Legal
Privacy Policy
What data catalinwaack.com processes, how it is used, and what rights you have.
Last updated: 13 August 2026
1. Controller
Represented by Catalin Waack
111 NE 1st St, 8th Floor, Suite #88350
Miami, Florida 33132, United States
Privacy enquiries: [email protected]
2. Hosting and technical operation
This website is provided through Cloudflare Pages, Cloudflare Workers, and Cloudflare D1. The provider is Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA.
When you access the website, Cloudflare processes technical connection data, in particular the IP address, date and time, requested URL, HTTP headers, and browser information. This is necessary to deliver the website, protect it from attacks, and identify errors. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of the website.
Cloudflare may also process data outside the European Economic Area. Safeguards are provided through the Cloudflare Data Processing Addendum, including the EU Standard Contractual Clauses. Further information is available in the Cloudflare Privacy Policy and the Cloudflare Data Processing Addendum.
3. Our cookie free audience measurement
We use our own audience measurement to understand which pages and campaigns are used. We do not use analytics cookies and do not store analytics data in LocalStorage. We do not use Google Analytics or Hotjar.
The following information may be stored for each page view:
- The path of the requested page, without query parameters
- The domain of the external referring source
- UTM parameters: source, medium, campaign, term, and content
- The time of the page view
- City, region, and country code from Cloudflare location data
- A pseudonymous visitor identifier generated by HMAC from the IP address and browser identifier
The IP address and browser identifier themselves are not stored in our analytics database. The analytics database is configured for storage in the EU. Events are deleted after no more than 13 months.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is privacy conscious audience measurement and the improvement of our content and campaigns. You may object to this processing at any time by email.
4. Website improvement
To improve the technical quality and clarity of our public pages, we evaluate how they are used. For this purpose, usage flows are recorded technically. The private dashboard page is excluded.
This may include requested pages, interactions such as clicks and scrolling, and general technical information about the browser, device, source of the visit, and approximate region. Form field contents are masked and are not collected.
Technical processing is supported by service providers for delivery, hosting, and data storage. We do not use cookies for this evaluation and do not store persistent recording identifiers in the browser.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is a reliable and understandable website. The data is deleted when it is no longer required for this purpose. You may object to the processing at any time by emailing [email protected].
5. Contact and migration enquiries
If you contact us by email, we process your sender address, the content of your message, and the communication data required to respond.
For the WordPress initial review form, we store the website address and email address you provide, the time of the enquiry, and the delivery status. The enquiry is also sent to [email protected]. Form data is deleted after no more than 24 months unless a contractual relationship results or statutory retention duties require longer storage.
The legal basis is Article 6(1)(b) GDPR where the enquiry concerns steps before entering into a contract. For other enquiries, the legal basis is Article 6(1)(f) GDPR, and our legitimate interest is responding to your enquiry.
6. External links
This website links to external services such as LinkedIn, GitHub, and WhatsApp. A connection to the relevant provider is established only when you open such a link. The provider's privacy terms apply from that point onward.
7. Your rights
Subject to the statutory requirements, you have rights of access, rectification, erasure, restriction of processing, data portability, and objection. You may withdraw consent at any time with effect for the future.
You also have the right to lodge a complaint with a competent data protection supervisory authority. To exercise your rights, an email to [email protected] is sufficient.
8. Changes to this policy
We update this privacy policy when the website, the services used, or legal requirements change. The version published on this page applies.