As of: February 1, 2026

1. Processing activity

   Online availability of information about the controller's company for interested parties and customers.

   If terms relating to natural persons are only used in the masculine form in this data protection information, they refer to women and men equally. When applying the term to specific natural persons, the gender-specific form must be used. Customers are understood to be both consumers and entrepreneurs.

2. Contact details of the controller within the meaning of the General Data Protection Regulation (“GDPR”)

   Mag. Klaus Keider, Attorney at Law
   Lobkowitzplatz 1/24, A-1010 Vienna, Austria
   Tel +43  1235  0400
   kanzlei@anwaltkeider.at
   www.anwaltkeider.at

3. Purpose of data processing on the legal basis of contract fulfillment

   • Provision of information and advertising about the controller's company

   • Provision of communication channels

4. Legal basis for data processing

   • Online use - contract fulfillment
     The use of the controller's online media is based on a contract within the meaning of Art. 6 (1) (b) GDPR.
     (Kühling/Buchner DS-GVO 2018, Art 6 RZ 59)

   • Overriding legitimate interests
     (see point 6.)

5. Change of purpose

   The controller does not change the purpose of the processing of personal data.

6. Description of the (predominant) legitimate interests for the purposes of IT security and the operation and administration of the website

   The controller stores the IP addresses of its customers for a period of 7 days in order to be able to defend against targeted attacks in the form of server overload (“denial of service” attacks) and other damage to the systems. The controller has an overriding legitimate interest in this data processing for the purpose of maintaining the functionality of its online services (Recital 49 of the GDPR), insofar as this is in accordance with applicable law and the rights and freedoms of customers.

7. Evaluation of personal aspects of the customer

   No evaluation of personal aspects of the customer takes place.

8. Obligation to provide data

   Customers are not obliged to provide data.

9. Automated decision-making

   The customer is not subject to any automated decision that has legal effect on them.

10. Types of data processed

    No personal data is collected by the controller.