1.1 Introduction

RBP Steuerberatung KG (RBP) is committed to the protection of individual privacy. With this privacy policy, RBP reaffirms its commitment to protecting individual privacy and personality rights, and to the safe and trustworthy handling of data online and in the use of our online portal, the „RBP Portal".

1.2 Consent

By using our website and our online portal, you consent to the storage and use of your data as described in this policy. Any amendments to this privacy policy will be made directly on this page, so that you are always informed as to which data RBP stores and uses.

1.3 Use and purpose limitation of personal data

The storage of personal data via our online content is subject to your prior consent. You therefore decide for yourself whether to disclose the data requested to us. Your data may be used by RBP to process enquiries, handle mandates, or improve our services.

Disclosures to third parties outside RBP will, however, only take place with your express consent, unless a disclosure is authorised by applicable legal provisions. Your data will only be used for the purposes described in more detail below.

1.4 Data controller

RBP Steuerberatung KG (limited partnership / KG)
Ernst-Mach-Strasse 1, A-7100 Neusiedl am See
Tel.: +43 2167 23 16
E-mail: post@rbp.at

2. Details

2.1 What information do we collect and for what purpose?

2.1.1 Website

IP addresses

IP addresses are required for fault diagnosis, for the technical administration of our online content, and for compliance with the security measures mandated by law. When you access our online content, we only identify the publicly visible domain name assigned to your IP address, not your e-mail address or any other personal data. We can determine your e-mail address only if you disclose it to us directly by completing a form or sending us an e-mail.

Cookies

Cookies are used exclusively for registered users, for their personalised content or to adapt the information offered to user behaviour.

User registration

When you register, we will send you the information requested. Registration for our online portal, the „RBP Portal", and the associated electronic identification (E-ID system) are described separately in Section 2.

E-mail addresses

If you provide us with your e-mail address, we will communicate with you by e-mail. We will not pass your e-mail address on to third parties outside RBP. If you no longer wish to receive e-mails from us, you can stop this at any time. When sending an e-mail to RBP, depending on the settings of your e-mail programme, personal data may be transmitted automatically. RBP will treat such data confidentially as well.

Booking of meeting appointments

Our online content contains registration forms that you can complete to request meeting appointments. The data transmitted to RBP in this manner are used by us exclusively for this specific purpose.

Statistical evaluation (tracking)

RBP uses no technical means whatsoever for user tracking (in particular no cookies and no embedding of third-party programmes for the indirect, worldwide determination of user behaviour).

Social media cookies

RBP does not set any social media cookies as a standard and transmits no data whatsoever to social networks.

2.1.2 Client online portal („RBP Portal") – electronic identification (E-ID system)

Independently of the information regarding the website, the following applies to our online service, the „RBP Portal", which we make available to our clients (natural and legal persons): the portal is used to exchange mandate documents, to retrieve official decisions and reports, and to sign documents electronically. Before access to the portal is granted, the user's identity is confirmed with a high degree of security electronically via the E-ID system (electronic identity, „id Austria").

Data collected

When accessing the portal and in the course of electronic identification, the following personal data are processed:

• Identification data transmitted or confirmed by the E-ID system for the purpose of identity verification (for natural persons: name, date of birth, and the identity document data made available by the electronic identity; for legal persons: the identity of the person authorised to represent and – where applicable – of the beneficial owner);
• Portal account data (access and usage data, sessions);
• Mandate documents and files that are uploaded or exchanged via the portal.

Purpose of processing and legal basis

• Verification of identity before access to the portal – legal basis: Art. 6(1)(c) GDPR in conjunction with § 90 No. 1, 2 and 3 of the Economic Trust Practitioners Act 2017 (WTBG 2017, Wirtschaftstreuhandberufsgesetz 2017). As economic trust practitioners (Wirtschaftstreuhänder), we are obliged to determine and document the identity of the client, the beneficial owner, and the person authorised to represent, before entering into and during a business relationship. The E-ID system provides a credible and independent basis for this electronic verification of identity (online identification).
• Documentation of identity / prevention of money laundering and terrorism financing – legal basis: Art. 6(1)(c) GDPR in conjunction with §§ 87 to 105 WTBG 2017. The documented identification data serve the fulfilment of the statutory retention and production obligations in the context of money laundering prevention.
• Provision of the portal service – legal basis: Art. 6(1)(b) GDPR in conjunction with the mandate agreement (where applicable Art. 6(1)(c) GDPR): exchange of mandate documents, retrieval of official decisions and reports, electronic signature, and contact with the firm.

Recipients of the data

• The public body that operates the electronic identity (id Austria), solely for the purpose of identity verification;
• Where required by law: the competent authorities, in particular the Financial Intelligence Unit (Geldwäschemeldestelle) as the suspicious transaction reporting office pursuant to § 4(2) No. 1 and 2 of the Federal Criminal Police Office Act (BKA-G) within the framework of the WTBG 2017.

No disclosure to any other third parties will take place.

Retention period

• Identification data: for the duration of the mandate relationship and, beyond that, for the statutory retention and documentation periods pursuant to the WTBG 2017.
• Portal account data: for as long as the account is active and during the statutory retention periods;
• Mandate documents: in accordance with the statutory retention periods for accounting and tax matters and the AAB of the economic trust practitioners in the version currently in force, available at www.ksw.or.at.

The data will be deleted or anonymised as soon as the purpose of processing has ceased to exist and no statutory or contractual retention obligation remains.

3. Rights of the data subject

Under the GDPR, you in particular have the right to access (Art. 15), rectification (Art. 16), and erasure (Art. 17, subject to statutory retention obligations), restriction of processing (Art. 18), and data portability (Art. 20), as well as a right to object (Art. 21). If the processing is based on your consent, you may withdraw it at any time (Art. 7(3) GDPR). To exercise your rights, please contact post@rbp.at.

4. Obligation or voluntariness of providing the data

The provision of the data required for the verification of identity is prescribed by law and/or by contract for the establishment and conduct of the mandate and for granting access to the portal. Without the verification of identity, the portal service cannot be offered.

5. Supervisory authority

In case of questions or concerns regarding the processing of your personal data, you may contact the competent supervisory authority: the Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.

6. Automated decision-making and profiling

In the context of the portal and/or the E-ID identification, no automated decision-making, including profiling, takes place.

7. Links to other sites

Our online content contains links to the online content of third-party providers. RBP is not responsible for the data protection measures or the content of other websites or service providers.

8. Opt-out

If you no longer wish to receive e-mail messages from RBP, you may at any time revoke the consent you have previously given. To be removed from the RBP e-mail list, a simple e-mail message to post@rbp.at is sufficient.
Clients with a subsisting mandate relationship may exercise their right of revocation at any time by telephone or e-mail.

9. Information and questions

If you have any questions about this privacy policy, e.g. regarding access to or updating of your personal data, please send us an e-mail or call us on +43 2167 23 16.

10. Our contact details

RBP Steuerberatung KG
Ernst-Mach-Strasse 1
A-7100 Neusiedl am See
Tel.: +43 2167 23 16
E-mail: post@rbp.at
Fax: +43 (0) 2167 2316 22

Office hours:
Mon–Thu: 7:30–15:30
Fri: 7:30–13:00