Privacy notice

1. Controller

E-Mail: legal@marioobst.com
Phone: +49 175 7116303

Mario V.W.B.R. Obst, resident in Erfurt, the state capital of the Free State of Thuringia, Germany, is responsible for the processing described here. The address above is used for service and correspondence.

2. Scope and data minimisation

This notice concerns the mario-obst.fyi experiment, including its public test at mario-obst-fyi.marioobst.workers.dev. The website code contains no contact forms, user accounts, advertising, embedded third-party content, or analytics scripts. Images and scripts are served with the page. Text uses the device’s system fonts.

Our own page code sets no cookies and does not store language or illustration choices in the browser. It does not profile visitors or make automated decisions about them.

3. Test hosting through Cloudflare

A public test version was deployed on 8 October 2026 using Cloudflare Workers with static assets at mario-obst-fyi.marioobst.workers.dev. The provider is Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. The domain mario-obst.fyi was connected to this deployment on 8 October 2026 and is accessible over HTTPS.

Delivery through Cloudflare involves processing necessary connection and request data, including IP address, time, requested URL, and browser-supplied information such as browser type and, where supplied, referrer. The purpose is reliable, secure delivery and protection against attacks. The intended legal basis is Article 6(1)(f) GDPR, with the legitimate interest of operating this website securely.

Cloudflare may process data outside the European Economic Area. Its published terms describe the EU-US Data Privacy Framework and standard contractual clauses for the transfers they cover.

Sources: Cloudflare Data Processing Addendum and Cloudflare Privacy Policy.

4. Cookies and audience measurement

We do not plan to use our own analytics or marketing cookies. Cloudflare Web Analytics / Real User Monitoring (RUM) has been fully disabled for mario-obst.fyi. The dashboard confirmed this setting on 8 October 2026.

In the inspected page structure of the public test on 8 October 2026, no additional analytics script was found. A complete response-header and security-cookie check remains outstanding; this observation does not prove that hosting sets no cookies. Any strictly necessary device-storage access must meet section 25(2)(2) of Germany’s TDDDG; processing personal data also requires a GDPR legal basis. A security purpose alone does not justify access that is not necessary.

5. Contact by email or telephone

When you contact Mario, he processes the contact details, content, and associated information needed to answer your request. The legal basis is Article 6(1)(f) GDPR, based on the interest in responding to correspondence; Article 6(1)(b) may apply to contract-related enquiries.

The information is deleted once the matter is resolved and it is no longer needed, unless legal retention duties or the protection of legal claims require further storage. Providing information is voluntary; without suitable contact details, a reply may not be possible.

The email address legal@marioobst.com is operated through Apple’s iCloud+ service. Email correspondence involves the email service processing messages and their associated transmission data.

The iCloud contracting entity for Germany is Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland. Apple’s privacy policy describes processing outside the European Economic Area, including in the United States, and identifies standard contractual clauses for international transfers of data from the European Economic Area.

Apple describes retention in terms of processing purposes and legal requirements; this does not establish a single deletion period for all email data. The deletion criteria above apply to Mario’s handling of correspondence. They do not promise immediate deletion of every technical copy held by Apple.

Apple Privacy Policy (German) · iCloud terms for Germany (German)

6. Postal correspondence

The address service JL Consulting Group GmbH in Switzerland receives incoming mail at the correspondence address above. Mario chooses in the dashboard whether mail is forwarded digitally or physically. This keeps his private address out of public communications. Processing covers the necessary sender, recipient, and shipment details and, for digital forwarding, the contents of the mail. The purpose is receiving and handling correspondence, generally under Article 6(1)(f) GDPR.

Paper letters are destroyed after digitisation. Mario retains the digital copies only as long as needed to handle the particular matter and to meet legal retention obligations. Once the matter is closed, the digital copies are deleted unless a legal retention obligation still applies.

Digital copies remaining with the address service are also deleted when the matter is closed or on Mario’s instruction.

Address service privacy information

7. External links and AI

External websites open in a new tab. The destination is visited only when you follow its link, and its operator’s privacy information then applies. Our external links suppress transmission of the referring page address through the referrer.

Aik assists in creating the content. This website has no embedded AI chat, and its page code does not send visitor input to an AI service when you read it.

8. Your rights

Subject to the applicable legal conditions, you have rights of access, rectification, erasure, restriction of processing, and data portability. Where processing relies on consent, you may withdraw it at any time for the future.

Right to object: You may object to processing based on Article 6(1)(f) GDPR on grounds relating to your particular situation. Please contact legal@marioobst.com.

You may complain to a data-protection supervisory authority, particularly in the country of your habitual residence, workplace, or the alleged infringement. In Thuringia: Thuringian Commissioner for Data Protection and Freedom of Information (TLfDI).