Privacy Policy

I take the protection of your personal data very seriously and treat your personal data confidentially and in accordance with statutory data protection provisions and this privacy policy. I process your data only where you have consented to this or where there is a legal basis for doing so.

Controller

The controller responsible for the processing of personal data on this website is:

Andrea Petersen
Psychotherapie Praxis Petersen
Linienstraße 137
10115 Berlin
Email: info@petersen-praxis.de

No data protection officer has been appointed, as there is generally no legal obligation to do so for a single-practitioner practice of this kind (Art. 37 GDPR). Should this change, this section will be updated.

General – visiting the website

This website serves to provide information about my practice. When you visit the website, the browser used on your device automatically sends information to the website's server, which is stored temporarily in the server's log files: the IP address of the requesting computer, the date and time of access, the name and URL of the file retrieved, the website visited beforehand (referrer URL), the browser used and, where applicable, the operating system, as well as the name of your access provider.

This data is collected and processed in order to ensure a smooth connection to the website and correct display of its content. It is deleted as soon as it is no longer required. The legal basis is Art. 6(1)(1)(f) GDPR. The data is not used to draw conclusions about you personally.

Fonts and external content

All fonts used on this website are stored on the website's own server and delivered from there. Without your action, no connection to third-party servers is made when the pages are loaded. External services are only embedded after you have expressly triggered them: online appointment booking and the map on the contact page with a click, Google Analytics only with your consent. All three are described below.

Online appointment booking (Epikur)

For online appointment booking I use the service of Epikur Software GmbH & Co. KG, [TO CONFIRM: address]. The booking calendar is loaded only once you click "Continue to online booking" after the notice window on the Appointments page. Only then is a connection made to Epikur's servers, transmitting technically necessary data such as your IP address. The details you enter in the booking calendar itself (such as your name, contact details and preferred time) are processed by Epikur on my behalf in order to arrange the appointment.

The legal basis is your consent given by the click (Art. 6(1)(1)(a) GDPR, § 25(1) TDDDG) and the initiation of a treatment contract (Art. 6(1)(1)(b) GDPR). [TO CONFIRM: data processing agreement with Epikur under Art. 28 GDPR, server location, retention period of booking data.] Please do not enter any information about your health or upload medical reports in the booking calendar. Further information is available in Epikur's privacy policy, linked within the booking calendar.

Map (Google Maps)

A map from Google Maps can be displayed on the contact page. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The map is loaded only when you click "Load map". Only then is a connection made to Google's servers, transmitting in particular your IP address. Google may set cookies and may also transfer data to the USA.

The legal basis is your consent given by the click (Art. 6(1)(1)(a) GDPR, § 25(1) TDDDG). The consent applies only to that single page view: if you reload the page, the map is no longer shown. Further information: policies.google.com/privacy. The "Open in Google Maps" link leads directly to Google and transmits data only when you click it.

Contact by email

The website contains no forms for entering data – contact takes place exclusively via the email address given. Please note that data transmission over the internet may have security gaps; complete protection of data against access by third parties is not possible.

If you contact me by email, your data is processed on the basis of the consent you have freely given pursuant to Art. 6(1)(1)(a) GDPR. Providing a valid email address is necessary in order to answer your enquiry. Your data and message are stored only for the purpose of dealing with your enquiry and are deleted as soon as they are no longer required and no statutory retention obligation applies. Data is not passed on to third parties.

Please do not write confidential information, and in particular no health data, in an unencrypted email – use email only for a first, non-binding contact.

You may withdraw your consent at any time with effect for the future, informally by email to the address given above.

Disclosure of data

The data collected on this website is not passed on to third parties without your express consent (Art. 6(1)(1)(a) GDPR).

Cookies and analytics (Google Analytics)

No cookies are needed to run this website. Your choice in the consent banner is stored in your browser so that you are not asked again on every page. Consent applies for the duration of your visit (session storage, sessionStorage); on your next visit I will ask again. If you decline, this is remembered permanently in your browser's local storage (localStorage) so that I do not ask again; you can change it at any time via the cookie settings. This is strictly necessary for the service you requested (Section 25(2) no. 2 TDDDG).

Only if you choose “Accept” in the banner do I use Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Before that, Google Analytics is not loaded and no connection to Google is made.

Purpose and data processed

Google Analytics helps me understand how the website is used in order to improve it: for example which pages are viewed, how visitors reach the website, device type, browser and approximate region. For this, cookies (_ga, _ga_QKJT62EM7L) containing a pseudonymous identifier are set. Google Analytics 4 does not store IP addresses. Google Signals, advertising features and personalised advertising are switched off. Anything you enter in an appointment request by email or in the online booking is not recorded.

Legal basis

Your consent (Art. 6(1)(1)(a) GDPR and Section 25(1) TDDDG).

Retention

The cookies are stored for up to two years unless you withdraw your consent earlier. If you decline or withdraw consent via the cookie settings, they are deleted. Usage data is deleted automatically by Google after two months.

Processing on my behalf and transfer to the USA

Google processes the data on my behalf under a data processing agreement (Art. 28 GDPR). Data may also be transferred to Google LLC in the USA. For the USA there is an adequacy decision of the European Commission (EU-US Data Privacy Framework, Art. 45 GDPR) under which Google LLC is certified; the European Commission's Standard Contractual Clauses apply in addition. More information: Google's privacy policy.

Withdrawal

You can give or withdraw your consent at any time with effect for the future, via the “Cookie settings” link at the bottom of every page or directly here: Change cookie settings

If you actively load the map or the online booking, the respective providers may set their own cookies (see above).

Processing of special categories of personal data (health data)

Special categories of personal data such as health data may in principle not be processed (Art. 9(1) GDPR). No health data is collected via the website itself. The fact that you request an appointment with a psychotherapist through the online booking may, however, have a health context; this information is processed by Epikur solely on my behalf (see above). Within the framework of psychotherapeutic treatment, health data is processed exclusively on the basis of the treatment contract pursuant to Art. 9(2)(h) GDPR in conjunction with § 22(1)(1)(b) BDSG and the professional confidentiality rules.

Your rights

You have the following rights:

• Right of access to the personal data processed by me (Art. 15 GDPR)
• Right to rectification of inaccurate data and completion of incomplete data (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to withdraw consent at any time (Art. 7(3) GDPR)
• Right to object to processing based on legitimate interests (Art. 6(1)(1)(f), Art. 21 GDPR)

To exercise these rights, please contact the controller named above.

Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The competent authority is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit (BlnBDI)
Alt-Moabit 59–61, 10555 Berlin
Telephone: 030 13889-0
Email: mailbox@datenschutz-berlin.de

Currency and amendment of this privacy policy

This privacy policy is dated October 2026. I reserve the right to update it in order to improve data protection or to adapt it to changed statutory, official or judicial requirements.