Privacy policy.

I. Controller

II. What data we process

• Enquiry data: name, contact details and information about your case (area, amount in dispute, facts) submitted via form, email or phone call.
• Uploaded documents: documents you voluntarily attach to your case.
• Claim pre-check: your answers to the pre-check; no personal contact data is stored unless you submit an enquiry.
• Server log data: IP address, time, page requested, browser identifier – technically required when you access the website.
• Statistical data (with consent only): page visited, click target, referrer, browser identifier – without profiling.

III. Purposes and legal bases

• Initial assessment and contract initiation, Art 6(1)(b) GDPR.
• Contract performance once instructed, Art 6(1)(b) GDPR.
• Operation, security and spam protection of the website, Art 6(1)(f) GDPR.
• Anonymous traffic measurement, Art 6(1)(a) GDPR and § 165(3) TKG 2021 – only with your consent, revocable at any time.
• Statutory retention obligations, Art 6(1)(c) GDPR.

IV. Cookies and local storage

We use necessary storage (your cookie choice, spam protection, login for the internal admin area) and – only with your consent – anonymous statistics. A full overview of purpose and retention periods, as well as the option to change or withdraw your consent at any time, can be found in the cookie policy.

V. Spam protection (Cloudflare Turnstile)

To protect the contact form from automated submissions, we use Cloudflare Turnstile (Cloudflare Inc./Cloudflare Germany GmbH). This processes the IP address and technical browser characteristics, legal basis Art 6(1)(f) GDPR (security). Turnstile does not create advertising profiles. We have a data processing agreement with Cloudflare, including EU Standard Contractual Clauses.

VI. Hosting and processors

• Hosting and database: operation of the website, storage of enquiries and uploads on servers in the EU.
• Email delivery: sending of notifications and status updates.
• Security and CDN services: delivery and protection of the website.

All service providers are contractually bound under Art 28 GDPR and process data exclusively on our instructions.

VII. Recipients

To assess and pursue your claim, we pass case data only to the lawyers entrusted with the proceedings. Beyond that, disclosure only occurs where we are legally required to do so. No transfer to third countries takes place without appropriate safeguards under Art 44 ff GDPR.

VIII. Status link

On request, you receive a personal status link with a random token that lets you view the progress of your case. The link is not publicly discoverable; please do not share it. We deactivate it at any time on request.

IX. Retention period

We delete enquiry data without an instruction at the latest twelve months after completion of the initial assessment. Where instructed, we store data for the duration of the contractual relationship and beyond, within statutory retention periods (generally seven years, § 132 BAO). Statistical data is deleted after twelve months, server log data generally after 30 days.

X. No automated decision-making

No decision is taken solely through automated processing, including profiling, within the meaning of Art 22 GDPR. The claim pre-check only provides a non-binding initial assessment; every case decision is made by a human.

XI. Your rights

You have the right to access, rectification, erasure, restriction, data portability and objection (Art 15–21 GDPR), and the right to withdraw any consent given at any time with effect for the future. Please contact office@prozess-finanzierung.at. You may also lodge a complaint with the Austrian Data Protection Authority: dsb.gv.at.

XII. Obligation to provide data

Providing your data is voluntary. Without contact and case data, however, we cannot review your enquiry or initiate a contract.

Last updated: August 2026