Privacy policy
Controller
Mag. Patrick Maydell, LL.M., Attorney at Law
Neustiftgasse 17/1/9, 1070 Vienna, Austria
Telephone: +43 1 295 42 51
Email: office@maydell-law.at
Website and hosting
When you visit this website, your IP address, the time and URL of the request, and browser and device information are processed. Depending on your browser settings, the referring page is also transmitted. Search terms form part of the requested URL; on the protected preview, access credentials are also processed for access control. The purpose is to provide and secure the website, including its search function. The legal basis is Article 6(1)(f) GDPR; the legitimate interest is reliable operation and protection against abuse. Connection data is technically necessary; without it, the website cannot be delivered.
The website is hosted using Cloudflare Workers, provided by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. Cloudflare processes data as a processor and for its own security and operational purposes. Processing outside the European Economic Area, particularly in the USA, is possible. Transfers to Cloudflare in the USA rely on the EU-US Data Privacy Framework; standard contractual clauses are provided for other transfers covered by the data processing agreement where no adequacy decision applies. These clauses are available in the Cloudflare Data Processing Addendum.
The website application does not store its own personal access logs. Cloudflare retains operational and security data according to its purpose; relevant criteria are the need to operate the service, investigate security incidents and comply with statutory retention obligations. Further details are provided in the Cloudflare privacy policy.
Contact enquiries
If you contact the firm by email or telephone, your contact details and the information you provide are processed to deal with your enquiry. The legal basis is Article 6(1)(b) GDPR for steps towards an engagement or performance of a contract, and otherwise Article 6(1)(f) GDPR with the legitimate interest of responding to your enquiry. Where special categories of personal data are necessary to establish, exercise or defend legal claims, Article 9(2)(f) GDPR also applies. Recipients may include the providers engaged for email, telecommunications and IT support. Providing this information is voluntary; without the necessary information, the enquiry cannot be handled.
Data is stored until the enquiry has been concluded. Further retention depends on applicable statutory and professional retention obligations and the need to establish or defend legal claims until the relevant limitation period expires or proceedings conclude. Compliance with statutory retention obligations is based on Article 6(1)(c) GDPR; pursuing or defending legal claims is based on Article 6(1)(f) GDPR.
Location map
The contact page automatically loads an OpenStreetMap map. The OpenStreetMap Foundation (OSMF), St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom, receives in particular your IP address, browser information and map request. OSMF acts as an independent controller and uses Fastly’s worldwide network to deliver map tiles. The purpose and legitimate interest are to display the firm's location and help visitors find it; the legal basis for embedding the map is Article 6(1)(f) GDPR. Without transmitting connection data, the map cannot be displayed.
The European Commission has adopted an adequacy decision for the United Kingdom. Map delivery may involve other countries, including the USA. For transfers without an applicable adequacy decision or another recognised transfer mechanism, Fastly's Data Processing Terms provide for standard contractual clauses or the UK transfer instruments. OSMF independently determines retention of its connection data for operation and security. Details of processing and retention are provided in the privacy information of OSMF and Fastly.
Your rights
Subject to the statutory conditions, you have rights of access, rectification, erasure, restriction of processing and data portability. To exercise these rights, contact office@maydell-law.at. You may also lodge a complaint with a data protection supervisory authority, in particular the Austrian Data Protection Authority.
Right to object: You may object to processing based on Article 6(1)(f) GDPR on grounds relating to your particular situation. Processing will then stop unless overriding compelling legitimate grounds apply or the processing serves to establish, exercise or defend legal claims.