).
The company GIVAG AG (hereinafter referred to as the company), located at Buchenweg 6, FL-9490 Vaduz, processes information and personal data about you. As a rule, this information processing by the company takes place within the framework of existing or developing business relationships, including the use of the website. The company strives to provide the best possible protection of your personal data.
The controller within the meaning of the EU General Data Protection Regulation (hereinafter “GDPR”) is:
GIVAG AG
Buchenweg 6
FL-9490 Vaduz
This Privacy Policy (hereinafter “Policy”) describes the processing of personal data in connection with the provision of services by the company and its online presence. This Policy is based on the GDPR, the Data Protection Act (DSG), as well as relevant special legal provisions.
The company reserves the right to amend this Policy as necessary. In the event of such amendments, you should check whether you agree with the changes.
2. Processing of Personal Data
Personal Data
- Personal data are all information through which a natural person can be identified directly or indirectly. This includes, for example, name, address, email address, telephone number, date of birth, age, gender, tax identification number. Sensitive data (a specially protected category of data), such as health data or data relating to criminal proceedings, are also included.
- The company collects, processes, and uses your personal data exclusively in accordance with Articles 5 and 6 GDPR (contract, legal obligation, legitimate interest, or consent of the data subject).
- Only such personal data are collected as are necessary for carrying out and processing our services or that you voluntarily provide.
- Types of data processed:
– Master data (e.g., names, addresses)
– Contact data (e.g., email, phone numbers)
– Content data (e.g., text entries, photographs, videos, documents)
– Usage data (e.g., websites visited, interest in content, access times)
– Meta-/communication data (e.g., device information, IP addresses)
Processing of Personal Data
- The company is subject to professional confidentiality and secrecy obligations, derived from data protection law, contract law, or professional secrecy. When processing personal data, the company is bound by these obligations. The processing of users’ personal data is limited to data necessary to provide a functional website as well as our content and services. Thus, processing of personal data takes place (i) for performance of contracts, (ii) for compliance with our legal or regulatory obligations, (iii) for pursuing our legitimate interests, and (iv) for fulfilling obligations in the public interest (e.g., prevention or detection of crimes). Only such personal data are collected that are truly necessary for the execution and handling of our tasks and services or that you voluntarily provide.
3. Your Rights (Data Subject Rights)
Right of Access
- You have the right to request information about your personal data processed by us. In particular, you may request information on the purposes of processing, the categories of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned retention period, the existence of a right to rectification, erasure, restriction of processing, or objection, data portability (unless this causes disproportionate effort), the source of your data if not collected by us, as well as the existence of automated decision-making including profiling.
- A request for information must be submitted together with proof of identity in writing to the controller (see section 11).
- After receiving your request, you will be informed within the statutory period of 30 days whether your request can be fulfilled. The request may be denied, restricted, or postponed where required by law or due to overriding interests of a third party or the company.
- The request for information may be combined with an application for rectification or erasure of data.
Right to Rectification or Erasure
- You have the right to request in writing and free of charge the rectification or erasure of your data, provided they are incorrect or have been unlawfully stored or processed. A justified request must be submitted with proof of identity to the controller.
- Your request for rectification or erasure will be processed within a reasonable period. You will then receive confirmation of completion.
- Legal provisions may prevent deletion. In such cases, the company will continue to process your data only to the extent necessary to comply with legal obligations.
Right to Object or Withdraw Consent
- You have the right to object in writing to the processing of your data in whole or in part or to withdraw your consent. Objections or withdrawals must be submitted in writing with proof of identity to the controller.
- Receipt of your objection or withdrawal will be confirmed, and the relevant data will then be deleted.
- Legal provisions may prevent compliance with an objection or withdrawal. In such cases, the company will continue to process your data only to the extent necessary to comply with legal obligations.
Right to Restriction (Blocking)
- You have the right to block your data from disclosure to third parties. A blocking request must be submitted in writing with proof of identity to the controller.
- Receipt of your request will be confirmed, and your request will be processed within a reasonable period.
- Legal provisions may prevent blocking. In such cases, the company will continue to disclose your data to third parties only to the extent necessary to comply with legal obligations.
Right to Lodge a Complaint
- If you believe that your personal data are being processed by us in violation of applicable data protection provisions, you have the right to lodge a complaint with the competent supervisory authority in Liechtenstein. You may also contact another supervisory authority in an EU or EEA member state, for example, in your place of residence or work or at the location of the alleged violation.
- Contact details of the competent data protection authority in Liechtenstein are as follows:
Data Protection Office Liechtenstein
Städtle 38
PO Box 684
LI-9490 Vaduz
+423 236 60 90
info.dss@llv.li
4. Collection of General Data and Information
We conduct our own web analysis on our website, but we do not use web analysis tools (such as Google Analytics). Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing device.
The following data are collected:
- Information about the browser type and version used
- The operating system used
- Referrer URL (previously visited website)
- Hostname of the accessing device (IP address)
- Date and time of server request
- Data volume transferred
- Notification of successful retrieval
We store this information for a maximum of six months. Storage is carried out for data security reasons to ensure the stability and operational security of our system. The data are used internally for forensic investigations in case of hacking attempts or for other security-relevant analyses. This guarantees the security of your data on our systems and ensures that appropriate countermeasures can be taken promptly in case of suspicion. These data are not merged with other data.
