Last updated: 06.07.2026
1. Data Controller
Responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Maja Günther
c/o Online Impressum #9422
Europaring 90
53757 St Augustin
Email: me@majas.blog
2. General Information
This website is a static, personal site with no registration, comment, or like functionality. No user accounts, comments, or interaction data are collected from visitors. The processing described below arises solely from the technical operation of the website.
3. Hosting and Server Log Files (Cloudflare)
This website is delivered via Cloudflare Pages and technically secured by Cloudflare (bot protection/WAF). Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA, acts as our data processor in this context.
Each time the website is accessed, the following information is automatically transmitted to Cloudflare's servers and briefly stored in what are known as log files:
- IP address of the accessing device
- Date and time of the request
- Browser type and version, operating system
- Referrer URL (the previously visited page)
- Requested file/URL
Purpose of processing: ensuring secure and stable operation of the website, protection against attacks (e.g. DDoS), and abuse/bot detection.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the secure and stable provision of our website).
Storage period: Cloudflare retains this log data only for a limited period for security purposes before it is automatically deleted. Details: Cloudflare Privacy Policy.
Data processing agreement & international transfer: A data processing agreement (DPA) has been concluded with Cloudflare in accordance with Art. 28 GDPR. Cloudflare is certified under the EU-US Data Privacy Framework (DPF), which ensures an adequate level of data protection for the transfer of data to the USA.
4. Cookies
This website itself does not set any cookies. However, Cloudflare, as our technical infrastructure and security provider, automatically sets the following, strictly necessary cookies:
| Cookie | Purpose | Duration |
|---|---|---|
| __cf_bm | Bot detection / bot management | 30 minutes |
| cf_clearance | Confirms a passed security check | approx. 30 min – 24 hrs |
| __cflb | Load balancing, if active | Session duration |
These cookies are technically required for the secure operation of the site. They are not used for analytics, advertising, or cross-site tracking.
Legal basis: Art. 6(1)(f) GDPR in conjunction with §25(2) No. 2 TDDDG (technically necessary cookies). No consent is required for these.
5. Contact via Email
If you contact me by email, the information you provide (email address, message content) will be used exclusively to process your inquiry and stored accordingly.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries).
This data will be deleted once it is no longer required for processing, unless legal retention obligations require otherwise.
6. SSL/TLS Encryption
This website uses SSL/TLS encryption (HTTPS) throughout, provided via Cloudflare, to protect the transmission of request data.
7. Your Rights as a Data Subject
You have the right, at any time, to:
- Request access to your personal data stored by me (Art. 15 GDPR)
- Request correction of inaccurate data (Art. 16 GDPR)
- Request deletion of your data (Art. 17 GDPR)
- Request restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Object to the processing (Art. 21 GDPR)
- Lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), e.g. the authority responsible for your place of residence
To exercise your rights, an informal message to the email address above is sufficient.
8. Changes to this Privacy Policy
This privacy policy will be updated as needed to reflect changes to the website (e.g. the introduction of new features).