Privacy policy

1. Personal Data

The collection, processing and use of your personal data by the law firm LEUKOS Brewi Krepil Rechtsanwälte GmbH (“LEUKOS”) is carried out solely for the purposes agreed with you, based on your consent or legal grounds in compliance with the GDPR. In doing so, all applicable data protection and civil law provisions are observed.

 

LEUKOS collects only such personal data as is necessary for the performance and handling of its legal services or which you have voluntarily provided to the firm.

 

Personal data includes all information relating to an identified or identifiable person, such as name, address, e-mail address, telephone number, date of birth, age, gender, social security number, video recordings, photographs, voice recordings or biometric data such as fingerprints. Personal data may also include sensitive data, such as health data or data relating to criminal proceedings.

 

2. Disclosure, Correction or Deletion

As a client or data subject, you have the right – subject to the attorney’s duty of confidentiality – to obtain information at any time about your stored personal data, its origin and recipients and the purpose of data processing. You also have the right to correction, data transfer, objection, restriction of processing and the blocking or deletion of incorrect or unlawfully processed data.

 

In the event of any changes to your personal data, you are requested to inform LEUKOS accordingly.

 

3. Objection and Withdrawal of Consent

You may withdraw your consent to the use of your personal data at any time. Requests for correction, data transfer (provided that such transfer does not involve a disproportionate effort), objection, restriction of processing, blocking or deletion (provided that such transfer does not involve a disproportionate effort) may be addressed to:

 

LEUKOS Brewi Krepil Rechtsanwälte GmbH, RegNo. 667385 z

Kohlmarkt 16/2/13c, 1010 Vienna, Austria

office@leukos.at

 

If you believe that the processing of your personal data by LEUKOS violates applicable data protection law or that your data protection rights have otherwise been infringed, you are requested to notify us accordingly. You also have the right to file a complaint with the competent supervisory authority. In Austria, this is the Data Protection Authority (Datenschutzbehörde).

 

4. Data Security

Your personal data is protected by organizational and technical measures. These measures include protection against unauthorized, unlawful or accidental access, processing, loss, use and manipulation.

 

Despite all efforts to always maintain an appropriately high standard of care, it cannot be ruled out that information you transmit to the firm via the internet may be accessed or used by third parties.

 

LEUKOS therefore accepts no liability whatsoever for the disclosure of information due to errors in data transfer not caused by the firm or unauthorized access by third parties (i.e. hacking attacks on -email accounts or telephones, interception of faxes).

 

5. Use of Data

The processing of data provided to LEUKOS is carried out exclusively for purposes covered by the engagement, your consent or based on and compliant with the GDPR. An exception applies to use for statistical purposes, provided that the data has been anonymized.

 

6. Transfer of Data to Third Parties

For the fulfillment of your engagement, it may also be necessary to forward your data to third parties (i.e. opposing parties, substitute lawyers, insurance companies, service providers engaged by LEUKOS and to which data is being provided) as well as to courts or authorities. Any transfer of your data takes place exclusively based on and compliant with the GDPR, in particular for the performance of your engagement or based on your prior consent.

 

You are also advised that during legal representation and support by LEUKOS, factual and case-related information about you is regularly obtained from third parties.

 

Some of the above-mentioned recipients of your personal data may be located outside your country or process your personal data there. The level of data protection in other countries may not correspond to that of Austria. However, your personal data is transferred only to countries for which the European Commission has determined that they provide an adequate level of data protection. Otherwise, the firm implements measures to ensure that all recipients provide an adequate level of data protection including the conclusion of standard contractual clauses (2010/87/EC or 2004/915/EC).

 

7. Notification of a Data Breach

In the event of a data breach, the firm endeavors to ensure that it is detected at an early stage and, where necessary, promptly reported to you and the competent supervisory authority, taking into account the respective categories of data affected.

 

8. Data Retention

LEUKOS retains data only for as long as necessary to fulfill the firm’s contractual and statutory obligations and to defend against any potential liability claims.

