Company Privacy Notice Template for Austria

A comprehensive privacy notice that outlines how an organization processes personal data in compliance with Austrian and EU data protection laws, particularly the GDPR and Austrian Data Protection Act (DSG). This document serves as a transparent communication tool between the organization and its data subjects, detailing the collection, use, storage, and protection of personal information. It includes specific provisions required under Austrian law while maintaining compliance with broader EU requirements, making it suitable for organizations operating in Austria or processing data of Austrian residents.

Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
Get template free
Upload to review

Your data doesn't train Genie's AI

You keep IP ownership of your docs

4.6 / 5
4.6 / 5
4.8 / 5

What is a Company Privacy Notice?

The Company Privacy Notice is a mandatory document under both Austrian and EU data protection law, designed to fulfill transparency obligations under Article 13 and 14 of the GDPR, as well as requirements under the Austrian Data Protection Act (DSG). This document must be provided to data subjects whose personal data is being processed, explaining in clear and plain language how their data is collected, used, shared, and protected. It serves as a crucial compliance tool for organizations operating in Austria, helping them meet their legal obligations while building trust with stakeholders. The notice should be regularly reviewed and updated to reflect changes in data processing activities, organizational practices, or legal requirements. It's particularly important in the Austrian context where both federal data protection laws and EU regulations must be considered.

What sections should be included in a Company Privacy Notice?

1. Introduction: Overview of the privacy notice and its purpose

2. About Us: Information about the company as data controller, including contact details and Data Protection Officer information if applicable

3. Scope of This Privacy Notice: Description of who the notice applies to and what activities it covers

4. Personal Data We Collect: Comprehensive list of personal data categories collected and processed

5. How We Collect Your Personal Data: Sources of personal data collection, including direct collection and third-party sources

6. Legal Basis for Processing: Explanation of the legal grounds under GDPR for processing personal data

7. Purposes of Processing: Detailed description of how and why personal data is used

8. Data Sharing and Recipients: Information about third parties with whom data is shared

9. International Data Transfers: Details about any transfers outside the EEA and safeguards in place

10. Data Security: Measures taken to protect personal data

11. Data Retention: How long personal data is kept and criteria for determining retention periods

12. Your Rights: Explanation of data subject rights under GDPR and how to exercise them

13. Updates to This Notice: Information about how changes to the privacy notice will be communicated

14. How to Contact Us: Contact details for privacy-related queries and complaints

What sections are optional to include in a Company Privacy Notice?

1. Cookies and Tracking Technologies: Required if the company operates websites or apps using cookies or similar technologies

2. Marketing Communications: Required if the company engages in direct marketing activities

3. Automated Decision Making: Required if the company uses automated processing to make decisions about individuals

4. Children's Privacy: Required if services might be accessed by or data collected from children

5. Employee-Specific Processing: Required if the privacy notice covers employee data processing

6. CCTV and Access Control: Required if the company uses surveillance systems or electronic access controls

7. Special Categories of Data: Required if the company processes sensitive personal data

8. Joint Controller Information: Required if the company acts as a joint controller with other entities

What schedules should be included in a Company Privacy Notice?

1. Cookie List: Detailed list of cookies used, their purposes, and duration

2. Data Retention Schedule: Specific retention periods for different categories of personal data

3. Third Party Processors: List of data processors and their roles

4. Technical and Organizational Measures: Detailed description of security measures implemented

5. International Transfer Mechanisms: Details of transfer mechanisms used for international data transfers

6. Legitimate Interests Assessment Summary: Summary of legitimate interests assessments for relevant processing activities

Authors

Alex Denne

Head of Growth (Open Source Law) @ Genie AI | 3 x UCL-Certified in Contract Law & Drafting | 4+ Years Managing 1M+ Legal Documents

Jurisdiction

Austria

Publisher

Genie AI

Document Type

Privacy Notice

Cost

Free to use

Find the exact document you need

Notice Of Personal Data Processing

An Austrian law-compliant privacy notice detailing personal data processing activities and data subject rights under GDPR and local regulations.

Download

Data Privacy Notice

An Austrian law-compliant privacy notice detailing personal data processing activities and individual rights under GDPR and DSG.

Download

Customer Privacy Notice

Austrian law-compliant Customer Privacy Notice outlining personal data handling practices under GDPR and DSG requirements.

Download

Data Processor Privacy Notice

An Austrian law-compliant privacy notice for data processors, outlining personal data handling practices and GDPR obligations.

Download

Personal Data Notice

An Austrian law-compliant Personal Data Notice detailing how personal data is processed in accordance with GDPR and DSG requirements.

Download

Applicant Privacy Notice

An Austrian-law governed Applicant Privacy Notice outlining how job applicants' personal data is handled during recruitment, compliant with GDPR and local data protection laws.

Download

Company Privacy Notice

An Austrian law-compliant privacy notice detailing an organization's personal data processing practices under GDPR and DSG requirements.

Download

Data Processing Notice

An Austrian law-compliant Data Processing Notice outlining how an organization handles personal data in accordance with GDPR and DSG requirements.

Download
See more related templates

Genie’s Security Promise

Genie is the safest place to draft. Here’s how we prioritise your privacy and security.

Your documents are private:

We do not train on your data; Genie’s AI improves independently

All data stored on Genie is private to your organisation

Your documents are protected:

Your documents are protected by ultra-secure 256-bit encryption

We are ISO27001 certified, so your data is secure

Organizational security:

You retain IP ownership of your documents and their information

You have full control over your data and who gets to see it

2 Docs LeftAccess Now