Collect
State the purpose, minimum fields, audience, notice, choice, and sensitive-data boundaries.
Privacy and data
Follow the Österreich data from collection to deletion.
Analysen und Marketingtechnologien werden erst nach einer passenden Consent-Entscheidung aktiviert, wenn dies erforderlich ist.
Use
Name ownership, access roles, processors, AI use, automated decisions, and data-quality checks.
Move
List hosting locations, vendors, transfers, subprocessors, backups, and remote access.
Keep
Set retention, deletion, account closure, legal holds, audit evidence, and recovery.
Respond
Assign rights requests, security events, breach decisions, escalation, and communications.
Analytics follows the same consent analysis.
The Österreich microsite has its own GA4 property. That separation improves reporting; it does not remove any notice or consent duty that applies to the visitor. Advertising or profiling tags require a separate decision.
Next step
Turn the Österreich context into a workable brief.
Good remote delivery depends on explicit ownership. Name the Österreich users, data, vendors, languages, approvals, and release constraints before estimating the build.