The following information describes how personal data is collected and processed in the context of the website of the law firm Dr. Franz-Martin Orou and in the course of any mandate.
1. Data Controller
The data controller pursuant to Art. 4 No. 7 GDPR is:
Dr. Franz-Martin Orou, Attorney at Law
Kapitelgasse 7/5, A-1170 Vienna, Austria
Tel: +43-1-890 25 710
E-Mail: office@fmo.eu
2. Personal Data
The law firm collects, processes and uses personal data only with your consent, for the fulfilment of a mandate, or on another legal basis in accordance with the GDPR. Only data that is necessary for the performance of our services or that you have voluntarily provided to us will be collected.
3. Server Data
The website provider automatically collects server log files (IP address, browser, operating system, referrer URL, date/time). Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the technical functionality of the website).
4. Contact and Data Processing
When you contact us, your data will be processed to handle your enquiry pursuant to Art. 6(1)(b) GDPR and deleted after 3 months, unless a mandate is established. Statutory retention periods apply within the scope of the mandate (Austrian Bar Act/RAO: 5 years; tax law: 7 years; limitation periods: up to 30 years).
In the course of our legal representation, factual and case-related information about you may also be obtained from third parties.
Application data will be deleted after nine months if no employment relationship is established and no consent for longer retention has been given.
5. Website Analytics (Matomo)
This website uses Matomo (matomo.org), a privacy-friendly open-source analytics software. Matomo is operated on our own server; your data is not shared with third parties. Anonymised information (page views, time on site, country of origin) is collected. Your IP address is anonymised before storage. Legal basis: Art. 6(1)(a) GDPR (consent via cookie banner). You may object to analytics at any time via our cookie banner.
6. Meta Pixel (Facebook/Instagram)
This website uses the Meta Pixel of Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland. The Meta Pixel is a JavaScript code that tracks visitor behaviour on our website and shares it with Meta in order to measure the effectiveness of our advertisements on Instagram and Facebook and to enable targeted advertising.
To the extent that the Meta Pixel is used on this website and personal data of website visitors is thereby transmitted to Meta Platforms Ireland Limited, Dr. Franz Martin Orou, Attorney at Law, as the operator of the website, and Meta Platforms Ireland Limited are joint controllers within the meaning of Art. 26(1) GDPR (General Data Protection Regulation) with regard to the collection and disclosure by transmission of this data to Meta Platforms Ireland Limited. The joint controllership is limited to these processing operations and does not extend to any subsequent processing of the data determined solely by Meta.
The agreement on joint controllership pursuant to Art. 26 GDPR is governed by the Controller Addendum provided by Meta, which is incorporated into the Meta Business Tools Terms. The essential contents of this agreement are available at https://www.facebook.com/legal/controller_addendum.
The following data may be transmitted: IP address (anonymised), browser information, pages visited, time spent. Meta may also transfer this data to the USA. Meta Platforms Inc. is certified under the EU-US Data Privacy Framework; data transfers are based on standard contractual clauses pursuant to Art. 46 GDPR.
Legal basis: Art. 6(1)(a) GDPR (consent). The Meta Pixel is only loaded after your explicit consent via our cookie banner. You may withdraw your consent at any time with effect for the future. Further information: https://www.facebook.com/privacy/policy/
7. Online Appointment Booking (Microsoft Bookings)
For booking consultation appointments, we use Microsoft Bookings, a service of Microsoft Ireland Operations Ltd., One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. When booking an appointment, your name, email address, telephone number and the selected appointment time are processed.
Microsoft may transfer data to the USA; Microsoft is certified under the EU-US Data Privacy Framework. Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures). A data processing agreement pursuant to Art. 28 GDPR has been concluded with Microsoft. Further information: https://privacy.microsoft.com/en-gb/privacystatement
8. Online Quiz / Lead Form (Typeform)
On our advertising pages, we use Typeform, a service of TYPEFORM SL, Carrer de Bac de Roda 163, 08018 Barcelona, Spain. Typeform processes the data you enter in the form (name, telephone number, email address, information about your company) and transmits it to us.
Legal basis: Art. 6(1)(a) GDPR (consent through active form submission). A data processing agreement pursuant to Art. 28 GDPR has been concluded with Typeform. Data is stored on European servers. Further information: https://admin.typeform.com/to/dwk6gt/
9. Cookies
This website uses cookies. Cookies are small text files stored on your device. We use the following cookie categories:
Necessary Cookies: Technically required for the operation of the website. No consent required.
Usage Statistics (Matomo): Anonymised collection of visitor statistics. Only with your consent.
Marketing / Advertising (Meta Pixel): Collection of website visits to measure and optimise advertising on Facebook and Instagram. Only with your explicit consent.
You may change your cookie settings at any time via the “Cookie Settings” button at the bottom of the screen or withdraw your consent.
10. Data Transfers
For the fulfilment of a mandate, data may need to be shared with third parties (courts, authorities, negotiating partners, etc.). Transfers of data to third countries are only made on the basis of appropriate safeguards (standard contractual clauses, Art. 46 GDPR) or where the recipient is certified under the EU-US Data Privacy Framework.
11. Vienna Bar Association Trust Account Administration
With regard to data processing for the administration of the trust account scheme, the rights and obligations arising from Art. 12 to 22 and Art. 34 GDPR, as well as the right to information, rectification and deletion under § 1 of the Austrian Data Protection Act (DSG), and their enforcement, are governed by the provisions of the Austrian Bar Act (RAO) and the guidelines issued pursuant to § 27(1)(g) RAO.
Other rights and obligations of the data controller for these processing activities rest with the Vienna Bar Association, Ertlgasse 2 / corner of Rotenturmstraße, 1010 Vienna, Tel: +43-1-533 27 18 0, E-Mail: kanzlei@rakwien.at
12. Rights of Data Subjects
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), objection (Art. 21), and withdrawal of consent (Art. 7(3) GDPR). Complaints may be lodged with the Austrian Data Protection Authority (dsb.gv.at).
Please direct any requests to: office@fmo.eu
Last updated: June 2026