Name and contact details of the person responsible:

Mag. Lisa Feiertag, LL.M.,
Attorney at Law
Weihburggasse 18-20/45, 1010 Vienna
Tel: 01 / 39 10 044

What is personal data?

According to Art. 4 para 1 DSGVO, this includes any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

For what purposes are personal data processed and on what legal basis?

--Purposes of processing personal data of visitors to this website:

The processing is required

-according to Art 6 para 1 lit f DSGVO for quality assurance and optimization of this website, thus for the protection of the legitimate interests of the responsible party.

--Processing of personal data of persons who contact us via the contact form:

The processing is required

-according to Art 6 para 1 lit a DSGVO to process the requests, which are made via the contact form, by e-mail or by phone to me.

-Processing of personal data of clients:

The processing is required

-according to Art 6 para 1 lit b DSGVO for the performance of the contract, of which the data subject is a contracting party, or for the performance of pre-contractual measures, which take place at the request of the data subject,

-according to Art 6 para 1 lit c DSGVO for the fulfillment of my legal and in particular professional obligations,

-according to Art 6 para 1 lit f DSGVO to protect my legitimate interests (assertion, exercise or defense of legal claims).

-Processing of personal data of applicants:

The processing is required

- according to Art 6 para 1 lit b DSGVO for the fulfillment of pre-contractual measures

-according to Art 6 para 1 lit d DSGVO for the fulfillment of my legal and professional obligations.

-Processing of personal data of opponents, intervening parties and other persons involved in the context of a legal dispute of my clients:

In this context, I refer to my attorney-client confidentiality pursuant to Art 14  para 5 DSGVO. Nevertheless, you may submit a request for information to me, which I must comply with - as far as possible within the framework of the lawyer's confidentiality.

-Processing of personal data of cooperation partners and suppliers:

The processing is required

-according to Art 6 para 1 lit b DSGVO for the fulfillment of the contract, of which the data subject is a contractual partner, or for the fulfillment of pre-contractual measures, which take place at the request of the data subject.

-according to Art 6 para 1 lit c DSGVO to fulfill my legal obligations.

Recipients or categories of recipients of the personal data:

Personal data is provided or may be provided to the following recipients in the following areas:

Internet and Telecommunications Services Division: A1 Telekom Austria AG, myTweak Telekom GmbH

Tax consulting division: Mag. Altenburger Steuerberatungs GmbH

Website, file management and IT area: Advokat Unternehmensberatung Greiter & Greiter GmbH, X-IT GmbH, web hosting World4You Internet Service GmbH, WordPress, Cybot A/S

Area of fulfillment of professional obligations: Vienna Bar Association

Area of fulfillment of the mandate: courts, authorities, opponents, lawyers, experts, interpreters, cooperation partners

Duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration:

Pursuant to Section 132 para 1 BAO, there is a seven-year retention obligation.

Pursuant to Section 12 para 3 RAO, there is a five-year retention obligation.

If necessary (in particular for the assertion and defense of legal claims), the retention period may also be 30 years after termination of the mandate.

Personal data of applicants who have not been hired will be deleted 7 months after the end of the application process.

The existence of a right of access on the part of the controller to the personal data concerned, as well as to rectification or erasure or to restriction of processing or a right to object to processing, as well as the right to data portability and a right to lodge a complaint with a supervisory authority:

You have the following rights under the DSGVO:

-Right of access according to Art 15 DSGVO

-Right of rectification according to Art 16 DSGVO

-Right to erasure according to Art 17 DSGVO

-Right to restriction of processing according to Art 18 DSGVO

-Right to object to processing pursuant to Art 21 DSGVO

-Right to data portability according to Art 20 DSGVO

In the event that I process your personal data on the basis of your consent, you may, in accordance with Art 7 para 3 DSGVO, revoke your consent once given at any time at This has the consequence that I may no longer continue the data processing(s) based on this consent for the future.
If you have any questions or concerns about the processing of your personal data, please contact:

Pursuant to Art 77 DSGVO, you have the right to lodge a complaint with the data protection authority.

Whether the provision of the personal data is required by law or contract or necessary for the conclusion of a contract, whether the data subject is obliged to provide the personal data and what the possible consequences of not providing it would be:

--When visitors to the website: If you do not want your personal data (IP address) to be processed when you visit this website, you can change your consent in the cookie settings.

