1. Controller and data categories
The controller within the meaning of the GDPR is BRANDAUER Rechtsanwälte GmbH, Giselakai 51, 5020 Salzburg. We process your personal data only on the basis of the GDPR, in particular for the performance of the engagement, your consent or a legitimate interest.
We collect only data required for our legal services or which you provide voluntarily: name, address, email, phone, date of birth, where applicable social security number, photo or voice recordings and biometric data. Sensitive data may be included case by case.
2. Your rights
Subject to attorney-client privilege, you have the right to access, rectification, erasure, restriction of processing, data portability, objection and withdrawal of consent.
Requests can be sent to the address listed under section 8. If you believe your data protection rights have been infringed, you may lodge a complaint with the Austrian Data Protection Authority, Barichgasse 40-42, 1030 Vienna.
3. Data security and retention
We protect your data through organisational and technical measures against unauthorised access, loss and manipulation. We accept no liability for transmission errors or unauthorised third-party access outside our sphere of responsibility.
Data are retained only as long as necessary to fulfil contractual and statutory obligations and to defend against liability claims.
4. Recipients and third-country transfer
To fulfil the engagement, transfers to third parties may be necessary, for example opposing parties, substitute lawyers, insurers, service providers, courts or authorities. For transfers to third countries we rely on an EU adequacy decision or on standard contractual clauses under Decision 2021/914/EU.
5. Notification of data breaches
Data breaches are, where required, reported without undue delay to you and to the competent supervisory authority, including the categories of data affected.
6. Cookies and locally stored values
This website uses technically required functions and Google Analytics 4 only after consent. You can restrict or refuse cookies in your browser settings, the functionality of the website may then be limited.
Specifically, the following cookies and locally stored values are used on this website:
| Name | Provider | Purpose | Storage period |
|---|---|---|---|
| _ga | Google Analytics 4 | User identification, only with consent | 2 years |
| _ga_<id> | Google Analytics 4 | Session tracking, only with consent | 2 years |
| brandauer-klaro | This website, Local Storage | Storage of your cookie choice | until deleted in the browser |
You can withdraw your consent at any time via the “Cookie settings” link in the footer. Processing already carried out remains unaffected.
6a. Cloudflare Web Analytics
This website may use Cloudflare Web Analytics without cookies and without IP storage. Only aggregated access data are collected, such as page views, referrer, device category and browser type. The legal basis is Art. 6(1)(f) GDPR, the legitimate interest in technically adequate reach measurement.
6b. Google Analytics 4, consent only
With your express consent we use Google Analytics 4, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Processed are anonymised IP address, browser type, operating system, referrer URL and page views. Content from input fields is not transmitted.
The legal basis is Art. 6(1)(a) GDPR. Recipients are Google Ireland Limited and Google LLC in the USA. A transfer to the USA cannot be excluded; standard contractual clauses under Decision 2021/914/EU are in place. Following the Schrems II ruling, a residual risk remains that US authorities may access data.
7. Server log files, Cloudflare
On each access the provider records technically necessary data in server log files, in particular IP address, browser and language settings, operating system, referrer URL and date/time. Delivery is provided via the network of Cloudflare, Inc. for security and performance purposes. The legal basis is Art. 6(1)(f) GDPR.
Appointment booking with Calendly
Calendly LLC, USA, is used by us for online appointment booking. As our processor, your booking data, including your name, email address, telephone number where provided, selected appointment and any optional booking information, is handled by Calendly. When you access the booking service, technical data such as your IP address, browser information and time zone is also processed. Please do not enter confidential case details or sensitive personal data there.
On the basis of Article 6(1)(b) GDPR, your booking data is processed to arrange and manage the consultation you request. Where consent is required for optional cookies or similar technologies, Article 6(1)(a) GDPR applies together with section 165(3) of the Austrian Telecommunications Act 2021. Consent may be withdrawn with effect for the future.
Data is also processed by Calendly in the USA. Under Calendly's current data processing addendum, transfers occur pursuant to the EU-US Data Privacy Framework based on Article 45 GDPR. Should this mechanism cease to apply, the addendum stipulates the European Commission's standard contractual clauses under Implementing Decision (EU) 2021/914.
External links to Calendly for appointment booking are provided by this portal. The booking service opens only when one of these links is selected. Consent to web analytics on this portal is separate from use of the external booking page.
8. Contact
BRANDAUER Rechtsanwälte GmbH
Giselakai 51
5020 Salzburg
Österreich
Email: kanzlei@brandauer-rechtsanwaelte.at
Phone: +43 662 6280000