5. Processing of data

If you are a visitor to our website or an interested party, we process your personal data either:

• to safeguard our legitimate interests (Art 6 Para 1 lit f GDPR), namely ensuring the operation, security and optimization of our website,

• to process your inquiries that you send us by e-mail or telephone (Art 6 Para 1 lit a GDPR), or

• to fulfill our legal obligations in connection with the prevention of money laundering and terrorist financing (Art 6 Para 1 lit c GDPR).

You give your consent to data processing by sending or submitting the request to us.
If you are one of our clients, we process your personal data either:

• to carry out pre-contractual measures or to fulfill our contractual obligations (Art 6 Para 1 lit b GDPR) within the scope of the client relationship,

• on the basis of your express consent (Art. 6 Para. 1 lit a GDPR) if you give us this for data processing, and

• to fulfill our legal and professional obligations (Art 6 Para 1 lit c GDPR).

The processing of your data primarily serves to carry out and implement our legal services. If you decide not to provide us with any data, we will not be able to enter into an attorney-client relationship with you. The consent to data processing can of course be revoked at any time.

We will use your contact details to send you our data protection declaration and, if applicable, our power of attorney and fee agreement.
We will not process the data made available to us for purposes other than those covered by the mandate contract or by your consent or otherwise by a provision in accordance with the GDPR. Excluded from this is the use for statistical purposes, provided that the data provided has been made anonymous.
Data processing in the course of the client relationship also includes personal data from potential opponents, persons involved and persons providing information. We usually receive this data from our clients or their business partners, from the Internet or other available public sources and from other third parties who serve as information persons. In accordance with Article 14 Paragraph 5 GDPR, there is no obligation to inform this group of people about the processing.

If you are a supplier or business partner, we process your personal data either:

• to carry out pre-contractual measures or to fulfill our contractual obligations (Art 6 Para 1 lit b GDPR), or

• to fulfill our legal obligations (Art 6 Para 1 lit c GDPR).

If you are an applicant, we process your personal data either:

• to carry out pre-contractual measures (Art 6 Para 1 lit b GDPR),

• on the basis of your express consent, if we would like to keep you on record as an applicant (Art 6 Para 1 lit a GDPR), or  

• to fulfill legal obligations (Art 6 Para 1 lit c GDPR).

Furthermore, it may happen in individual cases that we obtain data from other third-party sources. This is primarily information that we collect from the Internet or in connection with our legal audit obligations to prevent money laundering and terrorist financing. However, the data that we receive and process from third-party sources is limited to contact information (e-mail, telephone number, address), whether it is a politically exposed person, position and function in the company, professional history and responsibility for a specific person Company. We may also process information from publicly available sources for applicants. This data processing is based on our legitimate interest in a complete set of data about you that is necessary for the implementation of the client relationship, the business relationship and also the application process (Art 6 Para 1 lit f GDPR).

4. Data Security

Your personal data is protected by appropriate organizational and technical precautions. These precautions relate in particular to protection against unauthorized, illegal or accidental access, processing, loss, use and manipulation.
Notwithstanding the efforts to maintain a consistently high level of due diligence, it cannot be ruled out that information that you provide to us via the Internet will be viewed and used by other people.
Please note that we therefore assume no liability whatsoever for the disclosure of information due to errors in data transmission not caused by us and/or unauthorized access by third parties (e.g. hack attack on email account or telephone, interception of faxes).

6. Transmission of data to third parties

In order to fulfill your order, it may also be necessary to pass on your data to third parties (e.g. opposite parties, substitutes, insurance companies, service providers we use and to whom we make data available, etc.), courts or authorities. Our contract data processors, which are IT service providers, providers of data management systems for legal software including cloud solutions, process your data according to our specifications. Your data will only be forwarded on the basis of the GDPR, in particular to fulfill your order or based on your prior consent.
Furthermore, we inform you that as part of our legal representation and support, factual and case-related information is regularly obtained from third parties.
Some of the above recipients of your personal data are located outside your country or process your personal data there. The level of data protection in other countries may not correspond to that in Austria. However, we only transfer your personal data to countries for which the EU Commission has decided that they have an adequate level of data protection, or we take measures to ensure that all recipients have an adequate level of data protection, for which purpose we have standard contractual clauses [implementing decision (EU ) 2021/94].