Data protection information - Website

Status: [10/07/2025]

1. general information

We, notarity GmbH (hereinafter "we" or "notarity"), take the protection of your data very seriously and treat your personal data confidentially and in accordance with the legal requirements (and beyond). Furthermore, this data protection notice informs you about the framework conditions under which your data is passed on to processors. With regard to the terms used, such as "personal data" or their "processing", we refer to the definitions in Art. 4 GDPR. Transparency is important to us, which is why we are providing you with information in this data protection notice that goes beyond the minimum legal requirements.

This data protection notice has been drawn up in German only. The authoritative version of this data protection notice is therefore exclusively the German version. The English translation is automatically generated by a "plug-in". Due to the automatic translation, the English version may contain grammatical errors as well as errors of meaning. notarity does not check or correct the automatic translation. No claims against notarity can be derived from the automatically generated version of this privacy policy. notarity is not liable for translation errors of the plug-in.

We ask you to inform yourself regularly about the content of our data protection information. We will adapt the data protection information if changes to the data processing carried out by us make this necessary. We will inform you as soon as the changes require your co-operation (e.g. consent) or other individual notification.

This data protection notice first provides you with general information about our data processing at notarity, in particular in the context of the operation of our website. You will then find specific information about individual data processing operations. You can find out more about our data processing in the context of our WebApp here https://notarity.com/webapp-privacy/.

2. controller (within the meaning of Article 4(7) GDPR)

Notarity GmbH, Pfeilgasse 23/3, 1080 Vienna is responsible for compliance with the data protection regulations of our web app.

notarity GmbH is an Austrian technology company based in Vienna. We operate a platform for the digital creation of notarial documents ("Remote Online Notarisations").

We will be happy to answer any questions you may have regarding data protection. You can use the following contact options:

Phone: +43 1 412 01 48

E-mail: [email protected]

If you contact us by e-mail, the data you provide will be stored by us in order to process your enquiry. The data collected in this context will be deleted by us if storage is no longer required. We will store your enquiry and the correspondence relating to it for thirteen months after the end of processing and any follow-up questions so that we can present them in the event of any proceedings before the data protection authority. Longer storage will only take place as long as statutory retention obligations exist or as long as any legal claims for the assertion or defence of which the personal data is required are not yet time-barred. 

3. purposes of data processing

The purposes for which we process your data may include:

1. to provide you with our service on our website and to maintain its operation. The purpose is therefore the performance of the contract and the fulfilment of our contractual and pre-contractual obligations (Article 6 (1) lit b GDPR);
2. To notify you of any changes to our service;
3. Provide customer services;
4. improve our service (including through the use and training of AI applications);
5. monitor the use of our service;
6. identify, prevent and correct technical problems; provide you with news and general information about other products, services and events offered by us where they are similar to those you have already purchased from or requested from us and you have not opted out of such communications.

There is no obligation to provide us with the personal data we ask you for. However, joint business processes or marketing processes may be delayed or become impossible and it may be impossible for you to participate in our events if you do not provide your personal data. If the provision of your data is required by law in some cases, we will inform you of this separately.

4. legal bases of data processing

We use your data on the basis of 

1. your consent (Art 6 (1) lit a GDPR); you have the right to revoke your consent to us at any time with effect for the future. However, this does not affect the lawfulness of the processing carried out until the revocation;

2. the fulfilment of a contract concluded with you or the implementation of pre-contractual measures, insofar as this is necessary (Art 6 (1) lit b GDPR); 

3. the need to fulfil legal obligations to which we are subject (Art 6 (1) lit c GDPR); or

4. an overriding legitimate interest (Art 6 (1) lit f GDPR), which lies in achieving the purposes mentioned in point 3. If we process data on this basis, you have the right to object to the processing of your personal data, taking into account the provisions of Art 21 GDPR.

There is no obligation to provide us with the personal data we ask you for. However, you may not be able to use all the functions of this website if you do not provide your personal data. If you are required to provide your personal data for legal reasons, we will inform you of this separately.

