1. Controller
STEFAN PILZ Ltd.
Makedonias 11, House 19
8270 Tremithousa, Cyprus
Email: post@stefanpilz.ltd
WhatsApp: +49 1590 6787569
2. Hosting through ChatGPT Sites
This website is hosted through ChatGPT Sites, a service provided by OpenAI. For users in the European Economic Area, OpenAI identifies OpenAI Ireland Limited, 1st Floor, The Liffey Trust Centre, 117–126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland, as the responsible OpenAI entity. When the website is accessed, technically required access data is transmitted to the hosting infrastructure. This may include the IP address, date and time, requested address, referrer, browser and operating system, device and network information, and error or security events.
This processing is necessary to deliver the website, monitor its stability and detect misuse or attacks. The controller relies on Article 6(1)(f) GDPR. The legitimate interest is the secure and reliable provision of this website.
OpenAI may use additional providers for hosting, content delivery, infrastructure, security checks, content moderation and support. OpenAI’s current sub-processor list identifies possible providers and processing locations.
3. Audience measurement through Sites
According to OpenAI, ChatGPT Sites automatically records page views and unique visitors so that the site owner can view aggregated usage statistics in the Sites interface. No additional analytics, marketing or profiling service has been integrated into this website. The site owner does not receive complete IP addresses of individual visitors through the Sites analytics view.
Further information about the platform feature is available in the ChatGPT Sites documentation.
4. Contact by email
The contact form does not store or send a message through the web server. Submitting the form opens your local email application and prepares a message to post@stefanpilz.ltd. Your information is transmitted through the email services used by you and the recipient only after you send that message in your email application.
The data you provide may include your name, company, email address, optional phone number, shop URL, Shopware version, enquiry type, time frame and project description. This data is processed to respond to the enquiry and take steps prior to entering into a contract under Article 6(1)(b) GDPR. Where no pre-contractual measure is involved, processing is based on the legitimate interest in handling business enquiries under Article 6(1)(f) GDPR.
5. Contact through WhatsApp
This website contains an external link to WhatsApp only; no WhatsApp widget is embedded. Opening the link redirects you to WhatsApp. Connection data may then be transferred to WhatsApp or companies within the Meta group. If you send a message, your phone number, profile details and communication content will be processed. You can use email instead if you prefer not to use WhatsApp.
6. Cookies and local storage
The site owner does not set analytics or marketing cookies and does not integrate advertising networks. The hosting platform may use technically necessary cookies or similar storage where required for security, load distribution or core platform functions.
7. Recipients and international transfers
Recipients may include OpenAI and the sub-processors used for ChatGPT Sites, participating email providers and, if you use the external link, WhatsApp or Meta. OpenAI states that personal data may also be processed outside the EEA, including in the United States. According to OpenAI, adequacy decisions or the European Commission’s Standard Contractual Clauses are used where applicable. Details are available in OpenAI’s European privacy policy.
8. Retention
Enquiries that do not result in a contractual relationship are deleted no later than six months after final handling, unless open questions, legal claims or statutory duties require longer retention. If a contract is negotiated or concluded, contract and billing records are retained under the statutory retention rules applicable in Cyprus; tax-relevant books and records are generally retained for at least six years.
OpenAI determines the specific retention of technical access and security data for its hosting platform according to the type and purpose of the data and applicable security and legal duties. The site owner cannot access complete server logs or change this period. OpenAI describes its retention criteria and deletion processes in the privacy policy linked above. Aggregated Sites statistics remain available to the site owner while the Sites project exists or while OpenAI retains them under its applicable rules.
9. Your rights
Subject to the legal requirements, you have the right to access, rectify and erase your data, restrict processing, receive data portability and object to processing. You may withdraw consent at any time for the future. To exercise your rights, email post@stefanpilz.ltd.
You may also lodge a complaint with a supervisory authority. The authority in Cyprus is the Office of the Commissioner for Personal Data Protection, P.O. Box 23378, 1682 Nicosia, Cyprus, email: commissioner@dataprotection.gov.cy.
10. Security and changes
The website is delivered using HTTPS encryption. Please note that email and messenger communication can never be completely risk-free despite appropriate safeguards. This privacy policy will be updated when the website’s technical configuration changes.
11. Effective date
Effective: 30 July 2026