Data Protection

General

The protection and security of your personal data are of great importance to HSP Rechtsanwält:innen GmbH. For this reason, we would like to inform you below about how we handle your personal data, in particular how and for what purposes personal data are collected and processed, to whom we transfer it and which rights and claims data subjects are entitled to.

As a law firm, HSP Rechtsanwält:innen GmbH is already subject to confidentiality obligations arising from professional secrecy and therefore pays particular attention to compliance with data security regulations, in particular the Austrian Data Protection Act (DSG), the EU General Data Protection Regulation (GDPR) and the Austrian Telecommunications Act (TKG).

Responsibility

The following is responsible for the collection and processing of data:
HSP Rechtsanwält:innen GmbH
FN 226631g | HG Vienna
Gonzagagasse 4
1010 Vienna
Tel: +43 1 533 0 533
Email: office@hsp.law
Contact: Dr Peter Wagesreiter, LL.M. (UPenn)

Addressees of this statement

This privacy policy applies equally to clients, interested parties (newsletter recipients), business partners, applicants and website visitors (www.hsp.law and www.hsp-law.at).

If you have any questions regarding these data protection policies, please send us an email to the following address: office@hsp.law

What is personal data?

Personal data means any information that makes it possible to identify a person. This includes, among other things, name, residential or email address, date of birth, and IP address.

How, what and why is data collected?

Personal data is collected and processed in different ways and for different purposes, depending on whether it relates to clients, newsletter recipients, business partners, applicants or website visitors.

Data processing for clients

In order to perform and process our legal services, we collect and store the personal data that you have voluntarily provided to us, such as your name, address, email address, telephone number, date of birth, gender, social security number, tax number, bank account number, photos, health data and, if necessary, biometric data.

We process your personal data for the purpose of fulfilling our contractual obligations arising from the client relationship, complying with legal obligations, and/or on the basis of legitimate interests (in particular for marketing purposes), provided that your interests in confidentiality do not prevail.

Data processing for interested parties (newsletter recipients)

From interested parties who wish to receive our newsletter, we collect the personal data required to manage its delivery. If you have consented to receive the newsletter by email or via our newsletter tool, we collect the following personal data: first and last name, academic degree, email address, company, department, position, geographical address and relevant areas of expertise.

The purpose of collecting this data is to send the newsletter and provide further information about products, services and events as part of the self-marketing activities of HSP Rechtsanwält:innen GmbH.

Interested parties and newsletter recipients may unsubscribe from further mailings via our website www.hsp.law or by using the unsubscribe link included in each newsletter email.

Data processing for business partners

In the course of conducting business with suppliers, service providers and other business partners, we collect and store the personal data required to carry out the respective business transactions. This may include, in particular, first and last name, date of birth, address, telephone number, social security number, tax number or VAT identification number, company registration number.

The data is processed for the purpose of fulfilling contractual obligations, complying with related legal requirements (proper accounting and bookkeeping), and safeguarding legitimate interests (e.g. in connection with legal disputes).

Data processing for applicants

We collect the personal data provided by applicants for a position at HSP Rechtsanwält:innen GmbH who apply in writing or via the application option available on our website, which is necessary for processing the application and adding them to our list of applicants.

For this purpose, we collect: first and last name, academic degree, address, telephone number, date of birth, place of birth, nationality, language skills and any additional qualifications.

If you have consented to the retention of your data for evidentiary purposes, your data will be stored for a maximum period of 3 years. However, you may expressly revoke your consent to the retention at any time.

Data processing for website visitors

When you use our website (www.hsp.law or www.hsp-law.at), we collect, record and store your IP address and IP location, the referrer URL (the website you visited before and after ours), the number, duration and timing of visits (your interaction with the website), as well as the language, type of search engine and keywords used to find our website.

In addition, we use cookies, including cookies provided by Google Analytics, provided that you have given your consent when using our website. Cookies are small text files that are temporarily stored on your device and saved by your browser. Most of the cookies we use are so-called “session cookies”, which are automatically deleted at the end of your visit and are not permanently stored on your device. Other cookies (persistent cookies) remain stored on your device until you delete them. These cookies enable us to recognize your browser on subsequent visits.

The information collected by Google Analytics (including IP address, browser and device type, operating system, resolution, country, language, internet service provider, pages visited and duration of visits) is generally transferred to a server of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) in the United States or in another country outside the European Union.

Our website incorporates social media plugins that allow content to be recommended and shared on social networks such as Facebook, Twitter, XING, and LinkedIn etc. Personal data is only transferred to third parties when website visitors actively click on one of the social media icons displayed. We have no influence over, nor access to, cookies set by social media networks.

Personal data is collected and processed to ensure the operation and security of the website as well as to analyse and improve our advertising and online presence.

You may also adjust your browser settings to control the use of cookies and the transmission of advertising by Google Inc., or download the relevant opt-out plugin at:
https://tools.google/dlpage/gaoptout

Data processing for visitors to the law firm's premises at Gonzagagasse 4, 1010 Vienna

We also process your personal data for purposes of self-protection, including the protection of property, employee safety, and the fulfilment of traffic safety obligations, as well as for the prevention and investigation of criminally relevant conduct by means of encrypted video surveillance.

The evaluation of such data is carried out exclusively for these purposes. The data is stored for up to 72 hours; longer storage will only take place in specific cases for the duration of the proceedings.

Your data will not be passed on to recipients who use this data for their own purposes, but only to the competent authorities and courts (for reasons of preserving evidence or enforcing claims), to insurance companies (for the settlement of insurance claims) and to lawyers and other bodies for the purpose of enforcing the law.

There are no plans to transfer data to recipients in a third country or to an international organisation. Notwithstanding your rights as a data subject (see point 3. Rights of data subjects), it should be noted that there is no right to data portability in this case.

How long is personal data stored?

We only store personal data for as long as we need it to fulfil the purposes described above and to fulfil our contractual or legal obligations.

The data is also stored for evidentiary purposes, taking into account the limitation periods or for as long as a claim (liability) against us is possible.

Disclosure of data to third parties (data transfers)

As a matter of principle, we do not make your personal data available to third parties. However, it may be necessary to pass on your data to trustworthy third parties in order to fulfil your order or for legal reasons. These may include courts, authorities, or other involved third parties, such as tax advisors, banks, IT service providers, and processors acting on our behalf.

In such cases, the disclosure of your data is carried out exclusively in accordance with the Austrian Data Protection Act (DSGVO), in particular on the basis of your consent, for the performance of a contract, or to comply with a legal obligation etc.

Data security

We have implemented state-of-the-art organisational and technical precautions to ensure the protection of your personal data (protection against misuse both internally and externally, e.g. through firewalls, encryption, access authorisations, etc.). However, it cannot be ruled out that information may be viewed or used by other persons due to errors in data transmission not caused by us or unauthorised access by third parties (hackers, etc.). We accept no liability for this, provided that this misuse was not caused by us.

What rights do data subjects have?

You have the right to obtain information about your stored personal data, its origin and recipients, and the purpose of data processing, as well as the right to correction, objection, data transfer, restriction of processing, and blocking or deletion of incorrect/unlawfully processed data.

You also have the right to revoke any consent you may have given to the use of your personal data at any time.

To assert your rights as a data subject (information, deletion, correction, objection and/or data transfer [provided that this does not involve disproportionate effort in the case of data transfer]), please contact us by email at office@hsp.law.

Complaint to the data protection authority

If you believe that our processing of your personal data violates applicable data protection law or that your data protection rights have been violated in any other way, you have the right to lodge a complaint with the competent supervisory authority.

The competent supervisory authority is the Austrian Data Protection Authority, Barichgasse 40-42, 1030 Vienna, email: dsp@dsb.gv.at.

‍