Privacy Notice

Elipha Holding GmbH, Loisachstr. 24, 83101 Rohrdorf, Germany
Managing Director: Mary Hexian Huang
Email: info@elipha.de

Technically necessary connection data is processed when you access the website. This may include your IP address, the date and time of the request, the page or file requested, referrer URL, browser and device information, and technical status data. Processing is required to deliver the website securely and reliably, prevent attacks and investigate errors.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure, functional and cost-effective provision of our website.

The website is provided through ChatGPT Sites by OpenAI. For customers in the European Economic Area, OpenAI Ireland Limited acts as a processor. Cloudflare Ltd. supports OpenAI as a subprocessor for web hosting, content delivery and security. Recipients are these service providers and their authorised subprocessors where required for operation.

We do not use analytics or marketing cookies. Cloudflare may set the “__cf_bm” cookie as part of its security and bot-management features. According to Cloudflare’s documentation, it expires after approximately 30 minutes.

Your voluntary language choice is stored as “elipha-language” and your acknowledgement of the technical privacy notice as “elipha-privacy-notice” in your browser’s Local Storage. These entries have specific purposes: “elipha-language” shows the language you last actively chose on the neutral language-selection page, while “elipha-privacy-notice” prevents the technical notice from appearing again until it expires or the notice version changes. They contain no user identifier and are not transmitted to Elipha by the website. They are used for no more than 180 days and removed on a later visit after expiry. You can delete them earlier at any time through your browser’s website-data settings.

The legal basis is Section 25(2) TDDDG where storage is strictly necessary for a function expressly requested by you or for technical security. Related processing is based on Article 6(1)(f) GDPR.

The contact form does not send form data to or store an enquiry on our web server. Submitting it uses a “mailto” link to prepare an email in your own email application. We receive and process the information only if you then send that email.

We process contact details and messages to respond to your enquiry. The legal basis is Article 6(1)(b) GDPR for pre-contractual or contractual matters and otherwise Article 6(1)(f) GDPR. Our legitimate interest is effective business communication. Please do not include particularly confidential information in an initial unencrypted email.

Providing your details is voluntary. Without your name, company, a reachable email address, a telephone number and a message, however, we cannot respond to your enquiry. Recipients may include our email and IT service providers where required for transmission, security and administration of the message.

OpenAI states that ChatGPT Sites is currently not eligible for regional data residency. Processing outside the European Economic Area therefore cannot be excluded. According to OpenAI’s Data Processing Addendum, such transfers rely on an applicable European Commission adequacy decision or the Standard Contractual Clauses incorporated there. The safeguards can be accessed through the linked addendum. Additional recipients are listed in OpenAI’s current subprocessor list.

Local language and notice settings are used for no more than 180 days and removed on your next visit after expiry. We retain emails and related records only for as long as required to handle the enquiry, protect legitimate interests or comply with statutory retention duties. Technical log data is retained by hosting and security providers for the contractually defined periods required for security and error analysis; we cannot specify one uniform period for these logs.

Subject to the conditions of the GDPR, you have rights including access, rectification, erasure, restriction, data portability and objection to processing based on legitimate interests. You may withdraw consent with effect for the future.

You may also complain to a data protection supervisory authority. The authority responsible for us is, in particular, the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.

We use no analytics or marketing services on this website, create no user profiles and make no decisions based solely on automated processing, including profiling.