This draft for Austria has not yet been reviewed by a lawyer and is not in force. Passages marked TO CONFIRM: … are to be clarified by the operator or by the lawyer.
The company database contains details of businesses in Austria. A large share are sole proprietorships; their details relate to a natural person and are personal data. The same applies to named contact persons. Details of legal persons are not covered by the GDPR, but in Austria they are protected by § 1 DSG. Public availability does not permit unrestricted reuse.
Martin Adamec is the controller for the database processing. Contact details are given below.
Depending on the source and the agreed export: business name, legal form, companies register number and court, VAT ID, business address, federal state and district, industry and ÖNACE code, published business phone number, email address and website. A business address may also be a sole trader’s home address. We do not process special categories of data under Art. 9 GDPR.
Source categories are open map data (Overture Maps, OpenStreetMap), public business directories, directories of the chambers of the liberal professions and the details that businesses publish themselves in the legal notice and disclosure on their website. As of 3 November 2026, only Overture Maps has been processed; the other categories are planned. We use the companies register, GISA and the register of associations only for individual searches. The data sources and methodology page gives details; we will tell you the origin of your record on request.
The purpose is to structure business information and to provide agreed exports to businesses for market analysis, territory planning, maintaining customer data and addressed postal mailings. An export is neither consent to marketing nor proof of reachability. Email, text message and telephone marketing is not allowed in Austria without prior consent (§ 174 TKG 2021); we point this out to our customers.
For personal business data, Art. 6(1)(f) GDPR is intended as the legal basis: the interests of the operator and its customers in reliable business information. Necessity and the impact on data subjects must be assessed for the specific source, fields and use. Safeguards are data minimisation, source limits, rectification, objection and suppression. TO CONFIRM: balancing of interests for sole traders in light of the Data Protection Authority decision of 29 July 2025 (GZ 2024-0.368.729, not final) and whether § 151 GewO (address publishers and direct marketing companies) applies.
Recipients may be business customers receiving the agreed fields, necessary hosting and IT providers, professional advisers and competent authorities. Customers are responsible for their own processing and have their own information and data subject obligations.
A personal-data export or access outside the EEA requires a case-by-case assessment and a transfer mechanism under Chapter V GDPR. A purchase alone does not justify disclosure.
Business records are kept only as long as necessary and lawful, taking into account the currency of the source, changes, objections and legal obligations. Outdated details are corrected or removed. Minimal suppression identifiers are kept so that a record is not added again after an objection.
You can request access including the origin of the data, rectification, erasure, restriction and, where applicable, data portability. You can object to processing based on legitimate interests on grounds relating to your particular situation, and to use for direct marketing at any time without giving reasons (Art. 21 GDPR); that use then ends. Use the objection form or write to info@firmdat.at. We generally reply within one month.
You can lodge a complaint with the Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna (dsb.gv.at), with the Czech Office for Personal Data Protection (uoou.gov.cz) or with any other competent supervisory authority (Art. 77 GDPR).
Where Art. 14 GDPR applies, data subjects must be informed individually and in good time: generally within one month, earlier where applicable at first communication or disclosure. This page supplements that obligation and does not automatically replace individual information. TO CONFIRM: whether and for which records an exemption under Art. 14(5) GDPR can be relied on, and how individual information is otherwise provided.
These details are updated when sources, purposes or processing change significantly. The current version date is shown above.
Martin Adamec
Mírová 1541, 516 01 Rychnov nad Kněžnou, Czech Republic
IČO: 19552319
info@firmdat.at
Legal notice · Terms · Privacy policy · Objection · Data sources and methodology
