Digital Freedom
Privacy

Privacy

Last updated: May 2026 · This notice applies to the website digitalfreedom.co.za only. Our apps have separate privacy notices. The legally binding version is the German one at /de/datenschutz.

1. Controller

Controller pursuant to Art. 4 (7) GDPR:

Berger & Rosenstock GbR (trading as "Digital Freedom")
Dieselstr. 22e, 61231 Bad Nauheim, Germany
Authorised representatives: Marcel R. G. Berger, Jasmin Rosenstock
VAT-ID: DE455096022

Data protection inquiries: data-protection@digitalfreedom.co.za
General inquiries: hello@digitalfreedom.co.za

2. Data Protection Officer

We have not appointed a Data Protection Officer because we do not meet the threshold criteria under Art. 37 GDPR / § 38 BDSG. For inquiries, contact the controller directly.

3. Hosting (GitHub Pages)

The site is served as static content from GitHub Pages (GitHub Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA). On every request, GitHub processes technically necessary data:

This processing serves the secure and stable delivery of the site. Legal basis: Art. 6 (1)(f) GDPR (legitimate interest). We do not keep server logs ourselves; data collected by GitHub is handled per its policies.

Transfer to the United States relies on the EU Standard Contractual Clauses pursuant to Art. 46 (2)(c) GDPR, supplemented where applicable by GitHub's self-certification under the EU-US Data Privacy Framework. More: GitHub Privacy Statement.

4. Cookies and Consent Banner

A consent banner is shown on your first visit. It gives you explicit control over the two categories of non-essential processing on this site: analytics (Google Analytics 4 with Consent Mode v2) and embedded YouTube videos. Without your consent, no analytics cookies are set, no YouTube player is loaded, and no personal identifiers are transmitted to Google; the Google tag sends only cookieless, aggregated pings before consent (see section 8 for detail and legal basis). Your consent decision is stored in a single localStorage entry (df_consent) on your device only and is never transmitted to us or third parties. You can change or withdraw your consent at any time via the "Cookie settings" link in the footer. Legal basis: Art. 6 (1)(a) GDPR and § 25 (1) TTDSG (consent) for analytics with identifiers and YouTube; Art. 6 (1)(f) GDPR for cookieless pings and for storing the consent decision itself.

5. localStorage

Two technically necessary entries are stored in your browser's localStorage: your language preference and your cookie-consent decision (df_consent). Both values stay on your device and are never transmitted to us or third parties. Legal basis: Art. 6 (1)(f) GDPR.

6. Fonts (Self-Hosted)

We use only locally hosted fonts (Fraunces, Inter, JetBrains Mono). Font files are served from the same origin as the site. No connection is made to Google Fonts or any other third-party font provider.

7. YouTube Videos (Consent-Gated)

Some sub-pages (e.g. the Jasmin page) embed videos hosted on YouTube. We exclusively use the privacy-enhanced domain youtube-nocookie.com. The player loads only after you grant consent — either site-wide via the cookie banner ("Accept all" or enabling "YouTube videos" in Settings) or per video via the "Load video" button shown in place of an unloaded player. Before consent, no connection to Google is established.

Once you load the player, data is processed by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) and / or Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) per their privacy notice. Legal basis: Art. 6 (1)(a) GDPR (consent). You can withdraw consent at any time via the "Cookie settings" link in the footer.

More: Google Privacy Policy.

8. Google Analytics 4 (Consent Mode v2)

With your consent we use Google Analytics 4 (Property G-EGH0MHBZ0B), provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) and / or Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). Analytics is used solely to understand which pages on this site are read. Advertising features (Google Signals, remarketing, ad personalisation) are not enabled.

Processed data includes: anonymised IP address (truncated by Google before storage), pages visited, referrer, approximate region (country/city level), device type, browser, screen resolution, language, and a randomly generated client identifier.

We use Consent Mode v2: before you grant consent, the Google tag does not set any cookies and sends only cookieless, aggregated pings (no personal identifiers). Once you grant consent, the tag transitions to its full mode and a client identifier is set. Legal basis for cookieless pings before consent: Art. 6 (1)(f) GDPR (legitimate interest in measuring aggregate reach without identifying you). Legal basis after consent: Art. 6 (1)(a) GDPR and § 25 (1) TTDSG (consent).

Retention: Google retains user-level data for 14 months (the default for new GA4 properties) before automatic deletion. Aggregated reports remain available beyond that period.

Transfer to the United States relies on Google LLC's certification under the EU-US Data Privacy Framework (Art. 45 GDPR adequacy decision) and, as a fallback, the EU Standard Contractual Clauses pursuant to Art. 46 (2)(c) GDPR.

You can withdraw your consent at any time via the "Cookie settings" link in the footer. More: Google Privacy Policy, Google Ads Data Processing Terms.

We use no other web analytics tools, no advertising-network tracking, and no conversion pixels.

9. Recipients

We pass personal data only to:

No transmission to other third parties occurs, unless required by law.

10. Retention

We do not store personal data on our own servers. Hosting access logs are retained per GitHub Pages' retention policy.

11. Your Rights

You have the right to:

To exercise these rights, contact data-protection@digitalfreedom.co.za.

12. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority. The competent authority for us is the Hessian Commissioner for Data Protection and Freedom of Information (Hessischer Beauftragter für Datenschutz und Informationsfreiheit), P.O. Box 3163, 65021 Wiesbaden, Germany.

13. Changes to This Notice

We update this notice when changes to the services we use or to the legal framework make that necessary. The version published here at the time of your visit applies.