Privacy Policy

1. Purposes of data processing

We process personal data for the following purposes:

• Provision of our services as a tax advisory firm (e.g. bookkeeping, tax returns, advice)
• Use of AI-supported applications in the context of working with our clients (see section "Working with us")
• Establishment of a possible business relationship (onboarding/onboarding process)
• Fulfillment of legal obligations (e.g. bookkeeping, storage obligations)
• Communication with you and answering your inquiries
• Provision of the information and services offered on this website
• Website analytics with Google Analytics: We use Google Analytics on our website, a web analytics service provided by Google. Google Analytics helps us understand how visitors use our website. This may include information about pages visited, time spent on the website, devices and browsers used, approximate location, and interactions with the website. Google Analytics may use cookies or similar technologies.
• Website analytics with Microsoft Clarity: We use Microsoft Clarity on our website, a web analytics service provided by Microsoft, embedded via Google Tag Manager. Clarity creates anonymized heatmaps and session recordings (e.g. mouse movements, clicks, and scrolling behavior) to help us understand how visitors use our website and to improve usability. This may involve cookies or similar technologies as well as IP addresses. Further information is available in Microsoft's privacy statement.
• Meta Pixel: With your consent, we use the Meta Pixel provided by Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, D04 X2K5, Ireland, to measure the effectiveness of our ads on Facebook and Instagram and to show targeted ads, for example to visitors of our website. For this purpose, cookies are set and data such as your IP address, device and browser information, pages visited and interactions are transmitted to Meta. We are jointly responsible with Meta for the collection and transmission of this data (Art. 26 GDPR, agreement: https://www.facebook.com/legal/controller_addendum); any further processing is the sole responsibility of Meta (https://www.facebook.com/privacy/policy). Data may be transferred to the USA; Meta is certified under the EU-US Data Privacy Framework. The legal basis is your consent (Art. 6(1)(a) GDPR, Section 165(3) Austrian Telecommunications Act 2021), which you can withdraw at any time via "Cookie Settings" in the footer. The cookies are stored for up to 90 days.
• Calendly: With your consent, we use Calendly (Calendly LLC, USA) for appointment booking; details: https://calendly.com/privacy

2. Legal bases

We process personal data of our (prospective) clients and of visitors to this website for the initiation and performance of a contract (Art. 6(1)(b) GDPR), for compliance with legal obligations (Art. 6(1)(c) GDPR), on the basis of our legitimate interest in efficient, documented and quality-assured service delivery (Art. 6(1)(f) GDPR) and, where indicated, on the basis of consent (Art. 6(1)(a) GDPR).

3. Types of data collected

We process the following categories of data:

• Contact details (name, address, e-mail address, telephone number)
• Content data (text entries, photographs, videos)
• Usage data (visited websites, interest in content, access times)
• Meta/communication data (device information, IP addresses)

4. Data collection methods

Most of the data we process is provided to us by you, e.g. when you contact us via email or use our digital onboarding tools. Some data is automatically collected by our IT systems when you visit the website (technical data).

5. Use of cookies

Our website uses cookies. These are small text files that are stored on your end device with the help of the browser. They do not cause any damage. We use cookies to make our offer user-friendly. Some cookies remain stored on your end device until you delete them. They enable us to recognize your browser on your next visit.

6. Disclosure of data to third parties

Personal data will only be passed on to third parties if this is necessary for the fulfillment of the contract, if there is a legal obligation to do so or if you have given your prior consent. This may include, for example, the tax office, social insurance carriers or software providers (e.g. for bookkeeping). Some of our service providers (including Google, Microsoft) are based in the USA or process data there. The transfer is based on the EU-US Data Privacy Framework or on Standard Contractual Clauses of the European Commission.

7. Data retention period

We store personal data for as long as it is necessary for the purposes for which it was collected or as long as there is a legal obligation to store it (e.g. for tax law reasons usually 7 years). If an initial consultation results in an offer, the data collected will be retained for 12 months to allow us to follow up on the offer. After that, it will be automatically deleted.

8. Working with us

Transparency and digital efficiency are core pillars of our work. The following therefore applies to working with PSTax:

• Third-Party Applications: We use modern, best-in-class third-party software tools to manage data, communication, and accounting.
• Call Recording & Meeting Notes (Circleback): We use Circleback to automatically generate meeting notes and action items from our calls. This allows us to focus fully on our clients during the conversation and to send clear summaries afterwards. This also supports our KYC obligations, quality assurance, and internal documentation.
• AI-Supported Applications: We use AI applications in particular to extract information from receipts and official notices, to prepare bookkeeping entries and for internal processes. The provider is Google (Gemini), acting as our data processor; training of its models with this data is contractually excluded. We retain inputs and outputs only for as long as is necessary for the respective purpose. For all material decisions, for example before submissions to authorities, at least one team member always reviews them. We do not make solely automated decisions within the meaning of Art. 22 GDPR. We are happy to answer questions about our use of AI at office@pstax.at.

These tools and applications are a fixed part of how we work; without them, we're unable to provide our services.

9. Your rights

Data subjects have the following rights:

• Right of access
• Right to rectification
• Right to erasure (within legal parameters)
• Right to restriction of processing
• Right to data portability
• Right to withdraw consent given, with effect for the future

Right to object: Where we process data on the basis of our legitimate interest, this processing may be objected to at any time (Art. 21 GDPR). As the tools and applications mentioned in the section "Working with us" are a fixed part of how we work, we are unfortunately unable to work together in this case.

If you believe that the processing of your data violates data protection law, you have the right to lodge a complaint with the data protection authority.