5. Data Security
We use the widely used SSL (Secure Socket Layer) protocol in connection with the highest level of encryption supported by your browser during your website visit. Whether a page is transmitted in encrypted form can be recognized by the closed lock symbol in your browser’s address bar. In addition, we apply appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.
6. Cookies
We use cookies on our website to obtain information about website usage and to make our services more user-friendly. Cookies are small files that are automatically created by your browser and stored on your device (laptop, tablet, smartphone, etc.) when you visit our site. Cookies remain stored until you delete them. This allows us to recognize your browser on your next visit. If you do not want this, you can configure your browser to inform you about the setting of cookies and allow them only in individual cases. However, we note that disabling cookies means you may not be able to use all website functions.
When using the company’s website, access data (e.g., log files, IP address, date and time of access, name of retrieved file, access status, top-level domain, browser used, operating system used) are stored. The company uses these data for statistical purposes and technical evaluations, for optimizing server infrastructure, to determine access frequency, and ultimately to improve user-friendliness and functionalities.
Types of cookies and functions:
- Temporary cookies (session cookies): deleted once the user leaves the website and closes the browser.
- Permanent cookies: remain stored even after the browser is closed, e.g., to save login status or display preferred content directly when revisiting.
- First-party cookies: set by the company itself.
- Third-party cookies: mainly used by advertisers to process user information.
- Necessary cookies: required for operation (e.g., saving logins, user inputs, or for security reasons).
- Statistics, marketing, and personalization cookies: used for reach measurement and to store user interests or behavior (e.g., viewing specific content, using functions) in user profiles. These profiles help display content tailored to users’ interests (so-called tracking).
Legal basis: Depending on whether we request your consent. If so and you consent, the processing is based on consent. Otherwise, data processed by cookies is based on our legitimate interests (e.g., efficient operation of our online services and improvement thereof) or is necessary to fulfill contractual obligations.
Withdrawal and objection (opt-out): Depending on the legal basis, you may withdraw consent at any time or object to processing by cookie technologies (opt-out). You may declare your objection via your browser settings, e.g., by disabling cookies (though this may restrict the functionality of our website).
Processing of cookie data based on consent: Before processing or allowing processing of data via cookies, we obtain the user’s consent, revocable at any time. Until consent is given, only cookies required for website operation are used. These are based on our interest and the user’s interest in expected functionality.
- Data processed: Usage data (e.g., websites visited, interest in content, access times), meta/communication data (e.g., device information, IP addresses).
- Data subjects: Users (e.g., website visitors, online service users).
- Legal basis: Consent (Art. 6(1)(a) GDPR), Legitimate Interests (Art. 6(1)(f) GDPR).
7. Integration of Third-Party Software, Scripts, and Frameworks
We integrate into our online services software retrieved from other providers’ servers (e.g., function libraries used to display or improve user-friendliness). These providers collect users’ IP addresses and may process them for the transmission of software to users’ browsers, for security purposes, and for analysis or optimization of their services.
- Data processed: usage data, meta/communication data, contact data, content data.
- Data subjects: users (website visitors, online service users), communication partners.
- Purpose of processing: user-friendliness, communication, direct marketing, tracking, interest-based marketing, profiling, contractual services, service delivery.
- Legal basis: Consent (Art. 6(1)(a) GDPR), Legitimate Interests (Art. 6(1)(f) GDPR).
8. Hosting and Email Dispatch
The hosting services we use provide the following: infrastructure and platform services, computing capacity, storage space and database services, email dispatch, security services, and technical maintenance services we use for website operation.
9. Transfer of Personal Data to Third Parties
As a rule, personal data collected in the course of business activity are not passed on to third parties.
For business order fulfillment, however, it may be necessary for your data to be passed on to third parties due to processing requirements or legal obligations. Such transfer takes place in accordance with GDPR provisions.
Furthermore, we inform you that the company may obtain information about you from third parties in the context of its business activities and for fulfilling statutory due diligence obligations.
The company transfers your personal data only to countries to which the EU Commission has attested an adequate level of data protection. If data are transferred to countries without such an adequacy decision, the company ensures protection by contracting with recipients under EU Standard Contractual Clauses (2010/87/EC and/or 2004/915/EC).
10. Protection of Personal Data
The company implements appropriate technical and organizational measures to protect all data from loss, unauthorized access, or misuse, both in terms of processing/storage and its online presence.
Regardless of the measures, you must be aware that internet data transmission – both for websites and email services – is uncontrolled and cross-border. Even if sender and recipient are in the same country, cross-border transmission may occur. The company cannot therefore guarantee confidentiality of internet-transmitted data. When disclosing personal data online, you must be aware that third parties may access, read, alter, forge, monitor, destroy, or misuse such data. Transmission may also be delayed, lost, or allow conclusions about existing business relationships. The company therefore accepts no responsibility for security of data transmitted online and disclaims liability for direct or indirect damages.
11. Retention of Personal Data
The company’s data processing systems are located in Liechtenstein. Data you transmit are stored for at least six months and retained as long as operationally necessary or legally required.
12. File Downloads
We do not require you to provide personal data to download files from our website.
13. Contact
If you contact us by email or other electronic communication, your data are stored only for processing your request and any related follow-up questions and are used only in this context. The legal basis is Art. 6(1)(b) GDPR. Your email address will be deleted once your request has been resolved.
For questions about data protection and processing, please write to the controller. You can reach the controller as follows:
GIVAG AG
Buchenweg 6
FL-9490 Vaduz
info@creatorconx.com
+423 235 50 24