Privacy Policy
1. Data protection at a glance
General information
This is a translation provided for convenience. In case of any discrepancy, the German version is legally binding. The following notes give you a simple overview of what happens to your personal data when you visit this website. Personal data is any data by which you can be identified personally. Detailed information on data protection can be found in the privacy policy set out below this text.
Data collection on this website
- Who is responsible for the data collection on this website?
- Data on this website is processed by the website operator. You will find her contact details in the legal notice (Impressum) of this website.
- How do we collect your data?
- Some of your data is collected because you give it to us. This may be data you send me by email or tell me on the phone, for example.
- Other data is collected automatically by our IT systems when you visit the website. This is mainly technical data (for example the browser, the operating system or the time of the page view). It is collected automatically as soon as you enter this website.
- What do we use your data for?
- Part of the data is collected to ensure that the website is provided without errors. I use the data from your enquiry solely to answer that enquiry.
- What rights do you have regarding your data?
- You have the right at any time to obtain information free of charge about the origin, recipients and purpose of your stored personal data. You also have a right to request the rectification or erasure of that data. If you have given consent to data processing, you can withdraw that consent at any time with effect for the future. You also have the right, in certain circumstances, to request the restriction of processing of your personal data. And you have a right to lodge a complaint with the competent supervisory authority.
2. Hosting
Hosting with a German provider
We host our website with a German hosting provider (IONOS). The servers are located in Germany, which ensures the best possible level of data protection.
When you visit our website, the provider automatically records various server log files, which log your IP address among other things. This is technically necessary in order to deliver the website and to ensure its security (for example to fend off cyber attacks).
The hosting provider is used on the basis of Art. 6(1)(f) GDPR. We have a legitimate interest in presenting and securing our website as reliably as possible.
Data processing on our behalf
We have concluded a data processing agreement (Vertrag über Auftragsverarbeitung, AVV) with our hosting provider. This is a contract required by data protection law. It ensures that the provider, acting as our processor, processes the personal data of our website visitors only on our instructions and in compliance with the GDPR.
3. General information and mandatory disclosures
Data protection
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection rules and this privacy policy.
Information on the controller
The controller for the processing of data on this website is:
Dipl. Pol. Ulla Stoeppler
Schrammsweg 6
20249 Hamburg
Phone: +49 (0)172 - 40 858 90
Email: praxis@ulla-stoeppler.de
The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (such as names, email addresses and the like).
Retention period
Unless a more specific retention period is stated within this privacy policy, your personal data remains with us until the purpose for processing it no longer applies. If you make a justified request for erasure or withdraw your consent to processing, your data will be deleted, unless we have other legally permissible grounds for storing it (for example retention periods under tax or commercial law); in that case, the data is deleted once those grounds no longer apply.
Withdrawal of your consent to data processing
Many data processing operations are only possible with your express consent. You can withdraw consent you have already given at any time. Withdrawing it does not affect the lawfulness of the processing carried out up to that point.
Right to lodge a complaint with the competent supervisory authority
In the event of infringements of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or place of the alleged infringement. This right applies without prejudice to any other administrative or judicial remedy.
Right to data portability
You have the right to have data that we process automatically on the basis of your consent or in performance of a contract handed over to you or to a third party in a commonly used, machine-readable format. If you request the direct transmission of the data to another controller, this will only be done where it is technically feasible.
SSL and TLS encryption
For security reasons, and to protect the transmission of confidential content such as enquiries you send to us as the site operator, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the browser address bar changing from “http://” to “https://” and by the padlock symbol in your browser bar. When SSL or TLS encryption is active, the data you send us cannot be read by third parties.
Access, erasure and rectification
Within the scope of the applicable law, you have a right of access at any time, free of charge, to your stored personal data, its origin and recipients and the purpose of the processing, and, where applicable, a right to rectification or erasure of that data. You can contact us at any time about this and about any further questions concerning personal data.
4. Data collection on this website
Contacting us by email or telephone
If you contact us by email or telephone, your enquiry and all the personal data arising from it (name, enquiry) will be stored and processed by us in order to deal with your concern. We do not pass this data on without your consent.
This data is processed on the basis of Art. 6(1)(b) GDPR where your enquiry relates to the performance of a contract or is necessary in order to take steps prior to entering into a contract (for example arranging an initial consultation or a therapy place). In all other cases, the processing is based on our legitimate interest in dealing effectively with the enquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR) where that consent was requested.
The data you send us in an enquiry remains with us until you ask us to delete it, withdraw your consent to it being stored, or the purpose for storing it no longer applies (for example once your concern has been dealt with). Mandatory statutory provisions — in particular statutory retention periods — remain unaffected.
Please note that communication by email can have security gaps. Complete protection of data against access by third parties is not possible. Sensitive health data is therefore better shared in person.
5. Analytics, advertising and consent management
Cookie consent management
Our website uses its own cookie banner to obtain your consent to the storage of certain cookies or the use of certain technologies (such as Google Ads) on your device, and to document that consent in line with data protection law.
When you enter our website and make a choice ("Accept all" or "Essential only"), your decision is saved in your browser's local storage so that you are not asked again on future visits. This data is not transmitted to our servers. It is stored per domain, so a choice you make on a German page also applies to the English pages, and the other way round. The processing is based on Art. 6(1)(c) GDPR, because we are legally obliged to provide proof of user consent for certain technologies.
Google Ads (conversion tracking)
We use the online advertising programme Google Ads and, within it, conversion tracking. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
If you reach our website through a Google ad, a cookie is set for conversion tracking. These cookies do not serve to identify you personally. If you visit certain pages of our website while the cookie has not yet expired, Google and we can see that you clicked on the ad and were forwarded to our site.
The information obtained with the conversion cookie is used to compile conversion statistics. We learn the total number of users who clicked on our ad. We do not, however, receive any information by which users could be identified personally.
Google Ads is used solely on the basis of your express consent given through our cookie banner, in accordance with Art. 6(1)(a) GDPR. If you selected "Essential only", the tracking is not loaded and your data is not collected. You can withdraw your consent at any time by deleting the local website data and cookies in your browser.
Where data is transferred to the USA, Google relies on the European Commission’s standard contractual clauses and on the EU-US Data Privacy Framework (DPF).