1. Overview of data protection

Protecting your personal data is important to me. I process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable German data protection laws.

Personal data refers to any information that can identify you directly or indirectly.

This Privacy Policy explains what data is collected, how it is used, and what rights you have.

2. Controller (responsible party)

The controller responsible for data processing on this website is:

Ulla Greve
be kind to your mind – NeuroShift Practice
Kollwitzstr. 66
10435 Berlin

info@ullagreve.com

3. Collection and use of personal data

a) Website usage (server log files)

When you visit this website, technical data is automatically collected by the hosting provider, including:

• IP address

• date and time of access

• browser type and version

• operating system

• referrer URL

This data is technically necessary to ensure the secure and stable operation of the website and is not used to identify you personally.

b) Contact (email or contact form)

If you contact me via email or a contact form, the data you provide (e.g. name, email address, message content) will be processed to handle your request.

The legal basis is:

• Art. 6(1)(b) GDPR (pre-contractual communication)

• Art. 6(1)(a) GDPR (consent, if applicable)

Data is stored only as long as necessary to process your request.

c) Booking and client communication

If you book a session, additional personal data may be processed for:

• appointment scheduling

• invoicing

• therapeutic documentation (if applicable)

This data is handled confidentially and in accordance with professional discretion obligations.

Legal basis:

• Art. 6(1)(b) GDPR (contract performance)

• Art. 9(2)(h) GDPR (health-related data processing by a professional subject to confidentiality)

4. Confidentiality

All therapeutic content shared during sessions is subject to professional confidentiality obligations under German law (§ 203 StGB and Heilpraktiker regulations where applicable).

Information is not shared with third parties unless:

• you give written consent

• there is a legal obligation

• there is a duty to protect life or safety under applicable law

5. Data processors (hosting and services)

This website may use external service providers for:

• hosting

• email services

• appointment scheduling tools

• payment providers (e.g. PayPal, SumUp)

These providers process data only on my behalf and under data processing agreements (Art. 28 GDPR).

If data is transferred outside the EU, this will only occur under appropriate safeguards (e.g. Standard Contractual Clauses).

6. Cookies and tracking

This website may use cookies.

• Essential cookies: necessary for basic website functionality

• Optional cookies (analytics / embedded services): only used with consent where required

If analytics tools or external embeds (e.g. YouTube, Google Fonts) are used, these may transmit data to third parties. In such cases, consent is required prior to activation.

7. Storage duration

Personal data is stored only for as long as necessary for:

• legal retention obligations

• contract fulfilment

• communication purposes

Therapy-related documentation is stored in accordance with applicable professional and legal retention requirements.

8. Your rights under GDPR

You have the following rights:

• Right of access (Art. 15 GDPR)

• Right to rectification (Art. 16 GDPR)

• Right to erasure (Art. 17 GDPR)

• Right to restriction of processing (Art. 18 GDPR)

• Right to data portability (Art. 20 GDPR)

• Right to object (Art. 21 GDPR)

• Right to withdraw consent at any time (Art. 7(3) GDPR)

• Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

9. Data security

Appropriate technical and organisational measures are used to protect your data against loss, misuse, and unauthorised access.