Privacy policy

This website shows scale modelling work and nothing else. It sets no cookies, does not track visits and loads nothing from third-party servers. This page explains which data is processed nonetheless and what rights you have.

This English version is provided for convenience. Only the German version (Datenschutzerklärung) is legally binding.

1. Controllers

The controller responsible for processing personal data on this website within the meaning of Art. 4 (7) of the General Data Protection Regulation (GDPR) is:

For emails sent to the contact address for the works, the artist himself is the controller:

No data protection officer has been appointed, as there is no legal obligation to do so.

2. What this website does not do

• It sets no cookies and does not store or read any information on your device (§ 25 of the German Telecommunications Digital Services Data Protection Act, TDDDG).
• It uses no analytics, statistics or tracking tools.
• It embeds no third-party content – no Google Fonts, maps, videos or social media plugins. Fonts, images and scripts are served exclusively from the website’s own server.
• It has no contact form, no customer account and no newsletter.
• There is no automated decision-making or profiling within the meaning of Art. 22 GDPR.

Personal data is therefore only processed in two cases: when the pages are technically delivered to you, and when you write an email yourself.

3. Hosting and server log files

The website is hosted by: Name and address of the hosting provider. The provider processes the data listed below on my behalf. A data processing agreement pursuant to Art. 28 GDPR is in place.

When you open a page, your browser automatically sends data to the server, which is stored in log files:

• IP address of the requesting device
• date and time of the request
• page or file requested and amount of data transferred
• whether the request was successful
• previously visited page (referrer), if your browser sends it
• browser, version and operating system

Purpose: delivering the website, defending against attacks and troubleshooting.
Legal basis: Art. 6 (1) (f) GDPR. My legitimate interest lies in the secure and trouble-free operation of the website.
Storage period: the log files are deleted after number days. They are only kept longer if a specific security incident has to be investigated, and only until it has been resolved.

Without this data the website cannot be delivered. Providing it is therefore necessary if you want to view the pages.

4. Encryption

The website is transmitted in encrypted form via HTTPS (TLS). You can recognise this by “https://” in the address bar and the padlock symbol in your browser. Data you request cannot be read by third parties in transit.

5. Contact by email

If you write to one of the addresses given, your email address, your name (if provided) and the content of your message are processed in order to answer your enquiry.

Legal basis: Art. 6 (1) (b) GDPR if your enquiry relates to a contract, for example a commission. Otherwise Art. 6 (1) (f) GDPR; the legitimate interest lies in answering your message.
Storage period: the message is deleted once your matter has been dealt with, unless statutory retention obligations apply, for example for invoices under commercial and tax law.

Recipients: both mailboxes are run on Gmail. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework, and an adequacy decision of the European Commission exists for such transfers (Art. 45 GDPR).

Emails may be transmitted unencrypted on their way. Please do not send confidential information by email. Contacting us is voluntary.

6. Links to other websites

The website contains simple links, for example to Facebook (Meta Platforms Ireland Limited), Jeff Shiu Miniatures, Pla Editions and the Volksbund Deutsche Kriegsgräberfürsorge e. V. These are not embedded plugins. Visiting this website transfers nothing to these providers. Only when you click a link do you go to their site, and their operator is then responsible for any processing there.

7. Your rights

You have the following rights towards the controllers at any time regarding the data concerning you:

• Access to the data processed (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing (Art. 21 GDPR, see next section)

An informal email to one of the addresses above is sufficient.

9. Complaint to the supervisory authority

If you believe that the processing of your data infringes the GDPR, you may lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the EU member state of your habitual residence, place of work or the place of the alleged infringement. The authority responsible for the controllers of this website is:

10. Version and changes

Version: October 2026. This policy will be updated if the website or the legal situation changes. The version published here applies.

Back to the home page