1. Controller
Marc Magdsack
Langer Anger 121
69115 Heidelberg
Germany
Email: datenschutz@magdsack.one
2. Hosting by OpenAI
We use OpenAI as a service provider to host, operate and technically deliver this website. Under the applicable OpenAI terms, the provider for users based in the European Economic Area is:
OpenAI Ireland Ltd.
1st Floor, The Liffey Trust Centre
117–126 Sheriff Street Upper
Dublin 1, D01 YC43
Ireland
When this website is accessed, technically necessary connection and usage data may be processed. This may include the IP address, time of access, requested resource, referrer, browser, device and operating system information, as well as security, log and usage data. The processing serves the secure, reliable and abuse-resistant delivery of the website. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is a secure and reliable online presence.
To the extent OpenAI processes personal data collected through the published Site, it acts as a processor under the agreements applicable to our OpenAI account. For Plus, Pro and other individual accounts, the ChatGPT Sites Data Processing Addendum may apply. Different or additional data protection terms may apply to business or organisational accounts.
3. Processing outside the EEA
According to OpenAI’s current information, ChatGPT Sites does not support a fixed data or processing region at launch. Processing outside the European Economic Area therefore cannot be excluded. Where the applicable data processing addendum applies, it provides for safeguards including adequacy decisions or the European Commission’s Standard Contractual Clauses for relevant transfers. The terms applying to the specific OpenAI account remain decisive.
Further information: OpenAI guidance on privacy policies for ChatGPT Sites.
4. Contact
When you contact us by email, your information is processed to respond to your enquiry. The legal basis is Art. 6(1)(b) GDPR for pre-contractual enquiries, otherwise Art. 6(1)(f) GDPR. The data is deleted when it is no longer required for the purpose and no legal retention obligation applies.
5. Cookies and analytics
This website does not use its own analytics, marketing or tracking services. As part of the hosting infrastructure, OpenAI and its sub-processors use the following technically necessary cookies. They are used to deliver the website securely, prevent abuse and maintain availability, not for our advertising or audience measurement.
| Cookie | Provider | Purpose | Storage period |
|---|---|---|---|
__cf_bm | Cloudflare | Detects and mitigates automated access and malicious traffic. | 30 minutes after the last activity |
cf_clearance | Cloudflare | Stores proof that a security challenge has been passed so that it does not have to be repeated on every visit. | Up to 1 year |
__Host-appgarden-visitor | OpenAI / ChatGPT Sites | Technical visitor identifier used by the Sites infrastructure to deliver and securely operate the website. | 7 days |
The storage of or access to information is necessary to provide the digital service expressly requested by the user and therefore does not require consent under section 25(2), no. 2 TDDDG. Where personal data is processed, we rely on Art. 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of the website. The storage periods reflect the configuration currently observed and may be adjusted by the platform provider.
6. Recipients and sub-processors
OpenAI receives the data required to provide the hosting service. OpenAI may engage further sub-processors to provide ChatGPT Sites. Further details are available in OpenAI’s current sub-processor list.
7. Your rights
Subject to the statutory conditions, you have rights to access, rectification, erasure, restriction, data portability and objection, as well as a right to lodge a complaint with a supervisory authority.
8. Security and updates
Appropriate technical and organisational measures are used. This notice will be updated if the website’s functions, service providers or applicable contractual terms change.
Last updated: August 2026