Data Protection Statement

We take the protection of your personal data very seriously. We would like you to know when we collect data and how we use it. We will process your data solely on the basis of legal provisions (GDPR, Datenschutz-Anpassungsgesetz/[Data Protection Amendment Act], TKG/[Telekommunikationsgesetz] (Telecommunications Act) 2003). In this data protection statement we will inform you of the most important aspects of data processing.

There might also be changes to our data protection statement in the course of the further development of our Internet sites and the implementation of new technologies. For that reason we recommend that you read this data protection statement again from time to time.

Contacting Us

If you contact us using the form on this website, by e-mail or by phone, your data provided for the purpose of processing the request and in case of follow-up questions is stored by us for two years. We do not share this data without your permission.


Personal data is collected for the following reasons:

  1. As a legal basis for contract performance
    The data you provide is necessary to fulfil the contract or implement pre-contractual measures. We cannot conclude the contract with you without this data. Examples of reasons: processing inquiries, creating offers and invoices
  2. On the legal basis of a legitimate interest
    We process data about you on the basis of our legitimate interests (e.g. a customer relationship management system for fast and efficient processing of user requests, the optimisation and economic operation of our website).
  3. As a legal basis for consent
    You have voluntarily provided us with data about you and we process that information based on your consent. Examples of reasons: consent to receive a newsletter or registration for an event.
    You may revoke your consent at any time. A revocation means that we no longer process your data from that point in time onwards for the purposes stated above. To make a revocation, please contact:


Storage Duration/Deletion Deadline

The deletion of the stored personal data takes place when the user revokes their consent to the storage, or if the storage of this data is no longer required to achieve the desired purpose.

The duration of the storage of your data also depends on the legal provisions and its application:

  • Contact details based on offers and invoices: 7 years
  • Contact details for requests: 2 years
  • Applications: 6 months
  • Contact details for newsletters and invitations to events: unlimited because you can unsubscribe at any time


Order Processor

For our data processing we use a contract processor (e.g. an e-mail & web hosting service, a customer relationship management system provider, tax advisers). These contractors are obliged to strictly protect your personal data and may not process your personal data for any purpose other than to provide our services.


Security Measures

We take organisational, contractual and technical security measures in accordance with the state of the art in order to ensure that the regulations of data protection laws are observed and thus to protect the data processed by us against accidental or intentional manipulation, loss, destruction or against access by unauthorised persons.



Cookies are small text files that are sent from our web server to your browser as part of your visit to our website and are stored by this server on your device.

The following cookies are used on our website:

Session cookies (pll_language): Serves to identify the selected language version of our site (German or English)


Hosting of Our Website

Our website processes the following personal data in a server log file to monitor the technical function and increasing the operational security of the web server on the basis of the overriding legitimate interest of the person responsible (technical security measures):

web page accessed, date and time of the server request, browser type/browser version, operating system used, amount of data transferred, message about successful retrieval, referrer URL, IP address, host name

Our web host stores this data from visitors to our website for 30 days. We have no access to this data.
Data Protection Statement:


Use of Web Fonts

Our website uses external fonts from Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043 United States, hereinafter “Google”. The incorporation of these web fonts is performed by visiting our website, whereby a Google server in the US also stores the IP address of your browser. No cookies are sent by the website visitor to the Google Fonts API and they are also not exchanged with other Google Services (e.g. Google Search, Gmail). For performance reasons the browser cache of the website visitor stores components of fonts used locally and are these automatically deleted after one year.

Google is certified under the Privacy Shield Agreement and as a result provides a guarantee to comply with European data protection law – see
Data Protection Statement:


Your Rights

In principle, you have the rights to information, correction, deletion, restriction, data transferability, revocation and objection. If you believe that the processing of your data violates data protection law or your data protection claims have otherwise been violated in any way, you can complain to the supervisory authority. In Austria, this is the Data Protection Authority:

Austrian Data Protection Authority
Wickenburggasse 8-10
1080 Vienna
Phone: +43 1 531 15-202525

You can contact us via the following:

CORAG Real Estate Holding GmbH
Wipplingerstraße 23
A-1010 Vienna
Phone: +43 1 997 12 88 0

You can reach our Data Protection Coordinator at
Mag. Alfons Mähr
Phone: +43 1 997 12 88 0