Privacy Policy

1. Controller

The controller responsible for data processing on this website is:

Dr. med. Jochen Stappert
Specialist in Psychiatry and Psychotherapy
Psychodynamik Berlin
Hermannstraße 184
12049 Berlin, Germany
Phone: +49 30 364 431 20
Email: info@psychodynamik.berlin

This practice is not required to appoint a data protection officer under Art. 37 GDPR and § 38 BDSG (German Federal Data Protection Act). Please direct any privacy questions to the address above.

2. Scope

This privacy policy explains how personal data is processed when you visit this website. It does not cover the processing of your treatment records in the practice. We inform you about that separately at the start of treatment; those records are subject to medical confidentiality and are not processed through this website.

3. Hosting and access logs

This website is served via Cloudflare Pages, operated by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. Cloudflare runs a global network of data centres; visitors from Germany are usually served from data centres in the European Union, but processing outside the EU cannot be ruled out. On every request, Cloudflare processes technically necessary access data: IP address, date and time, page requested, data volume transferred, browser type and version, operating system and the referring page. This data is used to deliver the website, defend against attacks and analyse errors. It is deleted as soon as it is no longer needed for these purposes.

The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is the secure and stable operation of the website. A data processing agreement under Art. 28 GDPR is in place with Cloudflare. Cloudflare is certified under the EU-US Data Privacy Framework; transfers to the USA are based on the European Commission's adequacy decision (Art. 45 GDPR). For transfers to other third countries, and in case the certification lapses, the EU Standard Contractual Clauses apply (Art. 46(2)(c) GDPR).

4. Image delivery

Images on this website are delivered through the content delivery network of Sanity US Inc., San Francisco, USA. When an image loads, your IP address is transmitted to Sanity; this is technically necessary to send the image to your browser. No further data is transmitted and no cookies are set.

The legal basis is Art. 6(1)(f) GDPR (interest in fast and reliable image delivery). A data processing agreement is in place with Sanity. The transfer to the USA is based on the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR).

5. Audience measurement with Umami

We use Umami, a privacy-friendly analytics tool by Umami Software, Inc., USA, in its hosted version Umami Cloud with data processing in the European Union. Umami sets no cookies and stores nothing on your device. Your IP address is used only to derive a daily-rotating, non-reversible identifier and is not stored. The data collected is: page visited, referrer, browser type, operating system, device type, screen size, language and country. We also count clicks on the appointment booking link, the phone number and the email address — the click only, never any content.

We cannot attribute this data to an individual. It is used solely to improve the website. The legal basis is Art. 6(1)(f) GDPR. Because no cookies are set and no information is stored on or read from your device, no consent under § 25 TDDDG (German Telecommunications Digital Services Data Protection Act) is required. A data processing agreement is in place with Umami.

6. Contact by email and phone

If you contact us by email or phone, we process the information you provide in order to handle your request. The legal basis is Art. 6(1)(b) GDPR; where your message contains health information, Art. 9(2)(h) GDPR in conjunction with § 22(1) no. 1(b) BDSG.

Unencrypted email can be read in transit. For confidential matters we recommend the phone or a conversation in person.

If a treatment relationship follows, your message becomes part of your medical record and is subject to the statutory ten-year retention period (§ 630f(3) BGB). Otherwise we delete it no later than six months after the last communication.

7. Appointment booking via Doctolib

For online appointment booking we link to Doctolib. When you click the link you leave our website; no data is transmitted to Doctolib from our website itself. Data processing during booking is the responsibility of Doctolib GmbH, Mehringdamm 32–34, 10961 Berlin; see Doctolib's privacy policy for details.

8. External links

This website contains links to external websites, including Google Maps for directions, the Berlin Medical Association and the Kassenärztliche Vereinigung Berlin. When you follow these links you leave our website; the respective providers are responsible for data processing there. No content from these providers is embedded in our pages.

9. Cookies and local storage

This website sets no cookies and stores no data in your browser's local storage. A cookie banner is therefore not required.

10. Encryption

All traffic between your browser and our website is TLS-encrypted (shown by "https://" in the address bar). Our website enforces encrypted connections (HSTS).

11. Your rights

With regard to your personal data you have the following rights against us: access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and the right to withdraw any consent given at any time with effect for the future (Art. 7(3)).

Right to object: where we process data on the basis of Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation (Art. 21 GDPR). We will then no longer process the data unless we can demonstrate compelling legitimate grounds that override your interests.

To exercise your rights, an informal message to the address in section 1 is sufficient.

12. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit (Berlin Commissioner for Data Protection and Freedom of Information)
Alt-Moabit 59–61
10555 Berlin, Germany
www.datenschutz-berlin.de

13. No automated decision-making

No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.

14. Changes

We update this privacy policy when the website or the legal situation changes. The version published here applies.