Privacy Policy

Last updated: 31 July 2026

The protection of your personal data is central to us. We process your data exclusively on the basis of applicable law – in particular the EU General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG) and the Telecommunications Act 2021 (TKG 2021). This statement informs you comprehensively about the nature, scope and purpose of processing.

1. Controller (Art. 4(7) GDPR)

Responsible entity: MOSI BRIDGE · Austrian registered sole-trader (e.U.)
Address: Westbahnstraße 60/8, 1070 Vienna, Austria
Email: mail@mosibridge.at
Phone: +43 (677) 61460392

A Data Protection Officer is not legally required. For questions on data protection, please contact the above entity directly.

2. Definitions

This statement uses the definitions of the GDPR. In particular: personal data (any information relating to an identifiable person), processing (any handling of such data), controller (the entity that determines purposes and means), and processor (entity processing data on our behalf, e.g. hosting provider).

3. Purposes and legal bases

We process personal data for the following purposes on the following legal bases:

Provision of our services (placement, coaching, residence-process support) – Art. 6(1)(b) GDPR (contract / pre-contractual measures).
Communication with you (contact form, email, phone) – Art. 6(1)(b) or (f) GDPR.
Compliance with legal obligations (tax, labour, residence and trade law) – Art. 6(1)(c) GDPR.
Secure operation of the website – Art. 6(1)(f) GDPR.
Application support and representation under a granted power of attorney (application process with employers, AMS procedure) – Art. 6(1)(b) GDPR.
Voluntary input (e.g. further contact details) – Art. 6(1)(a) GDPR (consent).

4. Categories of data subjects and data

The processing concerns:

Prospects and clients (companies, professionals, au-pairs)
Cooperation partners and suppliers
Website visitors

We process in particular: name, contact data (email, phone, address), professional background and qualifications, content of messages, and for talents additionally residence-relevant data (passport, visa, documents) – always to the extent strictly necessary.

5. Contact form and email

When you contact us via the form or by email, we store the submitted information (name, email, role, message) to process your enquiry and any follow-up communication. We do not share your data with third parties without your consent. Legal basis: Art. 6(1)(b) or (f) GDPR. Retention: until completion of the enquiry, then according to statutory retention requirements.

6. Au-pair applications (online form and PDF)

For au-pair applications we provide an online form and a PDF form. The data provided there is processed: identity and contact data, passport data, emergency contact, education and professional background, childcare experience, household and language skills, driving licence, preferences for the stay, motivation and references. The purpose is to handle the application, to select and place with suitable host families and to prepare the procedure with the AMS and the diplomatic missions. Legal bases: Art. 6(1)(b) GDPR (pre-contractual measures) and – for voluntary information – your consent under Art. 6(1)(a) GDPR.

Health data: information on allergies, medication, medical conditions and dietary requirements is voluntary and is processed exclusively on the basis of your explicit consent under Art. 9(2)(a) GDPR – solely for the purpose of enabling a suitable and safe placement. You can withdraw this consent at any time with effect for the future (informally to mail@mosibridge.at).

Recipients: potential host families (to the extent necessary) and authorities within the notification and residence procedure. Storage period: for the duration of the application and placement process; at the latest twelve months after its completion we delete the data, unless statutory retention obligations apply. This section applies accordingly to PDF applications submitted by email.

7. Application support, power of attorney and downloadable forms

For application support – for example in care and health professions or with ÖBB and Wiener Linien – we process your application data: identity and contact details, education, qualifications and certificates, career history, language skills as well as documents relevant to residence and credential recognition. The purpose is to prepare your documents, present you to suitable employers and training institutions, arrange appointments and support you until the contract is signed. Legal bases: Art. 6(1)(b) GDPR (contract / pre-contractual measures) and – for voluntary input – your consent under Art. 6(1)(a) GDPR.

Powers of attorney: With the power of attorney for the application process, or the power of attorney for the AMS procedure, you authorise us to represent you vis-à-vis employers or vis-à-vis the AMS. We process the data stated therein solely in order to exercise that representation. You may revoke the power of attorney at any time, informally (to mail@mosibridge.at).

Downloadable forms: The PDF forms in the download area are completed locally on your own device; your entries stay with you. Processing under this section begins only once you send us the completed form by email or hand it over to us. Downloading alone generates only the server log files described in section 8.

