Privacy policy
Datenschutzerklärung · Last updated: September 2026
1. Who is responsible
The controller responsible for processing personal data on this website under the General Data Protection Regulation (GDPR) is:
Marlon Cacciapuoti
Mennweg 27
50769 Köln, Germany
info@contentcreationmarlon.com
I am not required to appoint a data protection officer.
2. The short version
• This website uses no cookies and stores nothing on your device (no local storage either).
• There is no analytics, no tracking and no advertising.
• The page loads nothing from other servers: fonts, icons and images all come from this website’s own host.
• The contact form does not send anything. It only prepares an email in your own email app.
Because nothing is stored on or read from your device beyond what is technically necessary to show the page, no consent is required under § 25 TDDDG, and that is why this site has no cookie banner.
3. Hosting and server log files
This website is hosted by:
STRATO GmbH
Otto-Ostrowski-Straße 7
10249 Berlin, Germany
Whenever you open a page, your browser automatically sends information that the host records in server log files:
• IP address of the requesting device
• date and time of the request
• the page or file requested and the amount of data transferred
• whether the request succeeded
• browser type and version, operating system
• the referrer URL (the page you came from)
This data is needed to deliver the website and to keep it secure, for example to detect and fend off attacks. The legal basis is Art. 6(1)(f) GDPR; my legitimate interest is the secure and reliable operation of the website. According to STRATO, IP addresses of visitors are stored for a maximum of seven days for this purpose. The data is not combined with other data sources and not used to identify you.
STRATO processes this data on my behalf. I have concluded a data processing agreement with STRATO under Art. 28 GDPR. More information: STRATO privacy policy.
4. Cookies and local storage
This website sets no cookies and uses no comparable technologies such as local storage, session storage, pixels or fingerprinting.
5. Fonts
The typeface used on this site (Archivo, SIL Open Font License) is stored on this website’s own server and delivered from there. There is no connection to Google Fonts or any other external font service.
6. Getting in touch
Contact form
The form on the home page does not transmit or store anything. When you press „Continue to email“, it puts your entries into a new email and opens it in the app you choose:
• Apple Mail or another app: the email opens in the email program on your device.
• Gmail: the email opens on mail.google.com in your browser. From that moment, Google processes your data under your own Google account and Google’s privacy policy.
Nothing reaches me until you send the email yourself.
If you email me, I process your email address, your name if you give it, and the content of your message in order to answer you. If your enquiry is about a project, the legal basis is Art. 6(1)(b) GDPR (steps prior to a contract); otherwise it is Art. 6(1)(f) GDPR, my legitimate interest in answering messages sent to me.
My email address info@contentcreationmarlon.com is hosted by STRATO GmbH (address in section 3), on servers in Germany. STRATO processes these emails on my behalf under the data processing agreement mentioned in section 3.
I delete enquiries once they are dealt with, unless the correspondence leads to a project or I am required by law to keep it (for example under German tax and commercial law, which requires business correspondence to be kept for six to ten years).
Discord
The Discord button on the home page only copies my Discord name to your clipboard. It does not connect to Discord. If you then contact me on Discord, Discord’s own privacy terms apply: Discord Netherlands B.V., Schiphol Boulevard 195, 1118 BG Schiphol, Netherlands (Discord privacy policy). Data may be transferred to Discord Inc. in the USA. I use the messages you send me there only to answer you, on the legal basis described under „Email“.
You are not obliged to give me any personal data. Without a way to reach you, however, I can’t reply.
7. Links to other websites
This site contains ordinary links, for example to Trustpilot. These are plain links: no data is sent to those services when you open this website. Only if you click a link does your browser connect to the other site, and from then on that site’s own privacy policy applies.
Trustpilot
The review buttons lead to Trustpilot, operated by Trustpilot A/S, Pilestræde 58, 5th floor, 1112 Copenhagen K, Denmark (Trustpilot privacy terms). If you write a review there, Trustpilot is responsible for processing your data. I do not pass any client data to Trustpilot; if I ask a client for a review, I simply send them the link.
8. Clients
If we work together, I process the data needed for the project: your name and contact details, the material you send me, and invoicing details. The legal basis is Art. 6(1)(b) GDPR (performance of the contract) and, for invoices, Art. 6(1)(c) GDPR (legal obligations under tax law). Project files are deleted after the project unless we agree otherwise; invoices are kept for the statutory retention period.
9. Your rights
You have the right to:
• access the data I hold about you (Art. 15 GDPR)
• have inaccurate data corrected (Art. 16 GDPR)
• have your data erased (Art. 17 GDPR)
• restrict processing (Art. 18 GDPR)
• receive your data in a portable format (data portability, Art. 20 GDPR)
• object to processing based on Art. 6(1)(f) GDPR, on grounds relating to your particular situation (Art. 21 GDPR)
An informal email to the address above is enough. I do not use automated decision-making or profiling.
10. Right to lodge a complaint
You can also complain to a data protection supervisory authority (Art. 77 GDPR), in particular in the EU country where you live or work. The authority responsible for me is:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Postfach 20 04 44
40102 Düsseldorf, Germany
www.ldi.nrw.de
11. Encryption
This website is delivered over an encrypted connection (TLS). You can tell by the lock symbol and the https:// at the start of the address bar.
12. Changes
I update this policy when the website or the law changes. The version published here applies.