5. your rights

Under applicable law, you are entitled to do so (if the relevant requirements of the applicable law are met),

• to request confirmation as to whether and which of your personal data we process and to receive copies of this data,
• to request the rectification or erasure of your personal data,
• to request us to restrict the processing of your personal data,
• to object to the processing of your personal data,
• to withdraw any consent previously given for the processing (the withdrawal of your consent does not affect the lawfulness of processing based on your consent before its withdrawal),
• to request data portability, and
• to lodge a complaint with the data protection authority.

The competent authority for us is:

Austrian Data Protection Authority
Barichgasse 40-42
1030 Vienna
Tel. +43 1 52152 2550
E-mail: [email protected]

To exercise your rights, you can also contact [email protected] at any time.

6. safety measures

We take appropriate technical and organisational measures in accordance with Art. 32 GDPR, taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of processing as well as the risk of varying likelihood and severity for the rights and freedoms of natural persons, to ensure a level of security appropriate to the risk.

The measures include, in particular, safeguarding the confidentiality, integrity and availability of data by controlling physical access to the data, as well as the access, input, transfer, backup, availability and separation of the data. We have also set up procedures to ensure that data subjects can exercise their rights, e.g. to have data deleted and to respond to any threats to the data. Furthermore, we take the protection of personal data into account as early as the development or selection of hardware, software and procedures, in accordance with the principle of data protection through technology design and data protection-friendly default settings (Art 25 GDPR).

7. transfer of data to countries outside the EU or international organisations

A third country is a country in which the GDPR is not directly applicable. This generally applies to all countries outside the EU or the European Economic Area (EEA).

The level of data protection in other countries may differ from that in your country. However, we only transfer your personal data to countries that have been classified as safe by the EU Commission or take appropriate measures to ensure that all recipients offer an adequate level of data protection. This is done, for example, by concluding data transfer agreements based on standard contractual clauses in accordance with Regulation (EU) 2021/914 of the European Parliament and of the Council, supplemented by additional safeguards.

8. disclosure of data to third parties

Your personal data will only be passed on to third parties if this is necessary for the execution of the contract with you, if the transfer is permitted on the basis of a balancing of interests within the meaning of Art 6 (1) lit f GDPR, if we are legally obliged to pass on the data or if you have given your consent.

This data will not be passed on to third parties for their advertising purposes.

9. storage period

We follow the principles of data minimisation and storage limitation. This means that we only store your data for as long as is necessary to fulfil the stated purposes or as required by law. As soon as the purpose no longer applies or the statutory periods have expired, your data will be blocked or deleted in accordance with the statutory provisions. If you have given your consent to storage, we will store your personal data until you withdraw your consent.

10. cookies and similar technologies

Our services use cookies and similar technologies. These are usually small text files that are stored on your device when you use our services. These cookies contain a unique string of characters that uniquely identifies your browser or applications when you return to our services. Some functions of our services require the browser or application to be recognised when a new page is called up. We use the following types of cookies:

• Required cookies: These cookies are absolutely necessary for the operation of our website and enable you to navigate and use its functions. Without these cookies, the services on our website may not be available.
• Performance cookies: These cookies are used to improve and personalise your experience on our website.
• Functional cookies: Functional cookies help us to perform certain functions, such as sharing website content on social media or collecting feedback. 
• Analysis cookies: We use analysis cookies to collect information about how visitors use our website. This helps us to analyse data, improve the performance of our website and understand which parts of the website are most popular.
• Third party cookies: We may also allow third party providers to place cookies on your device via our website to help us analyse usage statistics, provide personalised content and serve targeted advertising.

You can change your cookie preferences at any time. If you deactivate cookies, the functionality of our website may be limited.

Unless cookies and similar technologies are technically necessary to provide a service you have requested, we will only use them with your consent.

Purpose of this data processing

We use cookies and similar technologies to make our services attractive and user-friendly, to improve them and to process enquiries more quickly. Some functions of our services require the browser to be recognised when a new page is called up.

Legal basis for this data processing

The legal basis for the processing of personal data with technically necessary cookies is Art 6 (1) lit f GDPR. For the processing of personal data that is not necessary to provide you with a desired service, your informed consent is required in accordance with Art 6 (1) lit a GDPR.

