— Privacy Policy

Your data.
How I handle it.

Last updated: 24 June 2026

This Privacy Policy explains what information I collect when you visit mh-content.com or contact me about a project, why I collect it, and your rights under the EU General Data Protection Regulation (GDPR) and the South African Protection of Personal Information Act (POPIA).

Who I am

The data controller responsible for the processing of your personal data is:

Marko Haas (MH-Content)
Lauterbacher Straße 44
63688 Gedern, Germany
Email: m.haas@mh-content.com

What data I collect

I collect the following categories of personal data:

  • Information you provide voluntarily via the contact form: your name, email address, company or brand, project type, and any project details you choose to share.
  • Information collected automatically when you visit the site: IP address, browser type and version, operating system, referring URL, pages viewed, time and date of visit, and time spent on each page. This is standard server log data and basic analytics.
  • Cookie data: small files stored on your device that help the site function correctly and provide aggregated analytics about how the site is used.
  • Tracking pixel data: if you accept optional cookies, third-party scripts from Google and Meta collect aggregated, pseudonymous data about your visit for analytics and advertising measurement. Details below.

I do not collect special-category data (health, religious, political, biometric). I do not knowingly collect data from anyone under the age of 16.

Why I collect it

I process your personal data on the following legal bases under GDPR Article 6:

  • To respond to your enquiry and discuss a potential project (legal basis: contract preparation, Art. 6(1)(b)).
  • To deliver agreed services and manage the client relationship if we work together (legal basis: contract performance, Art. 6(1)(b)).
  • To comply with German legal requirements, including tax and accounting obligations (legal basis: legal obligation, Art. 6(1)(c)).
  • To improve the website and understand how it is used (legal basis: legitimate interest, Art. 6(1)(f)).
  • To measure the effectiveness of advertising and build retargeting audiences (legal basis: consent, Art. 6(1)(a) — only after you click "Accept" on the cookie banner).

I do not sell or rent your personal data to third parties. I do not use your data for automated decision-making or profiling.

Cookies

This website uses essential cookies for site functionality and optional cookies for analytics and advertising. Optional cookies only load after you click "Accept" on the cookie banner.

  • Essential cookies: required for the site to function correctly. These cannot be disabled.
  • Analytics cookies: collect aggregated, pseudonymous data about site usage via Google Analytics 4. Loaded only with your consent.
  • Advertising cookies: track visits for the purpose of measuring ad effectiveness and showing relevant content on third-party platforms (Meta). Loaded only with your consent.

If you click "Reject" on the cookie banner, only essential cookies are used and no third-party tracking occurs.

Analytics and tracking technologies

When you visit this site and consent to optional cookies, the following tools are loaded to understand how visitors interact with the site and to measure the effectiveness of advertising. None of these tools load before you click "Accept" on the cookie banner — they're all gated by Google Consent Mode v2.

Google Tag Manager

I use Google Tag Manager to manage and load the tracking tools listed below. Tag Manager itself doesn't collect personal data — it's the framework that controls whether the analytics and advertising tools below run at all, based on your consent choice.

  • Container ID: GTM-WLNXN686
  • Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
  • More info: policies.google.com/privacy

Google Analytics 4

If you accept optional cookies, Google Analytics 4 collects pseudonymous data about your visit — pages viewed, time on page, scroll depth, traffic source, approximate location (city level), device type, and browser. This helps me understand what content visitors find useful and where they come from.

  • Measurement ID: G-095NH3BXZY
  • IP anonymization: enabled by default in GA4
  • Data retention: 14 months
  • Provider: Google Ireland Limited (with data possibly transferred to Google LLC in the US under Standard Contractual Clauses)
  • More info and opt-out: Google Analytics opt-out browser add-on

Meta Pixel and Conversions API

If you accept optional cookies, the Meta Pixel (Facebook Pixel) tracks your visit to measure the effectiveness of any advertising I run on Facebook and Instagram, and to build audiences for retargeting. It tracks pages viewed and form submissions, and may share this data with Meta to attribute it to your Facebook or Instagram account if you have one.

