Privacy Policy

1. Who is responsible?

Email: klaus@klaus-pfeiffer.com
Phone: +49 15678 318005

I am the controller for the processing described here.

2. Website delivery and security

The website is hosted through ChatGPT Sites by OpenAI Ireland Ltd., using hosting infrastructure that includes Cloudflare. When you visit, technical request data, including your IP address, requested page, request time and browser information, is processed to deliver the content and protect the service against abuse. Hosting providers may maintain operational and security logs. I do not maintain a separate visitor database.

The legal basis is Article 6(1)(f) GDPR: my legitimate interest in making professional information available through a reliable and secure website. Technical request data is necessary to provide the website to your browser.

OpenAI’s processing on my behalf is governed by its ChatGPT Sites Data Processing Addendum. Its sub-processor list identifies infrastructure providers and processing locations.

3. Cookies and external content

I have not added analytics or advertising cookies, social-media widgets, embedded videos or externally loaded fonts. Images and styles are served with the website.

The hosting security layer sets Cloudflare’s __cf_bm cookie to help distinguish legitimate visitors from automated abuse. According to Cloudflare, it expires after 30 minutes of continuous inactivity. It is a security cookie, not an advertising identifier. Necessary storage or access for website security is assessed under section 25(2) TDDDG; associated personal-data processing relies on Article 6(1)(f) GDPR.

See Cloudflare’s cookie documentation. You can manage cookies in your browser; blocking security cookies may affect access.

4. Contact by email or telephone

If you contact me, I process the details you provide, such as your name, email address or telephone number and the content of your enquiry, to respond and discuss potential engagements. Providing these details is voluntary, but without sufficient contact information I may be unable to respond.

For requests relating to a contract with you, the basis is Article 6(1)(b) GDPR. For other professional enquiries, including communications on behalf of an organisation, it is Article 6(1)(f) GDPR, based on my legitimate interest in responding to relevant correspondence. Statutory record-keeping, where applicable, is based on Article 6(1)(c) GDPR.

Email is provided by Namecheap, Inc. through Private Email. It processes correspondence to provide and secure the email service under its Data Processing Addendum. Clicking the email link opens your email application; it does not submit a form to this website.

5. International processing

Hosting and email services may involve processing outside the European Economic Area, including in the United States. OpenAI’s Sites addendum provides for European Commission adequacy decisions or Standard Contractual Clauses for relevant transfers. Namecheap’s addendum incorporates Standard Contractual Clauses for EEA transfers. The linked addenda provide information about these safeguards; you may also contact me to request further information or a copy of applicable safeguards.

6. Retention

Correspondence is retained for handling the enquiry and any resulting engagement, and for applicable legal retention or legal-claims requirements. The relevant criteria are whether the matter remains open, whether records must be kept by law, and whether they are needed to establish, exercise or defend legal claims. Data is deleted when these purposes no longer require it.

Technical logs are managed by the hosting providers rather than stored separately by me. Their retention is governed by the hosting service and its operational, security and legal requirements. The published Sites addendum does not specify a single fixed retention period for visitor logs; it addresses deletion following the end of the service, subject to legal requirements.

7. Your rights

Subject to the conditions of the GDPR, you may request access, rectification, erasure, restriction of processing and data portability. Where processing relies on legitimate interests, you may object on grounds relating to your particular situation. Where consent is relied upon, you may withdraw it at any time without affecting earlier lawful processing.

Please send requests to klaus@klaus-pfeiffer.com. You also have the right to complain to a data protection supervisory authority, including the Hessian Commissioner for Data Protection and Freedom of Information, or the authority in your habitual place of residence, place of work or place of the alleged infringement.

I do not use automated decision-making or profiling to make decisions about you with legal or similarly significant effects.