Privacy policy

Protecting your personal data is very important to us. We process your data solely on the basis of the legal provisions (GDPR, Austrian Telecommunications Act 2021 (TKG 2021)). In this privacy policy we inform you about the most important aspects of data processing on our website.

404media GmbH

Frankgasse 6/10, 1090 Vienna, Austria

If you contact us through the form on the website or by email, we store your details (name, email address, phone number and the content of your message) to process your enquiry and for possible follow-up questions. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) and our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR). The form is delivered to our email inbox by the email service Resend (Resend, Inc., San Francisco, USA) as a processor, which processes the details solely to send this email. Sending takes place via servers in the EU (Ireland). As Resend is a US company, access from the USA cannot be ruled out. Resend is certified under the EU-US Data Privacy Framework; the transfer is based on the European Commission's adequacy decision (Art. 45 GDPR) and, additionally, on EU Standard Contractual Clauses (Art. 46 GDPR). More information: https://resend.com/legal/privacy-policy. Beyond that, we do not pass this data on without your consent.

After sending an enquiry you can book an appointment directly on the thank-you page. The booking calendar is loaded from kalender.digitalefoerderung.at; your IP address and, if you book, the data you enter (name, email, phone and message) are sent to the calendar operator and processed to organise the appointment. The legal basis is Art. 6(1)(b) GDPR.

This website is hosted by Vercel Inc. When you visit the website, technically necessary data (e.g. IP address, date and time of access, browser type) is processed in server log files. The legal basis is our legitimate interest in running the website securely and reliably (Art. 6(1)(f) GDPR).

The website's server functions run in the EU region Frankfurt am Main (Germany). Vercel Inc. is based in the USA and certified under the EU-US Data Privacy Framework; the EU Standard Contractual Clauses apply in addition.

On our website you can ask our AI assistant “4AI” questions, have your website checked (website check, GEO report) and get an AI recommendation for your business (AI advisor). Your input (questions, website address, details about your business) and the page you are on are sent to OpenAI (OpenAI, L.L.C. or OpenAI Ireland Ltd.), which generates the answer. Where needed, the assistant searches the web or loads the website you named. OpenAI processes this data as our processor, does not use it to train its models and keeps it for at most 30 days for abuse monitoring. Any transfer to the USA is based on the EU Standard Contractual Clauses.

We store questions to “4AI” and the answers to see what people ask and to improve the assistant and our website. We store the question, answer, page, language, time and a random conversation id, but no IP address. Email addresses and phone numbers in questions are removed before saving. The entries are kept with our host Vercel (see Hosting) and deleted automatically after 90 days.

To prevent abuse, we set a technically necessary cookie that only counts how many questions were asked in a day (kept for 24 hours). Your current conversation is kept in your browser's session storage so it survives page changes, and deleted when you close the tab.

The legal basis is our legitimate interest in offering helpful information and improving it (Art. 6(1)(f) GDPR); if you ask about an offer, also Art. 6(1)(b) GDPR. You can object to the storage at any time; a message to office@404media.at is enough. Please do not enter sensitive data (e.g. health data) into the AI features. AI answers can be wrong and are not binding.

The fonts on this website are served from our own server. No connection to Google or any other font provider is made when you visit a page.

For feedback on drafts we use our own tool Better Feedback (my.betterfeedback.app). A small script is loaded when a page is opened, which technically transmits your IP address. Further data (comment, screenshot, name) is processed only if you actively use the tool via a dedicated feedback link. The legal basis is our legitimate interest in efficient collaboration (Art. 6(1)(f) GDPR).

We store in your browser's session storage whether the intro animation has already been shown and, on the GEO report page, your finished report, so it is not generated again on reload. These entries are deleted when you close the browser tab and are not sent to us.

Visitor statistics: we use Plausible Analytics, self-hosted on our own server in the EU (Lithuania). Plausible sets no cookies and stores no IP addresses; visits are only counted anonymously and in aggregate (pages viewed, referring page, country, device type). The legal basis is our legitimate interest in improving our website (Art. 6(1)(f) GDPR).

Advertising: only if you agree in the cookie banner do we measure which of our ads lead to enquiries. For this we use Google Ads (Google Ireland Ltd.), the Meta pixel (Meta Platforms Ireland Ltd.), Microsoft Clarity (Microsoft Ireland Operations Ltd., recording clicks and scrolling to improve the website) and the ChatGPT Ads measurement pixel (OpenAI Ireland Ltd.). These services set cookies or similar identifiers and receive your IP address and details of your visit; any transfer to the USA is based on the EU-US Data Privacy Framework or the EU Standard Contractual Clauses. The legal basis is your consent (Art. 6(1)(a) GDPR, § 165(3) Austrian TKG). Without your consent these services are not loaded at all.

You can withdraw or change your consent at any time via the “Cookies” link in the footer. Your choice is stored in your browser's local storage.

We set only one technically necessary cookie: counting questions to the AI assistant to prevent abuse (see AI features, kept for 24 hours). We set optional (advertising) cookies only with your consent, see Web analytics and marketing. You can restrict or block cookies in your browser settings.

We store personal data only for as long as is necessary for the respective purposes or as statutory retention periods require. After that, the data is deleted.

You generally have the rights of access, rectification, erasure, restriction, data portability and objection. If you believe that the processing of your data violates data protection law, you can complain to us or to the data protection authority (www.dsb.gv.at).

To exercise your rights, a message to office@404media.at is enough.