With this data protection declaration, Graber Advisory Anstalt (hereinafter referred to as “GAA”) would like to provide you with an overview of the personal data processed and managed within the provision of services by GAA and its website and the associated rights in accordance with the provisions of the General Data Protection Regulation of the European Union (GDPR) and the Liechtenstein Data Protection Act. Only personal data that is necessary for the implementation and processing of our services or that has been provided by you is collected. The processing of personal data is carried out to fulfill the contract, comply with our regulatory and legal obligations, pursue our legitimate interests and fulfill obligations in the public interest.

If you have any questions regarding individual data processing or would like to exercise your rights, please contact the responsible body at GAA: Graber Advisory Anstalt, Schaanerstrasse 13, FL-9490 Vaduz Email: dataprotection@gaa.li The use of the contact details to send unsolicited advertising and information materials is hereby objected to. We expressly reserve the right to take legal action in the event of unsolicited advertising information being sent, such as spam emails.

The AI chatbot integrated into GAA's website has been developed to provide general information about our services. The chatbot is an automated system based on Chat-GPT which may not always contain current, complete or actual information, although GAA always endeavors to provide this. The use of the chatbot does not replace professional legal advice. For specific legal matters, please contact Graber Advisory Anstalt directly. GAA accepts no liability for any direct, indirect or consequential damages that may arise from the use of the chatbot or the information provided.

The systems required for GAA data processing are located in the EEA area and Switzerland. In particular, our private servers are stored in both Liechtenstein and Switzerland. Further databases (management software, website) are stored in DC-3 (Tier 3) Swiss data centers. The duration of storage of the data you transmit depends on operational necessity as well as legal or contractual obligations.

According to the GDPR, a data subject can assert the following rights against the body that decides on the purposes and means of processing personal data: • Right to information and information • Right to rectification, deletion and restriction of processing • Right to data portability • Right to object • Right to withdraw • Right not to be subject to a decision based solely on automated processing that has legal effects on you • Right to complain If you request information, please contact the data protection officer in writing along with a proof of identity.

GAA takes appropriate measures to protect personal data both in terms of data processing and storage as well as its website. When you visit the website, encrypted data communication is used based on the widely used SSL (Secure Socket Layer) process in conjunction with the highest level of encryption supported by your browser. You can tell whether an individual page is being transmitted encrypted by the closed appearance of the key or lock symbol in the address bar of your browser. In addition, we use other appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties. Our security measures are continually optimized in line with technological developments.

When you use GAA's website, access data is stored. The site provider automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are: - Browser types and versions used - the operating system used by the accessing system - the website from which an accessing system accesses our website (referrer) - the date and time of access to the website - Internet protocol address (IP address) - Internet service provider of the accessing system - other similar data and information that serves to avert danger in the event of attacks on our information technology systems. When you use our chatbot “ChatGPT”, information is collected that is made available to us in the context of the interaction. This includes, but is not limited to: - Text messages sent to the chatbot - Technical information as described above (IP address, device information, browser type, etc.) The information is used for training purposes, personalized responses and to increase the performance and efficiency of the chatbot. By using our chatbot, you agree to this data protection clause. This data will not be merged with other data sources. The data is collected on the basis of Article 6 Paragraph 1 Letter f GDPR. The website operator has a legitimate interest in the technically flawless presentation and optimization of his website. For this purpose it is necessary to collect server log files.

When contacting GAA (e.g. by email, telephone or via social media), the user's details are used for the purpose of processing the contact request and its processing in accordance with Article 6 Paragraph 1 Letter a or Letter b of the GDPR processed. The user's data can be stored in a customer relationship management system ("CRM system"). Your personal data will be deleted after your request has been processed if it is no longer required. Otherwise, the statutory archiving obligations apply. Types of data processed: - Inventory data (e.g. names, addresses) - Contact details (e.g. email, telephone numbers) - Content data (e.g. text entries, photos, videos) - Usage data (e.g. websites visited, interest in content, access times) - Meta/communication data (e.g. device information, IP addresses) - Technical data (e.g. browser type, browser fingerprint, operating system) - Identification features that can be assigned to you (e.g. customer number).

