This privacy policy explains how andreastimm.com collects, uses, and protects the information of visitors to this site. This site is a personal editorial blog operated by Andreas Timm, Munich, Germany. Full contact details are available on the imprint page.
What data this site collects
Analytics (Google Analytics 4)
This site uses Google Analytics to understand how visitors engage with content. Analytics is only activated after you accept the cookie consent banner. If you reject consent, no analytics data is collected or transmitted.
When enabled, Google Analytics collects: anonymized IP address, approximate geolocation (country/city), browser and device type, referring URL, pages visited, time spent on each page, and whether you are a returning visitor. IP anonymization is enabled by default through Google Consent Mode v2.
Legal basis under GDPR: Article 6(1)(a) — consent. You can withdraw consent at any time by clearing your browser storage.
Server logs
The hosting provider keeps standard server access logs including IP address, date, time, and requested resource. These logs are used solely for security and operational purposes and are deleted within 7 days. Legal basis: Article 6(1)(f) — legitimate interest in site security.
Essential cookies
This site uses a single essential cookie (stored as at_consent in localStorage) to remember your cookie preferences. This cookie is not used for tracking and does not require consent under §25(2) TTDSG.
Translation (GTranslate)
This site offers on-page translation via the GTranslate plugin. When you select a language, page content is sent to Google Translate for processing. This transmission occurs only when you explicitly trigger a translation. Google Translate may receive your IP address and the page content during translation. If you do not use the translation feature, no data is sent to Google Translate.
Legal basis: Article 6(1)(a) — consent via voluntary action.
What this site does NOT collect
- No email addresses (no newsletter or signup forms currently in use)
- No comments or user accounts
- No payment information
- No biometric or health data
- No cross-site tracking or advertising identifiers
- No photography EXIF data beyond what is voluntarily included in published posts
Cookie consent (Google Consent Mode v2)
On first visit, you are shown a consent banner with Accept and Reject options. Before your choice is recorded, all non-essential consent categories are set to denied by default. Analytics is activated only if you click Accept.
You can change or withdraw consent at any time by clearing site data in your browser settings, which will reset your preferences and show the banner again.
Third parties
The following third parties may receive data when you visit this site:
- Google Ireland Limited — Google Analytics, delivered via Site Kit for WordPress. Activated only after cookie consent.
- Google Ireland Limited (Google Translate) — Only when you use the GTranslate language switcher to translate page content.
- Hosting provider — Operates the server and keeps standard access logs for security. See imprint for details.
- Google Fonts — Fonts may be loaded from Google’s CDN by the WordPress theme. When your browser requests a font, Google receives your IP address. To avoid this, you can block the font domain in your browser.
Embedded content from other websites
Blog posts occasionally embed content from other websites (e.g., YouTube videos, Google Maps, external photo galleries). Embedded content behaves in the exact same way as if the visitor visited the other website. These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content. This site is not responsible for the privacy practices of embedded third-party services.
Your rights under GDPR
If you are in the European Union, United Kingdom, or another jurisdiction with comparable data protection laws, you have the following rights:
- Right to access — ask what data I hold about you
- Right to rectification — correct inaccurate data
- Right to erasure — request deletion of your data
- Right to restriction — limit how data is processed
- Right to data portability — receive your data in a structured format
- Right to object — object to processing based on legitimate interest
- Right to withdraw consent — at any time, with no penalty
- Right to lodge a complaint — with a supervisory authority (for Bavaria: Bayerisches Landesamt für Datenschutzaufsicht)
To exercise any of these rights, see the contact information on the imprint page.
Data retention
Analytics data is retained by Google according to their standard 14-month retention policy. Server logs are deleted after 7 days. Consent preferences in your own browser are retained until you clear them. Published content (blog posts, photos, page text) is retained indefinitely as part of the editorial archive.
International data transfers
Google Analytics and Google Translate may transfer data to the United States. Google operates under the EU-U.S. Data Privacy Framework for such transfers.
Photography and image rights
Photographs on this site are the intellectual property of Andreas Timm unless explicitly credited otherwise. Images are published for personal editorial purposes. Reuse requires written permission; quoting short excerpts or embedding with attribution and a link back is permitted. For takedown requests or licensing inquiries, see the imprint page.
Changes to this policy
This privacy policy may be updated from time to time. Material changes will be noted here with a revised “Last updated” date.
Last updated: April 2026. This policy was drafted as a template for a personal editorial blog and reflects the site’s current configuration. For legal certainty specific to your situation, consult qualified legal counsel.