1. Controller and contact
The controller is Christopher Gobien, acting in his own name as a natural person, Ofterdingenstr. 42, 45279 Essen, Germany. Privacy questions and rights requests can be sent to admin@seatharmony.net.
No data protection officer is currently appointed.
2. Website delivery and security logs
When the website is requested, the hosting infrastructure necessarily processes connection and request data such as the IP address, time, requested URL, response status, referrer and browser or device information so that the page can be delivered and protected.
The website is hosted and operated through ChatGPT Sites. For an operator based in the European Economic Area, the applicable ChatGPT Sites Data Processing Addendum identifies OpenAI Ireland Ltd as the processor. OpenAI may engage the subprocessors listed in its current subprocessor register.
ChatGPT Sites does not currently support data residency or inference residency for deployed sites, site artifacts or related logs. Processing may therefore take place outside the European Economic Area. The applicable OpenAI agreement and Data Processing Addendum govern international transfers and safeguards.
The Data Processing Addendum covers processing for the service term and for the time required afterwards to complete applicable obligations, including deletion; it does not state a fixed public retention period for individual access logs. The retention criterion is therefore the period necessary to host, maintain, support, secure and diagnose the website and to meet applicable legal obligations.
The legal basis is Article 6(1)(f) GDPR: the legitimate interests in reliably delivering, securing and diagnosing the website.
3. Contact by email
If you contact SeatHarmony by email, the message, sender information, time and any information you choose to include are processed to answer and document the request. Do not send sensitive or unnecessary personal information.
Mailbox provider, authorised recipients and retention: Google Workspace is the mailbox provider. Christopher Gobien is the only authorised mailbox recipient. Ordinary enquiries that do not lead to a contract are deleted no later than six months after the enquiry is finally resolved. Correspondence is retained longer only where this is necessary for pre-contractual or contractual handling, a statutory retention duty, or the establishment, exercise or defence of legal claims..
Depending on the request, processing relies on Article 6(1)(b) GDPR for pre-contractual communication or Article 6(1)(f) GDPR for ordinary product and business correspondence.
4. No analytics, advertising or forms
SeatHarmony's page code does not use analytics tools, advertising pixels, marketing forms, account features, payment functions, newsletters or waiting-list registration on this informational website.
The page code does not intentionally write cookies or browser storage and no non-essential tracking technology is configured. The hosting platform may process strictly necessary technical data for delivery and security as described above.
5. Recipients and international processing
OpenAI Ireland Ltd and its authorised subprocessors may receive connection and technical usage data as necessary to host, maintain, support and secure the website. ChatGPT Sites does not currently provide a site-specific residency commitment; the applicable OpenAI agreement and Data Processing Addendum govern processing and international transfers.
Email data is available to the mailbox provider and authorised mailbox recipient identified in section 3.
This informational website does not send visitor information to SeatHarmony's app backend, AI providers, payment providers or advertising networks.
6. Retention
OpenAI processes hosting and log data for the service term and as required afterwards to complete applicable obligations, including deletion. Within that framework, technical data is kept according to the necessity criterion described in section 2 rather than a fixed public access-log period.
Email correspondence is retained under the owner-approved policy described in section 3.
7. Your rights
Where the GDPR applies, you may have rights of access, rectification, erasure, restriction, data portability and objection, and the right to withdraw consent when processing is based on consent. Statutory conditions and exceptions apply. Contact admin@seatharmony.net to exercise a right.
You may also lodge a complaint with a supervisory authority. The authority currently identified for the operator is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW), Postfach 20 04 44, 40102 Düsseldorf, Germany, https://www.ldi.nrw.de.
8. Status and changes
This notice will be revised before any app access, account, purchase, form, analytics or other additional processing is introduced on the public website.