Privacy Policy

Controller

The controller responsible for personal data processed through this website is:

Website hosting

This website is hosted using services provided by Vercel. When the website is accessed, technical data required to deliver and secure the website may be processed, including IP address, date and time, requested resource, browser and device information, referrer information and technical log data.

Processing serves the secure, stable and technically functional operation of the website. The legal basis is our legitimate interest pursuant to Art. 6(1)(f) GDPR.

Because Vercel is an international service provider, processing may involve recipients or infrastructure outside the European Economic Area. Where required, transfers are subject to an applicable mechanism under Chapter V GDPR.

Contact form and enquiries

If you contact us through the website, we process the information you provide to handle and answer your enquiry. Depending on the form, this may include your name, company, e-mail address, project information, message and other information voluntarily provided by you.

Where an enquiry concerns a potential project or contractual relationship, processing is based on Art. 6(1)(b) GDPR. In other cases, it is based on our legitimate interest in responding to business enquiries pursuant to Art. 6(1)(f) GDPR.

“How did you hear about us?”

If you answer this optional field, we use the information internally to understand which channels lead people to FORTY-THREE and where our content and marketing efforts are most effective.

It is used for internal evaluation and planning, not to create an individual advertising profile and not for sale to third parties. The legal basis is our legitimate interest in evaluating and improving our own acquisition and communication channels pursuant to Art. 6(1)(f) GDPR.

E-mail communication

Our business e-mail communication is handled through World4You. If you send us an e-mail, or an enquiry is delivered to our e-mail account, the information contained in the message is processed for communication and handling your request.

The legal basis is Art. 6(1)(b) GDPR where communication concerns pre-contractual measures or a contract, and otherwise Art. 6(1)(f) GDPR based on our legitimate interest in business communication.

Cookies and tracking

We do not use analytics tools, advertising pixels or marketing cookies on this website.

Only technically necessary cookies or comparable storage technologies may be used where required for a function requested by the user or for the secure and technically correct operation of the website. They are not used for cross-site tracking or to build marketing profiles.

External social-media links

The website may contain ordinary links to external social-media profiles, including Instagram. No social-media content is embedded. Merely loading this website therefore does not establish an embedded social-media connection through us.

If you follow an external link, you leave our website. The respective provider is responsible for data processing on its own website or platform.

Storage periods

Personal data is retained only for as long as necessary for the purpose for which it was collected or for as long as statutory retention obligations require.

Enquiries that do not lead to a contractual relationship are deleted when they are no longer required for communication or legitimate follow-up, unless legal claims, documentation duties or statutory obligations require longer storage. Contract-related information may be retained for periods required under applicable Austrian law.

Your rights

Subject to the GDPR, you may have rights to access, rectification, erasure, restriction of processing, data portability and objection to processing based on legitimate interests.

Where processing is based on consent, consent can be withdrawn at any time with effect for the future.

To exercise your rights, contact office@forty-three.at.

You also have the right to lodge a complaint with the competent supervisory authority. In Austria, this is the Österreichische Datenschutzbehörde.

Changes to this privacy policy

We may update this privacy policy if the website, our services or legal requirements change. The version published on this page is the current version.