Privacy Policy

1. Data controller

The controller responsible for personal data on this website is:

Email: celiaroloff227@gmail.com

2. About this website

This website presents the books and work of Celia Roloff and links to external services. It does not use a contact form, newsletter, user accounts, or controller-operated analytics, advertising, or marketing scripts. This does not affect the aggregated hosting statistics and the Amazon Attribution measurement after a visitor selects an Amazon link, both of which are described below.

3. Hosting by ChatGPT Sites and server logs

This website is provided through ChatGPT Sites. OpenAI hosts and operates the service on behalf of the controller and may process the technical data required to provide it. When the website is accessed, the following data may be processed in particular:

• IP address
• Date and time of the request
• Requested page or file
• Transferred data volume and HTTP status code
• Referrer URL, if transmitted by the browser
• Browser, operating-system, and device information

This processing is necessary to provide the website securely, reliably, and without errors. The legal basis is Article 6(1)(f) GDPR. The legitimate interest is the secure and reliable operation of this website.

Technical log data is retained only for as long as required for operation, security, troubleshooting, or compliance with legal obligations, and is then deleted or anonymised. The controller does not maintain a separate copy of the server logs.

Through ChatGPT Sites, the controller can access aggregated visitor and page-view statistics. These statistics are used to understand the website’s reach and technical use; the controller does not receive visitors’ names or contact details. The legal basis is Article 6(1)(f) GDPR. The legitimate interest is operating and improving this website in a useful and economically reasonable way.

4. Recipients and processing outside the EEA

OpenAI, as the provider of ChatGPT Sites, receives the technical data required to operate the website. Where necessary to provide the service or comply with law, data may also be shared with technical subprocessors or competent authorities.

ChatGPT Sites does not currently support fixed data residency. Depending on the agreement that applies to the ChatGPT account used for this website, personal data may also be processed outside the European Union or European Economic Area. The safeguards set out in the applicable agreement and, where applicable, the OpenAI Data Processing Addendum apply.

Further information: ChatGPT Sites data-protection guidance.

5. Cookies and similar technologies

The controller does not use cookies or similar technologies for analytics, advertising, or marketing. The hosting provider may use strictly necessary cookies or comparable technologies where required to securely provide the website and deliver the service explicitly requested by visitors. The legal bases are Section 25(2)(2) TDDDG and Article 6(1)(f) GDPR.

6. Amazon Attribution and external links

This website contains ordinary links to Amazon, Instagram, TikTok, and Pinterest. No content from these providers is embedded. Only when you select a link do you leave this website and your browser connect directly to the relevant provider. That provider is responsible for the processing that takes place there.

Links to the books on Amazon contain Amazon Attribution parameters. When you select one of these links, its campaign identifier and the technical data generated when the Amazon page is opened are sent to Amazon. Amazon may attribute the click and later activity in the Amazon store – such as product-page views, additions to cart, or purchases – to the relevant website campaign. The controller receives only aggregated campaign reports from Amazon, not visitors’ names or contact details.

No Amazon pixel or Amazon script is embedded on this website for this purpose; transmission begins only when you deliberately select the Amazon link. Amazon is responsible for cookies and further processing on its website. Where the controller uses aggregated reports to measure the success of the book presentation, the legal basis is Article 6(1)(f) GDPR. The legitimate interest is measuring and improving the marketing of the controller’s books.

Further information is available in the Amazon Ads Privacy Notice and the Amazon.com Privacy Notice. These are not affiliate links, and the controller receives no affiliate compensation for clicks or purchases.

7. Contact by email

If you contact the controller by email, the information you provide will be processed to respond to your request. The legal basis is Article 6(1)(b) GDPR for contractual or pre-contractual matters and otherwise Article 6(1)(f) GDPR. The legitimate interest is responding to your enquiry. The data will be deleted once the matter has been finally resolved, unless a legal retention obligation requires it to be kept longer.

8. Publication of the review

The review shown on this website is published with the consent of the person identified by name. The legal basis is Article 6(1)(a) GDPR. Consent may be withdrawn at any time with future effect by contacting the email address above.

9. Your rights

Under the GDPR, you may in particular have the right to:

• Access your personal data (Article 15 GDPR)
• Rectify inaccurate data (Article 16 GDPR)
• Erase your personal data (Article 17 GDPR)
• Restrict processing (Article 18 GDPR)
• Data portability (Article 20 GDPR)
• Object to processing (Article 21 GDPR)
• Withdraw consent with future effect

You also have the right to lodge a complaint with a data-protection supervisory authority. For private-sector and freelance controllers in Bavaria, the relevant authority is in particular the Bavarian Data Protection Authority (BayLDA).

10. Policy date

Last updated: 2 August 2026.

This Privacy Policy will be updated if the website’s functions, services, or applicable legal requirements change.