Privacy Policy

1. Data controller

The controller responsible for personal data on this website is:

Email: celiaroloff227@gmail.com

2. About this website

This website presents the books and work of Celia Roloff and links to external services. It does not use a contact form, newsletter, user accounts, analytics, or marketing services. Personal data is therefore processed only where technically necessary to provide, secure, and operate the website.

3. Hosting by ChatGPT Sites and server logs

This website is provided through ChatGPT Sites. OpenAI hosts and operates the service on behalf of the controller and may process the technical data required to provide it. When the website is accessed, the following data may be processed in particular:

• IP address
• Date and time of the request
• Requested page or file
• Transferred data volume and HTTP status code
• Referrer URL, if transmitted by the browser
• Browser, operating-system, and device information

This processing is necessary to provide the website securely, reliably, and without errors. The legal basis is Article 6(1)(f) GDPR. The legitimate interest is the secure and reliable operation of this website.

Technical log data is retained only for as long as required for operation, security, troubleshooting, or compliance with legal obligations, and is then deleted or anonymised. The controller does not maintain a separate copy of the server logs.

4. Recipients and processing outside the EEA

OpenAI, as the provider of ChatGPT Sites, receives the technical data required to operate the website. Where necessary to provide the service or comply with law, data may also be shared with technical subprocessors or competent authorities.

ChatGPT Sites does not currently support fixed data residency. Depending on the agreement that applies to the ChatGPT account used for this website, personal data may also be processed outside the European Union or European Economic Area. The safeguards set out in the applicable agreement and, where applicable, the OpenAI Data Processing Addendum apply.

Further information: ChatGPT Sites data-protection guidance.

5. Cookies and similar technologies

The controller does not use cookies or similar technologies for analytics, advertising, or marketing. The hosting provider may use strictly necessary cookies or comparable technologies where required to securely provide the website and deliver the service explicitly requested by visitors. The legal bases are Section 25(2)(2) TDDDG and Article 6(1)(f) GDPR.

6. External links to Amazon and social networks

This website contains ordinary links to Amazon, Instagram, TikTok, and Pinterest. No content from these providers is embedded. Only when you select a link do you leave this website and your browser connect directly to the relevant provider. That provider is responsible for the processing that takes place there.

The Amazon links are not affiliate links. The controller does not receive affiliate compensation for clicks or purchases made through them.

7. Contact by email

If you contact the controller by email, the information you provide will be processed to respond to your request. The legal basis is Article 6(1)(b) GDPR for contractual or pre-contractual matters and otherwise Article 6(1)(f) GDPR. The legitimate interest is responding to your enquiry. The data will be deleted once the matter has been finally resolved, unless a legal retention obligation requires it to be kept longer.

8. Publication of the review

The review shown on this website is published with the consent of the person identified by name. The legal basis is Article 6(1)(a) GDPR. Consent may be withdrawn at any time with future effect by contacting the email address above.

9. Your rights

Under the GDPR, you may in particular have the right to:

• Access your personal data (Article 15 GDPR)
• Rectify inaccurate data (Article 16 GDPR)
• Erase your personal data (Article 17 GDPR)
• Restrict processing (Article 18 GDPR)
• Data portability (Article 20 GDPR)
• Object to processing (Article 21 GDPR)
• Withdraw consent with future effect

You also have the right to lodge a complaint with a data-protection supervisory authority. For private-sector and freelance controllers in Bavaria, the relevant authority is in particular the Bavarian Data Protection Authority (BayLDA).

10. Policy date

Last updated: 31 July 2026.

This Privacy Policy will be updated if the website’s functions, services, or applicable legal requirements change.