Cloud services providers

In the course of providing services to clients PwC Legal may use the services of the following cloud services providers. Please notice, that, if required, the list of cloud service providers can be extended at any time:


Cloud Service Provider Place of data storage Additional Information
Google Inc, Mountain View, California, USA global

Data protection notice
We understand the importance of protecting personal data. Below you will find information about how we collect and process your data through our website and in the course of our business relationship. ‘We’ refers to oehner & partner rechtsanwaelte gmbh (‘PwC Legal’).

Our website:
We are always trying to improve our website so that we can offer you a comfortable user experience. For this reason, we collect certain pieces of information from visitors to our website:
- Cookies
Cookies are files that record pieces of information about your computer. We save cookies on your computer in order to make it easier for you to access our website and to enable us to evaluate those visits. Our cookies record the IP address of your computer and your visits to our website. Our use of this information is anonymised and used exclusively for evaluation purposes. If you choose, you can change the settings of your browser to prevent cookies being saved on your computer or to receive notifications of receipt of our cookies. You will normally find this setting in standard browsers under ‘Settings’ in the submenus ‘Security’ or ‘Privacy’. This enables you to decide whether to accept or decline our cookies. If you decline our cookies, some features of our website may have reduced functionality, for example the use of the search function or requests. After visiting our website, you can delete the cookies from your system at any time. To do this in standard browsers, you normally need to select the delete function under ‘Settings’ in the submenus ‘Security’ or ‘Privacy’. Further information about the kind of cookies we save on your computer may be found via the following link
- Google Analytics
We use Google Analytics, a web analytics service provided by Google Inc. (‘Google’). Google Analytics uses cookies that are saved on your computer and which enable the analysis of your use of our website. The information about your visit generated by these cookies (including your IP address) are transmitted to a Google server in the USA and saved there. Google uses this information to evaluate your use of our website, to create reports about website activity for us as site owners or alternatively for our appointed website operator, and to offer further services related to the use of websites. Google may transfer this information to third parties if required to do so by law, or if a third party is contracted to analyse this data on Google's behalf. Under no circumstances will Google link your IP address with other Google data. Further information about Google's use of data may be found here:

Our business relationship:
1. Personal data
It is essential that we process your personal data in the course of our business relationship. ‘Personal data’ may be understood as any pieces of information relating either directly or indirectly to natural persons (such as names, addresses, contractual data). Even if trade secrets are not directly covered by the term personal data, we accord the same protection to both and we expect the same from our business partners. We also process the personal data that you submit to us during your use of our website via the forms made available there.
2.  Extent of data usage
At the start of our business relationship, in giving us instructions or using our website, you share personal data and possibly also trade secrets with us that relate either to yourself or to your customers, employees, business interests, or other third parties. We work from the assumption that you are entitled to share this data. We use your data and the data of your customers, employees, business interests, or other third parties to the extent necessary for the proper provision of services as part of our business relationship with you or else for the proper processing of your request. On the basis of possible separate statements of consent given by you, we also use your data to provide you with additional service offerings.
3. Disclosure of data to third parties
The complexity of data processing today means that we also use external service providers and task these with the evaluation of your data. Some of these service providers are located outside of the European Union. Whenever we use external service providers, we make sure that European data protection levels and European data security standards are fully observed. It may also be necessary in the course of service provision or the processing of your request(s) that we transfer or share your data within the global PwC network ( European data security standards are also guaranteed in such instances. To find out more about how and to what extent we will process your data or transfer it to third parties in a given business transaction, please contact

Dr. Axel Thoß (
Donau-City-Straße 7
1220 Vienna

4. Use of cloud services
As an innovative and future-oriented firm, we also use cloud solutions. We use cloud services from the following providers:

  • Microsoft Corp
  • Google Inc

We use cloud services for our electronic communications including video conferencing, for diary management, as well as for shared document use for internal collaborative work. Client records and client documents are not saved via these cloud services, rather in PwC’s own data centres.  

