Data Protection

Generally, this website can be used without providing personal data. Where personal data (such as names, addresses, or email addresses) is collected on our pages, this is always done on a voluntary basis. Such data will not be passed on to third parties without your express consent. If you contact me via email or submit inquiries using the contact form, the information provided—including the contact details you supply—will be stored for the purpose of processing your inquiry and handling any follow-up questions. I do not share this data with third parties. The use of contact details published in the legal notice (Impressum) or similar sections—such as postal addresses, telephone and fax numbers, and email addresses—by third parties to send unsolicited information is prohibited. I expressly reserve the right to take legal action against senders of so-called spam emails who violate this prohibition. Protecting your personal data and ensuring its collection, processing, and use in compliance with the law is a matter of great importance to me. Consequently, your data is processed exclusively on the basis of statutory provisions (GDPR, TKG 2003). This privacy policy outlines the key aspects of data processing associated with this website. Data processed during your use of this website will be deleted or blocked as soon as the purpose for storage no longer applies, provided there are no statutory retention obligations preventing deletion and no other provisions regarding specific processing procedures are stated below.

 

Data Storage

For the purpose of processing orders or registering for participation in an event, I store the data necessary for drawing up a contract. Data processing is carried out based on the legal provisions of Section 96 Para. 3 of the Telecommunications Act (TKG) and Article 6 Para. 1 lit. a (consent) and/or lit. b (necessary for the performance of a contract) of the GDPR. In the context of psychotherapy, the provisions of the Psychotherapy Act also apply. ​

 

I reserve the right to use a patient database in the future. Should this occur, you will be informed here with further details. This database must comply with GDPR regulations.

 

The following data is processed in connection with the website:

 

Server Data

For technical reasons—specifically to ensure a secure and stable website—data is transmitted by your internet browser to us or to our web hosting provider. These so-called server log files record, among other things, the type and version of your internet browser, the operating system, the website from which you arrived at my site (referrer URL), the specific pages of my website that you visit, the date and time of access, and the IP address of the internet connection used to access my site. Data collected in this manner is stored temporarily but is not stored together with other personal data of yours. Storage is based on the legal grounds of Art. 6 Para. 1 lit. f) of the GDPR. The data is deleted after a maximum of two weeks, unless further retention is required for evidentiary purposes. Otherwise, the data is excluded from deletion—either in whole or in part—until the incident in question has been finally resolved.

​

Cookies

Cookies do not damage your computer and do not contain viruses. They serve to make websites more user-friendly, effective, and secure. Cookies are small text files that are placed on your computer and stored by your browser. If you do not wish for this to happen, you can configure your browser to notify you when cookies are being set and to allow them only on a case-by-case basis. Disabling cookies may limit the functionality of my website. This website uses cookies to ensure optimal functionality. We use the "Real Cookie Banner" consent tool to manage the cookies and similar technologies (tracking pixels, web beacons, etc.) used on the site, as well as the associated consents. You can find details on how "Real Cookie Banner" works at https://devowl.io/de/rcb/datenverarbeitung/. The legal bases for processing personal data in this context are Art. 6(1)(c) and Art. 6(1)(f) of the GDPR. Our legitimate interest lies in managing the cookies and similar technologies used, as well as the associated consents.

 

Google Analytics

This website uses Google Analytics. This is a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter referred to as "Google"). Through its certification under the EU-US Privacy Shield (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active), Google guarantees compliance with EU data protection standards when processing data in the USA. Google Analytics is used to analyze user behavior on this website—specifically for the analysis, optimization, and economic operation of the site (legal basis: Art. 6(1)(f) GDPR). Usage and user-related information—such as IP address, location, time, or frequency of website visits—is transmitted to a Google server in the USA and stored there. However, Google Analytics is used with an anonymization function. This function causes Google to truncate the IP address within the EU or the EEA. Google uses the data collected in this way to provide us with an analysis of visits to the website and user activity thereon. This data may also be used to provide other services related to the use of the website and the internet. Google states that it does not associate your IP address with other data. Furthermore, Google provides additional data protection information at https://www.google.com/intl/de/policies/privacy/partners, including details on how to prevent the use of your data. In addition, Google offers a so-called opt-out add-on, along with further information, at https://tools.google.com/dlpage/gaoptout?hl=de. This add-on can be installed on common web browsers and gives you greater control over the data Google collects when you visit the website.

​

Google Maps

On my website, I use the "Google Maps" component provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google") in the "Contact" section. Each time the "Google Maps" component is accessed, Google sets a cookie to process user settings and data when the page containing the integrated "Google Maps" component is displayed. As a rule, this cookie is not deleted when the browser is closed; instead, it expires after a certain period unless you delete it manually beforehand. If you do not agree to this processing of your data, you have the option to deactivate the "Google Maps" service and thereby prevent the transmission of data to Google. To do this, you must disable the JavaScript function in your browser. Please note, however, that in this case, you will be unable to use the "Google Maps" component, or your use of it will be limited. For details regarding the scope and purpose of this data collection, the further processing and use of the data by Google itself, and the use of "Google Maps" and information obtained via "Google Maps," please refer to Google’s privacy policy and terms of service, which can be accessed at: http://www.google.de/intl/de/policies/terms/regional.html or https://www.google.com/intl/de_de/help/terms_maps.html​

​

Transmission of data to third parties

Personal data collected during the use of the website is not passed on to third parties. However, your personal data may be processed by data processors—specifically IT service providers, software solution providers, and similar vendors. I (Elisabeth Karl) personally manage this website. ​

 

Further important information regarding data processing:

​

Minors

Protecting children's data is very important, especially online. This website is not designed for, nor is it directed at, children. Minors may only use our services with the prior consent or authorization of a parent or legal guardian. We do not knowingly collect personal data from minors. If a parent or legal guardian becomes aware that their child has provided us with personal data without their consent, they may contact us at praxis@psychotherapie-ek.at. ​

 

Card payments

You have the option, among others, to pay your invoice via debit or credit card. For these transactions, I use a SumUp terminal. SumUp is independently responsible for data processing under data protection law and is PCI-DSS certified. You can find their privacy policy here (https://sumup.at/datenschutzbestimmungen/). ​

 

Your rights

You have the right to access the personal data being processed. Furthermore, you have the right to rectification, objection, restriction of processing, and data portability, and you may withdraw your consent at any time. You also have the option to lodge a complaint with a data protection supervisory authority. The competent supervisory authority is the Austrian Data Protection Authority (Österreichische Datenschutzbehörde).

 

Austrian Data Protection Authority

Wickenburggasse 8, 1080 Vienna

E-mail: dsb@dsb.gv.at ​

 

Updates or amendments to this privacy policy

I reserve the right to amend or review this privacy policy from time to time. You can find the date of the current version under "Last updated on". Your continued use of the platform following the announcement of such changes on our website constitutes your acceptance of such amendments to the privacy policy and signifies your agreement to be bound by the amended terms. ​

 

If you have any questions or concerns, please do not hesitate to contact me! I strive to act to the best of my knowledge and belief!