-- for persons who contact us via the contact form: If you do not want your personal data (name, e-mail address) to be processed by sending your contact request, do not use the contact form Before you have the opportunity to enter your data, you will be informed about the privacy policy. If you do not accept the privacy policy, you can not contact me via the contact form.

--at clients: The provision of personal data is necessary for the proper processing of the mandate. If you do not wish to provide me with your personal data, I cannot conclude an order relationship with you.

-- for applicants: The provision of personal data is necessary for the proper execution of the application process and, if applicable, for the conclusion of a service contract. If you do not wish to provide me with your personal data, I will not be able to process your application or conclude a service contract with you.

--at cooperation partners and suppliers: The provision of personal data is necessary for the proper performance of the contract. If you do not wish to provide me with your personal data, I cannot conclude a contract with you.

The existence of automated decision-making including profiling pursuant to Art 22(1) and (4) and - at least in these cases - meaningful information about the logic involved and the scope and intended effects of such processing for the data subject:

So-called cookies are used on my website. A cookie is a small file that can be stored on your computer when you visit a website. Basically, cookies are used to provide users with additional functions on a website. For example, they may be used to make it easier for you to navigate a website, to allow you to continue using a website where you left it, and/or to remember your preferences and settings when you visit the website again. Cookies cannot access, read or modify any other data on your computer. Most of the cookies on my website are session cookies. They are automatically deleted when you leave my website again. Persistent cookies, on the other hand, remain on your computer until you delete them manually in your browser. I use such persistent cookies to recognize you the next time you visit my website. If you want to control cookies on your computer, you can set your browser preferences to notify you when a website wants to store cookies. You can also block or delete cookies if they have already been stored on your computer. If you want to know more about how to set these steps, please use the "Help" function in your browser.

Please note that blocking or deleting cookies may affect your online experience and prevent you from fully using this website.

For analysis purposes, I also use services of etracker GmbH (hereinafter "etracker") for my website. Etracker cookies do not contain any information that allows identification of a user. The data generated by etracker is processed and stored by etracker exclusively in Germany. This data processing is carried out in accordance with Art 6 para 1 lit f DSGVO (legitimate interest). Further information on data protection at etracker can also be found at (

For my website I also use functions of the provider Cookiebot (Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark). With Cookiebot it is possible to provide a comprehensive cookie notice. By using this feature, data may be sent from you to Cookiebot or Cybot A/S, respectively, stored and processed.
If you allow cookies, the following data will be sent to Cybot A/S, stored and processed. -
IP address (in anonymized form, the last 3 digits are set to 0)
- date and time of your consent
- my website URL -
technical browser data -
encrypted anonymous key
- the cookies you have allowed (as proof of consent) You can find
the privacy policy of "Cookiebot" or Cybot A/S at

Due to the described purposes of use, the legal basis for the processing of personal data using cookies is Art 6 para 1 lit f DSGVO. If you have given your consent to the use of cookies on the basis of a notice given by me on the website ("cookie banner"), the legality of the use is additionally based on Art. 6 para 1 lit a DSGVO.

As soon as the data transmitted to me via the cookies is no longer required to achieve the purposes described above, this information will be deleted. Further storage will take place in individual cases if required by law.

Data security and backup measures

I undertake to treat your personal data confidentially. To prevent manipulation or loss or misuse of your data stored with me, I take extensive technical and organizational security measures, which are regularly reviewed and adapted to technological progress. However, I would like to point out that, due to the structure of the Internet, it is possible that the rules of data protection and the above-mentioned security measures are not observed by other persons or institutions that are not in my area of responsibility. In particular, unencrypted data disclosed - for example, if this is done by e-mail - can be read by third parties. I have technically no influence on this. It is your responsibility as a user to protect the data you provide by encryption or otherwise against misuse.

TLS encryption with https

I use HTTPS for data transmission on the Internet, the transmission of all data from your browser to my web server is secured (data protection through technology design according to Art 25 para 1 DSGVO). By means of TLS (encryption protocol for secure data transmission on the Internet) I can ensure the protection of confidential data.