Privacy
Last updated: 17 May 2026. This privacy policy applies to the website fourfortyfour.club and describes what personal data we process, for what purposes, and on what legal basis.
The legally binding version of this policy is the German one (Datenschutz). This English version is provided for accessibility.
1. Controller
Maximilian Kost
Im Tale 4
20251 Hamburg
Germany
Email: hello@fourfortyfour.club
Imprint: fourfortyfour.club/impressum
2. Overview of processing
We process personal data exclusively to operate this pre-launch website, to send the announced newsletter, and to analyse website usage statistically. The following types of data are processed:
- Contact data (email address upon newsletter signup)
- Meta and communication data (IP address, browser, operating system, referrer URL — when the site is accessed)
- Usage data (pages visited, time on site, country of origin — anonymised via Plausible)
- Log data (server log files)
3. Legal bases
We process personal data on the following legal bases under the GDPR:
- Consent (Art. 6 (1) lit. a GDPR) — for sending the newsletter
- Legitimate interests (Art. 6 (1) lit. f GDPR) — for the technical operation of the website, reach measurement, and security
4. Security measures
We take appropriate technical and organisational measures to ensure a level of security appropriate to the risk. All data transmitted between your browser and our website is secured using TLS/SSL encryption (visible from "https://" and the lock icon in your browser address bar).
5. Provision of the website and hosting
When you access this website, technical data (server log files) is processed in order to deliver the content to your browser. This includes:
- IP address
- Date and time of access
- Volume of data transferred
- Page requested
- Browser type and version
- Operating system used
- Referrer URL (the previous page visited)
Storage occurs for a maximum of 30 days, after which the log files are deleted or anonymised.
Processor:
Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA
Data transfer: Third country (USA), safeguarded by Standard Contractual Clauses (SCC) and the EU-US Data Privacy Framework (DPF).
Privacy policy: vercel.com/legal/privacy-policy
Legal basis: Art. 6 (1) lit. f GDPR (legitimate interest in stable and secure provision of the website).
6. Newsletter
We send our newsletter exclusively to individuals who have actively signed up via our website and confirmed their signup through a double opt-in process. Upon signup, your email address, IP address, and the time of signup are stored to provide proof of consent.
You can unsubscribe at any time using the unsubscribe link in every email or by contacting us informally. Unsubscribing revokes your consent.
Processor:
Klaviyo Inc., 225 Franklin Street, Boston, MA 02110, USA
Data transfer: Third country (USA), safeguarded by Standard Contractual Clauses (SCC) and the EU-US Data Privacy Framework (DPF).
Privacy policy: klaviyo.com/legal/privacy/privacy-policy
Klaviyo analyses usage within the newsletter (e.g. open and click rates). This data is used to optimise content and sending times.
Legal basis: Art. 6 (1) lit. a GDPR (consent).
Retention: We may store unsubscribed email addresses for up to three years to provide proof of prior consent, limited to the purpose of defending against claims. We will delete this data earlier upon request.
7. Analytics — Plausible Analytics
We use Plausible Analytics for statistical evaluation of website usage. Plausible is a privacy-friendly, cookieless analytics service with servers located in the EU.
Only aggregated, anonymised data is collected:
- Pages visited
- Time on site
- Country of origin (country level)
- Device and browser used
- Referring website
Plausible sets no cookies and stores no IP addresses or personal data. No user profiling takes place.
Provider:
Plausible Insights OÜ, Västriku tn 2, 50403 Tartu, Estonia (EU)
Data transfer: none — processing within the EU
Privacy policy: plausible.io/privacy
Legal basis: Art. 6 (1) lit. f GDPR (legitimate interest in statistical analysis to optimise the website). As Plausible does not collect personal data, user consent is not required.
8. Transfers to third countries
For the operation of the website (Vercel) and newsletter delivery (Klaviyo), data is transferred to providers based in the USA.
We base these transfers on:
- The EU-US Data Privacy Framework (DPF), adequacy decision of the EU Commission dated 10 July 2023
- Standard Contractual Clauses (SCC) of the EU Commission as additional safeguard
More information about the DPF: dataprivacyframework.gov
9. Storage period and deletion
We only store personal data for as long as necessary for the respective purposes:
- Newsletter data: until consent is revoked
- Server log files: max. 30 days
- Plausible analytics: aggregated, no personal reference
Longer retention periods may apply due to legal obligations (e.g. commercial or tax law retention).
10. Your rights
Under the GDPR, you have the following rights:
- Right of access (Art. 15 GDPR) — to the data processed
- Rectification (Art. 16 GDPR) — of incorrect data
- Erasure (Art. 17 GDPR) — when no legal basis exists
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR) — in a structured, common format
- Objection (Art. 21 GDPR) — to processing based on legitimate interests
- Withdrawal of consent (Art. 7 (3) GDPR) — with effect for the future
To exercise these rights, an informal email to hello@fourfortyfour.club is sufficient.
You also have the right to lodge a complaint with a data protection supervisory authority, particularly in the member state of your habitual residence. For Hamburg, the competent authority is:
Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit
Ludwig-Erhard-Straße 22, 20459 Hamburg, Germany
datenschutz-hamburg.de
11. Changes to this policy
We update this privacy policy when legal requirements or our processing activities change. The version published at this URL is always the current version. Last updated: 17 May 2026.
— 444