Privacy Policy

Controller

The controller responsible for personal data processed through this website is:

Website hosting

This website is hosted using services provided by Vercel. When the website is accessed, technical data required to provide, deliver and secure the website may be processed. This may include, in particular, the IP address, date and time of access, requested resource, browser and device information, referrer information and technical log data.

The processing serves the secure, stable and technically functional operation of the website. The legal basis is our legitimate interest pursuant to Art. 6(1)(f) GDPR.

Vercel is an international service provider. Where personal data is transferred to a third country outside the European Economic Area, the transfer is carried out in accordance with Arts. 44 et seq. GDPR and on the basis of the applicable data-protection transfer mechanism.

Contact form and enquiries

If you contact us through the contact form, we process the data you provide in order to review, handle and respond to your enquiry. This may include, in particular, your name, e-mail address, company or brand, selected services, budget information and project description. Your telephone number and information about how you found us are processed only if you provide them voluntarily.

Where your enquiry concerns a potential project, pre-contractual measures or an existing contractual relationship, processing is based on Art. 6(1)(b) GDPR. In other cases, processing is based on our legitimate interest in handling and responding to business enquiries pursuant to Art. 6(1)(f) GDPR.

“How did you find us?”

If you answer this optional field, we use the information internally to better understand which channels lead people to FORTY-THREE and where our content and marketing activities are most effective.

The information is used exclusively for internal evaluation and planning, not to create an individual advertising profile and not for sale to third parties. The legal basis is our legitimate interest in evaluating and improving our own acquisition and communication channels pursuant to Art. 6(1)(f) GDPR.

E-mail communication

Our business e-mail communication is handled through World4You Internet Services GmbH. If you send us an e-mail, or an enquiry from the contact form is forwarded to our e-mail inbox, the information contained in the message is processed for communication and handling your request.

The legal basis is Art. 6(1)(b) GDPR where the communication concerns pre-contractual measures or a contract. In all other cases, processing is based on Art. 6(1)(f) GDPR and our legitimate interest in business communication.

Cookies and tracking

We do not use analytics tools, advertising pixels or marketing cookies on this website.

Only technically necessary cookies or comparable storage technologies are used where they are strictly necessary for the transmission of information or for a function expressly requested by you. Such technically necessary access does not require consent under § 165(3) of the Austrian Telecommunications Act 2021 (TKG 2021). They are not used for cross-site tracking or to build marketing profiles.

External social-media links

The website may contain ordinary links to external social-media profiles, including Instagram. Social-media content is not embedded. Merely loading this website therefore does not establish an embedded connection to a social-media service through us.

If you follow an external link, you leave our website. The respective provider is responsible for data processing on its own website or platform.

Storage periods

Personal data is retained only for as long as necessary for the purpose for which it was collected or for as long as statutory retention obligations require.

Enquiries that do not lead to a contractual relationship are deleted once they are no longer required for communication or legitimate follow-up, unless legal claims, documentation duties or statutory requirements require longer retention. Contract-related information may be retained for the periods required under Austrian law.

Your rights

Subject to the GDPR, you may in particular have rights to access, rectification, erasure, restriction of processing, data portability and to object to processing based on legitimate interests.

Where processing is based on Art. 6(1)(f) GDPR, you may object to that processing on grounds relating to your particular situation.

To exercise your rights, contact office@forty-three.at.

You also have the right to lodge a complaint with the competent supervisory authority. In Austria, this is the Österreichische Datenschutzbehörde.

Changes to this privacy policy

We may update this privacy policy if the website, our services, the technical services we use or legal requirements change. The version published on this page is the current version.