Privacy Policy

Privacy Policy Website and Fanpages

This privacy policy describes how the Jarolim Partner Rechtsanwälte GmbH (hereinafter „JP“) processes your personal data. 

1. Responsible 

The person responsible within the meaning of the General Data Protection Regulation („GDPR“) is Jarolim Partner Rechtsanwälte GmbH.

Address: Volksgartenstraße 3/2nd floor, 1010 Vienna, Austria

Tel: 0043 1 253 7000

Email: office@jarolim.at

Website: http://www.jarolim.at 

2. Personal data and data processing

Personal data is information that relates to an identified or identifiable natural person (so-called „data subject“). Examples include name, address, email address, phone number, date of birth, age, gender, or social security number – in the field of insurance brokerage, especially customer numbers, policy numbers, and claims numbers. In addition, there are also special categories of personal data (so-called „sensitive data“). The GDPR understands this to mean, for example, health data or data related to a criminal proceeding. Personal data is only collected if you provide it yourself. Cookies are processed as part of the use of the website; more information can be found in point 6 of this privacy policy. 

Data processing when contacting usIf you contact JP via email, phone, website, or otherwise, the data necessary to answer your request will be processed (legal basis: Art. 6(1)(a), (b) and (f) GDPR). This includes in particular: 

• First and last name

• Email address and phone number

• Other personal data provided by you

If you do not wish to disclose any personal data to JP, JP cannot establish a business relationship with you or respond to inquiries. 

3. Automated decision-making pursuant to Art. 22 GDPR

JP does not use automated decision-making in accordance with Article 22 of the GDPR. 

4. Legal basis for data processing

JP collects, processes and uses your personal data only when a legal basis exists under Article 6(1) of the GDPR. Your data is processed, in particular, based on the following legal bases: 

4.1 Consent – Art 6(1)(a) GDPR

The processing of that data is based on your consent, provided that you provide one as part of the contact process. Sensitive data (as defined in Art. 9 GDPR) that you disclose to JP as part of the website usage will also be processed based on consent. The scope and purposes of the processing are determined by the underlying consent declaration. You can revoke a given consent at any time with effect for the future by contacting JP at any time by phone at 0043 1 253 7000, by email at office@jarolim.at or by post to Jarolim Partner Rechtsanwälte GmbH, Volksgartenstraße 3/2, 1010 Vienna, Austria, and notify the revocation. 

4.2 For the performance of a contract – Art. 6(1)(b) GDPR

All processing that JP must carry out in connection with the performance of a contract is based on the legal basis of Article 6(1)(b) of the GDPR. This includes data that JP processes based on pre-contractual obligations. 

4.3Legal obligations – Art 6(1)(c) GDPR

If JP is subject to a legal obligation requiring the processing of personal data, Article 6(1)(c) of the GDPR serves as the legal basis.

4.4 Legitimate interest – Art. 6(1)(f) GDPR

If the processing of personal data is necessary to safeguard a legitimate interest of JP or a third party, Article 6(1)(f) of the GDPR serves as the legal basis. JP’s legitimate interest consists in particular in:,

i) to ensure the operation and administration of the website;

ii) To be able to carry out direct marketing measures;

iii) Ensuring network and data security, but only to the extent that our legitimate interest is compatible with applicable law and with the rights and freedoms of our users;

iv) To be able to assert, exercise or defend legal claims. 

5. Transmission to third parties

Due to the complexity of certain data processing processes today, it has become essential to provide certain services with the involvement of third parties. For this purpose, JP employs external service providers, e.g. for the web hosting and IT systems to which your data is provided for this purpose. These service providers are contract processors within the meaning of Article 28 GDPR who are contractually obliged to treat your data confidentially and to process your data only in the scope of their performance of their services. These contract processors include in particular the following:

• World4You Internet Services GmbH

• Ursula Ranft Communications e.U.

• XOXO Websolutions e.U.

Where applicable, the potential recipient of your personal data is located outside the European Union or processes your personal data there. The level of data protection in other countries may not be equivalent to that in Austria. However, JP only transmits your personal data to countries that, according to the EU Commission, have an adequate level of data protection. Alternatively, JP implements measures to ensure that all recipients have an adequate level of data protection, such as the conclusion of agreements in accordance with the Standard Contractual Clauses (2010/87/EC and/or 2004/915/EC). .