Recipients: potential employers and training institutions (to the extent required) as well as authorities within recognition, notification and residence procedures. Retention period: for the duration of the application and placement process; at the latest twelve months after it ends we delete the data, unless statutory retention obligations require otherwise.

8. Server log files

When you access this site, technically necessary data is recorded by our host (IP address, date and time, requested page, referrer, user agent). This data serves exclusively to ensure operational security, error analysis and abuse prevention. No merging with other data sets takes place. Legal basis: Art. 6(1)(f) GDPR. Retention: typically 7–30 days.

9. Cookies and similar technologies

This site uses only technically necessary storage mechanisms:

Your language preference (DE/EN/FR) is stored in the browser's localStorage so the site can remember it.
No tracking, advertising or social-media cookies are set.

You can delete local data at any time via your browser's settings.

10. Hosting

Our website is operated by a professional hosting provider. The host processes the log data mentioned above exclusively on our behalf on the basis of a Data Processing Agreement pursuant to Art. 28 GDPR. (Draft: please name the specific host – e.g. IONOS SE, Montabaur, Germany – and confirm the DPA is in place.)

11. Google Fonts

For consistent display of the fonts "Poppins" and "Inter", these are loaded from fonts.googleapis.com / fonts.gstatic.com of Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland. Your IP address is transmitted to Google and may also be processed in the USA (adequacy decision EU–US Data Privacy Framework). Legal basis: Art. 6(1)(f) GDPR. (Note: local hosting of fonts is possible and recommended to avoid any third-country transfer – draft.)

12. Google Maps (map preview)

On the contact page we show a static map preview. This preview does not load any content from Google and transmits no data. Only when you actively click "Open in Google Maps" are you redirected to maps.google.com. From that moment the privacy terms of Google LLC (policies.google.com/privacy) apply. We have no influence on the processing that happens there.

13. Transfers to third countries

A transfer of personal data to countries outside the EU/EEA only takes place if you actively use external services (especially Google Maps). For the USA, the European Commission's adequacy decision of 10 July 2023 (EU–US Data Privacy Framework) applies. Beyond that, no data is transferred to third countries.

14. Social networks

No social-media plugins (Facebook, Instagram, LinkedIn, X, etc.) are embedded that would send data to the operators without active interaction. Links to our profiles are plain text links – only when you click do you reach the respective platform and its privacy rules apply.

15. Data security

We implement appropriate technical and organisational measures (TOMs) pursuant to Art. 32 GDPR. These include in particular consistent transport encryption via TLS/SSL (HTTPS), access controls, strong passwords and regular software updates. We continuously review these measures and adapt them to the state of the art.

16. Recipients of the data

Your data is only shared with third parties insofar as necessary for service delivery or legally required. Categories of possible recipients:

Authorities for residence, registration and social security proceedings
Employers or employees in the context of placement
Tax and legal advisors, where required
Hosting and IT service providers as processors

17. Retention period

Personal data is stored only as long as necessary for the respective purpose or as required by statutory retention obligations. Relevant in particular: §§ 132, 207 BAO (Austrian Federal Fiscal Code, typically 7 years) and labour- and social-insurance regulations. After expiry of the deadlines, data is routinely deleted or anonymised.

18. Your rights as a data subject

You have the following rights (Chapter III GDPR):

Access to the data processed about you (Art. 15)
Rectification of inaccurate data (Art. 16)
Erasure („right to be forgotten", Art. 17)
Restriction of processing (Art. 18)
Data portability (Art. 20)
Objection to processing based on Art. 6(1)(f) (Art. 21)
Withdrawal of consent at any time with effect for the future (Art. 7(3))

To exercise your rights, a simple email to mail@mosibridge.at is sufficient.

19. Right to lodge a complaint

If you believe that the processing of your data violates applicable law, you can lodge a complaint with the Austrian data protection authority: Österreichische Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.

20. Obligation to provide data

Providing your personal data is neither legally nor contractually required. However, without certain information (e.g. name, email), we cannot respond to enquiries or provide services.

21. No automated decision-making

We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.

22. Changes to this privacy policy

We adapt this statement as necessary to reflect changes in the law or our services. The version available at the time of your visit applies. The current version date is shown at the top of this statement.

← Home