Ordinance on the Act on the Data Hub and the Object-Related Information System (OWV) - Competent Authority (OWV)

1. The competent department for the Data Hub Object System and the Object Information System is the Department of Space and Economy.

1. The terms object systems, central object system, information system object entity, data hub object entity, and responsible authority are defined according to the law.

1. The responsible authority for the domain of Land Registry is the Lucerne Land Registry. It operates the object systems TERRIS and GRAVIS.

2. The responsible authority for the domain of Taxes is the Tax Office. It operates the object system NEST.

3. The responsible authority for the domain of Insurance is the Lucerne Building Insurance. It operates the object system GemDat.

4. The responsible authority for the domains of Geoinformation, Official Surveying, and Construction, as well as the sector of Geoinformation, is the Department of Space and Economy. It operates the object systems Central Spatial Database and eBAGE+.

5. The responsible authority for the Statistics sector is Lustat Statistics Lucerne. It operates the object system Cantonal Building and Housing Register.

1. The required object-related data, which is updated by the responsible departments or the entities commissioned by them through the data hub for objects, is listed in Appendix 1.

2. The object-related data is generally updated daily.

1. GRAVIS, the cantonal building and housing register, and the Central Spatial Database are the central object systems from which object-related data can be retrieved via the Object Information System.

2. The data to be supplied to the central object systems by the participating domains and areas are defined in Appendix 2.

3. As a rule, the data is transmitted daily or event-based via the Object Data Hub.

4. The domains and areas of the central object systems ensure that the supplied object-related data is protected against unauthorized processing.

**1. The following categories of object-related data can be exchanged via the Object System Data Hub and retrieved via the Object System Information System:**

a. from the land register domain: ownership, easements, encumbrances, mortgages, preliminary notices, and annotations,

b. from the tax domain: cadastral value and encumbrance limit,

c. from the insurance domain: insurance value,

d. from the geoinformation sector: data on public law ownership restrictions (PLOR), as well as other spatial and environmentally relevant data,

e. from the official surveying domain: property area, property description, location, and geometry of the objects,

f. from the construction domain: building applications and status of construction projects,

g. from the statistics sector: building address, building insurance number, building characteristics, number of apartments, apartment characteristics, and construction projects.

**2. The object-related data contain the respective federal identifiers during the exchange.**

1. Access permissions to non-public object-related data are granted individually to those persons within the authorized body who are tasked with fulfilling the legally established duty.

2. Automated access by systems of the authorized bodies to non-public object-related data requires a usage agreement with the responsible entities of the affected object systems.

3. The access permissions of authorities are restricted to the object-related data within their jurisdiction.

1. Any authorized authority and person may apply for access rights from the competent office upon a substantiated request.

2. The request shall contain at least

a. the purpose of the access,

b. the scope of the access,

c. the legal basis,

d. the personal details of the authorized persons,

e. the justification of why the data related to the object is necessary for the performance of the task by the authorized authority.

3. The competent office forwards the request to the responsible body of the affected object system. The granting of access rights may be subject to conditions, time-limited, and geographically restricted.

4. The responsible body decides on the deletion of access rights.

1. Access by individuals to non-publicly accessible object-related data is conducted through multi-factor authentication procedures. The registration process ensures that the authorized individual can be unequivocally identified.

2. The access rights are linked to the personal user account of the authorized individual.

3. In accordance with the current state of technology, it is ensured that only the systems of authorized entities are granted access to non-publicly accessible object-related data.

1. The object-related data temporarily stored in the Object System's information system is deleted immediately after the end of the user session.

2. The object-related data temporarily stored in the Object System's data hub is deleted seven days after the data exchange has occurred.

1. The competent authority shall receive requests for the protection of control rights, particularly the right to information and correction, in accordance with the provisions of the Cantonal Data Protection Act of July 2, 1990, and shall forward them to the responsible body for the relevant object system for processing.

1. The logging, storage, and destruction of access logs shall occur in accordance with § 6 of the Cantonal Data Protection Ordinance of February 26, 1991.

2. When accessing publicly available object-related data, the type of access, IP address, queried features, and time of the query are logged. For non-publicly accessible object-related data, the identity of the authorized individual or the system of the authorized entity is additionally logged.

1. The municipalities will be billed for the actual costs at the beginning of each subsequent year. The basis for calculation is the average residential population according to the cantonal population statistics.

2. Extraordinary expenses, particularly for the further development of the information system related to property management, which lead to a significant increase in the municipalities' operational contributions, must be approved by the government council after prior consultation with the Association of Lucerne Municipalities. If the increase exceeds 50 percent, the consent of the Association of Lucerne Municipalities is required.