Privacy Policy

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

2. Hosting and server log data

These websites are hosted, technically provided and maintained through ChatGPT Sites on behalf of the controller. For persons in the European Economic Area, the contracting party is OpenAI Ireland Ltd., 1st Floor, The Liffey Trust Centre, 117–126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland.

When a page is accessed, technically necessary connection data is processed. This may include the IP address, date and time, requested address or file, referrer URL (if transmitted), browser type and version, operating system, device and connection information, and request status or error data.

Processing is required for secure and reliable delivery, error analysis and protection against abuse and attacks. The legal basis is Article 6(1)(f) GDPR. The legitimate interest is the secure, stable and functional operation of this website.

Recipients may include OpenAI Ireland Ltd., affiliated OpenAI entities and the hosting, infrastructure, security, moderation and support providers listed in the current subprocessor list. This includes Cloudflare Ltd. for content delivery and security. Processing may take place in the EEA and, in particular, in the United Kingdom, the United States and other locations identified in the subprocessor list.

Transfers outside the EEA are made under the OpenAI Data Processing Addendum on the basis of a European Commission adequacy decision or the EU Standard Contractual Clauses. A copy of the relevant safeguards can be requested via contact@collectax.app.

CollectaX does not currently operate its own audience analytics or create its own usage profiles. Technical log data is retained only as long as necessary for delivery, stability, security, abuse prevention or legal obligations. The specific period depends on the nature, purpose and rules of the service providers involved.

3. Strictly necessary cookies

Cloudflare may set the strictly necessary cookie “__cf_bm” when a page is accessed. It helps identify automated traffic and protect the website against malicious requests. It contains no advertising ID and usually expires after approximately 30 minutes.

Storage or access is based on Section 25(2)(2) TDDDG. Subsequent processing of personal data is based on Article 6(1)(f) GDPR. Analytics or marketing cookies requiring consent are not currently used.

4. Fonts and media

Fonts and image files are delivered locally through the same website. Loading a page does not automatically connect to Google Fonts, YouTube, Vimeo or an external image service.

5. Contact by email

If you contact us by email, the data you provide – in particular your email address, name, message and voluntary information – is processed to handle your enquiry. The website does not contain a contact form.

The business mailboxes are provided by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. A Gmail account connected to the mailbox is also used to process email communication. As a result, sender and recipient details, time, subject and message content may be processed by STRATO and Google. For users in the European Economic Area, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, is responsible. Google may process data in third countries; details are provided in Google’s Privacy Policy.

For contractual or pre-contractual enquiries, the legal basis is Article 6(1)(b) GDPR. In other cases, processing is based on Article 6(1)(f) GDPR. The data is deleted once the enquiry has been resolved unless statutory retention duties or legitimate reasons require continued storage.

6. External links and LinkedIn

The website contains ordinary links to Royal Engine Studios and David Herrmann’s LinkedIn profile. No social media plugins or embedded content are loaded. Your browser connects to the external provider only after you click a link.

The relevant provider is responsible for subsequent processing on the destination website. For persons in the EEA, LinkedIn is generally operated by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. Details and possible third-country transfers are described in the provider’s privacy policy.

7. No tracking, newsletter or user account

CollectaX currently uses no proprietary audience analytics, advertising pixels, newsletter, user accounts, automated decision-making or profiling on these landing pages. Registration, login, app downloads and a future user database are not yet part of this website. Before their introduction, this Privacy Policy will be expanded and any required consent controls will be implemented.

8. Your rights

Where the statutory requirements are met, you have rights including access, rectification, erasure, restriction of processing, data portability, objection and withdrawal of consent with future effect. To exercise these rights, contact contact@collectax.app.

9. Right to object

Where personal data is processed on the basis of Article 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation. Processing will then cease unless compelling legitimate grounds or legal requirements justify its continuation.

10. Right to lodge a complaint

You may lodge a complaint with a data protection authority. The authority responsible for the controller is, in particular, the Berlin Commissioner for Data Protection and Freedom of Information, Alt-Moabit 59–61, 10555 Berlin, Germany.

11. Updates and amendments

This Privacy Policy reflects the current technical scope of the landing pages. It will be updated before analytics, registration, beta access, community features, app downloads or other services are enabled.