Privacy Policy

Law Firm Rankings Report (lawfirmrankingsreport.com)
Last updated: June 2026

1 General Information

We created this Privacy Policy to declare which information we collect, how we use data and which options the users of our website have, according to the guidelines of the General Data Protection Regulation (EU) 2016/679 (GDPR).

Unfortunately, these subjects sound rather technical due to their nature, but we have put much effort into describing the most important things as simply and clearly as possible.

1.1 Data Controller

Law Business Consulting Dillinger GmbH
Address: Löschniggweg 3/2, A-3100 St. Pölten, Austria
Company register: FN 575999 h (Commercial Court Vienna)
VAT number: ATU79658201
Business activity: Business consulting including business organisation
Member of: WKO Wien, Fachverband UBIT
Email: dataprivacy@lawfirmrankingsreport.com

As of the date of this Privacy Policy, we have not appointed a Data Protection Officer (DPO) within the meaning of Art. 37 GDPR. For all data protection inquiries, please contact us at the email address provided above.

2 Automatic Data Retention

Every time you visit our website, our webserver automatically saves data such as the address (URL) of the accessed website, the browser and browser version, the used operating system, the address (URL) of the previously visited site (referrer URL), the host name and the IP address of the device the website is accessed from, as well as the date and time in webserver log files.

Generally, webserver log files stay saved for two weeks and then get deleted automatically. We do not pass this information to others, but we cannot exclude the possibility that this data will be looked at in case of illegal conduct. Legal basis: legitimate interest in ensuring the security and stability of our website (Art. 6(1)(f) GDPR).

2.1 Data Collection

We collect the data you enter yourself in forms on the website (e.g. registration, contact forms, newsletter subscription). We also use your data to improve our platform and to prevent or detect misuse of our website.

2.2 Purposes and Legal Basis

Registration: When you register on our website, we store your name, email address, company information and other data you provide. This allows you to use the voting and search features of our platform. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

Newsletter: You may subscribe to our newsletter via our website. For this, we need your email address and your consent. We will only send our newsletter to the email address you have provided. You can revoke your consent at any time using the unsubscribe option in the newsletter or by contacting dataprivacy@lawfirmrankingsreport.com. Legal basis: consent (Art. 6(1)(a) GDPR) and legitimate interests in self-marketing (Art. 6(1)(f) GDPR).

2.3 Storage of Personal Data

Any personal data you submit on this website is solely used for the specified purpose and stored securely. We use personal data for communication with only those users who have explicitly requested being contacted, as well as for the execution of the services offered on this website. We do not pass your personal data to others without your approval, except where legally required.

If you send us personal data via email, we cannot guarantee safe transmission or protection of your data. We recommend never sending confidential data via unencrypted email.

2.4 Duration of Data Storage

We process your personal data for as long as is reasonably necessary to achieve the purposes set out above. Your data will also be processed for as long as required by statutory retention and documentation obligations under Austrian law (including the Austrian General Civil Code and the Austrian Commercial Code) or for the assertion, exercise or defence of legal claims. Your data will be deleted after your consent has been revoked or your objection has been made, unless further storage is necessary for legal obligations.

2.5 Recipients of Personal Data

Your personal data may be disclosed to the following categories of recipients, where necessary for the purposes described in this Privacy Policy: (a) hosting and IT infrastructure providers that operate and maintain our servers and website; (b) web analytics providers (Google Ireland Limited, as described in Section 4.1); (c) third-party service providers whose services are integrated into our website (e.g. Automattic Inc. for Gravatar, Google Ireland Limited for reCAPTCHA); (d) professional advisors (e.g. legal, tax and accounting advisors) where required; and (e) public authorities and courts, where disclosure is required by applicable law or regulation. We do not sell your personal data to any third party.

3 Rights Under the GDPR

You are granted the following rights under the GDPR and the Austrian Data Protection Act (DSG): right to access (Art. 15), right to rectification (Art. 16), right to erasure (Art. 17), right to restriction of processing (Art. 18), right to data portability (Art. 20), right to object (Art. 21), and the right not to be subject to a decision based solely on automated processing (Art. 22). Where processing is based on your consent, you have the right to withdraw your consent at any time, without affecting the lawfulness of processing carried out prior to such withdrawal (Art. 7(3) GDPR).

If you believe that the processing of your data violates data protection law, you have the right to lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde, https://www.dsb.gv.at) or with any other supervisory authority within the European Union, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement (Art. 77 GDPR).

4 Cookies

Our website uses HTTP cookies to store user-specific data. Cookies are small text files that are stored in your browser. We use a cookie consent tool (Borlabs Cookie) that allows you to choose which categories of cookies you wish to accept. Essential cookies are necessary for the basic function of the website; analytics and other cookies require your explicit consent.

You can manage, deactivate or delete cookies in your browser settings at any time. Instructions for the most common browsers: Chrome, Safari, Firefox, Microsoft Edge.

