Data protection

Information on the processing of your personal data in accordance with Art 13 GDPR

1. General information

We are pleased to welcome you to our website. At Schönborn Rechtsanwalt GmbH (hereinafter also referred to as “we” or “us”), the protection of your personal data is a matter of great importance to us. We strictly comply with the legal provisions of the EU General Data Protection Regulation, the Austrian Data Protection Act, and other applicable legal regulations regarding the protection, lawful processing, and confidentiality of personal data.

Below, we provide information about the processing of personal data when you use our website, when you contact us via the contact form provided on our website, and when you schedule an appointment online.

2. Data controller within the meaning of the GDPR/Contact Information

Dr. Elias Schönborn

Garnisongasse 4/9
1090 Vienna
Austria

Tel. +43 1 305 30 81
E-Mail: office@es-law.at

3. Visiting the Website

3.1. Categories of Data Processed

When you visit our website, we collect and store access data in log files (also known as access logs) to ensure the website remains functional and accessible at all times. In this context, we process the following data and information:

IP address

Date and time of access

Website from which you accessed our site (referrer URL)
Operating system
Name of the internet service provider
Product and version information for the browser used
Amount of data transferred, loading time

3.2. Purpose of Data Processing and Legal Bases

Processing is carried out on the basis of our legitimate interests pursuant to Article 6(1)(f) of the GDPR. This interest consists in ensuring the functionality, security, and accessibility of the website for all visitors, and, where necessary, in asserting, defending, and enforcing legal claims.

It is not possible to directly identify you based on this information.

For information regarding your right to object to processing based on legitimate interests, see section 6. Data Subject Rights.

3.3. Data Disclosure and Recipients

Data is disclosed to third parties only if this is necessary for the technical operation, security, and maintenance of the website.

Recipients may include, in particular, IT service providers, hosting providers, and technical maintenance companies contracted by us.

We do not use cookies or similar technologies on our website. Therefore, your personal data is not processed in this manner (e.g., no data is disclosed to third parties for analysis or tracking purposes).

3.4. Data Retention Period

The processed log file data is generally stored for a period of six months and then deleted, unless longer retention is necessary to ensure IT security, to investigate cases of misuse, or to assert, exercise, or defend legal claims.

4. Use of the Online Contact Form and Online Appointment Scheduling

4.1. Categories of Data Processed

We provide a contact form on our website to make it easy for you to contact us. We process the personal data you provide in the contact form (first and last name, email, phone number, inquiry, and, optionally, company name and any comments).

In addition, you have the option to schedule an appointment via our website using an online appointment booking system. In this process, the data you provide, as well as – for a short period of time – your IP address, referrer URL, and time of access, are processed.

4.2. Purpose of Data Processing and Legal Bases

Processing is carried out on the basis of our legitimate interests pursuant to Article 6(1)(f) of the GDPR in providing simple electronic contact and communication options as well as an efficient appointment scheduling system. To the extent that the processing is necessary for the implementation of pre-contractual measures or for the performance of a contract, it is additionally based on Article 6(1)(b) of the GDPR.

If consent is obtained in individual cases, processing is based on Article 6(1)(a) of the GDPR or, in the case of special categories of personal data, on Article 9(2)(a) of the GDPR.

The data you provide will be used exclusively to process your inquiry, to contact you, and, if necessary, to organize and carry out agreed-upon appointments.

For information on your right to object to processing based on legitimate interests, see section 6. Data Subject Rights.

4.3. Data Disclosure and Recipients

To the extent necessary for these purposes, the data may be transferred to technical service providers we engage. Recipients may include, in particular, hosting providers, email service providers, providers of online appointment booking systems, and other service providers who assist us in operating the website, communicating with you, or managing appointments.

To the extent that such service providers act as data processors, processing is carried out exclusively on the basis of a data processing agreement in accordance with Article 28 of the GDPR and in accordance with our instructions.

Any further disclosure will only take place if we are legally obligated to do so or if it is necessary to assert, exercise, or defend legal claims.

4.4. Data Retention Period

The personal data processed via the contact form or the online appointment scheduling system will be stored only for as long as is necessary to process your inquiry, to contact you, and, if applicable, to organize and carry out agreed-upon appointments.

If a client engagement is established, the retention periods specified for client data apply. If no client-attorney relationship is established, the data will be deleted once the purpose of processing no longer applies, provided that no statutory retention obligations exist or further storage is necessary to assert, exercise, or defend legal claims.

5. Automated Decision-Making and Profiling

We do not use profiling or automated decision-making.

6. Data Subject Rights / Your Rights Regarding the Protection of Your Personal Data

You have several rights regarding the personal data we process about you. You may exercise all these rights free of charge and informally (by email, phone, or mail), where necessary upon proof of your identity, using the contact information provided. Your rights in detail:

Right of Access: You may request information about the data we process at any time in an informal manner. In this case, we will inform you in writing of what data we have stored about you, for what purposes we use it, to which categories of recipients we disclose it, and how long we intend to continue storing it. We will comply with your request for information without delay, but no later than one month after receipt.

Right to erasure: You have the right to request, at any time and without formal requirements, the erasure of your data processed by us. We will comply with this request provided that your data is no longer necessary for the purpose for which it was collected, you revoke any consent you may have given, in cases of unlawful data processing, or if the erasure is necessary to fulfil a legal obligation.

Right to Rectification: Should we inadvertently process inaccurate or incomplete data about you, we will, of course, correct it. To do so, simply submit an informal request to us.

Right to Restriction of Processing: If the erasure of your data is not possible or you do not wish it to be erased, but you do not consent to any use of the data beyond its storage, we are generally obligated to restrict the further processing of your personal data upon your request.

Right to Data Portability: Upon your informal request, we will provide you, free of charge, with the data we have stored about you—which we obtained on the basis of a contract or your consent—in a commonly used file format. You may use this data for your own purposes. If you wish and it is technically feasible, we will also directly transfer your data to a recipient you specify. In this case, we will notify you once the transfer has been completed. We will comply with your request without delay, but no later than one month after receiving it.

Right to Withdraw Consent: You may withdraw your consent to data processing at any time with future effect; in this case, we will cease processing your data. The lawfulness of the data processing carried out up to that point is not affected by the withdrawal of consent.

Right to object: If we process your data based on our legitimate interest, you have the right under the General Data Protection Regulation to object to the further processing of your data. If you exercise this right, we will no longer process your data for the purpose to which you objected—unless there are legitimate grounds on our part for further processing that outweigh your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.

7. Right to File a Complaint

The EU General Data Protection Regulation and the Austrian Data Protection Act guarantee you the rights mentioned above with regard to data protection. If you believe that we have violated any of these rights, you have the option to file a complaint with a data protection supervisory authority. The supervisory authority in Austria is the Austrian Data Protection Authority, Barichgasse 40-42, 1030 Vienna.

8. Data Security

We take all necessary and appropriate technical and organizational security measures to protect your personal data from loss and misuse. Your data is stored in a secure, state-of-the-art operating environment.

Access to our website is secured via HTTPS. This means that communication between your device and our servers is encrypted.

9. Other Information

We expressly reserve the right to make future changes or adjustments to this Privacy Policy. If you have any questions or suggestions, please contact us using the contact information provided.