 

9. Information pursuant to Section 9 (5) of the Austrian Lawyers’ Act (Rechtsanwaltsordnung; German acronym: RAO)

In transactions listed in Section 8a (1) RAO, LEUKOS is obliged for the prevention of money laundering and terrorist financing to establish the identity of the parties, verify it by personal presentation of an official photo ID, document it and determine by appropriate measures whether the party or its beneficial owner is a politically exposed person (PEP), a family member of a PEP or a person known to be closely associated with a PEP. Where applicable, the origin of funds must also be examined and documented.

 

If a party willfully fails to comply with the identification obligations or if there is justified reason to believe that the transaction serves money laundering or terrorist financing purposes, consideration must be given to filing a suspicious activity report with the Austrian Federal Minister of the Interior.

 

The processing of personal data based on the RAO for the purpose of preventing money laundering or terrorist financing constitutes a matter of public interest within the meaning of the GDPR.

10. Website

 

10.1 Access to the Website

When visiting the LEUKOS website, your IP address as well as the beginning and end of the session are automatically recorded. This processing of data is technically necessary to ensure the operation of the website and is therefore carried out based on legitimate interest pursuant to Article 6 (1) (f) GDPR.

 

10.2 Contact Form

When contacting LEUKOS via the contact form, the entered data is transmitted to the firm by e-mail. The conditions set out in this privacy policy apply to the use, retention and deletion of this data.

 

10.3 Cookies

The LEUKOS website uses cookies to make its use easier, more efficient and more secure for visitors.

 

Cookies are small text files transmitted by the web server to your browser and stored on your device. This allows the firm’s system to recognize your browser during following visits. Cookies are used in particular to analyze frequency of use and number of visitors.

 

The cookies used by LEUKOS contain only an identification number that does not allow any inference about your person.

 

Two types of cookies are used:

 

  • Session cookies: Temporary cookies that are stored during your visit and automatically deleted when you leave the website.
  • Persistent cookies: These remain stored on your device beyond your visit to recognize your browser during your next visit.
 

You can configure your browser to inform you about the setting of cookies, allow cookies only in individual cases, reject the acceptance of certain or all cookies, or activate automatic deletion when closing the browser. If cookies are disabled, the functionality of the LEUKOS website may be restricted.

 

10.4 Google Maps

The LEUKOS website uses service functions of Google Maps provided by:

 

Google Ireland Limited

Gordon House, Barrow Street, Dublin 4, Ireland

Phone: +353 1 543 1000

 

To use Google Maps, it is necessary to process your IP address. Your IP address is usually transmitted to Google servers in the USA and stored there. The firm has no influence on this data transfer.

 

Data processing is carried out based on Section 96 (3) of the Austrian Telecommunications Act (Telekommunikationsgesetz; German acronym: TKG) and Article 6 (1) (f) GDPR, as the integration of Google Maps facilitates finding the locations specified on the website.

 

Further information on how Google handles personal data can be found in Google’s privacy policy: https://policies.google.com/privacy?hl=de

 

Google also processes data in the USA, but has submitted itself to the EU-US Privacy Shield framework: https://www.privacyshield.gov/EU-US-Framework

 

10.5 Server-Logfiles

To optimize system performance, user-friendliness and the provision of relevant information about LEUKOS’ services, the website provider automatically stores certain data in so-called server log files. This includes:

 

  • IP address
  • Browser type and version
  • Language settings
  • Operating system
  • Referrer URL
  • Name of the Internet Service Provider
  • Date and time of access
 

This data is not merged with other sources of personal data. However, the firm reserves the right to subsequently review this data if there are specific indications of unlawful use.

 

10.6 Use of Google Analytics 4 (GA4)

The LEUKOS website uses Google Analytics 4 (GA4), a web analytics service provided by:

 

Google Ireland Limited

Gordon House, Barrow Street, Dublin 4, Ireland

Phone: +353 1 543 1000

 

Google Analytics 4 enables LEUKOS and its website provider to analyze user behavior on the website in order to continuously improve services and content. Among other things, page views, length of stay, devices used and approximate location data are recorded.

 

In particular, the following data may be processed:

  • truncated IP address (IP anonymization is enabled by default in GA4),
  • usage data (i.e. page views, click behavior),
  • technical information (browser, operating system, device), or
  • approximate location data (region, not exact address).

 

LEUKOS is not able to directly link this data to individuals.

