Skip to content

Privacy Notice

Information on the processing of personal data under the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG) and section 165 of the Telecommunications Act 2021 (TKG 2021).

Version 1.3 · Last updated: November 2026

Optional map and contact consent

Google Maps loads only after selecting “Show map” and “Consent and load map”. Until then no connection is made to Google. Once loaded, Google may process your IP address and connection data, including in the USA, and may set cookies. Consent applies to this page view and can be withdrawn by closing the map. The legal basis is Article 6(1)(a) GDPR and section 165(3) TKG 2021. The contact form also records your practice area, callback preference and privacy consent with its timestamp. You may withdraw consent to handling your enquiry with effect for the future. Do not send confidential documents before initial contact and our conflict check. Automated owner email notifications are not yet active.

Controller

Mag. Stephan M. Novotny Law Firm
Landesgerichtsstraße 16/12, 1010 Vienna, Austria
Telephone: +43 1 512 93 37
Email: kanzlei@ra-novotny.at

Hosting and Server Location

This website is hosted by a service provider that delivers the website and processes technically necessary connection data in doing so. The legal basis is our legitimate interest in the secure and efficient operation of the website (Article 6(1)(f) GDPR).

Server Log Files

When you access this website, the hosting provider processes technically necessary data: the IP address of the accessing device, date and time of access, the address requested, the volume of data transferred, status message, referrer, and browser and operating system details.

The purposes are to deliver the website, ensure system security and analyse technical faults. The legal basis is Article 6(1)(f) GDPR; the legitimate interest is in maintaining the website’s operation and protecting it against abusive access. These data are not combined with other data sources or evaluated for analytics purposes.

Cookies, Local Storage and Access to Your Device

This website does not use tracking cookies or local storage by default. Google may set cookies only after you explicitly consent to loading its optional map. Your browser’s session storage contains a technical entry named tsr-scroll-restoration-v1_3. It stores scroll positions for navigation and is deleted when the tab closes.

Scroll restoration is strictly necessary for the navigation you request and does not require consent under section 165(3) TKG 2021. Consent for the optional map is requested separately where the map appears; it is not stored beyond this page view.

Technically necessary processing consists solely of delivering the page content itself (see Server Log Files). If optional technologies are used in future, consent management with equivalent buttons (“Accept all” / “Necessary only”) and a permanently accessible “Cookie settings” link must first be implemented.

Analytics, Tracking, Marketing and Social Media

No analytics or statistics services, tracking or retargeting pixels, tag management systems, advertising networks or social media plugins are used. There is no profiling or automated decision-making within the meaning of Article 22 GDPR.

Fonts, Images and Other Content

Fonts, icons and editorial images are delivered locally. No fonts are loaded from Google Fonts or comparable services. The optional Google map is loaded only after express consent; no external content is loaded automatically.

Directions Link to Google Maps

The “Contact & Directions” page contains a separate directions link and an optional map. The map is loaded only after the two-step consent described above; the directions link opens Google only when clicked. Google Ireland Limited or Google LLC then processes connection data under its own policies, which may involve a transfer to the United States. You may choose not to use the link and instead enter the address manually into a mapping service of your choice.

Contact by Telephone, Email and Fax

Telephone links open your phone application; email calls to action lead to the contact form. The firm’s email address remains visible for direct contact. In the embedded preview, telephone numbers may instead be copied locally to your clipboard.

If you contact us by telephone, email or fax, we process the data you provide—particularly your name, contact details and the content of your enquiry—to deal with your matter. The legal bases are taking steps prior to entering into a contract or performing the legal services agreement (Article 6(1)(b) GDPR), and our legitimate interest in responding to enquiries (Article 6(1)(f) GDPR). Providing the data is not required by law; however, we cannot respond to your enquiry without contact details and information about the facts.

Please note that unencrypted email is not a secure means of transmission. Do not send particularly sensitive or confidential documents by unsolicited email; instead, telephone us first to agree a secure method of transmission.

Contact Form and Lovable Cloud

The contact form processes your name, email address, optional telephone number and a description of your matter. Submissions are sent to the website; enquiries are stored on the server in Lovable Cloud. Visitors cannot retrieve stored enquiries. There is currently no automatic forwarding by email. A lawyer-client engagement arises only by separate agreement.

The purpose is to handle your enquiry. The legal basis is Article 6(1)(b) GDPR for pre-contractual enquiries, or otherwise Article 6(1)(f) GDPR based on the legitimate interest in responding to enquiries. Please do not enter health data or confidential documents in the form; agree a secure method of transmission with us beforehand.

Lawyer–Client Engagements

In the course of an engagement, we process personal data to provide legal services (Article 6(1)(b) GDPR) and to comply with statutory and professional obligations (Article 6(1)(c) GDPR), including under the Austrian Lawyers Act, Austrian Business Code, tax legislation and professional anti-money-laundering rules. We are bound by professional legal confidentiality.

Depending on the instructions, recipients may include courts, authorities, insurers, opposing counsel, experts and the firm’s tax advisers. These processing activities take place outside this website.

Newsletters, Appointment Booking, Applications and Uploads

No newsletter is sent, and there is no online appointment booking, job application form or upload facility. Files cannot be sent to us through this website.

Source of the Data

As a rule, we process data that you provide to us yourself. During an engagement, data may also come from courts, authorities, insurers or parties to proceedings, insofar as necessary for representation.

Your Rights

You have the following rights against the controller: access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18), data portability (Article 20), objection to processing based on legitimate interests (Article 21), and withdrawal of consent at any time with effect for the future (Article 7(3) GDPR).

To exercise these rights, simply contact us using the details above. Please note that professional legal confidentiality and statutory retention obligations may restrict individual rights.

You also have the right to lodge a complaint with the Austrian Data Protection Authority: www.dsb.gv.at .

Keeping This Notice Up to Date

This privacy notice describes only processing activities actually taking place as at the stated date. If technical or organisational changes occur—for example, the introduction of new services—it must be updated and the version number increased.