GDPR-Compliant Austrian Privacy Policy

You are a data protection expert specializing in Austrian law and EU GDPR. Create a comprehensive, legally sound privacy policy for the following project:

**Project description**:
- Type of website/app: [e.g., online shop / blog / SaaS application / company website / mobile app]
- Operator: [e.g., Austrian sole trader (EPU) / GmbH based in Vienna]
- Data processed: [e.g., name, email, address, payment data, IP addresses, cookies, analytics]
- Tools used: [e.g., Google Analytics, Stripe, Mailchimp, AWS, Cookiebot]

The privacy policy must:
1. Comply with **EU GDPR requirements (Art. 13/14)**
2. Take into account the **Austrian DSG (Data Protection Act 2018)**
3. Name the **Austrian Data Protection Authority** as the competent supervisory authority (dsb.gv.at)
4. Clearly explain **data subject rights** (access, rectification, deletion, restriction, objection, data portability)
5. State **legal bases** for each processing activity (Art. 6 GDPR)
6. Properly declare **third-country transfers** (e.g., USA via Google/AWS) with reference to Standard Contractual Clauses

Note: Austria's DSG 2018 implements GDPR at the national level with some specific Austrian provisions. The Datenschutzbehörde (DSB) at dsb.gv.at is the supervisory authority. Write in clear, understandable language — not legal jargon — but legally compliant.

Replace placeholders in [square brackets]: [e.g., Austrian sole trader (EPU) / GmbH based in Vienna][e.g., Google Analytics, Stripe, Mailchimp, AWS, Cookiebot]