 

Processing is carried out exclusively on the basis of your consent in accordance with Article 6 (1) (a) GDPR, which you can give via the cookie consent tool. No analysis cookies will be set without your consent.

 

Google Ireland Limited may also transfer data to servers in the USA. The transfer is based on the European Commission’s Standard Contractual Clauses (SCCs) and supplementary protection measures in accordance with Article 46 GDPR.

 

Further information on data processing by Google can be found at:

https://policies.google.com/privacy

 

The data collected by Google Analytics 4 is stored for a period of 14 months and is then automatically deleted.

 

You can revoke or adjust your consent at any time via the cookie settings on the LEUKOS website. The legality of the processing carried out until revocation remains unaffected.

 

For more information about how Google Analytics works and the information that LEUKOS can collect and analyze, please visit: https://support.google.com/analytics/answer/1012034?hl=en&ref_topic=6157800

 

For further information about the terms of use, concluded by LEUKOS with Google Ireland Limited, as well as the privacy policy and privacy measures of Google Ireland Limited, please visit the following link: https://marketingplatform.google.com/about/analytics/terms/gb/

 

11. Contact Details

The protection of your data is of particular importance to LEUKOS. You can reach us at any time using the contact details below:

 

LEUKOS Brewi Krepil Rechtsanwälte GmbH, RegNo. 667385 z

Kohlmarkt 16/2/13c, 1010 Vienna, Austria

office@leukos.at

Dr. Paul Krepil

Partner | Attorney at Law

Paul Krepil is an attorney at law and partner at LEUKOS Attorneys at Law. His practice focuses on litigation, white-collar crime and (international) arbitration. He has 10 years of experience acting as counsel and defense attorney in cross-border cases. In addition, he has been repeatedly recommended as a Key Lawyer by the renowned legal guide Legal500.

„Paul Krepil was incredibly well prepared and always kept everything together.” – Legal500 (2024)

 

„Paul Krepil knows the case in depth, quick and useful responses. He typically knows even minor details by heart.” – Legal500 (2023)

Professional Background

since 2025
2021 – 2025
2016 – 2021

LEUKOS Attorneys at Law
Cerha Hempel
Wolf Theiss

University of Vienna (Dr.iur. and Mag.iur.), Austria
University of Edinburgh, Scotland

  • Representing a global tech company in mass proceedings concerning alleged GDPR violations.
  • Successfully defending a real estate entrepreneur in criminal proceedings, resulting in an acquittal on all charges including aggravated fraud, fraudulent insolvency and accounting fraud.
  • Strategically resolved a mass claim litigation involving over 120 claims through a combination of successful court proceedings and favorable settlements for the client.
  • Representing a financial institution in enforcement proceedings related to an arbitration award exceeding EUR 200 million.

  • Providing legal advise in enforcement proceedings arising from a multi-million-euro investment arbitration.

  • Cybercrime und inländische Gerichtsbarkeit (ecolex 2025)
  • Schutzmaßnahmen als Haftungsminimierung für Unternehmen und ihre Organe in Brewi/Royer (Hrsg.), Praxishandbuch Cybercrime (Linde 2025)
  • Obstructing Arbitral Proceedings at Their Beginning: A Bumpy Road (Not) to Take in Austrian Yearbook on International Arbitration 2024 (Manz 2024, co-author)
  • Regular presentation and courses for the academy for law and taxes in contract law – “Einführung in das Vertragsrecht” (ARS)
  • Litigation & Dispute Resolution, 2024, 17th Edition, Austria, International Comparative Legal Guide (ICLG, 2024, Co-Autor)
  • The Banking Litigation Law Review – Austrian Chapter, 5th Edition (Law Business Research 2021; Co-Autor)
  • Class & Group Actions 2019: International Comparative Legal Guide, 11th Edition (ICLG 2019; Co-Autor)
  • Foreign Investments in Austria, ABA Section of International Law, Issue 17, August 2018 (Co-Autor)
  • Global Legal Insights – Bribery & Corruption: Austrian Chapter (GLI 2018; Co-Autor)
  • The Class Action Law Review – Austrian Chapter, 2nd Edition (Law Business Research 2017, Co-Autor)

Team

Mag. Claudia Brewi

Partner | Attorney at Law

Claudia Brewi is an attorney at law and partner at LEUKOS Attorneys at Law. Her core practice areas include white-collar crime, cybercrime, litigation and compliance. She has extensive experience as defense or victim’s counsel in complex white-collar cases as well as representing clients in civil disputes with an economic and corporate nexus. In addition, she is a founding and board member of the Austrian White Collar Crime Association (AWCCA).

