Privacy Policy
Last updated: September 14, 2026 · Version: 1.10
1. Controller and contact
Akademie der Steuerberater:innen und Wirtschaftsprüfer:innen GmbH
QBC 2a – Am Belvedere 10 / 1. OG, 1100 Vienna, Austria
Telephone: +43 1 815 08 50 · E-mail: office@akademie-sw.at
Commercial register: FN 69694t, Commercial Court of Vienna · VAT ID: ATU39244705
Represented by: MMag. Dr. Sandra Allmayer, MA, MBA; Georg Klenner
Data Protection Officer: Mag. Ralph J. Möller, dsb@akademie-sw.at
Preferred point of contact. For all matters concerning this website and the administration of the program, please contact the Akademie at dsb@akademie-sw.at. This does not restrict your rights under Art. 26(3) GDPR: you may exercise your rights as a data subject in respect of the two controller, irrespective of the allocation of responsibilities set out in section 2.
2. Scope
This policy applies to the website international-tax-law.at and all of its subpages. It does not apply to external websites which we link to and whose processing we have no influence over. Separate information applies to participants of the program.
The program and all its documentation are provided exclusively in English; no German version exists.
3. Server log files
When you access our website, technical data transmitted by your browser are recorded: the date and time of the request, the page requested, the referrer URL, browser type and version, operating system, the volume of data transferred, and your IP address in shortened form.
Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, stable and functional provision of the website and in the detection and investigation of attacks on it.
Retention: 365 days, thereafter erasure. Log data retained for the investigation of a specific security incident are kept until that incident has been resolved.
Hosting: Eos Data Systems GmbH, Vienna, acting as our processor under Art. 28 GDPR. All servers are located in Austria. No content delivery network, reverse proxy or comparable service is placed in front of the web server.
Administrative and login events in the content management system are additionally recorded in an internal log, including the IP address used, for the purpose of detecting unauthorised access attempts. Legal basis: Art. 6(1)(f) GDPR. Retention: 36 months.
4. Cookies
We use only cookies which are technically necessary for the operation of this website. We do not use cookies for statistics, analytics, advertising or profiling, and we do not embed content which sets cookies on behalf of third parties. For this reason no consent banner is displayed: the cookies listed below fall within the exception provided for in § 165(3) of the Austrian Telecommunications Act 2021 (TKG 2021) and require no consent.
| Name | Set by | Purpose | Duration |
|---|---|---|---|
| typo3nonce_* (__Secure-typo3nonce_*) | this website | request token protecting against cross-site request forgery | session |
| fe_typo_user | this website | maintains your login session; not set when browsing anonymously | browser session |
Both cookies are first-party cookies and are not transmitted to third parties. We do not use local storage, session storage, indexed databases, device fingerprinting or any other technique for recognising users without cookies.
Legal basis: § 165(3) TKG 2021 in conjunction with Art. 6(1)(f) GDPR — our legitimate interest in a secure and functional website.
You can delete cookies at any time in your browser settings and configure your browser to refuse them. If you refuse the cookies listed above, the login area of this website cannot be used.
5. Programme newsletter
5.1 Newsletter. Separately from the information service we operate a newsletter dedicated to the program. Subscription requires a double opt-in: after registering you receive a confirmation e-mail, and your address is added to the distribution list only once you have followed the confirmation link. Registrations which are not confirmed are deleted after 24 hours.
Legal basis: Art. 6(1)(a) GDPR and § 174 TKG 2021 — your consent, which you may withdraw at any time with effect for the future.
To demonstrate the consent obtained we record the time of registration, the address subscribed, the confirmation, and the IP address used in shortened form (the last octet is removed, so that only the approximate region remains). These records are retained for 12 months. You may unsubscribe at any time using the link contained in every newsletter or by e-mail to unsubscribe@international-tax-law.at.
The newsletter is dispatched from a separate system, likewise operated by Eos Data Systems GmbH in Vienna. We do not track whether or when you open the newsletter, and we do not track which links you click. Addresses are not exchanged between the information service, this newsletter and the newsletter of the Akademie; each requires its own legal basis.
6. No web analytics, advertising or third-party content
We do not use web analytics, heatmaps, session recording, tag managers, advertising pixels or conversion tracking of any kind.