Under certain circumstances, JP may be legally obligated to disclose your data to, for example, supervisory authorities and law enforcement agencies. However, this is only done insofar as it is necessary to prevent and/or detect fraud and other criminal offenses or to ensure network and data security.

6. Cookies 

JP uses cookies on its website. A cookie is a small text file that stores Internet settings. Almost every website uses cookie technology. It is downloaded by your Internet browser the first time you visit the website. The next time you visit that website with the same device, the cookie and the information stored in it are either sent back to the website that created it (first-party cookie) or to another website that it belongs to (third-party cookie). This allows the website to recognize that you have already been visited with this browser and, in some cases, varies the displayed content. Some cookies are extremely useful because they can improve the user experience when you visit a website you have already visited several times. Provided that you use the same device and browser as before, cookies remember things like your preferences, share how you use a page, and adapt the displayed offers to suit your personal interests and needs.

Basically, there are the following types of cookies:

• Absolutely necessary cookies, also called „strictly necessary“, ensure functions that without them you would not be able to use this website as intended. These cookies are used exclusively by JP and are therefore so-called first-party cookies. They are only stored on your computer during the current browser session. For example, such cookies ensure, if necessary, the functionality of switching from http to https during a page change and thus compliance with increased security requirements for data transmission. Furthermore, such a cookie also stores your decision regarding the use of cookies on the website. 

• First-party cookies that require consent on this website: Cookies that are not strictly necessary by purely legal definition to use the website nevertheless fulfill important functions. Without these cookies, functions that enable comfortable browsing on the website are no longer available and would therefore have to be requested again on every page.

If you delete all your cookies at a later time, you will need to perform the opt-out process again; even if you visit this website from other computers. If your security settings are too high and the cookie is blocked, JP will not be able to process your opt-out request. In this case, you will be prompted and should repeat the opt-out process with lower security settings.

The JP website processes the following cookies in addition to „strictly necessary“ cookies:

• CookieConsent: Used to store the consent to cookie usage.

• Functional cookies to ensure the performance of the website.

• Performance cookies to improve the user experience.

7. Server log files

To optimize the website in terms of system performance, user friendliness and the provision of useful information about services, the website provider automatically collects and stores information in so-called server log files that your browser automatically transmits to JP. This includes your Internet Protocol address (IP address), browser and language settings, operating system, referrer URL, your Internet Service Provider and date/time, as well as the content accessed. JP reserves the right to subsequently review this data if concrete indications of unlawful use become known.

8. Facebook fanpage

JP has a Facebook fan page. This fan page is the company’s user account for communicating with users on Facebook. Fan page operators can use the „Facebook Insight“ function. This provides an anonymous compilation of statistical data about visitors to the fan page. Facebook collects this data by setting cookies. Therefore, personal data is processed each time this fan page is visited. This processing of data also takes place when you are not logged in to Facebook. This means that JP, as the operator of the fan page, is jointly responsible with Facebook under Article 26 of the GDPR.

Registered users: As part of the registration process on Facebook, you agree to the terms of use and privacy and cookie policies. JP has no influence on these. If you visit the JP fan page as a registered user, your data will be collected and processed as set out in these terms and conditions.

Unregistered users: By visiting a subpage of the fanpage, you consent to Facebook processing your personal data (Art. 6(1)(a) GDPR).

The personal data is stored by Facebook and passed on anonymously to JP in statistical form, which is why JP is unable to pass it on to third parties in an identifiable form. The information to whom your personal data is transmitted (as the recipient) can be found in the Privacy Information (https://www.facebook.com/privacy/explanation) and the Cookie Policy (https://www.facebook.com/policies/cookies/) taken from Facebook.

