Privacy notice

Controller and contact

Marcus Goebel
Barcelona, Spain
[email protected]

Hosting and technical request data

The website uses Cloudflare Pages, operated by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. Cloudflare processes connection and traffic information, including IP addresses, routing and system information and technical request details, to deliver and secure the website.

The legal basis for necessary delivery is Article 6(1)(f) GDPR, our legitimate interest in a securely accessible information website. Cloudflare processes customer logs and transmitted website content on our behalf; it describes itself as a separate controller for certain generated network and security data. We operate no separate visitor database or log export.

Service provider and international processing

The current Cloudflare Data Processing Addendum (version 6.4, effective 3 April 2026) is incorporated into the Self-Serve Subscription Agreement by section 6.1 where Cloudflare processes personal data on behalf of its customer.

Processing and access may occur in the European Economic Area, the United States and other countries. Cloudflare identifies the EU-US Data Privacy Framework for US transfers, and standard contractual clauses with supplementary measures for other applicable transfers or if certification ceases to apply. EU-only processing is not guaranteed. The DPA and sub-processor list are linked below.

Retention

Footnote 2 of Cloudflare’s Data Act Addendum specifies seven days as the default for end-user activity logs, while noting that not every product stores such logs. This is not a general deletion deadline for all Pages visitor data.

For other processing, DPA Annex 1 and the privacy policy provide purpose- and contract-based retention criteria and legal requirements. The reviewed public documents do not specify a binding day-based deadline covering all technical Pages data. The 25-hour retention stated for the 1.1.1.1 DNS resolver does not apply to this hosting.

Language choice and local storage

Your preferred browser language is used at the entry page to display German or English. If you manually switch language, the website stores only “de” or “en” under “website-language” in your browser’s localStorage. This choice is not sent to a form service and is not used for advertising or analytics.

The choice remains until you clear the website’s browser data or select a different language. Direct /de/ and /en/ links also work without a stored choice. Storage supports only the language preference you have requested.

Optional visitor analytics with Cloudflare Web Analytics

On the public main hostname marcusgoebel.com, we use Cloudflare Web Analytics from the provider named above only after your explicit consent. Its purpose is statistical reporting on visits, page views, usage over time, popular pages and referrers, and improving page performance. Analytics does not load if you decline or make no choice. The legal basis for any associated personal data processing is Article 6(1)(a) GDPR; as a precaution, we also obtain consent for optional access to browser information.

Collected information may include page paths, referring websites, country, browser, operating system, device type and loading or performance metrics. Loading the script and sending measurements also involves technical connection data, including the IP address. Cloudflare states that Web Analytics uses no analytics cookies or localStorage and does not recognise individuals through IP addresses, User-Agent strings or other attributes for displaying analytics. This does not guarantee that no personal data is processed at all. We configure no advertising profiles, cross-site user tracking or combination with other data.

Cloudflare makes the previous six months of Web Analytics data available. Its documentation specifies seven days of unsampled beacon data, with longer-term data reduced to approximately ten percent of the original volume. The six-month reporting window is not a guaranteed deletion deadline for every technical record. The retention criteria above apply to other data. The international processing and safeguards described above also apply.

Analytics choices and withdrawal

You can allow analytics or use the website without it. Use “Analytics preferences” at the bottom of the page to change your choice or withdraw consent at any time. Withdrawing consent reloads the page so that analytics will no longer start. This does not affect the lawfulness of earlier processing.

Only your choice, its notice version and the selection time are stored under “website-analytics-consent” in this browser tab’s sessionStorage, solely to implement your choice. The entry lasts until you close the tab, clear website data or change your choice. A new notice version prompts a new choice. No additional cookie is set. If storage is blocked, the choice applies only to the current page. Without JavaScript there is no optional analytics. Our integration excludes local development traffic and other preview hostnames.

No advertising, payments or forms

We use no Google Analytics, advertising trackers, external font providers or embedded third-party content. Donations, payments and feedback forms are not active. Photographs are delivered locally with the website. Necessary processing for delivery and security continues independently of your analytics choice.

Email and external links

If you email the contact address, the information you provide is used to handle your enquiry. For general enquiries, the intended legal basis is Article 6(1)(f) GDPR, the interest in responding to your message. Retention ends when the enquiry is resolved and no justified further need or statutory retention obligation remains.

Links to the WordPress blog are ordinary external links. You access that provider only when you follow a link. Its own privacy information then applies.

Your rights

Subject to the applicable legal conditions, you may request access, rectification, erasure, restriction of processing and data portability. You may object to processing based on legitimate interests on grounds relating to your particular situation. Any consent you have given may be withdrawn for the future.

Please use the contact email above for questions or rights requests. You may also complain to a data protection supervisory authority, including Spain’s Agencia Española de Protección de Datos (AEPD). No automated decisions with legal or similarly significant effects, or profiling, have been configured.