Privacy policy
This is a courtesy translation. The German version is the legally binding one.
1. Controller
Lucille Mayer
Ohmstraße 3
80802 München
Email: kontakt@schlaf-und-angst.de
2. Visiting this website
When you access this website, your browser transmits technically necessary data to the hosting provider's server: IP address, date and time, page requested, volume of data transferred, browser type and operating system. This data is required to deliver the page and is stored in server log files.
Legal basis: Art. 6 (1) (f) GDPR — legitimate interest in the technically sound and secure operation of the site.
Retention: ⟨ hosting provider's log retention period ⟩
Hosting: ⟨ provider, address, server location, Art. 28 GDPR data processing agreement ⟩
3. Cookies, tracking and fonts
This website sets no cookies and uses no analytics or tracking services. There is no audience measurement and no profiling. This is why there is no consent banner.
All fonts are served from our own server. There is no connection to Google Fonts or any other external content delivery network. Your IP address is not transmitted to any third party when you visit this site.
4. Contact by email
If you write to me, I process your details in order to deal with your enquiry. The legal basis is Art. 6 (1) (b) GDPR (pre-contractual measures) or Art. 6 (1) (f) GDPR. Your message is deleted once it is no longer required and no statutory retention obligations apply.
Please note that unencrypted email is not a secure channel. Please do not send health information by email.
5. Booking via It's Complicated
Appointment booking takes place on the external platform It's Complicated. If you click the corresponding link, you leave this website. No data is transferred automatically unless you actively follow the link — the platform is not embedded in this site. The platform's own privacy policy applies to processing there.⟨ operator, registered office, legal basis, data processing agreement if applicable ⟩
6. Data in the context of treatment
Separate rules apply to psychotherapeutic treatment itself. Health data is specially protected (Art. 9 GDPR); processing takes place on the basis of Art. 9 (2) (h) GDPR in conjunction with professional confidentiality under § 203 of the German Criminal Code. Records must be retained for at least ten years under professional regulations. Before treatment begins you receive separate patient information on data protection and a consent form for video treatment.
7. Your rights
- Access to the data held about you (Art. 15 GDPR)
- Rectification of inaccurate data (Art. 16 GDPR)
- Erasure, unless retention obligations apply (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection to processing based on legitimate interests (Art. 21 GDPR)
- Withdrawal of consent with future effect (Art. 7 (3) GDPR)
You may also lodge a complaint with a data protection supervisory authority. The competent authority here is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 27, 91522 Ansbach, Germany.