I also use Meta's Conversions API alongside the Pixel — this sends conversion data server-side from Google Tag Manager to Meta, improving accuracy and reducing the impact of browser tracking restrictions.

  • Pixel ID: 207021818969134
  • Events tracked: PageView (every page load) and Lead (contact form submissions)
  • Provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland
  • Data may be transferred to Meta Platforms, Inc. in the US under Standard Contractual Clauses
  • More info: Meta Privacy Policy
  • Manage Meta ads preferences: Meta Ads Settings

Google Consent Mode v2

This site uses Google Consent Mode v2 to ensure all analytics and advertising tools respect your cookie choice. Until you click "Accept" on the cookie banner, none of the above tools collect data about you — they're loaded into the page in a "denied" state by default. When you click "Accept", consent state is updated to "granted" and they begin tracking. When you click "Reject", they remain denied for the duration of your session and on future visits.

Data sharing

I share your data only where necessary to deliver the service you have requested. This includes:

  • Webflow Inc. (website hosting and contact form processing) — based in the US, with appropriate data transfer safeguards in place under the EU Standard Contractual Clauses.
  • Google Ireland Limited (Tag Manager, Analytics) — with possible onward transfer to Google LLC in the US under Standard Contractual Clauses.
  • Meta Platforms Ireland Limited (Pixel, Conversions API) — with possible onward transfer to Meta Platforms, Inc. in the US under Standard Contractual Clauses.
  • Email and accounting providers used to communicate with you and process invoices.
  • Where required by German or South African law (e.g. tax authorities).

I will not disclose your information to other third parties without your consent, except where required by law.

How long I keep your data

  • Contact form submissions are kept for up to 24 months from the last contact, then deleted.
  • Client project records (contracts, invoices, correspondence) are kept for 10 years in line with German tax and commercial record-keeping obligations.
  • Website analytics data is kept for 14 months in aggregated form.
  • Meta Pixel data retention is governed by Meta's own policies, typically 180 days for ad event matching.

Your rights

Under GDPR and POPIA, you have the right to:

  • Access the personal data I hold about you.
  • Request correction of inaccurate data.
  • Request deletion of your data (subject to legal retention obligations).
  • Restrict or object to processing.
  • Receive your data in a portable format.
  • Withdraw consent at any time where processing is based on consent.
  • Lodge a complaint with a supervisory authority — in Germany, the Hessian Commissioner for Data Protection and Freedom of Information (Hessischer Beauftragter für Datenschutz und Informationsfreiheit). In South Africa, the Information Regulator.

To exercise any of these rights, contact me at m.haas@mh-content.com.

How to withdraw cookie consent

If you previously clicked "Accept" on the cookie banner and want to withdraw consent, the simplest way is to clear your browser's site data for mh-content.com, then revisit the site and click "Reject" when the cookie banner reappears. Alternatively:

  • Chrome: Settings → Privacy and security → Site Settings → mh-content.com → Clear data
  • Safari: Preferences → Privacy → Manage Website Data → search "mh-content.com" → Remove
  • Firefox: Settings → Privacy & Security → Cookies and Site Data → Manage Data → search "mh-content.com" → Remove Selected

You can also disable third-party cookies entirely in your browser settings, or use a browser extension like uBlock Origin or Privacy Badger to block tracking scripts.

International data transfers

This website is hosted by Webflow Inc. (US-based), and analytics and advertising data may be transferred to Google LLC and Meta Platforms, Inc. (both US-based). Where personal data is transferred outside the EU or South Africa, appropriate safeguards are in place under the EU Standard Contractual Clauses and equivalent mechanisms.

Security

I take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. However, no method of transmission over the internet is 100% secure, and I cannot guarantee absolute security.

Changes to this policy

I may update this policy from time to time. Any changes will be reflected here with a revised "Last updated" date.

Contact

Questions about this privacy policy or how I handle your data: