Privacy Policy

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Email: daniel@penno-online.de

2. Hosting and server log data

This website is provided via ChatGPT Sites. The service provider for users in the European Economic Area is OpenAI Ireland Limited, 1st Floor, The Liffey Trust Centre, 117–126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland.

When this website is accessed, technically necessary data is processed. This may include the IP address, date and time of access, requested file or page, amount of data transferred, referrer URL, browser type, operating system and access status. Processing is necessary to deliver the website and to ensure its stability, functionality and security.

The legal basis is Article 6(1)(f) GDPR. The legitimate interest lies in providing this website securely, reliably and in a user-friendly manner. OpenAI processes hosting data as a processor. Where data is processed outside the European Economic Area, this is carried out, according to the service provider, on the basis of an adequacy decision or appropriate safeguards, in particular the EU Standard Contractual Clauses.

Log data is retained only for as long as necessary for operation, security and error analysis, or as required by statutory retention obligations. The controller has no direct influence over the hosting provider’s specific technical retention periods.

Further information: ChatGPT Sites Data Processing Addendum.

3. Contact by email

If you contact Daniel Penno by email, the data you provide—including your email address, name, message and any attachments—will be processed in order to respond to your enquiry.

If your enquiry relates to entering into or performing a contract, the legal basis is Article 6(1)(b) GDPR. In all other cases, processing is based on Article 6(1)(f) GDPR and the legitimate interest in responding appropriately to enquiries. Data is disclosed only where necessary to handle the enquiry or where required by law.

The data will be deleted once the enquiry has been fully resolved, unless statutory retention obligations or other legitimate reasons require further storage.

4. Links to LinkedIn

This website contains external links to LinkedIn only. No LinkedIn plugins, pixels or embedded content are loaded. When you click a LinkedIn link, you leave this website and LinkedIn processes data under its own responsibility. The provider for users in the European Economic Area is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.

Further information is available in LinkedIn’s Privacy Policy.

5. Cookies and similar technologies

This website does not use its own analytics, marketing or profiling services and does not set cookies requiring consent. The hosting provider may use technologies that are strictly necessary for delivery, security and abuse prevention. The legal basis for access to the user’s device is Section 25(2)(2) TDDDG; subsequent processing is based on Article 6(1)(f) GDPR.

6. Encrypted transmission

This website is transmitted using HTTPS/TLS encryption to protect content against unauthorised access and modification during transmission.

7. Your rights

Subject to the applicable statutory requirements, you have rights of access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18), data portability (Article 20) and objection to processing based on Article 6(1)(e) or (f) GDPR (Article 21). You may withdraw consent at any time with future effect.

To exercise your rights, contact the email address above. You also have the right to lodge a complaint with a supervisory authority under Article 77 GDPR. The competent authority is, in particular, the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg.

8. No automated decision-making

This website does not use automated decision-making, including profiling, within the meaning of Article 22 GDPR.

9. Updates to this policy

This Privacy Policy will be updated if the website’s functions, services used or the legal situation change.