Information under the General Data Protection Regulation (GDPR). Last updated October 2026. This English version is the authoritative one; the German version at /de/datenschutz/ is a translation provided for information only.

1. Controller

The controller (Verantwortlicher) within the meaning of Art. 4 (7) GDPR is:

DigitalFreedom Global LLC (trading as DigitalFreedom)
30 N Gould St, Ste N
Sheridan, WY 82801, United States
General contact: hello@digitalfreedom.co.za
Data protection: data-protection@digitalfreedom.co.za

2. Scope of This Policy

This policy covers personal data processed in connection with this website (marcelrgberger.com) and any direct contact with the controller via email.

The controller is established in the United States. We apply the GDPR as our global baseline for every visitor, regardless of where they are located, and we additionally comply with the data-protection law of your own jurisdiction where it is more protective. Data you send us by email is held by Migadu, a provider in Switzerland, on servers in France. The other service providers named below (GitHub, Google, Cal.com) process data in their own regions as described in each section.

3. Hosting and Logs

This site is hosted on GitHub Pages, operated by GitHub, Inc. When you visit the site, your IP address and basic request metadata may be processed by GitHub to deliver the page and protect against abuse. Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in providing a stable service).

4. Cookies

Google Analytics is loaded only after you click "Accept" (section 5). Before that, and if you click "Reject", the Google tag is not loaded and no cookies are set.

Your choice is stored in localStorage on your device and can be changed at any time by clearing local site data.

The Cal.com booking calendar and the YouTube video load only when you request them with a click on the home page (sections 6 and 7). Before that, neither Cal.com nor YouTube sets cookies.

5. Google Analytics 4

This site uses Google Analytics 4 (operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) for aggregated traffic measurement. The Google tag is loaded only after you click "Accept" in the cookie banner. Before that, and if you click "Reject", it is not loaded at all: your browser sends no request to googletagmanager.com or google-analytics.com, no cookies are set and no data reaches Google.

After consent: once you accept, the tag is loaded, a client ID cookie is set, event data is collected and standard Google Analytics tracking runs. If you have accepted on an earlier visit, the tag is loaded when a page is opened, based on the choice stored on your device.

Withdrawal: if you withdraw your consent, nothing is sent to Google any more; reloading the page ends the loading of the tag completely.

Legal basis: Art. 6 (1) (a) GDPR + § 25 (1) TDDDG (consent).
Data processed: page URL, referrer, anonymised IP, device/browser metadata, interaction events, client ID cookie, session ID, event parameters. All of this only after consent.
Purpose: traffic measurement to understand which content reaches an audience.
Retention: 14 months for event-level data (GA4 default); aggregated reports indefinitely.
International transfer: Google Ireland processes data within the EU and may transfer to the United States. Google LLC is certified under the EU-US Data Privacy Framework (DPF), providing an adequacy decision under Art. 45 GDPR.
Withdrawal: change your choice at any time via the cookie settings link in the footer, or use a browser-level opt-out / ad-blocker. The Google opt-out browser add-on is available at tools.google.com/dlpage/gaoptout.

Google's own privacy policy: policies.google.com/privacy.

6. Booking a call (Cal.com)

The home page shows a placeholder for the booking calendar from Cal.com (Cal.com, Inc., USA). Nothing from Cal.com is loaded when you open the page. Only when you click "Load calendar" does the page embed the calendar; if you follow the "Open on Cal.com" link instead, only Cal.com's own privacy policy applies.

After the click, your browser loads scripts from app.cal.com and transmits your IP address and device information to Cal.com. Cal.com sets technically necessary cookies and sends technical error data to the error-tracking service Sentry (Functional Software, Inc., USA). If you book a slot, Cal.com additionally processes what you enter in the calendar, typically your name, email address, and your description of the topic.

Legal basis for loading the calendar: your consent by clicking, Art. 6 (1) (a) GDPR and § 25 (1) TDDDG.
Legal basis for the booking: Art. 6 (1) (b) GDPR, steps taken at your request prior to entering into a contract.
Purpose: showing available times, arranging and holding the call.
Transfer outside the EU: Cal.com, Inc. is based in the United States. The transfer relies on the EU-US Data Privacy Framework, supplemented by the European Commission's Standard Contractual Clauses.
Storage: until the matter is dealt with, then within statutory retention periods.

Read Cal.com's privacy policy at cal.com/privacy.

7. YouTube Video (after a click)

The home page shows a preview image of a YouTube video. This site serves the image itself. The video is loaded from youtube-nocookie.com (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) only after you click; the player then also contacts further Google servers, for example for preview images, video data and fonts. Your IP address and device information are then transmitted to Google; Google may transfer data to the United States under the EU-US Data Privacy Framework. Legal basis: your consent by clicking, Art. 6 (1) (a) GDPR and § 25 (1) TDDDG.

8. App and GitHub Data

App icons, app ratings and details of open-source projects are fetched from Apple (App Store) and GitHub when this site is built, and served by the site itself. Your browser does not connect to Apple or GitHub for them.

9. Direct Contact

If you contact us by email, your message and contact details will be stored for the purpose of processing your request and for follow-up. Our email is hosted by Migadu, a provider in Switzerland, on servers in France. Legal basis: Art. 6 (1) (b) GDPR (pre-contractual / contractual processing) or Art. 6 (1) (f) GDPR (legitimate interest in responding).

10. Your Rights

Under the GDPR you have the right to:

Access (Art. 15), request a copy of the data we process about you.
Rectification (Art. 16), correct inaccurate data.
Erasure (Art. 17), request deletion of your data.
Restriction (Art. 18), request restriction of processing.
Portability (Art. 20), receive your data in a structured machine-readable format.
Object (Art. 21), object to processing based on legitimate interest.
Withdraw consent (Art. 7), at any time, with effect for the future.
Complain (Art. 77), with the competent supervisory authority in your EU/EEA member state of residence, place of work, or of the alleged infringement. In the United Kingdom this is the Information Commissioner's Office (ICO).

To exercise any of these rights, email data-protection@digitalfreedom.co.za.

11. Data Protection Officer

A formal DPO has not been appointed; the controller does not meet the threshold criteria for mandatory appointment under Art. 37 GDPR / § 38 BDSG. For all data-protection inquiries please email data-protection@digitalfreedom.co.za.

12. Changes to This Policy

We may update this policy when our processing changes or when laws require it. The current version is always available on this page.

Privacy Policy