[quyse]

What if I host my website on Google Cloud Platform? I guess it should be OK then to use Google Fonts CDN on the website, because it's the same entity, and visitor's IP was already leaked to Google when the HTML page was served. Can't really ask user for consent before loading the HTML page!

[kall]

You may not serve a website to german visitors from GCP at all, certainly not without getting consent first.

[quyse]

Does it mean Google, AWS, DigitalOcean, Cloudflare, Akamai, and everybody else (except Hetzner) are now outlawed in Germany? Because, as I said, I cannot ask for consent before serving the initial HTML, unless someone develops a magical IP-less protocol for delivering consent. I'm not sure if even Hetzner server is OK, it's still a third party even if Germany-based.

[kall]

If we take another ruling [0] seriously, Hetzner is dicy only because they recently added a US datacenter. For the others, yeah.

You could rent colo, go with a friendly neighborhood hoster like uberspace or with something like Telekom Cloud (lol).

[0] https://www.taylorwessing.com/en/insights-and-events/insight...

[perlgeek]

I'm pretty sure this is not correct.

There is a technical necessity for your hosting provider to see the user's IP.

The GDPR does not require consent for passing on private information when there is a technical or legal necessity, as well as a number of other preconditions.