This is a translation for your convenience. The German version is legally binding.
This website deals with very personal topics. That is why I do not use any third-party tracking services. I only process the data needed to run the website, to keep anonymous visitor statistics and to answer your enquiry.
1. Controller
The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR, in German: Datenschutz-Grundverordnung, DSGVO) is:
Wiebke Bergermann
Praxis für Sexual-, Paar- und Körpertherapie (practice for sex, couples and body therapy)
Am Friedrichshain 22
10407 Berlin
Phone: +49 152 59330322
Email: info@paar-sexualtherapie.de
There is no data protection officer in my practice. I am not obliged to appoint one.
2. Principles
I only process personal data to the extent necessary for a functioning website, for answering your enquiry or for carrying out our work together, or if you have given your consent. The legal bases are in particular (Art. = Article, Abs. = paragraph, lit. = point):
- Art. 6 Abs. 1 lit. a DSGVO (consent)
- Art. 6 Abs. 1 lit. b DSGVO (contract or pre-contractual measures)
- Art. 6 Abs. 1 lit. c DSGVO (legal obligation)
- Art. 6 Abs. 1 lit. f DSGVO (legitimate interest)
- Art. 9 Abs. 2 lit. a and h DSGVO (health data)
- § 25 Abs. 1 and 2 TDDDG (access to your device; TDDDG: Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz, the German Telecommunications and Digital Services Data Protection Act)
There is no tracking by third parties and no profiling on this website. Section 10 applies to the newsletter. I count how often pages are viewed anonymously on my own server (section 6). Your data is not sold or passed on for advertising purposes.
3. Hosting
This website is hosted by ALL-INKL.COM – Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf. On my behalf, the host processes all data that arises when you visit the website. I have a data processing agreement with the host under Art. 28 DSGVO. The servers are located in Germany.
The legal basis is Art. 6 Abs. 1 lit. f DSGVO. My legitimate interest lies in providing the website securely and reliably.
So that nothing is lost after an error, the website creates a backup every day. It is stored on Google Drive (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). I keep the last 30 backups. Enquiries from the contact form and newsletter addresses are not included, because the website does not store them. The legal basis is Art. 6 Abs. 1 lit. f DSGVO. For the transfer to the USA, see section 7.
4. Server log files
When you visit the website, your browser automatically sends information to the server, which is stored there in what are known as log files:
- IP address (shortened where applicable)
- date and time of access
- page or file accessed
- amount of data transferred and status code
- browser type and version, operating system
- referrer URL (page visited previously)
This data is technically necessary to deliver the website and to ensure its security (for example, to fend off attacks). It is not combined with other data. The log files are only kept for as long as necessary for these purposes and are then deleted.
Legal basis: Art. 6 Abs. 1 lit. f DSGVO.
5. SSL/TLS encryption
This website uses SSL/TLS encryption. You can recognise it by “https://” in the address bar and the padlock symbol in your browser. This means that data you send via the contact form cannot be read by third parties.
6. Cookies and visitor statistics
This website sets a single cookie: “pll_language”. It remembers whether you are reading the site in German or English and expires after one year. No tracking or marketing cookies are used. That is why there is no cookie banner.
Legal basis: § 25 Abs. 2 Nr. 2 (no. 2) TDDDG, Art. 6 Abs. 1 lit. f DSGVO.
To see which pages are read and how visitors find the website, I use the statistics plugin Koko Analytics. It runs on the web server of this website. The data does not go to any third party.
It counts how often a page was viewed on a given day and which website someone came from, for example a search engine. This includes how often the contact form was submitted on a page, without content and without sender. Koko Analytics does not set cookies, does not store IP addresses and does not recognise anyone. The figures cannot be attributed to any individual. I delete them after 24 months.
7. Contact form
If you write to me via the contact form, I process the information you enter there in order to answer your enquiry: name, email address, phone number, your message and, if you select them, what your enquiry is about and the preferred location.
The information is not stored in the website’s database, but is only sent to me by email. My mailbox and the website’s email delivery run via Google Workspace (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). I have a data processing agreement with Google. Google may also process data on servers in the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework. The European Commission’s adequacy decision (Art. 45 DSGVO) therefore applies to these transfers.
Required fields are name, email address, phone number and your message. I need your phone number to reach you if an appointment changes at short notice or if you do not come. A few sentences are enough for the message. Anything you would like to tell me in more detail can wait until our first conversation.
After you submit the form, you automatically receive a short confirmation at the email address you entered. It does not contain the content of your enquiry, because anyone can enter someone else’s address in the form.
The legal basis is Art. 6 Abs. 1 lit. b DSGVO (initiating a working relationship) and, where you share health data, your explicit consent under Art. 9 Abs. 2 lit. a DSGVO (see section 9).
