Privacy Policy

General

This is a static website. There are no user accounts, no shopping cart and no analytics or tracking services. No cookies are set for analytics or advertising purposes. We process personal data only to the extent described below.

Hosting and server log files

This website is hosted by ReHost (https://rehost.eu). For its operations, ReHost in turn uses the infrastructure of Hetzner Online GmbH, Gunzenhausen, Germany, which acts as a sub-processor in this respect.

The servers are located exclusively in Germany. No personal data is transferred to a third country outside the EU or the EEA in the course of hosting.

When you open a page, your browser automatically transmits data that the provider stores in so-called server log files:

• IP address of the requesting device
• date and time of access
• name and URL of the retrieved file
• volume of data transferred and notification of successful retrieval
• website from which the request originates (referrer URL)
• browser type, browser version and operating system used

This data is technically necessary to deliver the website and to ensure its stability and security. It is not combined with other data sources. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the technically flawless and secure operation of the website.

Log files are deleted after 14 days. A data processing agreement pursuant to Art. 28 GDPR is in place with ReHost, covering the use of Hetzner Online GmbH as a sub-processor.

Typefaces

This website uses the typefaces “Inter” and “Audiowide”. Both are served directly from our own server and are not loaded from an external service.

No connection to Google servers or other third parties is established, and no data is transmitted to third parties. Both typefaces are licensed under the SIL Open Font License 1.1.

Embedded YouTube videos

Videos from the YouTube platform are embedded on the MOC pages. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

We use the extended data protection mode via the youtube-nocookie.com domain. According to YouTube, this means no cookies for personalised advertising are set as long as you do not play a video. However, a connection to Google servers is established — and your IP address transmitted — as soon as you open a page containing an embedded video.

If you are logged into your YouTube account during your visit, Google can associate your browsing behaviour directly with your personal profile. You can prevent this by logging out of your YouTube account beforehand.

The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in an appealing presentation of our models. Further information: https://policies.google.com/privacy.

Local storage in your browser

On your first visit, the website checks your browser’s language setting and may redirect you once to the English version. So that this happens only once per session, the website stores a purely technical value in your browser’s sessionStorage (key lang-checked).

This value contains no personal data, is not transmitted to us or to third parties, and is deleted automatically when you close the browser tab. Storage is necessary to provide the service you requested (Sec. 25(2)(2) TDDDG); the legal basis for processing is Art. 6(1)(f) GDPR.

Contacting us by email

If you contact us by email, we process the information you provide — in particular your email address, your name where given, and the content of your message — solely in order to handle your enquiry.

The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to the conclusion or performance of a contract. In all other cases the legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in responding to enquiries.

We delete this data as soon as it is no longer required for the purpose of processing and no statutory retention obligations prevent deletion.

Links to external platforms

This website links to our seller profiles on BrickLink and Brick Owl. Clicking one of these links takes you off this website. The respective providers are solely responsible for data processing on the linked pages; we have no influence over their content or privacy practices.

Encryption

For security reasons this website uses TLS encryption. You can recognise an encrypted connection by the browser address bar starting with https://.

Your rights

You have the following rights regarding your personal data:

• Access to the data processed (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure of your data (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing (Art. 21 GDPR)

Where we process your data on the basis of legitimate interests, you may object to that processing at any time with effect for the future. Where processing is based on your consent, you may withdraw it at any time; the lawfulness of processing carried out before withdrawal remains unaffected.

An informal message to the email address given in the legal notice is sufficient to exercise your rights.

Right to lodge a complaint

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The competent authority for the federal state in which we are based is:

Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein (ULD), Kiel, Germany — https://www.datenschutzzentrum.de

No automated decision-making

No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.

Changes to this privacy policy

We update this privacy policy whenever changes to the website or to the legal situation make it necessary. The version published here applies in each case.