unternehmensnachfolge-anwalt.at
Mag. Bernhard Brandauer, Rechtsanwalt
In business succession, customer data, newsletter lists and access rights must be structured under GDPR rules.
Customer data, newsletters and GDPR in business succession is a specific business succession issue. The key question is not a single form, but whether the family plan, company structure and operational continuity fit together legally.
The boundary is intentional: this is not a business acquisition with buyer due diligence, signing, closing or SPA. Nor is it an abstract articles of association article. The focus is the concrete succession situation in a family business.
The following points offer first orientation under Austrian law. They do not replace case specific advice because articles, register status, tax structure and family arrangements must be read together.
This quick check is not legal advice. It helps sort the next documents and risks for a succession review.
Already know you want to get in touch? Go straight to the enquiry form.
The key point is whether the family plan, the company structure and the business can support the same legal solution.
Collect the articles, transfer agreement, resolutions and current register excerpts. This makes it possible to check whether the succession can be implemented coherently.
Start with a structured inventory. The key documents are the articles, company register, powers of attorney, tax structure and family roles.
If there is conflict, liquidity pressure or unclear valuation, do not sign a quick fix. A legal pre review with a clear document list is safer.
Customer data, newsletter lists and CRM access may feel like ordinary business records in a family company. Under data protection law, they are more than inventory. After business succession it must be clear who is the controller, which purposes continue and who receives access.
The GDPR requires transparency, purpose limitation and a clear access concept. In a generational change, old newsletter consents, unclear mailing lists, private devices and mixed customer files can become practical risks.
In family succession, the relevant issue is the internal change of responsibility and the future use of existing data after the transfer.
Digital access is only one part. Tax portals, banks, payroll and domains concern access control. Customer data and newsletters additionally raise questions of legal basis, information and deletion concepts.
Review customer master data, open offers, invoice data, CRM notes, newsletter lists, review requests and historical correspondence. Mixed files are especially sensitive when private family communication and business data are not clearly separated.
For newsletters, handing over a list is not enough. It should be traceable where the consent came from, what it covers and whether objections or unsubscribes are documented. If this cannot be shown, a cautious communication strategy is needed.
After the handover it should be clear who may access systems and customer data. The transferor does not automatically need full access. The successor needs workable rights so the business can continue without data chaos.
Information duties may also be relevant. Whether customers must be informed depends on the structure, change of controller and communication channel. Blanket emails without review can be as risky as silent continuation without documentation.
A data map is useful. It shows which systems contain customer data, who can access them, which processors are involved and which deletion periods exist. Roles, passwords and responsibilities can then be transferred in an orderly way.
The legal review should be coordinated with IT and tax advisers. The goal is not a huge data protection file, but a reliable handover: clear legal bases, documented access rights, clean newsletter evidence and a traceable plan for legacy data.
Not every internal preparation step requires an immediate filing. If shares, management or representation change, the specific register step must be reviewed separately.
No. Succession here mainly means family internal or preparatory transfer. A business acquisition concerns buyer review, negotiation, signing and closing.
Usually not. Family resolutions may clarify direction, but they do not replace required contracts, approvals, notarial deeds or register steps.
Book an initial consultation. We clarify the legal framework, critical documents and next steps. Callback within one working day.
Contact us