Privacy Policy

Data Controller

The data controller responsible for processing your personal data is astrivois GmbH, a company registered in Austria. We are committed to protecting your privacy and ensuring that your personal data is handled in accordance with the General Data Protection Regulation (GDPR) and Austrian data protection laws.

Data We Collect

The data we collect depends on how you interact with our services. We collect personal information that you voluntarily provide to us, as well as certain information automatically when you visit our website or use our services.

Information You Provide

When you contact us or use our services, we may collect the following personal data:

• Name and contact details (email address, phone number, postal address)
• Company information and job title
• Tax and financial information relevant to our advisory services
• Communication preferences and correspondence with us
• Information provided in forms, surveys, or feedback
• Payment and billing information for our services

Information Collected Automatically

When you visit our website, we automatically collect certain technical information:

• IP address and browser information
• Device type, operating system, and screen resolution
• Pages visited and time spent on our website
• Referring website and search terms used
• Cookies and similar tracking technologies (see our Cookie Policy for details)

How We Use Your Information

We use your personal data for legitimate business purposes and only when we have a lawful basis for processing. The data we collect is used to provide and improve our tax advisory services, communicate with you, and ensure compliance with legal obligations.

Service Provision

We use of your data to deliver our professional tax advisory services, including:

• Providing tax planning, compliance, and advisory services
• Preparing tax returns and related documentation
• Communicating about your tax matters and regulatory updates
• Managing client relationships and service delivery
• Processing payments and maintaining financial records

Legal Basis for Processing

We process your personal data based on the following lawful grounds under GDPR:

• Contract performance: To fulfil our contractual obligations in providing tax advisory services
• Legitimate interests: To operate our business, improve our services, and communicate with clients
• Legal compliance: To meet regulatory requirements and professional obligations
• Consent: Where you have given explicit consent for specific processing activities

Data Sharing and Disclosure

astrivois does not sell, rent, or trade your personal information to third parties. We may share your data only in the following limited circumstances:

• With Austrian tax authorities and regulatory bodies as required by law
• With professional service providers who assist in delivering our services (under strict confidentiality agreements)
• With your explicit consent or at your direction
• To protect our legal rights or comply with legal obligations
• In connection with a business transfer or merger (with appropriate safeguards)

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected and to comply with legal, regulatory, and professional obligations. Our data retention practices are based on the nature of the information, applicable legal requirements, and legitimate business needs.

Your Rights

Under the GDPR and Austrian data protection law, you have several rights regarding your personal data. These rights ensure that you maintain control over your information and can make informed decisions about its use.

Data Security

astrivois implements appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security measures are designed to ensure a level of security appropriate to the risk of processing.

• Encryption of data in transit and at rest
• Access controls and authentication systems
• Regular security assessments and updates
• Staff training on data protection and security
• Secure backup and disaster recovery procedures

International Data Transfers

Your personal data is primarily processed within the European Economic Area (EEA). If we need to transfer your data outside the EEA, we ensure appropriate safeguards are in place, such as adequacy decisions, standard contractual clauses, or binding corporate rules.

Contact Us

If you have any questions about this Privacy Policy, wish to exercise your rights, or need to contact us about data protection matters, please use the contact information below. We are committed to addressing your concerns promptly and transparently.

Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable laws. We will notify you of any material changes by posting the updated policy on our website and, where appropriate, by sending you a notification. We encourage you to review this policy periodically.