privacy policy
I. Information about the processing of your data in accordance with Art. 13 of the General Data Protection Regulation (GDPR)
1. Controller and Data Protection Officer
The person responsible for this website is Dipl.-Psych. Julia Tomanek. You can contact the data protection officer by email at psychotherapie-tomanek@posteo.de or at Pfarrstraße 115, 10317 Berlin.
2. Data processed for the provision of the website and the creation of log files
a. Which data is processed for which purpose?
Each time you access content on the website, data that may allow identification is temporarily stored. The following data is collected:
– Date and time of access
– IP address
– Hostname of the accessing computer
– Website from which the website was accessed
– Websites accessed via the website
– Page visited on our website
– Notification whether the retrieval was successful
– Amount of data transferred
– Information about the browser type and version used
– Operating system
The temporary storage of the data is necessary for the completion of a website visit to enable delivery of the website. Further storage in log files occurs to ensure the functionality of the website and the security of the information technology systems. These purposes also constitute our legitimate interest in data processing.
b. On what legal basis is this data processed?
The data is processed on the basis of Art. 6 (1) (f) DS-GVO (GDPR).
c. Are there other recipients of the personal data besides the controller?
The website is hosted by: manitu GmbH, Welvertstraße 2, 66606 St. Wendel, Germany.
The host receives the above-mentioned data as a data processor.
d. How long is the data stored?
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. When the website is made available, this is the case when the respective session ends. The log files are stored for a maximum of 24 hours and are accessible directly and exclusively to administrators. After that, they are only indirectly available via the reconstruction of backup tapes and are permanently deleted after 21 days.
3. Rights of Data Subjects
a. Right to Information
You can request information about your personal data that we process in accordance with Art. 15 DS-GVO (GDPR).
b. Right to Object
You have the right to object for specific reasons (see Section II).
c. Right to rectification
If the information concerning you is no longer correct, you can request rectification in accordance with Art. 16 DS-GVO (GDPR). If your data is incomplete, you can request completion.
d. Right to erasure
You can request the erasure of your personal data in accordance with Art. 17 DS-GVO (GDPR).
e. Right to restriction of processing
You have the right to request restriction of the processing of your personal data in accordance with Art. 18 DS-GVO (GDPR).
f. Right to lodge a complaint
If you believe that the processing of your personal data violates data protection law, you have the right to lodge a complaint with a data protection supervisory authority of your choice in accordance with Art. 77 (1) DS-GVO (GDPR).
g. Right to data portability
If the requirements of Art. 20 (1) DS-GVO (GDPR) are met, you have the right to have data that we process automatically based on your consent or in fulfillment of a contract handed over to you or to third parties. The collection of data for providing the website and the storage of log files are essential for the operation of the website. They are therefore not based on consent pursuant to Art. 6 (1) (a) DS-GVO (GDPR) or on a contract pursuant to Art. 6 (1) (b) DS-GVO (GDPR), but are justified pursuant to Art. 6 (1) (f) DS-GVO (GDPR). The requirements of Art. 20 (1) DS-GVO (GDPR) are therefore not met in this respect.
II. Right to object pursuant to Art. 21 (1) DS-GVO (GDPR)
You have the right to object at any time to the processing of your personal data based on Article 6 (1) (f) DS-GVO (GDPR), for reasons related to your particular situation. The controller will then no longer process the personal data unless it can demonstrate compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject, or the processing serves to assert, exercise, or defend legal claims. The collection of data for providing the website and the storage of log files are essential for the operation of the website.