To protect against spam, the form uses a hidden field and a minimum time for filling it in. The website also counts how many enquiries come from one connection within an hour. For this, it stores a value calculated from your IP address for one hour. The IP address itself is not stored. No data is passed on to third parties in the process.
8. Contact by email and phone
If you send me an email or call me, I process your contact details and the content of your message in order to deal with your request. My email mailbox is hosted by Google Workspace (see section 7).
Please note: ordinary emails are not encrypted all the way on their way to me. It is therefore better to save very personal matters for our conversation.
Legal basis: Art. 6 Abs. 1 lit. b or f DSGVO, for health data Art. 9 Abs. 2 lit. a DSGVO.
9. Health data
Information about your sexuality, your relationship or your mental and physical health belongs to the special categories of personal data under Art. 9 DSGVO. I only process it:
- if you share this information with me voluntarily and thereby give your explicit consent (Art. 9 Abs. 2 lit. a DSGVO), or
- in the course of our work together, to the extent necessary for it (Art. 9 Abs. 2 lit. h, Abs. 3 DSGVO).
I am bound by professional confidentiality. Your data is not passed on to third parties unless you consent or there is a legal obligation. You can withdraw your consent at any time with effect for the future.
10. Newsletter
If you subscribe to my newsletter, I process your email address in order to send you the newsletter. Registration uses the double opt-in procedure: you first receive an email in which you confirm your subscription. For this, the website only passes your email address on to Brevo. When you click the link in the confirmation email, Brevo stores the time and IP address so that your consent can be documented.
Registration and delivery run via Brevo (Brevo GmbH, Köpenicker Str. 126, 10179 Berlin). I have a data processing agreement with Brevo. Your address is stored at Brevo, not on this website. Brevo also uses service providers outside the EU. The safeguards from the data processing agreement apply to this.
For every email, including the confirmation email, Brevo measures whether it is opened and which link is clicked. For this, the email contains an invisible image that is loaded from a Brevo server when the email is opened. The links first lead via a Brevo address. In the process, the time, IP address and device data are stored together with your email address. Brevo also uses this measurement to protect against misuse; in my plan it cannot be switched off. By subscribing, you consent to this measurement. You can prevent it by switching off the loading of images in your email program. It ends completely when you unsubscribe from the newsletter.
You can unsubscribe from the newsletter at any time, for example via the link at the end of each email. Your address is then deleted from the recipient list. I keep the proof of your earlier consent for up to three years.
Legal basis: Art. 6 Abs. 1 lit. a DSGVO, for the measurement also § 25 Abs. 1 TDDDG.
11. Google reviews and Google Maps
Below the name of each practice you will see the star rating from its Google business profile and a button “Open in Google Maps”. I enter the rating and the number of reviews on this website by hand. The stars and the Google logo are part of the page and are not loaded from Google. No connection to Google is made when they are displayed.
Google Maps only opens, in a new tab, when you click on the stars or on “Open in Google Maps”. Google’s privacy policy applies there.
12. Fonts
The fonts used on this website are stored locally on the server. When a page is loaded, no connection is made to servers of Google or other font providers.
13. Online sessions
For online sessions, I use a video service with encrypted transmission. You can see which one from the link you receive from me before the first online session. Image and sound data as well as technical connection data are processed. Sessions are not recorded.
Legal basis: Art. 6 Abs. 1 lit. b DSGVO, Art. 9 Abs. 2 lit. h DSGVO.
14. Storage period
I only store personal data for as long as necessary for the respective purpose. I delete enquiries that do not lead to working together after six months. I keep the records of our work together for ten years after it ends, as provided for in § 630f Abs. 3 BGB (Bürgerliches Gesetzbuch, the German Civil Code). Invoice data is kept in accordance with tax law requirements.
15. Your rights
You have the right at any time to:
- information about your stored data (Art. 15 DSGVO)
- rectification of inaccurate data (Art. 16 DSGVO)
- erasure (Art. 17 DSGVO)
- restriction of processing (Art. 18 DSGVO)
- data portability (Art. 20 DSGVO)
- object to processing based on legitimate interests (Art. 21 DSGVO)
- withdraw your consent with effect for the future (Art. 7 Abs. 3 DSGVO)
An informal message to info@paar-sexualtherapie.de is sufficient.
16. Right to lodge a complaint
If you believe that the processing of your data violates data protection law, you can lodge a complaint with a data protection supervisory authority. The authority responsible for me is:
Berliner Beauftragte für Datenschutz und Informationsfreiheit (Berlin Commissioner for Data Protection and Freedom of Information)
Alt-Moabit 59–61, 10555 Berlin
www.datenschutz-berlin.de
17. Status
This privacy policy is as of 27 October 2026. I adapt it when the website or the legal requirements change.