Privacy Policy
This Privacy Policy was last updated on February 27, 2025
1. General information
The protection of your personal data is of particular concern to us. We process your personal data exclusively on the basis of the statutory pro-visions (GDPR, DSG, TKG 2021).
In order to provide our website and to provide our services, we process information about you, so-called personal data – or “data” for short in the following. The term “processing” refers to any handling of data, such as the collection, storage, use and deletion of personal data.
We are happy to inform you about the processing of your personal data and the claims and rights to which you are entitled under the data protec-tion regulations in the context of the data protection declaration.
We are responsible for the processing of your personal data:
Fresh Labs FlexCo
Stella-Klein-Löw-Weg 8
1020 Vienna
E-mail: office@mypaperwork.ai
If you have any complaints, questions or suggestions on the subject of data protection, please do not hesitate to contact us at any time using the contact details provided.
2. Data processing in the context of our website
2.1 General Information
As part of our website and online services, we process data that you dis-close to us (for example, when making a query), logs (our servers log who makes requests for security reasons) and cookies (these are small text files that are stored on your device and contain information to rec-ognize you).
When you visit our website for the first time, you can use the cookie banner to select which cookies are to be set on your end device. You can also call up information about the individual cookies and their providers via the cookie banner.
The web server for the operation of our website is technically operated by Google Cloud Platform as a processor.
To prevent third-party cookies from being set, you can block third-party cookies in your browser. Here you will find instructions for the most common browsers:
Firefox: here
Chrome: here
Edge: here
Safari: Third-party cookies are blocked by default in Apple’s Safari.
2.2. Data processing for the operation and security of our website (server logs)
Purpose of processing: When you visit our website, the web server collects usage data (so-called server logs). The collection of this data is nec-essary to technically enable the connection to our server and the use of the website. This data is also used to prevent and analyze attacks.
The following server logs are collected: The host name and IP address of the accessing computer together with the date, the time of the request, identification data of the browser used and the operating system used, as well as the “referrer” URL.
Legal basis for processing: Your data is processed on the basis of our legitimate interest in ensuring the operation of the service and system se-curity.
Recipient of the data: The web server for the operation of our website is technically operated by Google Cloud Platform as a processor. If there has been a hacker attack, the data from the server logs will be passed on to the law enforcement authorities. No other data will be passed on to third parties.
Further information: The server logs are stored in personalized form for a maximum of 4 weeks. The IP address is stored in order to be able to support the responsible authorities in investigating and prosecuting security incidents (hacking, data breach, etc.).
3. Data processing in the context of business operations:
3.1. Data processing in the context of establishing contact:
Purpose of processing: When you contact us (e.g. by e-mail, telephone or via a form), we process the data you provide when you contact us only to the extent that this is necessary to process the request or its handling.
Legal basis for processing: The processing of your data is carried out for the implementation of pre-contractual measures or for the fulfillment of a contractual relationship or is based on our legitimate interest, namely for the organization of the response to the request.
Recipients of the data: This data will only be transmitted to third parties if the transmission is necessary for answering the request.
Further information: We process your data for as long as is necessary to process the request and, in the event of a follow-up request, for a further three years after the last contact with you.
3.2. Data processing as part of our service:
Purpose of processing: If you register for a user account and make use of our services, we store and process all data that you disclose to us in this context and all data generated through the use of our services. Among other things, we store your master data, contact data, contract data and payment data for your account. We also record all information and data that you provide to us by uploading documents or entering them directly, as well as data that arises when compiling your applications and your relocation, e.g. deadlines). If you instruct us to store documents, we also store image data/scans of these documents. When we finalize an application for you, we process the necessary image data/scans, e.g. to generate the enclosures.
Legal basis for processing: Your data is processed to fulfill the contractual relationship concluded with you.
Recipients of the data: The data will be transmitted to third parties if this is necessary for the fulfillment of this contractual relationship, e.g. for a review of the content of your application requested by you or in the case of a submission of the application commissioned by you. In the event of a justified request for information from a court, an authority or an au-thorized third party, we will disclose your name, postal address and e-mail address. If a transfer of your data relevant in the respective individual case is necessary for the fulfillment of the contractual relationship or on the basis of a legal basis, this will be done to the following categories of recipients:
▪ Contractual and business partners (partner companies)
▪ Legal representative
▪ Public accountants, auditors and tax consultants
▪ Courts
▪ Competent administrative authorities
Further information: We store all this data for the entire term of the contract. If you do not conclude another contract with us after the end of the term, we will store this data for a further 30 days to enable you to back it up. In addition, we store master data and contract data for the duration of the statutory warranty period (two years). Statutory retention obligations (e.g. in accordance with accounting regulations, generally seven years) remain unaffected.
3.3. Data processing in the context of the newsletter:
Purpose of processing: If you have registered for our newsletter, you will receive regular information from us by e-mail about us and our range of services. If you no longer wish to be contacted by us, please un-subscribe by writing to look@mypaperwork.ai or use the unsubscribe link in the newsletter.
Legal basis for processing: Your data is processed on the basis of your consent.
Recipients of the data: Your data will not be transferred to third parties who pursue their own purposes.
Further information: We process your data until you withdraw your consent.
4. Your rights
4.1. Right to information about the stored data in accordance with Art. 15 GDPR
You have the right to request information as to whether we process your personal data. If this is the case, you have a right to information about this personal data and to further information related to the processing.
4.2. Right to rectification of inaccurate data pursuant to Art. 16 GDPR
In the event that personal data that we process about you is (no longer) accurate or incomplete, you can request that this data be corrected and, if necessary, completed.
4.3. Right to erasure of data pursuant to Art. 17 GDPR
If the legal requirements are met, you can request the deletion of your personal data.
4.4. Right to restriction of data pursuant to Art. 18 GDPR
If the legal requirements are met, you can request the restriction of the processing of the data concerning you.
4.5. Right to data portability pursuant to Art. 20 GDPR
If the legal requirements are met, you can request the transfer of your data in a structured, commonly used and machine-readable format.
4.6. Right to object to unreasonable data processing pursuant to Art. 21 GDPR
For reasons arising from your particular situation, you can object at any time to the processing of data concerning you that we process on the ba-sis of a legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR.
4.7. Right to withdraw consent
If the processing is based on a declaration of consent, you have the op-tion of revoking this at any time without affecting the legality of the processing carried out on the basis of the consent until revocation.
4.8. Right to lodge a complaint with the data protection authority
If you are of the opinion that the processing of your personal data by us violates the applicable data protection law or your data protection claims have been violated in any other way, you have the option of complain-ing to the competent supervisory authority (Austrian Data Protection Authority). The address is
Austrian Data Protection Authority
Barichgasse 40-42
1030 Vienna
Phone: +43 1 52 152-0
E-mail: dsb@dsb.gv.at
5. Further information:
We need the data that we ask you to provide in order to provide our services within the scope of the contractual relationship or to provide in-formation that you have requested from us or to send you our newsletter and other information.
If you do not provide the data, we will not be able to provide our services.
Automated decision-making, including profiling, does not take place. If we process your personal data for a purpose other than that for which we have collected this data, we will inform you of this fact and inform you of this other purpose.