Legal

Privacy notice

Last updated: 20 October 2026

This page explains what personal data is processed when you visit maxroeck.com or email us, why, and what rights you have. The short version: there are no forms and no ads. The only cookies are those of Google Analytics, and in the EU/EEA and the UK they are set only if you click Accept. Questions? Write to contact@maxroeck.com.

1. Who is responsible

The controller for this website is:

See also the legal notice.

2. Visiting the website

When you open a page, your browser automatically sends technical data to our web server: IP address, date and time, the page requested, the referring page, and browser and operating system. The server records this in log files. We use it only to deliver the site, keep it secure and find errors; we do not combine it with other data or use it to identify you. Legal basis: Article 6(1)(f) GDPR (legitimate interest in a secure, working website). Log files are deleted by our host on a short rolling schedule (typically within 14–30 days).

The logos of Roeck Consulting, Freelime and ESMH Gantt Planner on the home page are loaded directly from those projects’ own websites (roeckconsulting.com, freelime.app and gantt.esmhconsulting.com), so they always show the current version. Those sites are operated by us and run on the same server, so loading the logos sends the same technical data to the same server. No cookies are set.

3. Cookies and Google Analytics

This website uses Google Analytics to see which pages are visited and how visitors find the site. Whether it runs depends on where you are:

• In the EU/EEA, the UK and other places that require prior consent (or if we can’t tell where you are): a banner asks first. Google Analytics is not loaded until you click Accept. If you click Decline, or simply ignore the banner, it is not loaded and no analytics cookies are set.
• Everywhere else (for example the UAE or the US): Google Analytics runs by default, and you can switch it off at any time with Turn off in the banner or Cookie settings in the footer.

We work out the region from your device’s time-zone setting. This happens entirely in your browser: no location lookup, and nothing is sent to us. It is only a rough guide; if your device is set to a different time zone, the banner may not match your region, and you can switch analytics off at any time either way. Your choice is remembered in your browser’s local storage (entry maxroeck_consent) so we don’t ask on every visit; in consent regions we ask again after 12 months. That entry stays on your device and is never sent to us.

When analytics is off, this website sets no cookies, stores nothing in your browser except that choice (and, for the current tab only, the note described below) and contacts no third party. The typefaces (Outfit and DM Sans) are hosted on our own server, so no font service is contacted either.

The animated logo (at the top of every page and on the home page) plays once per visit. To remember that it has already played, the site keeps a short note in your browser’s session storage (entry maxroeck_film_seen, value 1). It is not a cookie, is never sent to us or anyone else, contains nothing about you and is deleted automatically when you close the tab. Legal basis: § 25(2) no. 2 TDDDG (strictly necessary for the function you asked for) and Article 6(1)(f) GDPR.

When analytics is on, Google Analytics 4 runs on every page. It is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and its parent company Google LLC, USA. It tells us which pages are visited, how visitors found the site (for example via search or a social link), what kind of device they use and their approximate location (country or city). We only look at aggregated reports. Specifically:

• Cookies set: _ga and _ga_JGKWZM2GGM, which distinguish visitors and sessions. They expire after 2 years at most, or as soon as you switch analytics off.
• IP addresses: Google Analytics 4 does not log or store IP addresses.
• No advertising: Google Signals and ad personalization are switched off, and the advertising consent signals sent to Google stay denied.
• Retention: event-level data is automatically deleted after 2 months.

Legal basis: in consent regions, your consent (Article 6(1)(a) GDPR and, for storing or reading information on your device, the applicable ePrivacy rules, for example § 25(1) TDDDG in Germany). Elsewhere, our legitimate interest in understanding how the site is used (Article 6(1)(f) GDPR), with the right to switch it off at any time.

You can withdraw your consent or switch analytics off at any time, with effect for the future, via Cookie settings in the footer or right here:

4. Contacting us by email

If you email us, we process your email address, your name and whatever you include in your message to answer you and, if it comes to that, to prepare and carry out an engagement. Legal basis: Article 6(1)(b) GDPR (steps before a contract, or the contract itself) and Article 6(1)(f) GDPR (our legitimate interest in answering enquiries).

5. Who else handles your data

• RoeckNet Webhosting hosts this website (and the project websites the logos come from) on a server rented from STRATO in a data centre in Germany, and processes the data described in section 2 on our behalf.
• Google LLC (Google Workspace, Gmail) provides our mailbox and processes the emails you send us (section 4).
• Google Ireland Limited / Google LLC (Google Analytics 4), as described in section 3, and only while analytics is on.

They process data only on our instructions. We do not sell, rent or share your data with anyone for marketing.

6. International transfers

We are based in the United Arab Emirates, so emails you send us are read there. Google may process email data (Google Workspace) and Google Analytics data outside the EU/EEA, including in the US; Google LLC is certified under the EU-U.S. Data Privacy Framework, and the EU Standard Contractual Clauses apply in addition.

7. How long we keep data

• Server log files: deleted by our host on a short rolling schedule (typically 14–30 days).
• Analytics: event-level data is deleted by Google after 2 months; the _ga cookies expire after 2 years at most, or immediately when you switch analytics off.
• Your cookie choice: in your own browser; in consent regions we ask again after 12 months.
• The logo-animation note (maxroeck_film_seen): in your browser’s session storage, deleted when you close the tab.
• Emails: up to 24 months after our last correspondence, unless an engagement follows; then as long as accounting and tax rules require.

8. Your rights

Wherever you live, we honour the following rights to the extent your local law grants them (they follow the EU/UK GDPR and are broadly in line with the UAE Personal Data Protection Law):

• Access to the data we hold about you
• Rectification of inaccurate data
• Erasure, subject to legal retention duties
• Restriction of processing
• Data portability
• Objection to processing based on legitimate interests (for analytics outside consent regions, the quickest way is Cookie settings)
• Withdrawal of consent at any time, with effect for the future
• Complaint to a data protection authority, for example where you live or work

To use any of these rights, email contact@maxroeck.com. We aim to reply within 30 days.

9. Security

The website is served over HTTPS only. Access to emails is limited to Max Roeck. No system is perfectly secure, but we keep the data we hold to the minimum we need.

10. Links to other websites

This website links to the sites of the projects shown here and to social media profiles. Apart from the project logos (section 2), nothing from those sites is loaded until you click a link; from then on, their own privacy notices apply.

11. Changes

If we change how the site works (for example by adding a form or another tool), we will update this page first. The date at the top shows the latest version.