Duration of storage

Session cookies are deleted as soon as you close the browser. Permanent cookies are automatically deleted after a certain period of time, which may vary depending on the cookie.  

Overview of the cookies used on this website:

Cookie name	Domain	Description of the	Duration	Type
__cf_bm	.hsappstatic.ne t	This cookie, which is set by Cloudflare, supports Cloudflare Bot Management.	1 hour	Required
__cf_bm	.hs-scripts.com	This cookie, which is set by Cloudflare, supports Cloudflare Bot Management.	1 hour	Required
__cf_bm	.hsforms.net	This cookie is used to distinguish between humans and bots. This is beneficial for the website to create valid reports on the use of its website.	1 hour	Required
__cf_bm	.hubspot.com	This cookie, which is set by Cloudflare, supports Cloudflare Bot Management.	1 hour	Required
__cf_bm	.hs banner.com	This cookie, which is set by Cloudflare, supports Cloudflare Bot Management.	1 hour	Required
__cf_bm	.hs analytics.net	This cookie, which is set by Cloudflare, supports Cloudflare Bot Management.	1 hour	Required
__cf_bm	.hscollectedfor ms.net	This cookie, which is set by Cloudflare, supports Cloudflare Bot Management.	1 hour	Required
__cf_bm	.usemessages. com	This cookie, which is set by Cloudflare, supports Cloudflare Bot Management.	1 hour	Required
__cf_bm	.hsadspixel.net	This cookie, which is set by Cloudflare, supports Cloudflare Bot Management.	1 hour	Required
__cf_bm	.hubspot logos.com	This cookie, which is set by Cloudflare, supports Cloudflare Bot Management.	1 hour	Required
__cf_bm	.hsforms.com	This cookie, which is set by Cloudflare, supports Cloudflare Bot Management.	1 hour	Required
__cf_bm	.hubapi.com	This cookie, which is set by Cloudflare, supports Cloudflare Bot Management.	1 hour	Required
__hs_do_not_tra ck	notarity.com	HubSpot sets this cookie to prevent the tracking code from sending information to HubSpot.	6 months	Required
elementor	notarity.com	This cookie is used by the website's WordPress theme. It enables the website owner to implement or change the content of the website in real time.	never	Required
wpEmojiSettings Supports	notarity.com	WordPress sets this cookie when a user interacts with emojis on a WordPress website. It helps to determine whether the user's browser can display emojis properly.	Meeting	Required
cookieyes consent	notarity.com	CookieYes sets this cookie to store users' consent settings so that their preferences are respected on their subsequent visits to this website. It does not collect or store any personal information of website visitors.	1 year	Required
_cfuvid	.hubspot.com	Calendly sets this cookie to track users across sessions and optimise the user experience by maintaining session consistency and providing personalised services.	Meeting	Performance
_cfuvid	.hsforms.com	Calendly sets this cookie to track users across sessions and optimise the user experience by maintaining session consistency and providing personalised services.	Meeting	Performance
trp_language	notarity.com	The Translate-Press plugin sets this cookie to save the language selected by the user for the next visit.	1 month	Functional
__hssrc	notarity.com	HubSpot sets this cookie to determine whether the visitor has restarted their browser. If this cookie does not exist when HubSpot manages cookies, it is considered a new session.	Meeting	Functional
__hssc	notarity.com	HubSpot sets this cookie to track sessions. This is used to determine whether HubSpot should increment the session number and timestamps in the __hstc cookie. It contains the domain, the number of views (which increments with each page view in a session) and the session start timestamp.		1 hour Functional
__hstc	notarity.com	This is the main cookie set by Hubspot to track visitors. It contains the domain, the initial timestamp (first visit), the last timestamp (last visit), the current timestamp (this visit) and the session number (increases with each subsequent session).	6 months	Analysis cookie
hubspotutk	notarity.com	HubSpot sets this cookie to track visitors to the website. This cookie is passed to HubSpot during form submission and is used when contacts are deduplicated.	6 months	Analysis cookie
_pk_id.1.a69f	notarity.com	This cookie name is associated with the Piwik open source web analytics platform. It helps website owners to track visitor behaviour and measure website performance.	1 year and 1 month	Analysis
_pk_ses.1.a69f	notarity.com	This cookie name is associated with the Piwik open source web analytics platform. It helps website owners to track visitor behaviour and measure website performance.	1 hour	Analysis
nginx_no_cache	notarity.com	This cookie name is associated with the Piwik open source web analytics platform. It helps website owners to track visitor behaviour and measure website performance.	one hour	Miscellaneous

How to manage cookies

Most web browsers allow you to manage your cookie settings. You can set your browser to reject cookies or delete certain cookies. However, please note that you may not be able to access or effectively use certain features of our website if you disable cookies.

