Privacy policy
Information pursuant to Art. 13 and 14 GDPR on the processing of personal data on this website.
1. Controller
ABOVE Strategy Solutions GmbH
Kolingasse 4, 1090 Wien, Österreich
Managing director: Alexandra Balazs
Email: info@strategyabove.com
2. Hosting
When pages are accessed, the web server stores technically necessary access data in log files (IP address, date and time, requested URL, browser or user agent). This is done to provide and secure the website (Art. 6(1)(f) GDPR). The log files are only kept for as long as necessary for these purposes and are then deleted.
3. Contact form and email
If you contact us via the form or by email, we process the data you provide (name, email, optionally phone and company, message, selected topic) solely to handle your inquiry (Art. 6(1)(b) or (f) GDPR). The data is delivered by email and is not stored in a marketing database. We delete inquiries once the matter is concluded and no statutory retention obligations apply (usually after 6–24 months).
To protect against misuse, we use a honeypot field, a technical token and a rate limit. The IP address is stored only as a hash for a few minutes.
4. Cookies and local storage
By default, this website does not set any non-essential cookies. Fonts are served locally. If the optional consent banner is enabled, we store your choice in the cookie above_consent (valid for 180 days, Art. 6(1)(a) or (f) GDPR). WordPress may set technically necessary cookies for logged-in users (session, login).
5. Analytics and marketing services
No analytics or marketing services are currently in use. Should tools (e.g. Matomo or a newsletter service) be added in the future, this will only happen with your consent via the cookie banner. Such scripts are only loaded after you agree.
6. Your rights
You have the right to access, rectification, erasure, restriction of processing and data portability, the right to object to processing based on legitimate interests, and the right to withdraw any consent given at any time with effect for the future. You also have the right to lodge a complaint with the Austrian Data Protection Authority (www.dsb.gv.at).
7. Obligation to provide data
There is no legal obligation to provide us with personal data via the form. Without contact details, however, we cannot answer your inquiry.
8. Automated decision-making
No automated decision-making, including profiling within the meaning of Art. 22 GDPR, takes place.
9. Changes
We update this policy when services or the legal situation change. The version published on this page applies. Last updated: October 2026.