Our website does not embed content loaded from third-party servers. Fonts, scripts, stylesheets and icons are hosted on our own server, so that no connection to a third party is established when you visit our pages. Where we refer to external platforms, we do so by way of a plain hyperlink; data are transmitted to the operator of the linked site only if you actively follow that link.
7. Social media presences
We maintain profiles on Instagram and LinkedIn. When you visit these profiles, the respective platform operator processes your data on its own responsibility and in accordance with its own privacy policy, over which we have no influence. Visiting our profiles may involve the transfer of your data to countries outside the European Economic Area; details are set out in the privacy policies of the respective operators. Our legitimate interest under Art. 6(1)(f) GDPR lies in presenting the program and communicating with those interested in it.
8. Recipients and processors
Within each controller, access to your data is limited to those persons who require it for the purposes described above.
We engage Eos Data Systems GmbH, Vienna, as our processor for hosting, server operation and mail dispatch. A data processing agreement pursuant to Art. 28 GDPR is in place; the processor acts solely on our documented instructions and is bound to appropriate technical and organisational measures.
Beyond this we transmit personal data only where we are legally obliged to do so, where it is necessary for the performance of a contract with you, or where you have consented.
9. Transfers to third countries
In connection with this website we do not transfer personal data to countries outside the European Economic Area. All systems used, including mail dispatch and backups, are operated in Austria by an Austrian provider, and no service of any provider established outside the EEA is used. Our social media presences (section 9) are operated on platforms of third-country providers and are not covered by this statement.
10. Data security and backups
Data transmitted via this website are protected in transit by TLS encryption, which is enforced for all connections. Passwords are stored as cryptographic hashes and are never readable by us. Beyond this we maintain technical and organisational measures appropriate to the risk in accordance with Art. 32 GDPR, which we review at regular intervals.
Backups are created daily by our processor, stored in encrypted form in a separate area of the same data centre in Austria, and retained for three months. Restore tests are carried out and documented at regular intervals. Where we erase personal data, they are removed from the live system immediately; existing backups are not altered, but erased records are prevented from reappearing following a restore. Data in backups are therefore erased no later than three months after their erasure from the live system.
Please note that data transmission over the internet can never be entirely secure.
11. Retention in general
We retain personal data only for as long as is necessary for the purposes for which they were collected, or for as long as statutory retention obligations require. Where no specific period is stated in the sections above, data are erased once the purpose of their processing has ceased to apply and no statutory obligation requires their further retention. Data which may not be erased because they are required for the establishment, exercise or defence of legal claims are restricted in their processing instead.
12. Your rights
You have the right to obtain access to your personal data (Art. 15 GDPR), to obtain rectification (Art. 16), erasure (Art. 17) or restriction of processing (Art. 18), to data portability (Art. 20), and to withdraw any consent you have given at any time with effect for the future (Art. 7(3)), without this affecting the lawfulness of processing carried out up to that point.
Right to object (Art. 21 GDPR): Where we process your data on the basis of Art. 6(1)(f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to that processing. We will then cease that processing unless we can demonstrate compelling legitimate grounds which override your interests, rights and freedoms, or unless the processing serves the establishment, exercise or defence of legal claims. Where your data are processed for the purposes of direct marketing, you may object at any time without giving reasons, and we will cease that processing.
For jointly controlled processing you may exercise these rights in respect of and against each of the two controllers (Art. 26(3) GDPR). We ask you to address your request to dsb@akademie-sw.at, which is our preferred point of contact; you may equally contact the Data Protection Officer of the WU at theodora.stergidou@wu.ac.at.
You also have the right to lodge a complaint with a supervisory authority, in particular with the Austrian Data Protection Authority (Österreichische Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, dsb@dsb.gv.at, +43 1 52 152-0).
13. Automated decision-making
We do not use automated decision-making, including profiling, which produces legal effects concerning you or similarly significantly affects you within the meaning of Art. 22 GDPR. Admission decisions are taken by the persons responsible at the Akademie and the WU. We do not use artificial intelligence or assistance systems for processing your data on this website.
14. Changes to this policy
We update this policy where changes to our processing or to the legal situation require it. The version applicable is the one published here, identified by the version number and date stated at the beginning.