You can find more information on managing cookies in the help section of your browser.

Of course, you can send us your questions regarding cookies or this cookie policy at any time by e-mail to [email protected].

Google Analytics

We use Google Analytics to analyse website usage. The data obtained from this is used to optimise our website and advertising measures.

Google Analytics is provided to us by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Google processes the website usage data on our behalf and is contractually obliged to take measures to ensure the security and confidentiality of the processed data.

During your visit to the website, the following data, among others, is recorded:

• Pages accessed
• The achievement of "website goals" (e.g. contact enquiries and newsletter registrations)
• Your behaviour on the pages (e.g. length of stay, clicks, scrolling behaviour)
• Your approximate location (country and city)
• Your IP address (in shortened form, so that no clear assignment is possible)
• Technical information such as browser, internet provider, terminal device and screen resolution
• Source of origin of your visit (i.e. via which website or via which advertising medium you came to us)

No personal data such as name, address or contact details are ever transferred to Google Analytics.

This data is transferred to Google servers in the USA. We would like to point out that the same level of data protection cannot be guaranteed in the USA as within the EU.

Google Analytics stores cookies in your web browser for a period of two years since your last visit. These cookies contain a randomly generated user ID with which you can be recognised on future visits to the website.

The recorded data is stored together with the randomly generated user ID, which enables the evaluation of pseudonymous user profiles. Other data remains stored in aggregated form indefinitely.

If you do not agree with the collection, you can cancel it with the one-time installation of the Browser add-ons to deactivate Google Analytics or by rejecting the cookies via our cookie settings dialogue.

Source: traffic3.net

Here you can find more information on the use of data by Google Inc: https://support.google.com/analytics/answer/6004245?hl=de

Data processing is carried out on the basis of the legal provisions of Art. 6 (1) lit a (consent) and/or lit f (legitimate interest) GDPR.

Our concern in terms of the DSGVO (legitimate interest) is the improvement of our offer and our web presence. Since the privacy of our users is important to us, the user data is anonymised.

Matomo

On this website, we use the web analysis service Matomo to analyse and check the use of our website. We can use the statistics obtained to improve our offering and make it more interesting for you as a user. We operate Matomo in a version that does not require cookies. This means that no Matomo cookies are stored on your computer for the purpose of web analysis. To analyse website usage, your IP address and information such as timestamps, websites visited and your language settings are recorded. We store the information collected in this way on our server.

This website uses Matomo with the "AnonymiseIP" extension. This means that IP addresses are further processed in abbreviated form and cannot be directly linked to individuals. The IP address transmitted by your browser using Matomo is not merged with other data collected by us. The legal basis for the use of Matomo is Art. 6 (1) lit f GDPR.

The Matomo programme is an open source project. Information from the third-party provider on data protection can be found at https://matomo.org/privacy-policy/ 

You have the option to prevent actions you take here from being analysed and linked. This will protect your privacy, but will also prevent the owner from learning from your actions and improving usability for you and other users.

Hubspot

Our website uses features of the web analytics service HubSpot, Inc. 25 First Street, 2nd FloorCambridge, MA 02141 USA ("Hubspot"). If you are a website visitor based in the European Economic Area ("EEA") or United Kingdom ("UK"), HubSpot Ireland Limited is responsible for processing your personal data. You can reach HubSpot's data protection officer at the following address here. Cookies are used to analyse the use of the website by its users. The information generated in this way is transferred to the provider's server and stored there.

Your data through the cookies set will only be processed if you have given us your consent to do so.

We have concluded a corresponding contract for commissioned data processing with the provider of the web analytics service.

