Privacy Policy

Data Controller

The data controller responsible for your personal data is:

Data Collection

We collect personal data that you provide to us directly and information that is collected automatically when you visit our website. The data we collect includes the following categories of personal information:

Information You Provide

• Contact details (name, email address, phone number, postal address)
• Professional information related to tax advisory services
• Financial information necessary for providing tax services
• Communication preferences and enquiry details
• Any other information you choose to provide when contacting us

Information Collected Automatically

• IP address and browser information
• Device and operating system information
• Website usage data and analytics
• Cookies and similar tracking technologies (see our Cookie Policy)

How We Use Your Information

We use the personal data we collect for legitimate business purposes. The use of your data is based on the following legal grounds under GDPR:

Contract Performance

We use your information to provide tax advisory services, process your requests, and fulfil our contractual obligations to you.

Legitimate Interests

• Improving our services and website functionality
• Communicating with you about our services
• Maintaining security and preventing fraud
• Analysing website usage to enhance user experience

Legal Compliance

We may process your data to comply with legal obligations, including tax regulations, anti-money laundering requirements, and professional standards for tax advisors.

Data Retention

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected and to comply with legal requirements. Our data retention periods are as follows:

• Client data: Retained for the duration of our professional relationship and for 7 years after the end of the relationship, as required by Austrian tax law
• Website analytics: Retained for up to 26 months
• Marketing communications: Retained until you withdraw consent or object to processing
• Legal compliance data: Retained for the period required by applicable laws and regulations

Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your data in the following limited circumstances:

• With trusted service providers who assist us in operating our business (subject to strict confidentiality agreements)
• When required by law, regulation, or legal process
• To protect our rights, property, or safety, or that of our clients or others
• With your explicit consent for specific purposes

Your Rights

Under GDPR and applicable data protection laws, you have the following rights regarding your personal data:

• Right of access: Request information about the personal data we hold about you
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data in certain circumstances
• Right to restrict processing: Request limitation of how we process your data
• Right to data portability: Request transfer of your data to another service provider
• Right to object: Object to processing based on legitimate interests
• Right to withdraw consent: Withdraw consent for processing where consent is the legal basis

To exercise any of these rights, please contact us at privacy@greenharbors.top or +43 3163097452. We will respond to your request within one month.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, secure data transmission, access controls, and regular security assessments. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

International Data Transfers

Your personal data is primarily processed within the European Economic Area (EEA). If we need to transfer data outside the EEA, we ensure appropriate safeguards are in place, such as adequacy decisions by the European Commission or standard contractual clauses approved by the European Commission.

Cookies and Tracking

Our website uses cookies and similar tracking technologies to enhance your browsing experience and analyse website traffic. For detailed information about our use of cookies, please refer to our Cookie Policy.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date. We encourage you to review this policy periodically.

Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact us:

Supervisory Authority

You have the right to lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde) if you believe we have not handled your personal data in accordance with applicable data protection laws. You can contact them at www.dsb.gv.at.