THE SMALL PRINT. IN PLAIN SIGHT.
Privacy
Last updated: 7 November 2026
1. Controller
Mario V.W.B.R. Obst
Usual residence: Erfurt, capital of the Free State of Thuringia, Germany
Address for service:
Mario V.W.B.R. Obst
c/o JL Consulting Group GmbH
Zürcherstrasse 84 #1623
8852 Altendorf
Switzerland
The Swiss address is used as a rented public correspondence and service address. It does not establish the controller’s residence or place of business in Switzerland.
Email: mail@obst.casa
Telephone: +491757116303
2. Hosting and Content Delivery Network (CDN)
This website is provided through Cloudflare Workers Static Assets using static files, together with Cloudflare’s proxy, security and content delivery functions. The provider is Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA.
Cloudflare processes technical access data to provide this website securely and efficiently. This may include browser type and version, operating system, referrer URL, time of the server request, IP address, pages requested and technical connection data.
The legal basis is Article 6(1)(f) GDPR. The legitimate interest is the secure, stable and efficient provision of this website. Technical log data is processed only for as long as necessary for delivery, security and troubleshooting; the specific period depends on the Cloudflare functions used, account settings and contractual requirements.
Cloudflare may also process data in the United States. Cloudflare relies on its certifications under the EU–US and Swiss–US Data Privacy Frameworks for transfers from the European Economic Area and Switzerland to the United States and, where these do not apply, on standard contractual clauses together with supplementary measures. Further information is available in Cloudflare’s Privacy Policy (https://www.cloudflare.com/privacypolicy/) and Data Processing Addendum (https://www.cloudflare.com/cloudflare-customer-dpa/).
3. Collection and storage of personal data
a) Visiting the website
When you visit this website, your browser automatically sends information to the server providing it. This data is technically necessary to display the website correctly and is stored temporarily.
b) Contact by email or telephone
If you contact me by email or telephone, I process the data you provide, such as your name, contact details and the content of your message, to respond to your enquiry. The legal basis is Article 6(1)(b) GDPR where the enquiry concerns steps prior to entering into a contract; otherwise it is Article 6(1)(f) GDPR, with the legitimate interest of handling your enquiry. The data is deleted once the enquiry has been fully dealt with, provided that no statutory retention obligations or legitimate interests in further storage apply, in particular for the establishment, exercise or defence of legal claims.
The mailbox mail@obst.casa is hosted by iCloud Mail as part of iCloud+. For users in Germany, the provider is Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland. When receiving, storing and sending emails, Apple processes, in particular, sender and recipient addresses, message contents, attachments and technical delivery and connection data. Processing may also take place outside the European Economic Area, particularly in the United States. Apple describes standard contractual clauses, among other mechanisms, as a basis for international transfers. Further information: https://www.apple.com/legal/privacy/ and https://www.apple.com/legal/internet-services/icloud/.
c) Postal correspondence
Mail sent to the published service address is received by JL Consulting Group GmbH and, in accordance with my instructions, digitised or physically forwarded. Sender, recipient and shipment data are processed, as is the content of a letter only where a scan has been requested. The legal basis is Article 6(1)(b) or (f) GDPR. The data is deleted once it is no longer needed, provided that no statutory retention obligations or legitimate interests in further storage apply. Further information is available in the privacy policy of adresse-mieten.ch.
4. Cookies and local storage
This website does not itself use analytics or marketing cookies and does not store information in your browser for tracking purposes.
The website’s display controls do not store settings in your browser. Your device’s reduced-motion preference is respected.
In individual cases, Cloudflare may use strictly necessary cookies or similar information where required for security functions, such as preventing abusive access. To the extent that information is stored on or accessed from your device, this is based on section 25(2), point 2, TDDDG; subsequent processing is based on Article 6(1)(f) GDPR.
5. Audience measurement and technical analysis
No client-side analytics or marketing tool is embedded on this website, and the operator does not create cross-site usage profiles. Cloudflare Web Analytics is disabled for this project.
As part of its technical operations, Cloudflare provides statistical and predominantly aggregated information, for example about page views, traffic, errors and security events. These evaluations support the secure and stable operation of the website.
The processing is based on Article 6(1)(f) GDPR, with the legitimate interest of providing a secure, stable and optimised website.
Further information about Cloudflare’s data processing is provided in section 2 of this Privacy Policy.
6. Fonts, images and external links
The website uses the locally hosted font “Cinzel Decorative Regular” alongside system fonts. The font file is served by the same website as the page. There is no connection to Google Fonts or another external font service. The credit and link to the designer on GitHub do not load content from GitHub.
House and room images, gallery thumbnails and media provided on this website are also delivered as static files. The “Poster”, “Explore” and “Picture” views and the room search operate in your browser. These functions do not send search terms to a server. Aik is an illustrated character; viewing it does not call an AI service or activate a chat function.
The website links to external projects, exhibitions and profiles, including the ten profile signs in the garden and the corresponding link list. It does not embed social media plugins or external media players. An external website is opened in a new tab only when you follow its link. These links suppress transmission of the referring page (referrer). The destination’s own privacy information applies to its processing of data.
7. Your rights
Under the GDPR, you have, in particular, rights of access, rectification, erasure, restriction of processing, objection and, where the statutory requirements are met, data portability. You may withdraw consent at any time with effect for the future. You also have the right to lodge a complaint with a supervisory authority.
8. Additional information on Swiss data protection
Where the Swiss Federal Act on Data Protection (FADP) applies, the rights provided for by that Act apply in addition. Subject to the respective statutory requirements, you may, in particular, request access to, rectification, erasure or destruction of your personal data, as well as its delivery or transfer. Please contact mail@obst.casa to exercise these rights.
You may report possible violations of Swiss data protection law to the Federal Data Protection and Information Commissioner (FDPIC) ↗.
The Swiss service address is not the operator’s residence or place of business; the operator remains resident in Germany.
9. Competent data protection supervisory authority
Thuringian State Commissioner for Data Protection and Freedom of Information (TLfDI)
Häßlerstraße 8
99096 Erfurt
Germany
Telephone: +49 361 57-3112900
Email: poststelle@datenschutz.thueringen.de
10. Updates
This Privacy Policy is current as of 7 November 2026.
I reserve the right to amend this Privacy Policy if the website or legal requirements change.