Last updated: 15 June 2026
This Privacy Policy explains what information I collect when you visit mh-content.com or contact me about a project, why I collect it, and your rights under the EU General Data Protection Regulation (GDPR) and the South African Protection of Personal Information Act (POPIA).
Who I am
The data controller responsible for the processing of your personal data is:
Marko Haas (MH-Content)
Lauterbacher Straße 44
63688 Gedern, Germany
Email: m.haas@mh-content.com
What data I collect
I collect the following categories of personal data:
- Information you provide voluntarily via the contact form: your name, email address, company or brand, project type, and any project details you choose to share.
- Information collected automatically when you visit the site: IP address, browser type and version, operating system, referring URL, pages viewed, time and date of visit, and time spent on each page. This is standard server log data and basic analytics.
- Cookie data: small files stored on your device that help the site function correctly and provide aggregated analytics about how the site is used.
I do not collect special-category data (health, religious, political, biometric). I do not knowingly collect data from anyone under the age of 16.
Why I collect it
I process your personal data on the following legal bases under GDPR Article 6:
- To respond to your enquiry and discuss a potential project (legal basis: contract preparation, Art. 6(1)(b)).
- To deliver agreed services and manage the client relationship if we work together (legal basis: contract performance, Art. 6(1)(b)).
- To comply with German legal requirements, including tax and accounting obligations (legal basis: legal obligation, Art. 6(1)(c)).
- To improve the website and understand how it is used (legal basis: legitimate interest, Art. 6(1)(f)).
I do not sell or rent your personal data to third parties. I do not use your data for automated decision-making or profiling.
Cookies
This website uses cookies for essential functionality, and may use analytics cookies (e.g. for understanding visitor patterns) where you have consented.
- Essential cookies: required for the site to function correctly. These cannot be disabled.
- Analytics cookies: collect aggregated, non-identifying data about site usage. You can disable these in your browser settings or opt out via any cookie banner provided.
Data sharing
I share your data only where necessary to deliver the service you have requested. This includes:
- Webflow (website hosting and contact form processing) — based in the US, with appropriate data transfer safeguards in place under the EU Standard Contractual Clauses.
- Email and accounting providers used to communicate with you and process invoices.
- Where required by German or South African law (e.g. tax authorities).
I will not disclose your information to other third parties without your consent, except where required by law.
How long I keep your data
- Contact form submissions are kept for up to 24 months from the last contact, then deleted.
- Client project records (contracts, invoices, correspondence) are kept for 10 years in line with German tax and commercial record-keeping obligations.
- Website analytics data is kept for 14 months in aggregated form.
Your rights
Under GDPR and POPIA, you have the right to:
- Access the personal data I hold about you.
- Request correction of inaccurate data.
- Request deletion of your data (subject to legal retention obligations).
- Restrict or object to processing.
- Receive your data in a portable format.
- Withdraw consent at any time where processing is based on consent.
- Lodge a complaint with a supervisory authority — in Germany, the Hessian Commissioner for Data Protection and Freedom of Information (Hessischer Beauftragter für Datenschutz und Informationsfreiheit). In South Africa, the Information Regulator.
To exercise any of these rights, contact me at m.haas@mh-content.com.
International data transfers
This website is hosted by Webflow Inc. (US-based). Where personal data is transferred outside the EU or South Africa, appropriate safeguards are in place under the EU Standard Contractual Clauses and equivalent mechanisms.
Security
I take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. However, no method of transmission over the internet is 100% secure, and I cannot guarantee absolute security.
Changes to this policy
I may update this policy from time to time. Any changes will be reflected here with a revised "Last updated" date.
Contact
Questions about this privacy policy or how I handle your data:
