DATA PROTECTION DECLARATION ON THE PROCESSING OF PERSONAL DATA LAST UPDATE: 21/04/2026
This Privacy Policy explains how Moser § Törö Rechtsanwälte ("Moser § Törö" or "We") processes personal data in accordance with Art 13 Regulation (EU) 2016/679 ("GDPR").
I. GENERAL PROVISIONS
This Privacy Policy provides clear, transparent and easily understandable information on how Moser § Törö collects, uses, stores and protects personal data in accordance with Regulation (EU) 2016/679 ("GDPR") and applicable national legislation on the protection of personal data. The terms, conditions and definitions used in this Privacy Policy shall have the meaning ascribed to them in the GDPR, including the terms "controller", "data subject", "personal data", "processing", "recipient" and any other terms defined in the GDPR and used in this Privacy Policy.
II. PERSON RESPONSIBLE FOR THE PERSONAL DATA
The controller responsible for the processing of personal data is
Moser § Törö Attorneys at Law
Elisabethstrasse 26
1010 Vienna
A data protection officer pursuant to Art 37 GDPR has not been appointed.
III. PROCESSED DATA, PURPOSES AND LEGAL BASES
Depending on how you interact with us, we may process the following categories of data:
A. Data provided directly by you
1. Contact details
Your first and last name, email address, telephone number, message content and any other information you provide in the enquiry will be processed for the purpose of making contact, arranging appointments and responding to enquiries. The processing is carried out on the legal basis of legitimate interest Art. 6 para. 1 lit. f GDPR (provision of low-threshold electronic contact, appointment scheduling and communication options) and, if applicable, contract fulfilment Art. 6 para. 1 lit. b GDPR (contract, pre-contractual relationship).
2. Master data
For the purpose of documenting our clients and invoicing our services, we process first and last name, email address, telephone number, company details, date of birth, place of birth, nationality, residential address or registered office, billing address, copy of ID, PEP property, role in the client relationship, information on legal expenses insurance, bank details, information on the reference source and consent to use as a reference. This processing is mainly based on the legal basis of contract fulfilment pursuant to Art 6 para 1 lit b GDPR. However, it also serves to fulfil our (professional) legal obligations in connection with the prevention of money laundering and terrorist financing in accordance with Art 6 para 1 lit c GDPR.
Information that is not mandatory in the client master data sheet, but can be provided voluntarily by you, is processed on the legal basis of consent in accordance with Art 6 para 1 lit a GDPR. This includes information on the reference source and consent to use as a reference.
We will use your contact details to send you occasional newsletters, information about our range of services and invitations to events organised by our law firm (Art. 6 (1) (f) GDPR). You have the right to object to this processing of your data for the purpose of direct marketing at any time without stating reasons by sending a letter to us or an email to [email protected]. We will process your data for this purpose for as long as you do not object, but only for three years after termination of the contract.
3. Data provided within the scope of the client relationship
In order to perform and process our legal services, we process all data that you provide to us as part of the client relationship for the provision of legal services. This may also involve special categories of personal data within the meaning of Art. 9 GDPR.
This processing is carried out to fulfil our contractual obligations in accordance with Art. 6 para. 1 lit. b GDPR and - if special categories of personal data are involved - with your consent in accordance with Art. 9 para. 2 lit. a GDPR.
B. Automatically recorded data
4. Data of visitors to our website
To improve our information offering, the following data is collected, stored and analysed when you visit our website: IP address, browser/device details, operating system, language settings; pages visited, date/time of access, traffic sources, other interactions with the website. This is done to safeguard our legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR, namely to ensure the operation, security and optimisation of our website
5. Cookies and similar technologies
Our website uses cookie technologies that are necessary for the operation of the website and, if you decide to use them, analysis and/or marketing cookies. Cookies that are absolutely necessary for the proper functioning of the website are processed on the basis of legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR.
Functional and analytical and/or marketing cookies are only processed with your express consent via the cookie banner that is visible when you first access the website. Your preferences can be changed at any time in your browser settings.
C. Other data
6. Data from potential opponents
We also process personal data about you if you are opponents of our clients or co-parties and persons providing information in matters that we handle for our clients. We usually receive this data from our clients or their business partners, from the Internet or other available public sources, as well as from other third parties who serve as sources of information for us. We will not provide separate, specific information about data processing even if we come into direct contact with you in your capacity as an opponent, co-participating party or person providing information, because we are exempt from the obligation to provide information in this regard pursuant to Art. 14 para. 5 GDPR.
