Privacy Policy
This is a translation for your convenience. Only the German version is legally binding.
This website uses no tracking, no analytics and no third-party scripts. Visitors receive no cookies. A cookie is only set when the operator logs in to the site’s admin area. There is no contact form. Contact happens by email or phone only.
Controller
Michael Widmann
Oberlöh 10
53545 Linz am Rhein
Germany
Phone: +49 2644 2064
Email: mw@mein-himmel-reich.de
Data Protection Officer
No Data Protection Officer has been designated; there is no obligation to do so.
Server logs
When the website is accessed, the web server automatically records technical data in so-called server log files. This includes IP address, date and time of access, page requested, HTTP status code, data volume transferred, referrer URL (the page visited before), and browser type and operating system (user agent).
The legal basis is Art. 6 (1) (f) GDPR. The legitimate interest lies in the technically fault-free operation of the website and in defending against attacks and abuse.
Log files are automatically deleted every day, that is after about 24 hours at most. They are not merged with any other data sets.
To defend against attacks, the program fail2ban automatically evaluates the log files. In the event of abusive requests or repeated failed logins to the site’s admin area, the IP address concerned is temporarily blocked, for one week at most. For this purpose, failed logins to the admin area are logged with their IP address and deleted after 30 days. fail2ban’s own log is deleted after about four weeks. The legal basis is also Art. 6 (1) (f) GDPR.
Cookies
Visitors to the website receive no cookies. Choosing a language with the flag in the menu bar stores nothing in your browser either. Which language you see first depends on your browser’s language setting; nothing is stored for this.
The website sets a cookie only for the login to the admin area. Only the operator logs in there, to manage the photos. This cookie is technically necessary; no consent is required for it. There are no analytics, advertising or third-party cookies.
Email and phone correspondence
When contact is made by email or phone, the transmitted information (such as email address or phone number, name, message contents) is processed for the purpose of handling the enquiry.
Emails to @mein-himmel-reich.de addresses are received and stored by the email provider Fastmail Pty Ltd (Melbourne, Australia). Its privacy policy applies: fastmail.com/policies/privacy.
The legal basis is Art. 6 (1) (f) GDPR. The legitimate interest lies in the proper handling of incoming enquiries.
The information is deleted once it is no longer required for handling the enquiry.
Hosting
This website is hosted by DigitalOcean, LLC (101 6th Avenue, New York, NY 10013, USA). Processing takes place in the Frankfurt am Main data centre. A data processing agreement pursuant to Art. 28 GDPR has been concluded with the provider.
Because the provider is a US company, access by US authorities cannot be technically excluded with full certainty. Transfers to the US are primarily safeguarded by DigitalOcean’s certification under the EU-US Data Privacy Framework (European Commission adequacy decision of 10 July 2023). Subsidiarily, the European Commission’s Standard Contractual Clauses apply pursuant to Art. 46 (2) (c) GDPR. Further information and a copy of the safeguards are available via DigitalOcean’s privacy policy: digitalocean.com/legal/privacy-policy.
Links to Instagram
The website links to the operator’s Instagram profile. This is a plain link: as long as you do not click it, no data is transferred to Instagram. Once you click it, the privacy policy of Meta Platforms Ireland Limited, the operator of Instagram, applies: privacycenter.instagram.com/policy.
Encryption
The website can only be reached in encrypted form via HTTPS (TLS). You can recognise the encrypted connection by “https://” in the address bar and the padlock icon in your browser. Third parties cannot read what is transferred between your browser and the server.
Rights of data subjects
The following rights exist: access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR), and objection (Art. 21 GDPR). Rights may be exercised informally using the contact details above.
No automated decision-making including profiling within the meaning of Art. 22 GDPR takes place.
Right to object (Art. 21 GDPR)
Where data are processed on the basis of Art. 6 (1) (f) GDPR (legitimate interest), there is a right to object to the processing at any time on grounds relating to the particular situation of the data subject. In the event of an objection, the data concerned will no longer be processed unless compelling legitimate grounds for the processing can be demonstrated that override the interests, rights and freedoms of the data subject, or the processing serves the establishment, exercise or defence of legal claims.
Right to lodge a complaint with a supervisory authority
There is a right to lodge a complaint with a data protection supervisory authority. The competent authority is the Landesbeauftragter für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz (Hintere Bleiche 34, 55116 Mainz, Germany, www.datenschutz.rlp.de). A complaint may also be lodged with any other supervisory authority.
Objection to advertising emails
We hereby object to the use of the contact details published under the legal notice obligation for sending advertising and information material that was not expressly requested. The operators of this website expressly reserve the right to take legal action in the event of unsolicited advertising, for example by spam emails.
Last updated: October 2026