Privacy Policy

As of: September 2026

This is a courtesy translation; the German version is legally authoritative.

This website processes personal data only to the minimum extent necessary for operation. No tracking cookies, no external CDNs, no advertising pixels and no embedded third-party content are used. A cookie banner is therefore not required.

1. Controller (Art. 4 No. 7 GDPR)

Maverick CCI GmbH — Stefan Muhlack
Rehwinkel 41 E, 22149 Hamburg, Germany
Email: kontakt(at)rail-assets.info

A data protection officer is not legally required (Art. 37 GDPR, § 38 BDSG).

2. Hosting and server log files

This website is hosted with an infrastructure provider of the operator within the European Union. A data processing agreement under Art. 28 GDPR is in place; no data transfer to third countries takes place. On access, log files are recorded server-side: IP address (short-term, anonymised), date/time, requested URL, referrer and user agent. Legal basis: Art. 6 (1) (f) GDPR (stable, secure operation). Retention: at most seven days, then anonymisation or deletion.

3. Cookies and local storage (§ 25 TDDDG)

No consent-requiring tracking, advertising or statistics cookies are set. Local storage holds only — and only upon active selection — the rail-assets-theme setting (light/dark/automatic display). This is an explicitly requested setting within the meaning of § 25 (2) No. 2 TDDDG and therefore does not require consent; it can be deleted at any time via the browser settings.

4. No external content

No external fonts (e.g. Google Fonts), no CDNs, no embedded videos, maps or social-media plugins are used. All fonts, scripts and images are served directly from our own server.

5. Contact by email

If you contact us by email, we process your details (sender address, name, message, any attachments) to handle the enquiry. Legal basis: Art. 6 (1) (b) or (f) GDPR. Retention: until completion of the communication, subject to commercial/tax retention obligations (§ 257 HGB, § 147 AO).

6. Encryption (TLS)

The connection between your browser and this website is exclusively encrypted via TLS (HTTPS).

7. Your rights (Art. 15–22, Art. 7 (3) GDPR)

Right of access (Art. 15)
Right to rectification (Art. 16)
Right to erasure (Art. 17)
Right to restriction of processing (Art. 18)
Right to data portability (Art. 20)
Right to object (Art. 21)
Right to withdraw consent given (Art. 7 (3))

8. Right to lodge a complaint (Art. 77 GDPR)

You have the right to lodge a complaint with a data protection supervisory authority. The competent authority is the Hamburg Commissioner for Data Protection and Freedom of Information (HmbBfDI), Ludwig-Erhard-Straße 22, 20459 Hamburg, email: mailbox(at)datenschutz.hamburg.de

9. No automated decision-making

This website does not carry out automated decision-making, including profiling, within the meaning of Art. 22 GDPR.

10. Changes to this policy

We reserve the right to adapt this privacy policy where new features, technologies or legal requirements make this necessary. The current version is always available on this page.