Data categories that JP receives in anonymous form from Facebook:

1. Information about the users and their interactions

   1. Users who „like“ the fanpage: gender, place of residence, language, age;

   2. Users reached: Those for whom JP posts were clicked in the last 28 days;

   3. Interacting users: Users who have interacted with the page in the last 28 days (e.g., by clicking, „Like“ buttons, etc.);

   4. Medium of the user: Whether access/interaction with the fanpage content occurs via PC or mobile device;

   5. Fanpage requests via Facebook or external links that lead to the fanpage; 

   6. Clicking on buttons (e.g., „Website,“ “Plan route” button);

   7. the frequency of accesses via the fanpage preview (when the mouse is moved over the name or profile picture of the page); 

   8. User online time, who the „like“ fanpage has;

   9. Information about the success (reach and interaction) of the posts;

   10. Interactions in an analyzed form: Negative (hidden comments, spam messages, „I no longer like it“ statements) and positive („Like“, other reactions to posts, etc.) interactions. 

2. Information about „Like“ annotations

   1. Total number for the fanpage; Number of new entries; 

   2. The information includes details about origin, age, gender, and language;

   3. the number of subscriptions on the page. 

3. Information about range

   1. For contributions: number of people to whom contributions from JP were provided, broken down by paid and organic reach;

   2. total reach, i.e. the number of users to whom actions of the JP page were shown; 

   3. Information about video calls, including further information about the duration of the call. 

Provided that you have consented to the processing of your data, you have the right to revoke this consent at any time; however, this does not affect the lawful processing of data that has already taken place. When exercising your rights as an affected person and revoking your consent, we refer to the privacy information regarding page insights data from Facebook (https://de-de.facebook.com/legal/terms/information_about_page_insights_data) and the forms contained therein/linked to them. Alternatively, you are welcome to contact Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland, by post with your requests.

9. Instagram fanpage

JP also has an Instagram fan page. This fan page is the company’s user account for communicating with users on Instagram. Fan page operators can use the „Instagram Insight“ function. This provides anonymous statistical data about visitors to the fan page. Instagram collects this data by setting cookies. Therefore, personal data is processed every time this fan page is visited. As such, JP, as the operator of the fan page, is jointly responsible with Instagram (the operator is also Facebook) under Article 26 of the GDPR.

Registered Users: As part of the registration process on Instagram, you agree to the Terms of Use and Privacy and Cookie Policies. JP has no influence on these. If you visit the JP fanpage as a registered user, your data will be collected and processed as set out in these Terms and Conditions.

Unregistered users: By visiting a subpage of the fanpage, you consent to Facebook processing your personal data (Art. 6(1)(a) GDPR).

Die personenbezogenen Daten werden von Instagram gespeichert und JP anonym in statistischer Form weitergegeben, weshalb es JP nicht möglich ist, diese an Dritte in identifizierbarer Form weiterzugeben. Die Informationen, an wen (als Empfänger) Ihre personenbezogenen Daten übermittelt werden, können konkret der Datenschutzinformation (https://de-de.facebook.com/help/instagram/519522125107875/?helpref=hc_fnav&bc[0]=Instagram-Hilfebereich&bc[1]=Richtlinien%20und%20Meldungen) und den Cookie-Richtlinien (https://de-de.facebook.com/help/instagram/1896641480634370/?helpref=hc_fnav&bc[0]=Instagram-Hilfebereich&bc[1]=Richtlinien%20und%20Meldungen) von Instagram entnommen werden.

Data categories that JP receives in anonymous form from Instagram:

• „Overview“: An overview of the last seven or 30 days showing how many accounts were reached and how many interactions and subscribers were achieved in total.

• „Achieved accounts“: With this metric, JP receives information about the reach and impressions of the account, e.g. profile views and website visits. When adding an action button, JP can see how often it has been clicked. JP can then, for example, see data on the clicks on the call, email, SMS, website, and „route plan“ buttons.

• „Content Interactions“: With this metric, JP receives breakdowns of content interactions, such as „Like“ counts, comments, replies, and values that indicate how often the content was shared or saved.

• „Total number of subscribers“: These insights include information such as the growth of the subscriber count, the main locations and age range of subscribers, as well as when subscribers to the JP Fanpage are most active on Instagram.

• It is also possible to retrieve insights about individual content; here too, information about interactions and subscribers is provided.