The relationship with the web analytics provider is based on USA, Standard Contractual Clauses (SCC) concluded: Customer Relationship Management (CRM)

Data processing is carried out on the basis of the legal provisions of Section 165 (3) TKG 2021 and Art 6 (1) lit a (consent) GDPR.

Upon termination of the provision of the processing services, the data importer shall, at the choice of the data exporter, erase all personal data processed on behalf of the data exporter and certify to the data exporter that it has done so, or return to the data exporter all personal data processed on its behalf and erase any existing copies. Until the deletion or return of the data, the data importer shall continue to ensure compliance with these clauses. In the event that local laws applicable to the data importer prohibit the return or erasure of the personal data, the data importer warrants that it shall continue to ensure compliance with these clauses and shall process the data only to the extent and for as long as required by local law. This is without prejudice to clause 14, in particular the obligation of the data importer under clause 14(e) to notify the data exporter throughout the term of the contract if it has reason to believe that it is or has been subject to laws or practices that are not in compliance with the requirements under clause 14(a).

We also use HubSpot, Inc. 25 First Street, 2nd Floor Cambridge, MA 02141 USA ("Hubspot") on our website as a CRM tool for our customer relationship management. If you are a website visitor based in the European Economic Area ("EEA") or the United Kingdom ("UK"), HubSpot Ireland Limited is responsible for the processing of your personal data. You can contact HubSpot's data protection officer at here. Data protection information regarding HubSpot can be found at https://legal.hubspot.com/privacy-policy .

Only the English language version of this Privacy Policy shall apply and in no event shall the German language version be construed to alter the English language version of the Privacy Policy or otherwise govern the relationship between the parties.

SalesViewer

This website uses SalesViewer® technology from SalesViewer® GmbH to collect and store data for marketing, market research and optimisation purposes on the basis of the website operator's legitimate interests (Art 6 (1) lit f GDPR).

In order to do this, a javascript based code, which serves to capture company-related data and according website usage. The data captured using this technology are encrypted in a non-retrievable one-way function (so-called hashing). The data is immediately pseudonymised and is not used to identify website visitors personally.

The data stored by Salesviewer will be deleted as soon as they are no longer required for their intended purpose and there are no legal obligations to retain them.

The data recording and storage can be repealed at any time with immediate effect for the future, by clicking on https://www.salesviewer.com/opt-out in order to prevent SalesViewer® from recording your data. In this case, an opt-out cookie for this website is saved on your device. If you delete the cookies in the browser, you will need to click on this link again.

Hotjar

On our platform, we use Hotjar with consent for cookie selection. The provider is Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe (Website: https://www.hotjar.com).

Hotjar is a tool for analysing your user behaviour on this website. Hotjar allows us to record your mouse and scroll movements and clicks, among other things. Hotjar can also determine how long you remain with the mouse pointer in a particular place. Hotjar uses this information to create so-called heat maps, which can be used to determine which website areas are favoured by website visitors.

Furthermore, we can determine how long you stayed on a page and when you left it. We can also determine at which point you abandoned your entries in a contact form (so-called conversion funnels).

In addition, Hotjar can be used to obtain direct feedback from website visitors. This function serves to improve the website operator's web offerings.

Hotjar uses technologies that enable the recognition of the user for the purpose of analysing user behaviour (e.g. cookies or use of device fingerprinting).

If consent has been obtained, this service is used exclusively on the basis of Art 6 (1) lit a GDPR. Consent can be revoked at any time.

Disable Hotjar

If you would like to deactivate the data collection by Hotjar, click on the following link and follow the instructions there: https://www.hotjar.com/policies/do-not-track/

Please note that Hotjar must be deactivated separately for each browser or end device.

For more information about Hotjar and the data collected, please see Hotjar's privacy policy at the following link: https://www.hotjar.com/privacy

Whatsapp

You have the option of contacting us voluntarily via WhatsApp. We regard this as consent to communication with WhatsApp. This is voluntary and we therefore consider this action to be implied consent (Art 6 (1) lit a GDPR). We would like to point out that your telephone number will now be stored by us on this end device and will then also be transmitted to WhatsApp. We would also like to draw your attention to the fact that WhatsApp analyses the metadata of our communication and can use it to create user profiles.