Professional Background

since 2025
2021 – 2025
2017 – 2021

LEUKOS Attorneys at Law
Paulitsch Law
Wolf Theiss

University of Vienna (Mag.iur.), Austria
University of Oslo, Norway

  • Advising and representing a tax advisor in complex civil proceedings concerning alleged damages in the millions due to alleged incorrect advice; several (partly already legally binding) dismissals of claims were achieved.
  • Successful criminal defense of an entrepreneur from the real estate industry with acquittal on all charges (allegations including aggravated fraud, fraudulent insolvency and accounting fraud)
  • Representation of victims of large-scale crypto fraud cases in Austria, Germany and Switzerland.
  • Acting on behalf of an international IT company as a private party in connection with multi-million-euro in damages arising from embezzlement and money laundering.
  • Online-Presentation – Das österreichische Unternehmensstrafrecht (Verbandsverantwortlichkeitsgesetz): same same but different? (WisteV/AWCCA 2025)
  • Checklist: Aktuelle Cybercrime-Phänomene und Präventionsmaßnahmen für Unternehmen (ecolex 2025)
  • The International Anti-Corruption Academy’s Annual Conference on Global Trends and Challenges in Preventing and Combating Corruption Vortrag: From Corruption to Laundering in Austria/Europe: Legal and Practical Responses to an Evolving Threat (IACA 2025)
  • Co-Editor and Author of Praxishandbuch Cybercrime: Cybercrime – eine Bestandsaufnahme, Online- und Krypto-Betrug, Aktuelle Entwicklungen und Ausblick (Linde 2025)
  • Ecolex Talks – Do’s and Don’ts im Strafrecht (Manz 2025)
  • The International Anti-Corruption Academy’s Annual Conference on Global Trends and Challenges in Preventing and Combating Corruption Vortrag: New trends in AML/CFT from the financial sector perspective (IACA 2024)
  • Presentation at the AML-Conference: AML- und Betrugs-Compliance (ARS Akademie 2024)
  • Strafbarkeit wegen Geldwäscherei durch Unterlassen? (ecolex, co-author)
  • Verschärfung des Korruptionsstrafrechts (ecolex, co-author)
  • Expert panel on risks in the Darkweb (SMJ partners, AWCCA and Darkowl 2023)
  • Presentation at blockchain-REAL: Crypto-Crime – Aktuelle Betrugs- und Geldwäschefälle (Linde und GEWINN 2022)
  • Linde Podcast #96 – Crypto Crime (Linde 2022)
  • The Asset Tracing and Recovery Review – Austrian Chapter, 7th and 8th Edition (Law Business Research 2019 und 2020, Co-Autorin)

Team

Inhouse Outsourced

Outsourced
Legal department

For some companies, maintaining an in-house legal department is not economically viable. Even established legal teams can quickly reach their limits during periods of increased workload or staffing shortages, particularly in legally sensitive situations. We support your business flexibly, quickly and reliably in all legal matters – so you can focus entirely on your core business.

  • Corporate Housekeeping
    Ongoing legal support for companies, from incorporation to amendments of articles of association or changes in shareholder structure.
  • Claim Management
    Coordination and handling of contentious matters including strategic and legal support in disputes and conflicts.
  • Crisis Management and Crisis Communication
    Legal assistance in critical situations as well as strategic guidance on internal and external communication.
  • Data Protection (GDPR)
    Advisory on the implementation of data protection requirements, drafting of guidelines and support during regulatory audits.
  • Contract Drafting and Contract Negotiations
    Drafting of tailor-made contracts to safeguard company interests as well as legal support during negotiations to strengthen the company’s position and minimize risks.
  • Contract Management
    Structured administration, monitoring and adaption of existing contracts including deadline management.
  • Intellectual Property Law and Unfair Competition
    Protection of intellectual property (trademark applications, etc.) and opposing unfair business practices by competitors.

