44up · Privacy

Privacy.

This statement explains, under Art. 13 GDPR, which personal data is processed when you visit 44up.at and when you use the contact form.

Controller

Florian Tomasin · 44up
Donau-City-Straße 7, 44th floor
1220 Vienna,
Austria
Email: [email protected]

Hosting and server logs

44up.at is hosted by Cloudflare (Cloudflare, Inc.) as a processor. When you open the site, Cloudflare processes technically necessary access data — including your IP address, the date and time of access, and the page requested — to deliver the site securely and reliably. The legal basis is the legitimate interest in a functioning service (Art. 6(1)(f) GDPR). A transfer to third countries (USA) cannot be excluded; Cloudflare relies on the EU Standard Contractual Clauses for this.

Contact form

If you use the contact form, we process the data you provide — name, email address and your message — together with technical metadata (IP address, browser identifier, country of origin) in order to answer your inquiry. The data is stored in a Cloudflare store (Workers KV) and automatically deleted after twelve months at the latest, unless an ongoing exchange arises from it. The legal basis is Art. 6(1)(b) and (f) GDPR.

If the server is unreachable, the form instead opens your own email client (mailto). Sending then happens through your email provider; in that case no data is stored on our server.

Cookies, tracking and analytics

44up.at uses no tracking cookies, no web-analytics tool (such as Google Analytics) and no external fonts or CDN services. Only your display preference (light/dark mode) is stored locally in your browser (localStorage) — that information never leaves your device.

On the audit pages under /observatory/audits/, a strictly necessary cookie (audit_pin, 30 days, HttpOnly, Secure, SameSite=Strict) is set after a successful PIN entry to identify you as authorized for the duration of your visit. It contains no personal data and is not used for analytics or tracking. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in simple access control) in combination with your explicit request for access.

Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection. To exercise these, contact [email protected]. You also have the right to lodge a complaint with the Austrian Data Protection Authority (dsb.gv.at).

Last updated: May 2026.