Provided that you have consented to the processing of your data, you have the right to revoke this consent at any time; however, this does not affect the lawful processing of data that has taken place up to that point. When exercising your rights as an affected person and revoking your consent, we refer you to the privacy policy of Instagram and the forms contained therein/linked to therein. Alternatively, you are free to contact Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland, by post with your requests.

10. LinkedIn fanpage

JP has a fan page on LinkedIn. This fan page is the company’s user account for communicating with users on LinkedIn. Fan page operators can use the „LinkedIn Insight“ function. This provides anonymous statistical data about visitors to the fan page. LinkedIn collects this data by setting cookies. Therefore, personal data is processed every time this fan page is visited. This processing also takes place when you are not logged in to LinkedIn. This means that JP, as the operator of the fan page, is jointly responsible with LinkedIn under Art. 26 GDPR.

Registered Users: As part of the registration process on LinkedIn, you agree to the terms of use and privacy and cookie policies. JP has no influence on these policies. When you visit the JP fan page as a registered user, your data will be collected and processed as set out in these terms and conditions. 

Unregistered users: By visiting a subpage of the fanpage, you consent to Facebook processing your personal data (Art. 6(1)(a) GDPR). 

The personal data is stored by LinkedIn and passed on to JP in anonymous form for statistical purposes, which is why JP is unable to process it in an identifiable form with third parties. The information regarding who (as the recipient) your personal data is being shared with can be found specifically in Facebook’s Privacy Policy (https://www.linkedin.com/legal/cookie-policy) and Cookie Policy https://www.linkedin.com/legal/privacy-policy().

Data categories that JP receives in anonymous form from LinkedIn: 

• Statistics about members, their profession or their industry 

• Calculation of clicked or clicked-through ad units 

• Visitor demographics

• Further Insight features can be found in the Privacy Policy and Cookie Policy linked above from LinkedIn. 

If you have consented to the processing of your data, you have the right to revoke this consent at any time; however, this does not affect the lawful processing of data that has taken place up to that point. When exercising your rights as an affected person and revoking your consent, please refer to the LinkedIn (https://de.linkedin.com/legal/user-agreement?) Terms of Use and the forms contained therein or linked to therein. Alternatively, you are free to contact LinkedIn Ireland Unlimited Company („LinkedIn Ireland“) at Wilton Place, Dublin 2, Ireland with your requests by post.

11. Data security and data storage 

The protection of your personal data is ensured through appropriate organizational and technical measures. These measures concern in particular the protection against unauthorized, illegal or accidental access, processing, loss, use and manipulation of your personal data. Despite the efforts to maintain an always appropriate standard of diligence, it cannot be ruled out that information that you disclose to JP via the Internet may be viewed and used by other persons. Please note that therefore no responsibility whatsoever is accepted for the disclosure of information due to errors in data transmission caused by JP and/or unauthorized access by third parties (e.g. hacking of email accounts or phone calls, interception of faxes).

Your personal data will be processed for as long as necessary to fulfill the contractual or legal retention obligations, to defend any liability claims, and for the duration of the consent declaration. JP ensures that your personal data is processed throughout the entire period in accordance with these privacy guidelines.

JP deletes data from contact forms three months after the contact has taken place, provided there is no subsequent contract or consent declaration. 

12. Your rights as an affected person

As a data subject under the GDPR, you have the following rights under the GDPR, among others: 

• The right to information about your stored personal data, their origin and recipients, and the purpose of data processing. 

• Furthermore, you have the right to have your data reported and transferred, and if applicable, to object to, restrict the processing of, or delete processed data.

Your requests for information, deletion, reporting, objection and/or data transfer can be sent to the e-mail address office@jarolim.at to be addressed.

If you believe that the processing of your personal data by JP violates applicable data protection law or that your data protection rights have been violated in any other way, you have the option to file a complaint with the relevant supervisory authority. In Austria, the data protection authority is responsible for this (www.dsb.gv.at). 

13. Changes to the privacy policy 

JP reserves the right to adapt these privacy policies as necessary, for example due to technical developments or legal changes, or to update them in connection with the introduction of new services or products. The updated privacy policies will be http://www.jarolim.at published on the website from time to time. Please check the relevant page regularly.

Current status: May 2021