Protecting your personal data is a central concern for Rechtsfabrik ("RF"). We therefore process your data in compliance with the applicable legal provisions on data protection, data security, and the responsible handling of personal information – in particular, the Austrian Data Protection Act ("DSG"), the EU General Data Protection Regulation ("GDPR"), and the Telecommunications Act ("TKG").

This Privacy Policy informs you about the type, scope, and purpose of the collection and processing of your personal data in connection with your visit to and use of our website www.rechtsfabrik.com ("Website").

1. Name and Address of the Controller

The controller responsible for processing your personal data under applicable data protection laws is:

Dr. Moritz Völkl, LL.M.
Oppolzergasse 6
1010 Vienna, Austria
moritz@rechtsfabrik.com

Personal data refers to information relating to individuals (natural persons) whose identity is identified or at least identifiable (e.g. name, email address, or IP address).

2. Website

During your visit to our website, the following personal data may be automatically collected and processed:

• Date and time of access to individual pages and information about your interaction with the website (e.g. number of visits, duration of visit, selected language)

• Device information (e.g. screen resolution, internet service provider, and operating system)

• Your IP address including associated location

• Referrer URL (the website from which you were referred to our website)

• Name and version of your web browser

• Session ID

• The search engine and search terms used to find our website

• Log files collected via technically necessary cookies

2.1 Legal Basis for Data Processing

The processing of personal data during your visit to our website and use of our online services is based on our legitimate interests pursuant to Art 6(1)(f) GDPR. Our legitimate interest lies in ensuring the secure operation of our website and protecting it from unauthorized access or attacks.

2.2 Purpose of Data Processing

We process your personal data in connection with your visit to our website to provide the website and continuously improve its functionality and content. In addition, the data helps us to detect, prevent, and investigate potential attacks on our website and online services. Furthermore, we use the information to generate anonymized usage statistics for internal analysis purposes.

2.3 Storage Period

Data collected during your visit to the website is generally stored for a period of three months.

3. Contacting Us

If you contact us, we process the personal data you provide (email address, name, phone number, and the content of your inquiry including any documents you submit) to handle and respond to your inquiry.

3.1 Legal Basis for Data Processing

Processing for the purpose of handling and responding to your inquiry is based on our legitimate interest pursuant to Art 6(1)(f) GDPR, namely the efficient and prompt response to your inquiry and any follow-up questions. If your inquiry leads to a client relationship, we additionally process the data based on our (pre-)contractual obligations pursuant to Art 6(1)(b) GDPR.

3.2 Purpose of Data Processing

We process your data in relation to your inquiries to handle and respond to them efficiently and to your satisfaction, and to fulfil our responsibilities as a service provider

3.3 Storage Period

We retain your data for six months to adequately respond to any follow-up questions. Longer storage may occur if a client relationship results from your inquiry, due to legal retention obligations, or to defend against potential legal claims.

4. Disclosure of Your Data

We may disclose your personal data in the following cases:

• To external third parties where necessary to protect our legitimate interests (e.g. auditors, insurers in the event of a claim, or legal counsel where applicable);

• To authorities or public bodies where we are legally obliged to do so (e.g. tax authorities, courts).

We will not share your data with other third parties for their own purposes without your express consent.

5. Cookies

Our website uses technically necessary cookies to ensure its core functionalities and enable smooth operation. The associated data processing is necessary for system security and protection against misuse and is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR in conjunction with § 165(3) TKG.

Please note: If your cookie settings include providers that transfer data to countries without an adequate level of data protection (pursuant to Art. 45 GDPR) and without suitable safeguards (pursuant to Art. 46 GDPR), your consent explicitly also covers such data transfers. There is a risk that authorities in these third countries may access your data for control and monitoring purposes, and that you may not have effective legal remedies available.

You can change your cookie settings at any time – for example, via the "Cookies" link in the banner of our website. There you can choose [ACCEPT ALL] or [REJECT ALL] to approve or reject all cookies requiring consent. Alternatively, you can customize your preferences by clicking [CUSTOMIZE].

6. Rights of Data Subjects

We implement comprehensive technical and organizational security measures to protect your personal data and comply with the requirements of Art 32 GDPR regarding confidentiality and data security.

As a data subject, you have the following rights in relation to your personal data:

• Right of access – to know which personal data we process about you;

• Right to rectification – to correct incorrect or incomplete data;

• Right to erasure ("right to be forgotten") – to delete your data, provided no legal retention obligation applies;

• Right to withdraw consent – if processing is based on your consent, you may withdraw it at any time with future effect;

• Right to restrict processing – under certain conditions;

• Right to data portability – to receive the data you provided in a structured, commonly used, and machine-readable format and transmit it to another controller;

• Right to object – to the processing of your data if you have grounds relating to your particular situation.

  
  

If you believe that the processing of your data violates data protection laws, you have the right to lodge a complaint with a supervisory authority. The authority responsible for us is:

Austrian Data Protection Authority
Barichgasse 40–42, 1030 Vienna, Austria
Email: dsb@dsb.gv.at
Phone: +43 1 52 152-0

If you have any questions about the processing of your personal data, please contact us at: moritz@rechtsfabrik.com

7. Storage Period

We retain your personal data only as long as necessary to fulfil the purposes described above and to meet our contractual or legal obligations. Once we no longer need your data, we will delete it from our systems and records or anonymize it so that you can no longer be identified.