Data Protection
This policy informs data subjects about the processing of their personal data by Marxer Legal, in accordance with Regulation (EU) 2016/679 (GDPR), applicable in Liechtenstein as an EEA member, and the Liechtenstein Data Protection Act (Datenschutzgesetz, DSG).
1. Controllers
For this website (browsing, audience measurement, contact forms, newsletter, Official Gazette alerts): Impact Trust AG, Advokatur Maximilien Marxer GmbH and Maximilien Marxer, notary (Notariat Maximilien Marxer), all at Austrasse 15, 9490 Vaduz, Liechtenstein, as joint controllers (Art. 26 GDPR).
Essence of their arrangement (Art. 26(2) GDPR): Impact Trust AG operates the website and its service providers; a single point of contact receives and handles requests from data subjects: rgpd@marxer.legal, +423 232 02 02; each publisher forwards without delay any request it receives directly. You may nevertheless exercise your rights against each of them (Art. 26(3) GDPR).
For an engagement: the controller is the entity you engage (law firm, notary practice or trust company).
2. Scope
This policy covers browsing on this website as well as the processing related to our services as lawyer, notary, fiduciary and workspace provider.
3. Categories of persons and data
Website visitors (connection data); clients and prospects (identity, contact details, file data, financial and asset-related data, beneficial owners); correspondents; job applicants. Depending on the matter, special categories of data (Art. 9 GDPR) may be processed, only where necessary for the engagement.
4. Purposes and legal bases (Art. 6 GDPR)
Performance of engagements and services: Art. 6(1)(b) (contract). Legal obligations, in particular due diligence (KYC/SPG), accounting and retention: Art. 6(1)(c). Security and proper functioning of the site, relationship management: Art. 6(1)(f) (legitimate interest). Newsletter and Official Gazette alert service: Art. 6(1)(a) (consent).
5. Clients and prospects
Client data is processed to conclude and perform the engagement, for invoicing and to comply with our legal obligations. Prospect data (enquiries, initial contacts) is processed on the basis of our legitimate interest and your pre-contractual steps, and retained for up to 24 months after the last contact where no relationship is established.
Providing the data required for the engagement and for due diligence is necessary: without it we can neither accept nor perform the engagement. No decision producing legal effects concerning you is taken solely on the basis of automated processing (Art. 22 GDPR).
6. Due diligence (KYC / SPG)
In particular as a fiduciary, we are subject to the Due Diligence Act (Sorgfaltspflichtgesetz, SPG): identification of the client and beneficial owner, establishment of the business relationship profile and retention of due diligence documents. Legal basis: legal obligation (Art. 6(1)(c) GDPR; SPG/SPV). This data cannot be erased or restricted while the legal retention obligation runs.
7. Electronic correspondence
E-mails and messages are processed for case handling and client relations (Art. 6(1)(b) and (f)) and retained in accordance with our professional and legal obligations. E-mail and office software are provided by Microsoft 365 (see sections 10 and 11).
8. Job applications
Applicant data is processed solely for recruitment purposes (pre-contractual measures, Art. 6(1)(b)) and retained for up to 6 months after the process closes, unless you consent to longer retention.
9. Cookies and site tools
This site sets no cookies and stores no information on your device; it uses no analytics, advertising or third-party tracking tools. Fonts are hosted on our own servers: your browser does not contact Google. Contact forms (Contact Form 7): the data entered is used solely to handle your request and is sent by e-mail to info@marxer.legal. Newsletter: sent by Infomaniak Network SA (Switzerland) through its Newsletter service (sign-up by e-mail to info@marxer.legal); one-click unsubscribe in every mailing. To tailor our content, our mailings record whether a message is opened and which links are clicked (date, time, link, device type, approximate country); you consent to this when subscribing and may unsubscribe at any time.