The hosting services we use serve to provide the following services: infrastructure and platform services, computing capacity, storage space and database services, email delivery, security services and technical maintenance services, which we use for the purpose of operating this website. For this purpose, we or our hosting provider process inventory data, contact data, content data, contract data, usage data as well as meta and communication data from customers, interested parties and visitors to this online offer based on our legitimate interests in efficient and secure provision in accordance with Section 6 Paragraph 1 Letter f GDPR i. V. with Art. 28 GDPR. Art. 28 GDPR (conclusion of an order processing contract). Our host will only process the personal data to the extent necessary to fulfill its service obligations and follow the instructions of GAA in relation to this data. A contract for order processing has been concluded with our host in order to ensure data protection-compliant processing.

GAA uses cookies on its website. Cookies are small files that are stored on your computer and are used to secure site settings. This means that certain information no longer needs to be repeated when you visit the website again. The cookies used on GAA's website are cookies that are required for websites on WordPress.com to enable their basic functions. This includes those that enable registered users to authenticate and perform user account-specific functions. You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when you close the browser. If cookies are deactivated, the functionality of this website may be restricted. You agree to the use of cookies when using the website by refraining from the measures described above.

No plugins from the social media network Linkedin are used on this website. We only link to our own profile there. On our website we use links to external pages that are specially marked and whose content is not on our server. The external content of these links was checked when the link was created. However, it cannot be ruled out that the content was subsequently changed by the respective providers. If you discover that the content of external providers violates applicable law, please inform us.

Third-party content and services may be integrated into our website (e.g. YouTube, Google Maps, Google Analytics). The data processed by the third-party providers of this content may include, in particular, the IP address and location data of the users. If you access the component integrated into our website, you agree to communication with the respective platform and the transmission of information to the respective service provider. Responsibility for further data processing then lies with the relevant third party provider. GAA has no influence on the websites of other operators and can therefore assume no responsibility or liability for the accuracy, completeness, timeliness or legality of the content of third-party websites or for their data processing practices. Please also note the data protection declarations of the respective third-party websites. We use videos from the “YouTube” platform provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. We integrate the maps from the “Google Maps” service provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA into our website. Google Maps is used to display our location and to create directions. A cookie (See above "Cookie") is stored on your device when you access the Google Maps component integrated into our website. The data processed may include, in particular, IP addresses and location data of users, which, however, are not collected without their consent (usually this occurs as part of the settings of their mobile devices). It cannot be ruled out that the data will be processed in the USA. Our website uses “Google Analytics”, a web analysis service from Google Inc. 1600 Amphitheater Parkway, Mountain View, CA 94.043 USA, to evaluate website usage. The data obtained from this is used to optimize our website. Google processes website usage data on our behalf and is therefore committed to taking measures to ensure the security and confidentiality of the processed data. No personal data such as name, address or contact details are passed on to Google Analytics. Google Analytics uses cookies that are stored on your computer. The information contained therein about the visitor's website and Internet use can be processed and evaluated by Google. The data collected by Google may be transferred by Google to countries outside the EU and the EEA, in particular to the USA. However, Google has joined the EU-US Data Privacy Framework (DPF). Further information about your rights here can be found at this link: https://www.datenschutzstelle.li/application/files/9316/8906/9317/EU-US_Data_Privacy_Framework.pdf.pdf

By submitting your application documents, you give your consent to the processing of your personal data and the images contained in the documents for the purposes of our personnel selection process. Data processing is carried out on the basis of Article 6 Paragraph 1 Letter a (consent) and Letter b (necessary to fulfill the contract) of the GDPR. Your data will not be passed on to third parties without your prior consent. Your data will not be transferred to countries outside the European Economic Area and Switzerland. If you are not employed, your data will be deleted immediately. It is possible to store your personal data for a longer period if you give your express consent. If your application is successful, we will store your personal data until the statutory retention period has expired. Further processing and longer storage may occur for reasons of preserving evidence.

As a rule, the personal data collected is not passed on to third parties. However, it is possible that your data will be forwarded to third parties due to technical processing requirements or legal regulations. Your data will be forwarded accordingly taking into account the provisions of the GDPR.

If you believe that our processing of your personal data violates applicable data protection law or your statutory data protection rights have otherwise been violated, you can file a complaint with the relevant supervisory authority. We would be grateful if you contact and report the matter to GAA first. The contact details of the data protection office responsible in Liechtenstein are as follows: Liechtenstein Data Protection Office, Städtle 38, PO Box 684, FL-9490 Vaduz, T +423 236 60 90, info.dss@llv.li

The data protection declaration is currently valid and is dated January 2024. GAA reserves the right to adapt the data protection declaration if necessary. As we make appropriate adjustments, you should check whether you agree to the changes.