11. special data processing

Website access data - visitors

When you visit our website, the following personal data is collected:

• IP address in anonymised form
• Date and time of the request
• Time zone difference from GMT
• Content of the request (specific page)
• Browser
• Operating system
• Access status/http status code
• Transmitted data volume
• Website from which the enquiry comes.

In the case of purely informational use, we only collect data that your browser transmits to our server. This data is technically necessary for us to display our website to you and to ensure stability and security and therefore constitutes a legitimate interest within the meaning of Art 6 (1) lit f GDPR.

Unless otherwise stipulated below, this data will not be further processed by us.

Contract processing

In addition, the following data is also stored by us for the purpose of processing the contract: Title, first name, surname, company name, country, address, telephone number, email address. The data provided by you is required to fulfil the contract or to carry out pre-contractual measures (Art 6 (1) lit b GDPR). Without this data, we cannot conclude the contract with you. 

Data is not transferred to third parties, with the exception of the transfer of credit card data to the processing bank or payment service provider for the purpose of debiting the price and, if necessary, to our tax advisor to fulfil our tax obligations.

Newsletter

You have the option of subscribing to our newsletter via our website. With your consent, you can subscribe to our newsletter, with which we inform you about our current developments. To do this, we need your e-mail address and your declaration that you agree to receive the newsletter. We use the so-called double opt-in procedure to subscribe to our newsletter. This means that after you have registered, we will send you an e-mail to the e-mail address you have provided in which we ask you to confirm that you are the owner of the e-mail address provided and that you wish to subscribe to the newsletter.

Your email address is mandatory for sending the newsletter. The provision of further, separate data (name, associated company, personal message) is based on your consent in accordance with Art 6 (1) lit a GDPR After your confirmation, we will save your e-mail address for the purpose of sending you the newsletter. The legal basis is Art 6 (1) lit a GDPR.

You also give us your consent to evaluate your user behaviour when sending the newsletter. For this evaluation, the emails sent contain so-called web beacons or tracking pixels, which are single-pixel image files that are stored on our website. The personalised newsletter tracking notes whether the e-mail was opened and the time of the call. Of course, you can revoke this consent at any time with effect for the future.

You can also revoke your consent to the sending of the newsletter at any time and unsubscribe from the newsletter. You can declare your cancellation by clicking on the link provided in every newsletter email, by sending an email to [email protected] or by sending a message to the contact details given in the legal notice. We will then immediately delete your data in connection with the newsletter dispatch. This cancellation does not affect the legality of the processing carried out on the basis of the consent until the cancellation.

Data protection in applications and the application process

We are pleased that you are applying or have applied for a position in our company. In the following, we would like to provide you with information on the processing of your personal data as part of the application process.

Notarity GmbH, based at Pfeilgasse 23/3, 1080 Vienna, is responsible for the processing of your personal data as part of the application process in accordance with data protection law.

We use the application data you have provided in connection with your application to assess your suitability for the advertised position or other vacancies in our company and to carry out the application process. The purpose of processing your personal data is to select a suitable person for a vacancy in our company.

Your application documents will be checked by the HR department and suitable applications will be forwarded to the responsible department heads. Only those persons in the company who require access for the proper conduct of the application process have access to your personal data.

If you are offered a job as part of the application process, your data will be transferred from the applicant data system to our personnel information system.

Your personal data will be deleted if it is no longer required to fulfil the purpose of data processing or if there is no lawful basis, in particular on the basis of Art. 6 GDPR, for further storage.

We would like to expressly point out that you are not obliged to provide personal data in your application documents in accordance with Art 9 GDPR. If you nevertheless provide information on your ethnic origin, religious or philosophical beliefs, trade union membership, genetic or biometric data, health data, this is done on a voluntary basis. If you provide us with this information voluntarily, we request your express consent to the processing of this personal data in accordance with Art 9 (2) lit a GDPR. 

You naturally have the right to withdraw this consent at any time. However, this has no influence on the legality of the processing of your data up to the time of revocation.

Your data will not be passed on to third parties.