Cyber and Crypto Crime

Digitalization has led to a rapid increase and evolution of crimes in the worldwide web. Cyberattacks can hit both companies and private individuals suddenly and severely. We help you assess complex online crimes from a legal perspective, minimize financial losses and assert your rights effectively.

  • Crypto and Online Fraud
    Initial legal assessment, case analysis and enforcement of claims in cases of crypto fraud, investment and trading scams, romance scams, pig butchering schemes, fake online shops, impersonation scams and similar online fraud schemes.
  • Prevention and Compliance
    Development and implementation of guidelines, trainings and preventive measures to minimize digital risks.
  • Attacks on IT systems
    Legal advice and crisis management in cases of hacking, phishing, ransomware, fraudulent data processing, misuse of access credentials, data forgery and data damage.
  • Online Harassment and Abuse
    Legal support in cases of coercion, threats, stalking, cyberbullying, hate speech and online defamation.
  • Identity Theft and Online Manipulation
    Legal support in cases involving order fraud, CEO fraud, money laundering, data protection breaches and reputational harm.
  • NIS 2 Directive and Data Breaches
    Advice on security requirements, obligations and organizational measures for affected companies. Assistance in managing data protection incidents including data-breach notifications and communication with authorities.

White-Collar Crime

Criminal risks can affect companies and individuals unexpectedly. We provide comprehensive support to handle critical situations professionally, discreetly and with legal certainty. We safeguard your rights throughout all stages of criminal proceedings, guide you through challenging situations and ensure that your position is represented effectively and strategically.

  • Economic Crimes
    Consistent representation in cases of economic and business-related offences such as fraud, fraudulent insolvency, embezzlement, breach of trust, accounting offences, money laundering, misuse of trade or business secrets, forgery and other related matters.
  • Defense in Investigations and Criminal Proceedings
    Support and advice at every stage of criminal proceedings – from initial questioning to dawn raids, seizures, asset freezes and full defense representation before the criminal court.
  • Victim Representation
    Assertion of victims’ rights and claims of private parties or private prosecution to effectively protect economic and personal interests.
  • Corruption
    Legal advice and defense in cases involving abuse of power/office, acceptance of advantages, bribery and other corruption-related offences.
  • Compliance
    Development, optimization and implementation of guidelines, training programs and preventive measures to minimize risks for employees and companies.
  • Internal Investigations
    Discreet and independent clarification of internal matters to minimize criminal liability risks including interviews, document analysis and structured reporting for internal or external use.
  • Appeals and Remedies
    Review and filing of objections, complaints and appeals against acts or decisions of investigative authorities and courts.

Disputes

We represent our clients in contentious disputes before state courts and arbitral tribunals. Our services include enforcing claims, defending against unjustified claims and guiding our clients through payment, enforcement and insolvency proceedings. We also provide strategic support outside of court through assertive correspondence as well as efficient claim and enforcement management.

  • Advising in Civil Law Matters
    Legal advice across all areas of civil law, including damages, warranty, product liability and unjust enrichment.
  • Corporate and Commercial Disputes
    Legal support in shareholder disputes, director and officer liability and matters related to the Business Judgment Rule.
  • Representation before State Courts (Litigation)
    Comprehensive legal representation before state courts in all areas of civil law (i.e. damages claims, declaratory actions and injunctions) including strategic case management and targeted litigation preparation.
  • Arbitration
    Representation in domestic and international arbitration cases under various rules (i.e. VIAC, ICC, UNCITRAL) as well as ad hoc arbitration proceedings.
  • Out-Of-Court Representation
    Preparation of targeted legal demand letters and efficient out-of-court interventions to resolve disputes.
  • (European) Payment Orders
    Supporting with asserting monetary claims including initiating payment orders and representation in objection proceedings.
  • Debt Collection
    Efficient identification, securing and recovery of assets to enforce outstanding claims.
  • Enforcement Proceedings
    Securing and satisfying claims as well as enforcing final judgments through injunctions, seizures, enforced sale of assets and other enforcement measures.
  • Recognition and Enforcement of Foreign Arbitral Awards
    Legal representation in recognition and enforcement proceedings concerning domestic and international arbitration awards.
  • Insolvency Cases
    Legal advice and support with claim submissions as well as representation in insolvency related disputes.