Privacy Policy

1. Controller

2. No client-side analytics or marketing services

MarkeTekture does not use analytics or marketing cookies on its publicly accessible website, does not store information in local storage and does not use comparable identifiers. There is no Google Analytics, no advertising pixel, no profiling and no embedded social media plugins.

MarkeTekture therefore does not integrate any client-side analytics or marketing technologies. A technically necessary session cookie is set only after the password for the non-public statistics area has been entered successfully. Because the statistics area is delivered internally, the cookie is transmitted with requests to the same domain, but it is evaluated on the server exclusively to control access to that area. It is protected using HttpOnly, Secure and SameSite=Strict, contains a signed access identifier, is not used to measure audience reach and is deleted no later than 30 days after it is set. In addition, a technically necessary exclusion cookie is set in that browser for no more than one year. It prevents visits by the website operator from affecting the audience statistics. These cookies are not set for ordinary website visitors. The purely server-side audience statistics are described in Section 4.

To protect the private statistics area against automated password attempts, failed login attempts are temporarily rate-limited on the basis of the connection IP address. This information is used only temporarily and in limited quantities in the memory of a server instance. A block expires 15 minutes after the threshold has been reached; the entry is not stored in the statistics database.

3. Hosting and technical connection data

This website is provided through ChatGPT Sites by OpenAI. OpenAI may use additional infrastructure providers and subprocessors for web hosting and content delivery.

When the website is accessed, technically necessary connection data is processed. This may include, in particular, the IP address, time of access, page or file requested, referrer URL, browser type, operating system and device information. Processing is carried out to provide encrypted delivery, maintain stability, analyse errors and prevent abusive access. The legal basis is Article 6(1)(f) GDPR. The legitimate interest is the secure and reliable operation of the website.

Recipients of technical data are OpenAI and the service providers used by OpenAI for hosting and infrastructure. ChatGPT Sites does not currently offer data residency. Processing exclusively within the European Economic Area therefore cannot be guaranteed. Depending on the recipient, OpenAI identifies adequacy decisions or EU Standard Contractual Clauses as appropriate safeguards for international data transfers.

Technical log data is processed in accordance with the requirements of the hosting platform and retained only for as long as necessary for operation, security or compliance with legal obligations.

The upstream Cloudflare security infrastructure may set the technically necessary __cf_bm cookie to identify automated and abusive access. According to Cloudflare, it expires after 30 minutes of inactivity, contains encrypted information used for bot detection and is generated separately for each website. MarkeTekture does not read this cookie and does not use it for audience statistics, marketing or profiling. Further information is available in the Cloudflare documentation on technically necessary cookies.

Further information: OpenAI Sites Documentation, ChatGPT Sites Data Processing Addendum and OpenAI Sub-processor List.

4. Proprietary server-side audience statistics

MarkeTekture’s own audience statistics count page views exclusively on the server and use neither cookies nor identifiers stored on the user’s device. Successful requests for known HTML pages and internally triggered error requests are recorded. Aggregated daily values are stored: calendar date, a page path restricted to known pages and error categories, a source category derived from the referrer or campaign parameters, the country code provided by the hosting infrastructure, broad device category, bot detection and HTTP status code.

To estimate unique visits per calendar day, a cryptographic pseudonymous hash is generated using HMAC from the IP address and browser identifier automatically transmitted with the request, together with the respective calendar date. The complete IP address and complete browser identifier are not stored in the statistics database. The hash changes daily and cannot be used to recognise a visitor across multiple days. It is retained only for the current calendar day and the two preceding calendar days; older hashes are automatically deleted when the next page view is recorded. After that, only the aggregated daily figures for unique visits and repeat views remain. Complete referrer URLs are not stored either. Individual usage profiles are not created.

Access to the statistics is password-protected. The session cookie required for this purpose is used exclusively for access control and is not included in the statistics. The exclusion cookie identifies only the website operator’s browser so that the operator’s visits are not counted; it contains no usage data and is not used to analyse ordinary visitors.

Processing serves to provide a simple assessment of the website’s effectiveness, identify the most frequently used content and source channels, and improve the website technically. The legal basis is Article 6(1)(f) GDPR. The legitimate interest is the privacy-friendly evaluation and optimisation of the website. Aggregated daily values older than 400 days are automatically deleted when the next page view is recorded. They are not linked to contact or customer data.

5. Contact by email

The contact form does not transmit any information to this website and does not store anything. Selecting the button merely opens the email application configured on the user’s device with a prepared message. The information contained in that message is processed only if the email is actually sent.

Processing is carried out to handle the enquiry and communicate with the sender. Where a contract or pre-contractual measures are concerned, the legal basis is Article 6(1)(b) GDPR; otherwise, the legal basis is Article 6(1)(f) GDPR. The legitimate interest is the appropriate handling of business enquiries. Recipients may include the email service providers used by the respective parties.

Enquiry data is deleted once the enquiry has been fully dealt with and no contractual or statutory retention obligations remain.

6. Link to Instagram

The website contains only a standard link to MarkeTekture’s Instagram profile. No Instagram content is embedded. Simply visiting this website therefore does not establish a connection to Instagram. Instagram is opened only after the link is selected; from that point onward, the privacy policy of the provider operating Instagram applies.

7. Provision of data and automated decision-making

Apart from technically necessary connection data, no personal data has to be provided in order to visit the website. Information provided in an email is voluntary; without sufficient contact details, however, it may not be possible to respond to an enquiry. No automated decision-making or profiling takes place.

8. Rights of data subjects

Subject to the statutory requirements, data subjects have, in particular, the right of access, rectification, erasure, restriction of processing, data portability and the right to object to processing based on legitimate interests.

To exercise these rights, it is sufficient to send a message to info (at) marketekture.de.

9. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The authority with particular responsibility for MarkeTekture is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg, Heilbronner Straße 35, 70191 Stuttgart, Germany.

Submit a complaint to the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (German-language website)

10. Last updated

25 August 2026