Is a GDPR cookie notice necessary?

[ModischFabrications]

It seems like there isn't a lot of analysis regarding individual users outside of Google Analytics. Does this mean that one can omit a cookie banner?

A buildin way to display a privacy policy would also be great, as per my understanding they are necessary for all websites, even personal portfolios.

[ModischFabrications]

This template isn't legal in regards to GDPR because it pulls in Google Fonts and Font Awesome. Feel free to research the legal aspects of it, but the final solution is to just use a locally stored copy of all fonts. See ModischFabrications/robin.modisch.me#4 for my notes regarding the process and https://github.com/ModischFabrications/hugo-awesome-identity for my branch with these (and a few more) changes