1. Controller
Mario V.W.B.R. Obst
Permanent place of residence: State Capital Erfurt, Free State of Thuringia, Germany
Address for service
Mario V.W.B.R. Obst
c/o JL Consulting Group GmbH
Zürcherstrasse 84 #1623
8852 Altendorf
Switzerland
The Swiss address is used as a rented public address for service. It does not establish a Swiss place of residence or registered business address for the controller.
Email: message@modeltrains.fun
Telephone: +49 175 7116303
2. Hosting and Content Delivery Network (CDN)
This website is technically provided through Cloudflare Workers with static files and through Cloudflare proxy, security, and content-delivery functions. The provider is Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA.
Cloudflare processes technical access data to ensure the secure and efficient provision of this website. This includes your IP address, requested URL, time of access and technical connection information. Browser information and a referrer may also be received where your browser sends them. The site uses HTTPS, redirects HTTP requests to HTTPS and sends an HSTS policy so that supporting browsers keep using encrypted connections.
Processing is based on Article 6(1)(f) GDPR. The legitimate interest is the secure, stable, and efficient provision of this online offering. No additional application request logs, Workers Logs or Worker log exports are enabled for this website. Cloudflare still processes connection data and security events as part of providing its hosting and protection services. The available technical datasets and their retention periods are explained in section 5.
Cloudflare may also process data in the United States. For transfers from the European Economic Area and Switzerland to the United States, Cloudflare relies on its certifications under the EU-U.S. and Swiss-U.S. Data Privacy Frameworks and, where these do not apply, on Standard Contractual Clauses including supplementary measures. Further information is available in Cloudflare’s Privacy Policy and Data Processing Addendum.
3. Collection and storage of personal data
a) Visiting the website
When you visit, your browser sends the information needed to request and display the page to Cloudflare. The website has no user accounts, contact forms or visitor database. Technical hosting and security processing is described in sections 2 and 5.
b) Contacting me
If you contact me by email or telephone, I process the data you provide, such as your name, contact details, and message content, to respond to your enquiry. The legal basis is Article 6(1)(b) GDPR where this concerns pre-contractual measures; otherwise, Article 6(1)(f) GDPR applies, based on the legitimate interest in processing your enquiry. The data is deleted once the enquiry has been conclusively dealt with and unless statutory retention obligations or legitimate interests in further storage apply, in particular for asserting, exercising, or defending legal claims.
c) Postal contact
Mail sent to the published address for service is received by JL Consulting Group GmbH and, on my instructions, digitised or forwarded physically. Sender, recipient, and shipment data are processed, as well as the contents of a shipment only where a scan has been commissioned. The legal basis is Article 6(1)(b) or (f) GDPR. The data is deleted as soon as it is no longer required and unless statutory retention obligations or legitimate interests in further storage apply. Further information is available in the privacy policy of adresse-mieten.ch.
4. Cookies and local storage
This website does not itself use analytics or marketing cookies and does not store information in your browser’s local storage for tracking purposes.
Cloudflare may, in individual cases, use technically necessary cookies or comparable information where required for security functions, such as preventing abusive access. Where information is stored on or read from your device, this is carried out pursuant to Section 25(2)(2) TDDDG; the subsequent processing is based on Article 6(1)(f) GDPR.
5. Technical statistics, retention and error reporting
This website does not include any client-side analytics or marketing tool and does not create user profiles.
Cloudflare provides server-side operational statistics about requests, traffic, errors and security events. These help maintain the website and protect it from abuse. Some security records can contain request details such as IP addresses; these records are not all anonymous.
This domain uses Cloudflare’s Free plan. Cloudflare documents retention of up to 24 hours for its Security Events dataset and 7 days for its Security Analytics dataset. These periods apply to those specific datasets, not to every category of data processed by Cloudflare. See Cloudflare’s dataset retention documentation.
Other operational, security or legally required records are retained according to their purpose and Cloudflare’s contractual and legal obligations. Cloudflare’s Privacy Policy explains the criteria it uses. I do not maintain a separate archive of visitor request logs.
Cloudflare Network Error Logging (NEL), the optional browser-based connection-error reporting feature, is disabled for this domain. The website also instructs supporting browsers to remove any previously cached NEL policy when they receive a current response. Necessary server-side security processing continues.
Processing is based on Article 6(1)(f) GDPR, namely the legitimate interest in securely, stably, and efficiently providing and optimising this online offering.
6. Local fonts
This website uses system fonts already available on your device. When the website is accessed, no connection to Google Fonts or another font service is therefore established.
7. Your rights
Under the GDPR, you have in particular the right of access, rectification, erasure, restriction of processing, objection, and—where the statutory requirements are met—data portability. Consent that has been granted may be withdrawn at any time with effect for the future. You also have the right to lodge a complaint with a supervisory authority.
Where the Swiss Data Protection Act applies, you may in particular request access to, rectification of, or erasure of your personal data in accordance with that Act.
8. External links and YouTube
Video cards link to YouTube in a new browser tab. This website loads no YouTube players, scripts or remote thumbnails. Preview images are served with the website. When you follow a link, the destination provider processes data under its own privacy policy. See Google’s Privacy Policy.
Dismissing the privacy notice saves only a dismissal flag in sessionStorage for this browser tab. It is not used to identify you or follow you across websites and normally expires when the tab is closed. The site remains usable if browser storage is disabled.
9. Competent data protection supervisory authority
Thuringian Commissioner for Data Protection and Freedom of Information (TLfDI)
Häßlerstraße 8
99096 Erfurt
Germany
Telephone: +49 361 57-3112900
Email: poststelle@datenschutz.thueringen.de
10. Current status
This Privacy Policy is currently valid and dated 23 September 2026.
I reserve the right to amend this Privacy Policy if my website or the applicable legal requirements change.