Our approach to data security:
The security of your data is important to us. It goes without saying that all transfers of data within the PwC network conform with the highest security standards. We also have encryption options for external transfers of data. You may use this service provided that, as the recipient of our communication, you have the necessary technical prerequisites for decryption at your disposal. Please note that electronic communication using standard email programs (such as MS Exchange) without appropriate encryption offers no absolute protection against third-party access and that this form of communication may involve non-European servers.

It also goes without saying that our internal firm data centres are guaranteed to maintain the highest security standards. We extend our understanding of security to the external service providers we instruct, who are required by us to observe identical or comparable security provisions. If the cloud services we use involve the storage of data on servers outside Europe, we ensure that this data is saved exclusively in fragmented or encrypted forms, using the most advanced encryption technologies. If you have any questions about our data security provisions for your personal data, please contact
Dr. Axel Thoß (
Donau-City-Straße 7
1220 Vienna

How we protect your rights:
You may request information from us about the origin, the types, the storage duration, the recipients, and the purpose of the personal data we process, as well as how the data is processed.
If we process any personal data that is incorrect or incomplete, you may request its correction or completion. You may also request the deletion of unlawfully processed data. Please note, however, that this only applies to incorrect, incomplete or unlawfully processed data. Should clarification concerning the incorrect, incomplete or unlawful processing of personal data be necessary, from 25.05.2018 you may request the limitation of the processing of your data until satisfactory clarification can be provided. Please note that these rights complement each other, so that you may only request either the correction and completion of your data, or alternatively its deletion.

Even if your personal data is correct and complete and is lawfully processed by us, you may object to the processing of this data in particular exceptional cases substantiated by you.
As of 25.05.2018, you are entitled to receive the personal data we process in a machine-readable format to be determined by us as long as the data was received directly from you. You may also instruct us to transmit such data to a third party of your choosing, as long as this recipient makes the transfer possible for us from a technical point of view, and the transfer of data neither constitutes an unreasonable burden nor is prevented by legal or other confidentiality obligations and considerations from our side or from that of third parties.

Should you have any questions, please get in touch with us using the contact details listed below. Please note that we always require proof of your identity, such as an electronic copy of an identification document.

Even if our aim is to ensure the protection and integrity of your data in the best possible way, differences of opinion concerning the way in which we process your data cannot be excluded. Should you believe that we have processed your data in an unreliable way, you have the right to file a complaint with the responsible data protection authority..

Our data storage:
We only store the data concerning you for as long as it is required for processing. In some cases we are subject to certain storage requirements in accordance with which we have to store data concerning your person, your contractual relationship, our business relationship, as well as its termination. Such storage is foreseen, for example, by the retention periods under company law. Among other reasons, we store your data for as long as is required to assert our legal entitlements deriving from our business relationship with you.

The necessity of processing your data:
The provision of your personal data as well as those of your customers, employees, business interests or other third parties is necessary for the provision of our services or for the fulfilment of request(s). Should you choose not to provide this data, or not to provide it to the extent required, it may be the case that we are unable to provide the services desired or to fulfil the request(s) made. Please note that this would not count as non-fulfilment of contract from our side.

If we have received your data and are processing it based on your consent, you may withdraw your consent at any time. From the receipt of the withdrawal of consent onwards, we will not process your data for the specific purposes for which consent was granted.

Our contact details:
For all questions concerning data protection law, please contact

Dr. Axel Thoß (
Donau-City-Straße 7
1220 Vienna

Contact us

Dr. Christian Öhner, LL.M. (University of Chicago)
Tel: +43 1 38405 50

Dr. Lukas Röper, LL.M. (Dublin)
Tel: +43 1 38405 50

oehner & partner rechtsanwaelte gmbh
Donau-City-Straße 7, 1220 Vienna, Austria
Tel: +43 1 38405 50

Follow PwC Legal
Follow PwC Austria