Privacy Policy

Last updated: 2026-05-04

1. Overview

This website, t12i.com, is a personal blog featuring articles and photo galleries. It is operated as a private, non-commercial project by the person identified below as the data controller.

This policy explains what data is processed when you visit this site, why, on what legal basis, and what rights you have as a visitor located in the European Union or European Economic Area.

2. Data Controller

Thomas Borowski
c/o commerce & code GmbH
Marienthaler Str. 17
24340 Eckernförde
Email: mail@thomasborowski.de

3. What Data is Processed and Why

This site does not use cookies, does not require account registration, does not embed social media widgets, and does not collect form submissions. The following third-party services are involved in delivering the site.

Cloudflare (Hosting & CDN)

Legal basis: Legitimate interest — Role: Data processor

This site is hosted on Cloudflare Pages and uses Cloudflare R2 for image storage. All page requests and image requests are routed through Cloudflare’s global edge network. Cloudflare may process your IP address, browser user-agent, and request metadata (URL path, timestamps, HTTP status codes) as part of serving content and protecting the site against abuse. This data is handled by Cloudflare on behalf of the site operator under a Data Processing Agreement. Cloudflare does not use this data for advertising.

Plausible Analytics

Legal basis: Legitimate interest — Role: Data processor

This site uses Plausible Analytics to understand traffic patterns. Plausible is a privacy-first analytics tool: it sets no cookies, collects no personal data, and performs no cross-site tracking. All metrics are aggregated and anonymous — individual visitors cannot be identified. No consent banner is required. Plausible’s infrastructure is hosted in the European Union.

Data policy: plausible.io/data-policy

YouTube (youtube-nocookie.com)

Legal basis: Legitimate interest — Role: Third-party controller

Some articles embed videos hosted on YouTube. Embeds use the youtube-nocookie.com domain, which prevents YouTube from setting tracking cookies before you interact with a video. However, when a page containing an embedded video loads, your browser establishes a connection to YouTube’s servers, which may transmit your IP address and browser information to Google regardless of playback. Google is an independent data controller for this data. If you prefer not to send data to Google, you can disable JavaScript or use a browser extension that blocks YouTube embeds before they load.

RSS Feed

Legal basis: Legitimate interest

An RSS feed is available for subscribers. Subscribing to the feed does not require providing any personal data. RSS requests are handled by Cloudflare’s infrastructure and are subject to the same server-log processing described above.

4. Legal Basis for Processing

All processing described in this policy is based on legitimate interests (Art. 6(1)(f) GDPR). The legitimate interests pursued are: delivering the website to visitors who actively request it, protecting the site’s technical infrastructure, and understanding aggregate traffic patterns to improve content.

No processing on this site is based on consent, contract performance, or legal obligation.

5. Data Retention

Server-level access logs held by Cloudflare are retained according to Cloudflare’s own data retention policies, typically for a limited period for operational and security purposes. Plausible Analytics retains aggregated, anonymous statistics indefinitely; no retention limit applies because no personal data is stored. The site operator does not maintain independent access logs.

6. International Data Transfers

Cloudflare, Inc. is a US-based company. Transfers to the United States are covered by Cloudflare’s participation in the EU–US Data Privacy Framework and supplemented by Standard Contractual Clauses where applicable.

Google LLC (YouTube) is also a US-based company and a participant in the EU–US Data Privacy Framework. Google’s processing of data from YouTube embeds is governed by Google’s own privacy policy.

Plausible Analytics is operated by a European entity and processes data entirely within the EU. No international transfer applies.

7. Your Rights

As a data subject under the GDPR, you have the following rights with respect to any personal data processed in connection with your visit to this site:

Access (Art. 15) — You may request confirmation of whether personal data concerning you is being processed, and if so, access to that data.
Rectification (Art. 16) — You may request correction of inaccurate personal data.
Erasure (Art. 17) — You may request deletion of your personal data where the conditions of Art. 17 GDPR are met.
Restriction (Art. 18) — You may request that processing be restricted in certain circumstances.
Portability (Art. 20) — Where processing is based on consent or contract, you may request your data in a structured, machine-readable format.
Objection (Art. 21) — You may object at any time to processing based on legitimate interests.
Complaint — You have the right to lodge a complaint with a supervisory authority. In Germany, the competent federal authority is the Bundesbeauftragte für den Datenschutz und die Informationsfreiheit (BfDI). You may also contact the data protection authority of your country of residence.

To exercise any of the above rights, please contact the data controller at the address listed in Section 2.

Please note that this site processes minimal technical data to function. Because Plausible Analytics collects no personal data and Cloudflare’s logs are not directly accessible to the site operator, the practical ability to fulfill certain requests (such as erasure or access) may be limited accordingly.

8. Changes to This Policy

This privacy policy may be updated to reflect changes in site functionality or applicable law. The date at the top of this page indicates when it was last revised. Visitors are encouraged to check back periodically.

9. A Note on YouTube Embeds

Even with the youtube-nocookie.com domain, an embedded YouTube player establishes a connection to Google’s servers as soon as the page loads — before any click or interaction. Your IP address and browser metadata are transmitted to Google at that point. If this concerns you, consider using a browser extension such as uBlock Origin to block YouTube embeds selectively, or disable JavaScript for this domain.