7. Data from sources other than the data subject himself/herself
In individual cases, we may also obtain data from other sources. These other sources are publicly accessible information that we collect from the Internet or in connection with our legal obligations to check for the prevention of money laundering and terrorist financing (e.g. company register, land register, insolvency edict, register of beneficial owners, databases on politically exposed persons, register of associations, business information system). The data that we obtain about you from third-party sources and store in our systems is limited to contact information (e-mail address and telephone number, postal address), whether you are a politically exposed person, your function in the company, your professional career, and your assignment to or responsibility for a specific company (usually your employer or companies affiliated with it or otherwise associated with it) if you have not disclosed this data to us in the course of communication. This processing is based on our legitimate interest in a complete set of data about your person required for the processing of the mandate, the business relationship (Art 6 para 1 lit f GDPR).
IV. STORAGE PERIOD
We will only store your data for as long as is necessary for the purposes for which we have collected your data.
For tax law reasons, we generally store contracts and other documents as well as related correspondence from our contractual relationship for a period of ten years.
We are required by law to retain files from mandates and documentation in connection with our duty of review to prevent money laundering and terrorist financing for five years after termination of the mandate; in individual cases, for example for the assertion and defence of legal claims, we retain these files for up to 30 years after termination of the mandate.
We may also retain your personal data for certain periods of time on the legal basis of legitimate interest. When determining the periods, we take care not to infringe your rights and freedoms. If the data retention is no longer required, we will delete your data immediately.
Data that we process on the legal basis of consent will be stored for as long as your consent is still valid.
V. DATA TRANSFER AND RECIPIENTS
As a rule, your personal data will be processed by Moser § Törö Rechtsanwälte GesBR.
In order to fulfil your order, it may also be necessary to forward your data to third parties. This may include courts, authorities, opposing parties, substitutes, insurance companies and service providers that we use and to whom we make data available (e.g. operation and maintenance of the website via external service providers, transfer of data to e-mail providers in the course of communication, data storage in legal software for documentation purposes).
The data is passed on for the purpose of fulfilling the contract in accordance with Art. 6 para. 1 lit. b GDPR and for our legitimate interest in providing our services efficiently in accordance with Art. 6 para. 1 lit. f GDPR. However, we may also be legally or officially obliged to pass on data to third parties (e.g. passing on data to law enforcement authorities). In this case, the data transfer takes place on the basis of Art. 6 para. 1 lit. c GDPR.
For all data transfers, we ensure that only the absolutely necessary information is transferred and fulfil the data protection requirements for data transfer (e.g. strict obligation to follow instructions for processors via Art. 28 contracts, obligation to secrecy and confidentiality, obligation to fully comply with an adequate level of protection in the processing of personal data).
We do not intend to transfer your personal data to recipients outside the European Economic Area. Should such a transfer outside the European Economic Area exceptionally take place, this will be done exclusively for the purposes stated in this Privacy Policy and with the application of appropriate safeguards as prescribed in the General Data Protection Regulation (e.g. standard contractual clauses approved by the European Commission) and, if necessary, additional security measures.
VI. DATA SECURITY
Appropriate organisational and technical precautions are taken to protect your personal data. These precautions relate in particular to protection against unauthorised, unlawful or accidental access, processing, loss, use and manipulation.
We endeavour to ensure that data breaches are detected at an early stage and, if necessary, reported immediately to you or the competent supervisory authority, taking into account the respective data categories affected.
Notwithstanding our endeavours to maintain an appropriately high level of due diligence at all times, it cannot be ruled out that information that you disclose to us via the Internet may be viewed and used by other persons.
Please note that we therefore accept no liability whatsoever for the disclosure of information due to errors in data transmission not caused by us and/or unauthorised access by third parties (e.g. hacking of email account or telephone, interception of faxes).
VII. RIGHTS OF DATA SUBJECTS
You have the right at any time to request information about which of your data is processed by us (see Art 15 GDPR in detail), to have your data corrected or deleted (see Art 16 GDPR in detail), to restrict the processing of your data (see Art 18 GDPR in detail), to object to data processing (see Art 21 GDPR in detail) and to assert the right to data portability (see Art 20 GDPR in detail). If there are any changes to your personal data, please inform us accordingly.
If we process your data on the basis of your consent, you have the right to withdraw this consent at any time by sending an email to [email protected] or by post to Moser § Törö Rechtsanwälte, Elisabethstraße 26, 1010 Vienna. This does not affect the lawfulness of the data processing carried out up to this point in time (Art. 7 para. 3 GDPR).
If, despite our obligation to process your data lawfully, your right to lawful processing of your data is violated, please contact us so that we can learn about your concerns and address them. You also have the right to lodge a complaint with the competent supervisory authority. In Austria, this is the Data Protection Authority, Barichgasse 40-42, 1030 Vienna.
If you have any further questions about the processing of your data, you are welcome to contact us directly by email at [email protected] or by post to Moser § Törö Rechtsanwälte, Elisabethstraße 26, 1010 Vienna.