Privacy policy.

1. Controller

The controller under the General Data Protection Regulation is BRANDAUER Rechtsanwälte GmbH, Giselakai 51, 5020 Salzburg, Austria. You can reach us by phone at +43 662 6280000 and by email at kanzlei@brandauer-rechtsanwaelte.at.

2. Purposes, legal bases and data categories

We process personal data only where necessary to operate this website, handle an inquiry or prepare and provide legal services. The legal bases include Art. 6(1)(b) GDPR for contract performance, Art. 6(1)(a) GDPR for consent and Art. 6(1)(f) GDPR for legitimate interests in security, communication and reach measurement.

Processed data may include name, contact details, inquiry content, documents sent to us, technical access data, communication data and, where required for a legal matter, special categories of personal data.

3. Contact and engagement preparation

If you contact us by email, phone, appointment booking or form, we process your information to handle the inquiry and document the communication. Content from forms or legal orientation tools is used to prepare the consultation and not for automated decisions.

4. Recipients, confidentiality and retention

Data are shared only where legally permitted or required for handling the matter, for example with courts, authorities, opposing parties, substitute lawyers, IT service providers or other professional service providers. Attorneys are bound by professional confidentiality. Data are retained only as long as needed for the inquiry, the engagement, statutory duties and defence against claims.

5. Cookies, consent and analytics

This website uses technically required functions and a cookie consent manager. Your selection is stored locally or in a cookie such as brandauer-klaro. Google Analytics 4 is loaded only after express consent. Cloudflare Web Analytics may be used cookielessly and in aggregated form without identifying individual visitors.

You can change or withdraw consent at any time through the footer link "Cookie settings".

6. Server logs and Cloudflare

When the website is accessed, technically necessary access data are processed, such as IP address, date and time, browser, operating system, referrer and requested page. Delivery may be provided through Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. The purpose is secure and efficient website operation. For third-country transfers we rely on appropriate safeguards such as standard contractual clauses.

7. Your rights

Subject to the GDPR and attorney-client confidentiality, you have rights of access, rectification, erasure, restriction, data portability, objection and withdrawal of consent. Complaints may be lodged with the Austrian Data Protection Authority, Barichgasse 40-42, 1030 Vienna.