ZEMANN IP ("I", "me") attaches great importance to the protection of your personal data (hereinafter referred to as "data"). I comply with the applicable data protection law, in particular the General Data Protection Regulation ("GDPR") and the Austrian Data Protection Act ("DSG").

Controller

The processing of the data collected from you is carried out by me as the controller – my contact details are:

ZEMANN IP

Adolf Zemann

Landesgerichtsstraße 16/IE

A-1010 Vienna

Phone: +43-1-3618114

Email: office@zemann.law

Processing Purposes & Legal Bases

I process the data that is necessary for offering and providing my services as a lawyer or that you have otherwise voluntarily provided. In no case will an automated decision-making process, including profiling, take place.

The processing is carried out for the following purposes and based on the following legal bases:

Processing of Data in an Attorney-Client Relationship or for the Initiation of Such a Relationship:

I process your personal data in order to be able to identify you as a potential or current client (Article 6 (1) (f) GDPR), to carry out pre-contractual measures or to fulfil contractual obligations for the mandate (Article 6 (1) (b) GDPR) and to fulfil legal and professional obligations, in particular in connection with the prevention of money laundering and terrorist financing (Article 6 (1) (c) GDPR).

Please note that providing your data is necessary for the provision of legal services. Therefore, I cannot accept a mandate if you do not wish to provide your data.

Processing When Using the Website and Contacting Interested Parties:

I process your personal data to safeguard my legitimate interest in ensuring the operation, security, and optimization of the website www.zemann.law (Art 6 para 1 lit f GDPR) and – if you submit an inquiry via the contact form, email, or phone – to respond to the inquiry (Art 6 para 1 lit a GDPR – you grant your consent by submitting the inquiry), as well as to fulfill legal and professional obligations, particularly in connection with the prevention of money laundering and terrorist financing (Art 6 para 1 lit c GDPR).

When you visit the website, the following data is collected, stored and evaluated: browser type, operating system, country, date, time and duration of access, IP address and websites visited. The data is not used to personally identify the visitor. The server is located in Austria.

Processing of Data of Opponents and Informants in Mandates Handled by Me

If you are a potential or current opponent of my clients or informants in matters handled by me, I may process data about you that I receive from my clients, from the internet, or other available public sources as well as from other third parties. No further information about this data processing will be provided, as I am exempt from any information obligation in this regard (Art 14 para 5 lit d GDPR).

Recipients and Categories of Recipients

Your data may be transmitted to the following recipients and categories of recipients for the processing purposes mentioned above:

Processors: Your data will also be processed by processors on our behalf. This particularly concerns IT service providers (data centers and IT support services) and providers of (lawyer) software solutions.

Third Parties: In the course of my legal practice, it may also be necessary to forward your data to third parties (e.g., opposing party, colleagues commissioned by me, insurers, bar association, etc.), courts, or authorities. This is done exclusively based on the GDPR, particularly to fulfill the mandate, based on prior consent, or due to legal regulations.

In cases where recipients of your data are located outside the European Union, the transfer will only take place to recipients in countries for which there is an appropriate adequacy decision regarding an adequate level of data protection by the EU Commission or those that have otherwise committed to adhering to an adequate level of data protection.

Duration of Data Storage

The data is stored as long as it is required by the respective purpose of processing and applicable law prescribes it (i.e., for the duration of the legal retention requirements) or allows it (expiration of limitation periods for potential legal claims or as long as a legitimate interest exists).

Your Rights as a Data Subject

As a data subject, you have the right regarding your data to

• access data processed by me (Art 15 GDPR),

• correct or delete (Art 16 and 17 GDPR),

• restrict processing (Art 18 GDPR), and

• data portability (Art 20 GDPR).

If I process your data based on my legitimate interest, Art 21 GDPR provides for the right to object to this processing. You also have the right to withdraw any granted consent for the processing of your data with effect for the future at any time if the processing is based on consent.

To exercise your rights, please contact me at the contact details provided above. If you believe that your right to lawful processing of your data has been violated, you also have the option to file a complaint with the competent supervisory authority (in Austria: the Data Protection Authority).

Austrian Data Protection Authority

Barichgasse 40-42

1030 Vienna

Phone: +43 1 52 152-0

Email: dsb@dsb.gv.at