Legal
Privacy policy
We take the protection of your personal data seriously and process it solely on the basis of the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG). This policy explains which data we process when you visit this website or contact us. The German Datenschutzerklärung is authoritative.
Controller
Mergers & Acquisitions Finanzierungs- und Vermögensberatungs GmbH, Palais Liechtenstein, Alserbachstraße 14–16, 1090 Vienna, Austria · E-mail office@m-aberatung.com
Visiting this website
When you access this website, our hosting provider's web server automatically processes technically necessary access data (IP address, date and time, page requested, browser and operating system, referrer). This data is used solely for the secure and stable operation of the website and is deleted automatically after a short period in line with the hosting provider's settings unless needed to investigate a security incident. The legal basis is our legitimate interest in secure operation (Art. 6(1)(f) GDPR).
Hosting provider: A1 Telekom Austria AG, Lassallestraße 9, 1020 Vienna, Austria. A data processing agreement pursuant to Art. 28 GDPR is in place with the provider.
No cookies, no tracking
This website does not set cookies, does not use analytics or marketing tools and does not embed external content such as fonts, maps or videos. If you follow the link to OpenStreetMap, you leave our website and the privacy policy of that provider applies.
Social media and WhatsApp
You can also contact us via WhatsApp. The link opens WhatsApp with our number; only once you send a message does WhatsApp Ireland Ltd. process your data under its own terms. Messages are end-to-end encrypted. Please send confidential documents and company data by e-mail or via a data room. The information under “Contacting us” applies to your messages.
We are on Instagram as @maberatung. Our website only contains a plain link to Instagram; no plugins are loaded and no data is transferred to Instagram unless you click the link. Meta Platforms Ireland Ltd. is responsible for processing on Instagram; for the page insights of our profile we are joint controllers with Meta (Art. 26 GDPR). The Instagram privacy policy applies.
Contacting us
Our online contact and KYC forms do not store any data on this website: they create an e-mail in your e-mail program, which you send yourself. We process KYC information for the conflict check and identification before accepting an engagement and keep it for at least five years after the engagement ends (Art. 6(1)(b), (c) and (f) GDPR).
If you contact us by e-mail, WhatsApp or social media, we process the information you provide (name, contact details, content of your enquiry) to answer your enquiry and, where applicable, to prepare an engagement. The legal basis is the performance of pre-contractual measures (Art. 6(1)(b) GDPR) or our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR). We keep this data as long as necessary to handle your enquiry and beyond that only as required by statutory retention obligations.
Disclosure
We only pass data on to third parties where this is necessary to handle your request and you have consented, or where we are legally obliged to do so. No data is transferred to countries outside the EU or EEA.
Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and objection. Please contact us using the details above. If you believe that the processing of your data violates data protection law, you can lodge a complaint with the supervisory authority: Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.
As of October 2026