Privacy Policy for Clients
Protecting your personal data is a top priority for us. Therefore, when collecting and processing your data, we strictly adhere to data protection regulations and our professional duty of confidentiality.
In addition to our clients themselves, our firm acts as a data controller under the GDPR. We address this specific responsibility through a series of measures, which are detailed below.
This privacy policy outlines the key aspects of how we process your personal data. This information is intended for our current and former clients, interested parties, and potential future clients, as well as their respective shareholders, governing bodies, and other employees.
1. Purposes of data processing
We will process your personal data for the following purposes:
- for establishing, managing, and processing the business relationship;
- for strengthening existing client relationships or establishing new client relationships or approaching prospective clients, including providing information on current legal developments and our range of services (marketing);
- in the event that a mandate has already been established, for the internal organization and claims management of the firm
and, where commissioned by the client:
- within the scope of fulfilling our specific contract with the client;
- for performing payroll accounting for clients (including monthly wage and salary statements, monthly and annual reports to authorities, etc.);
- for fulfilling other duties that constitute legal obligations for our clients, such as the calculation of levies (including self-assessed taxes such as VAT);
- for performing financial and business accounting for clients;
- for providing consulting and representation services in the field of tax law and economic affairs;
- for consulting and representation in contribution, insurance, and benefit matters regarding social security,
- for representation before administrative courts and administrative authorities, before legally recognized churches and religious communities in contribution matters, and before all other official institutions, and
- for other consulting services as well as for assuming fiduciary duties and managing assets within the scope of authorization under Section 2 WTBG 2017,
- as well as for any commissioned task in accordance with Section 2 WTBG 2017
Insofar as we collect your personal data directly from you, providing your data is generally voluntary. However, we may be unable to fulfill our mandate, or may only be able to do so partially, if you do not provide your personal data.
2. Legal bases for processing
If you are a prospective or potential future client, we will only process your contact details for the purpose of direct marketing via electronic mail or telephone contact with your consent in accordance with Art. 6 (1) (a) of the General Data Protection Regulation ("GDPR").
If you are our client, we process your personal data because it is necessary to fulfill the contract concluded with you (Art. 6 (1) (b) GDPR).
Furthermore, we process your personal data on the basis of our overriding legitimate interest in achieving the purposes mentioned in point 1 (Art. 6 (1) (f) GDPR) and on the legal basis of the WTBG 2017 (Art. 9 (2) (g) GDPR).
3. Transmission of your personal data
Insofar as this is strictly necessary for the purposes mentioned in point 1, we will transmit your personal data to the following recipients:
- IT service providers engaged by us,
- administrative authorities, courts, and public law corporations,
- insurance companies in connection with the conclusion of an insurance contract for the service or the occurrence of an insured event (e.g., liability insurance),
- clients, insofar as the data concerns the shareholders, corporate bodies, and other employees of the respective client,
- cooperation partners and legal representatives acting on our behalf,
- other recipients designated by the client (e.g., the client's group companies),
- additionally, in the case of personal data of our clients' employees in the area of payroll accounting:
- creditors of the employee and other parties involved in any associated legal proceedings, including voluntary salary assignments for due claims,
- bodies of internal and statutory interest representation,
- insurance companies within the scope of existing group or individual insurance policies, as well as employee pension funds (MVK),
- banks involved in disbursements to the employee or third parties,
- company physicians and pension funds,
- Co-insured parties and
- additionally in the area of financial and business accounting for clients:
- Debt collection agencies,
- Banks on behalf of the client,
- Factoring companies, assignees, and leasing companies.
4. Retention period
In principle, we store your personal data until the end of the business relationship for which we collected your data or until the expiration of applicable statutory limitation and retention periods; furthermore, until the conclusion of any legal disputes in which the data is required as evidence or until the end of a legitimate interest.
If you are a client, former client, prospective client, or a contact person for any of the aforementioned, we will store your personal data for marketing purposes until you object or withdraw your consent, provided the marketing measure is based on your consent.
5. Applicants
You agree that we may include and process the personal data and application documents you have provided in our database in order to locate and contact you regarding job openings if you are considered a potential candidate based on the data you have provided.
You may withdraw this consent at any time. We reserve the right to delete some or all of your data at any time without prior notice and without providing a reason. We are not obligated to consider your data as part of a selection process, and you have no legal claim to the use of your data by us.
6. Your rights regarding personal data
You have the right, among other things, to (i) verify whether and which personal data we process about you and to receive copies of this data, (ii) request the correction, supplementation, or deletion of your personal data if it is incorrect or not processed in accordance with the law, (iii) request that we restrict the processing of your personal data, (iv) object to the processing of your personal data under certain circumstances or withdraw consent previously given for processing, whereby a withdrawal does not affect the lawfulness of processing carried out prior to the withdrawal, (v) request data portability, provided you are our client, (vi) know the identity of third parties to whom your personal data is transferred, and (vii) lodge a complaint with the data protection authority.
7. Our contact details
If you have any questions regarding this policy or wish to submit a request, please contact us:
Pfeiffer Hiebl Steuerberatungs GmbH & Co KG
Magazinstraße 12
4320 Perg
Phone: +43 7262 52394
Email: office@pfeifferhiebl.at
Privacy Policy last updated: May 3, 2018