Privacy Policy

Last updated: January 15, 2026

Who we are

StudioAsCode is a DevSecOps consultancy based in Austria, focused on AWS security and compliance automation.

This website is operated at https://studioascode.com.

Legal basis for processing

We process data only where permitted under GDPR Article 6:

  • Consent (Article 6(1)(a)) for analytics cookies
  • Legitimate interest (Article 6(1)(f)) for responding to contact form inquiries, basic site operation, and security

Analytics cookies are set only after explicit consent.

Contact form

Data we collect

When you use the contact form, we collect the information you submit:

  • Name
  • Email address
  • Company (optional)
  • Message content

We may also collect technical metadata necessary to operate and secure the service (timestamp, user agent, IP address).

Purpose of processing

We use this data to respond to your inquiry, provide support, and prevent abuse of the contact form.

Spam protection (Cloudflare Turnstile)

We use Cloudflare Turnstile to protect the contact form from automated abuse. Turnstile may process technical data to determine whether a request is legitimate. This processing is performed by Cloudflare as a service provider. Subject to Cloudflare's Privacy Policy.

Legal basis

We process contact form data under legitimate interest (Article 6(1)(f)) to respond to your inquiry and prevent abuse.

Retention

We retain contact form messages for up to 90 days to respond and handle follow-up, then delete them unless required for legal or security reasons.

Recipients and processors

Contact form submissions are delivered to our email inbox hosted by Microsoft 365 and stored there so we can respond. Cloudflare processes data in connection with Turnstile and website delivery/security services.

Analytics cookies

We use Google Analytics 4 in consent mode. By default, analytics storage is denied. If you accept analytics cookies, Google Analytics may set cookies and collect usage data to help us understand site performance.

Data collected

  • Page views
  • Time on site
  • Referral source
  • Approximate location (for example, country/city level)
  • Device type and browser

Analytics cookies are set only after you click "Accept All".

Your choices

  • Accept All - Enables analytics cookies
  • Reject All - Keeps analytics denied, choice is saved
  • Close (X) - Same as Reject All
  • Cookie Settings - Opens a modal to toggle analytics on/off

Withdraw or change consent

Use the Cookie Settings button in the banner to change your choice at any time. Alternatively, clear your browser's localStorage (key: cookie_consent_v1) and reload the page to see the banner again.

Third-party services

We use the following processors:

  • Google Analytics - Website analytics. Data may be processed outside the EU under appropriate safeguards (such as Standard Contractual Clauses). Subject to Google's Privacy Policy.
  • Cloudflare Pages - Website hosting and content delivery. Processes technical request data (IP addresses, headers) for security and delivery. Subject to Cloudflare's Privacy Policy.
  • Cloudflare Turnstile - Spam protection for contact form. Subject to Cloudflare's Privacy Policy.
  • Microsoft 365 - Email delivery and storage for contact form submissions. Subject to Microsoft Privacy Statement.

Data retention

  • Google Analytics data is retained according to our GA4 retention settings.
  • Cookie consent preferences remain in your browser until manually cleared.
  • Contact form submissions are retained for up to 90 days.

Your rights under GDPR

You have the right to:

  • Access your data
  • Withdraw consent at any time
  • Object to processing
  • Request rectification or deletion where applicable
  • Lodge a complaint with a supervisory authority

We minimize data collection. Personal data is primarily processed by third-party providers (Google Analytics if you consent, Cloudflare for hosting and security, Microsoft 365 for contact form delivery) and in contact messages stored in our email inbox.

Contact

For privacy-related inquiries, use the contact form. We will respond using the email address you provide.

Changes to this policy

We may update this policy as required by law or service changes. Updates will be posted on this page with a revised date.