Cookie-free audience measurement. To understand how its pages are used, Marxer Legal reads each day the access log that its hosting provider, Infomaniak, keeps for this site. This measurement sets no cookie and reads nothing on your device. For each page viewed, we keep the date and time, the page address, the language, the domain of the referring site, the declared browser (and the device type derived from it) and the response code. We do not record your IP address: it is used only, at the time of reading, to compute an encrypted fingerprint with a random value specific to each day and destroyed within two days; this fingerprint lets us count distinct visitors on a given day without being able to recognise them afterwards. Legal basis: our legitimate interest in understanding and improving the use of the site (Art. 6(1)(f) GDPR). You may object at any time (Art. 21 GDPR) by writing to rgpd@marxer.legal.
10. Recipients and processors
Website hosting and document vault: Infomaniak Network SA (Geneva, Switzerland). E-mail and office software: Microsoft. Newsletter: Infomaniak Network SA (Switzerland). These providers act as processors, under data processing agreements (Art. 28 GDPR). Your data is neither sold nor disclosed to third parties for commercial purposes.
Artificial intelligence tools: for certain tasks (drafting assistance, reading documents and e-mails, legal research and internet searches), we use artificial intelligence tools integrated into our internal system. Before any transmission to an external provider, names and identifiers known to our system are replaced by pseudonyms; images of documents are transmitted only on the decision of a staff member. Providers: Mistral AI (Paris; processing in the European Union, without use of your data to train its models, data processing agreement under Art. 28 GDPR), Omnilex AG (Zurich; legal search terms only) and Linkup (Paris; internet searches, including a person’s name during due diligence checks). Every result is reviewed by a lawyer before use; no decision is taken by automated means. You may object to the use of artificial intelligence for your matter; a written notice is sufficient.
11. International transfers
Switzerland benefits from an adequacy decision of the European Commission. Some providers (in particular Microsoft) may process data outside the EEA, in particular in the United States. Such transfers are governed by an adequacy decision (EU–US Data Privacy Framework) and/or by standard contractual clauses and appropriate safeguards (Art. 45 and 46 GDPR).
Internet searches carried out through Linkup may be processed outside the EEA, in particular in the United States, without specific contractual safeguards.
12. Retention periods
Due diligence documents (SPG): 10 years after the end of the business relationship (Art. 20 SPG). Accounting records: 10 years (legal obligations). Engagement files (lawyer and notary): 10 years, subject to applicable limitation periods. Prospect data: up to 24 months after the last contact. Applications: 6 months after the process closes. Newsletter: until consent is withdrawn. Cookie-free audience measurement: 24 months, after which the declared browser and the fingerprint are erased. Technical server logs: a limited period for security purposes (a few months), managed by the host.
13. Professional secrecy
The activity of lawyer and notary is covered by professional secrecy. The exercise of certain rights (in particular access and erasure) may be limited to the extent necessary to comply with professional secrecy and legal retention obligations.
14. Your rights
You have the rights of access, rectification, erasure, restriction, objection and portability (Art. 15 to 21 GDPR), as well as the right to withdraw your consent at any time, to be exercised with the controller (rgpd@marxer.legal). These rights are exercised subject to legal retention obligations and professional secrecy.
15. Right to lodge a complaint
You may lodge a complaint with the Liechtenstein Data Protection Authority (Datenschutzstelle), Kirchstrasse 8, Postfach 684, 9490 Vaduz, info.dss@llv.li, www.datenschutzstelle.li.
16. Security
We implement appropriate technical and organisational measures to protect data against unauthorised access, loss or use.
17. Official Gazette alert service
Upon voluntary request, we offer a free e-mail alert service regarding the official publications of the Official Gazette of the Principality of Liechtenstein (commercial register, insolvencies, creditors’ calls). Data processed: e-mail address, the search terms you define, language and a technical management identifier. Legal basis: your consent (Art. 6(1)(a) GDPR), obtained through double confirmation (double opt-in). The publications distributed originate from the official gazette (apps.llv.li; Art. 956 PGR) and constitute public information. Registering for this service also registers you for our newsletter (sent by Infomaniak Network SA); you may unsubscribe from either independently, at any time, via the link in each mailing. Unsubscribing from the alert service deletes your subscription data.
18. Changes
This policy may be updated; the version in force is the one published on this site. Version of 26.10.2026.