4.1 Google Analytics

We use Google Analytics 4 (GA4), a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies and similar technologies to analyse how visitors use our website. The information generated is usually transmitted to and stored on Google servers, which may be located in the United States.

IP anonymisation: We have activated IP anonymisation on our website. This means your IP address will be shortened by Google within member states of the European Economic Area before being transmitted to US servers.

Purpose: We use Google Analytics to analyse and improve our website. The resulting statistics help us understand visitor behaviour and optimise our services. Legal basis: consent (Art. 6(1)(a) GDPR) via our cookie consent tool.

International transfers: Google LLC is certified under the EU-U.S. Data Privacy Framework, so the transfer is covered by the European Commission’s adequacy decision of 10 July 2023. For more information, see Google’s Privacy Policy. You can opt out of Google Analytics by installing the browser add-on.

4.2 Matomo (Self-Hosted)

In addition to Google Analytics, we use Matomo, an open-source web analytics tool. Our Matomo instance is self-hosted on our own servers, meaning that all analytics data remains on our infrastructure and is not transmitted to any third party. Matomo uses cookies to analyse your use of the website. Legal basis: legitimate interest (Art. 6(1)(f) GDPR) in understanding website usage. You can opt out of Matomo tracking via our cookie consent tool.

4.3 Borlabs Cookie (Consent Management)

We use Borlabs Cookie as our cookie consent management tool. When you first visit our website, a cookie consent banner is displayed, allowing you to choose which categories of cookies you wish to accept. Your cookie preferences are stored in a cookie called “borlabs-cookie” in your browser. This cookie does not store any personal data and merely records which cookie categories you have consented to. Legal basis: compliance with legal obligations (Art. 6(1)(c) GDPR).

5 Social Media

Our website contains links to our social media profiles (e.g. LinkedIn). These are simple hyperlinks and do not constitute social media plugins. No data is transmitted to social media networks merely by visiting our website. Data is only transferred if you actively click on a social media link, which will redirect you to the respective external platform.

6 Google reCAPTCHA

To protect our website and our online forms (in particular our registration and contact forms) against automated abuse, spam submissions, and other malicious activity, we may use the reCAPTCHA service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Data processed: When reCAPTCHA is active, Google receives your IP address, information about your browser and operating system, screen resolution, language settings, referrer URL, time spent on the page, mouse movements, keystroke patterns, and cookies set by Google.

Legal basis: Legitimate interest in protecting the security and integrity of our website (Art. 6(1)(f) GDPR). You may object to this processing at any time by contacting us at the address given above.

International transfers: Google LLC is certified under the EU-U.S. Data Privacy Framework. For further information, see Google’s Privacy Policy.

7 TLS Encryption

We use HTTPS to transfer information on the internet in a secure manner (data protection by design, Art. 25(1) GDPR). With TLS (Transport Layer Security), an encryption protocol for safe data transfer, we ensure the protection of confidential information. You can recognise the use of this safeguard by the lock symbol in your browser’s address bar and the use of HTTPS in the web address.

8 Third-Party Services

8.1 Google Fonts (Local)

We use Google Fonts for the uniform display of typefaces on our website. The fonts are stored locally on our servers and are delivered directly from our infrastructure. No connection to Google’s servers is established when loading fonts, and no personal data is transmitted to Google for this purpose.

8.2 Gravatar

We use Gravatar, a service by Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA, to display author profile images. When a page with a Gravatar image is loaded, your browser connects to Automattic’s servers to retrieve the image. Automattic may receive your IP address and the URL of the page visited. For more information, see Automattic’s Privacy Policy. International transfers: As Automattic is based in the United States, personal data may be transferred outside the EEA. Automattic has entered into Standard Contractual Clauses (SCCs) approved by the European Commission to ensure an adequate level of data protection for such transfers. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).

8.3 Hosting

Our website is hosted by our hosting provider. When you visit our website, the hosting provider processes the personal data described in Section 2 (in particular IP addresses, webserver log files and other connection data) on our behalf. We have entered into a data processing agreement (Art. 28 GDPR) with our hosting provider. Legal basis: legitimate interest in providing a stable and secure website (Art. 6(1)(f) GDPR) and performance of a contract (Art. 6(1)(b) GDPR).

8.4 Data Processors

We engage third-party service providers (data processors) who process personal data on our behalf and in accordance with our instructions. We have concluded data processing agreements pursuant to Art. 28 GDPR with all data processors to ensure that your personal data is processed in compliance with applicable data protection law. Data processors are contractually prohibited from using the data for any purpose other than the provision of the agreed services.

9 Children’s Privacy

Our website and services are not directed at individuals under the age of sixteen (16). We do not knowingly collect personal data from children under 16. If we become aware that we have inadvertently collected personal data from a child under 16 without verified parental consent, we will take reasonable steps to delete such data as soon as possible. If you believe that a child under 16 has provided us with personal data, please contact us at dataprivacy@lawfirmrankingsreport.com.

10 Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The date at the top of this page indicates when it was last revised. We encourage you to review this page periodically to stay informed about how we protect your data.