Home/Privacy policy

Privacy policy

1. Privacy at a glance

General information

The following information gives a simple overview of what happens to your personal data when you visit this website. Personal data means any data that can be used to identify you personally. Detailed information about data protection is provided in the privacy policy below.

Data collection on this website

Who is responsible for collecting data on this website?

Data on this website is processed by the website operator. Contact details can be found in the “Data controller” section of this privacy policy.

How do we collect your data?

Some data is collected when you provide it to us. This may include, for example, information you enter in a contact form.

Other data is collected automatically or with your consent by our IT systems when you visit the website. This is primarily technical data, such as your web browser, operating system or the time a page is accessed. This data is collected automatically when you enter this website.

What do we use your data for?

Some data is collected to ensure that the website is provided without errors. Other data may be used to analyse your usage behaviour.

What rights do you have regarding your data?

You have the right at any time to receive free information about the origin, recipients and purpose of your stored personal data. You also have the right to request its correction or deletion. If you have consented to data processing, you may withdraw that consent at any time with future effect. You also have the right, under certain circumstances, to request restriction of the processing of your personal data. You further have the right to lodge a complaint with the competent supervisory authority.

You may contact us at any time about this or any other data protection questions.

Analytics and third-party tools

When you visit this website, your browsing behaviour may be statistically evaluated, primarily using analytics software.

Detailed information about these analytics tools is provided in the privacy policy below.

2. Hosting

Strato

We host our website with Strato. The provider is Strato AG, Otto-Ostrowski-Straße 7, 10249 Berlin (“Strato”). When you visit our website, Strato collects various log files, including your IP addresses.

Further information is available in Strato’s privacy policy: https://www.strato.de/datenschutz/.

Strato is used on the basis of Article 6(1)(f) GDPR. We have a legitimate interest in providing our website as reliably as possible. Where relevant consent has been requested, processing takes place exclusively on the basis of Article 6(1)(a) GDPR and section 25(1) TTDSG, insofar as the consent covers storing cookies or accessing information on the user’s device, such as device fingerprinting, within the meaning of the TTDSG. Consent may be withdrawn at any time.

Data processing agreement

We have entered into a data processing agreement with the provider named above. This is a contract required by data protection law that ensures the provider processes our visitors‘ personal data only according to our instructions and in compliance with the GDPR.

3. General and mandatory information

Privacy

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection requirements and this privacy policy.

Various personal data is collected when you use this website. Personal data is data that can identify you personally. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this happens.

Please note that transmitting data over the internet, for example by email, can involve security vulnerabilities. Complete protection against third-party access is not possible.

Data controller

The controller responsible for processing data on this website is:

Kellina Klein
Rosenstr. 15
12555 Berlin

Telephone: +49 151 55419198
Email: info@hypnose-koepenick.de

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data, such as names and email addresses.

Retention period

Unless a more specific retention period is stated in this privacy policy, your personal data remains with us until the purpose for processing it no longer applies. If you make a valid request for deletion or withdraw consent, your data will be deleted unless we have other legally permissible reasons to retain it, such as tax or commercial retention obligations. In that case, deletion takes place once those reasons cease to apply.

General information on the legal bases for processing data on this website

Where you have consented to processing, we process your personal data under Article 6(1)(a) GDPR, or Article 9(2)(a) GDPR where special categories of data under Article 9(1) GDPR are involved. If you expressly consent to transferring personal data to third countries, processing is also based on Article 49(1)(a) GDPR. Where you consent to storing cookies or accessing information on your device, for example through device fingerprinting, processing is additionally based on section 25(1) TTDSG. Consent may be withdrawn at any time. Where your data is necessary to perform a contract or take pre-contractual steps, we process it under Article 6(1)(b) GDPR. Where processing is necessary to comply with a legal obligation, the basis is Article 6(1)(c) GDPR. Processing may also be based on our legitimate interests under Article 6(1)(f) GDPR. The following sections describe the legal bases applicable in each case.

Transfers of data to the USA and other third countries

Among other tools, we use services from companies based in the USA or other third countries not considered secure under data protection law. When these tools are active, your personal data may be transferred to and processed in those countries. Please note that a level of data protection comparable to the EU cannot be guaranteed there. For example, US companies are obliged to disclose personal data to security authorities without affected individuals being able to take legal action against this. It therefore cannot be ruled out that US authorities, such as intelligence services, may process, evaluate and permanently store your data on US servers for surveillance purposes. We have no influence over these processing activities.

Withdrawing your consent to data processing

Many processing operations are possible only with your express consent. You may withdraw consent already given at any time. Withdrawal does not affect the lawfulness of processing carried out before it.

Right to object to data collection in specific cases and to direct marketing (Article 21 GDPR)

IF PROCESSING IS BASED ON ARTICLE 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO THE PROCESSING OF YOUR PERSONAL DATA, INCLUDING PROFILING BASED ON THOSE PROVISIONS. THE APPLICABLE LEGAL BASIS IS STATED IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL STOP PROCESSING THE PERSONAL DATA CONCERNED UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS THAT OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING SERVES TO ESTABLISH, EXERCISE OR DEFEND LEGAL CLAIMS (OBJECTION UNDER ARTICLE 21(1) GDPR).

WHERE YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO PROCESSING FOR THAT PURPOSE, INCLUDING RELATED PROFILING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING (OBJECTION UNDER ARTICLE 21(2) GDPR).

Right to complain to the competent supervisory authority

In the event of GDPR infringements, affected individuals have the right to complain to a supervisory authority, particularly in the member state of their habitual residence, place of work or the alleged infringement. This right exists without prejudice to other administrative or judicial remedies.

Right to data portability

You have the right to receive, or have a third party receive, data that we process automatically on the basis of your consent or to perform a contract, in a commonly used, machine-readable format. If you request direct transfer to another controller, this will take place only where technically feasible.

SSL or TLS encryption

For security reasons and to protect confidential content such as orders or enquiries sent to us, this website uses SSL or TLS encryption. You can recognise an encrypted connection when the browser address changes from “http://” to “https://” and a padlock symbol appears in the address bar.

When SSL or TLS encryption is enabled, the data you transmit to us cannot be read by third parties.

Access, deletion and correction

Under the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipients and the purpose of processing, and, where applicable, to its correction or deletion. You may contact us at any time about this or other questions concerning personal data.

Right to restriction of processing

You have the right to request restriction of the processing of your personal data. You may contact us at any time for this purpose. This right applies in the following cases:

If you dispute the accuracy of the personal data we hold about you, we generally need time to check it. During that period, you have the right to request restriction of processing.
If your personal data has been or is being processed unlawfully, you may request restriction instead of deletion.
If we no longer need your personal data but you require it to exercise, defend or establish legal claims, you have the right to request restriction instead of deletion.
If you have objected under Article 21(1) GDPR, your interests and ours must be weighed. Until it is determined whose interests prevail, you have the right to request restriction of processing.

Where processing has been restricted, the data may, apart from storage, be processed only with your consent, to establish, exercise or defend legal claims, to protect another natural or legal person’s rights, or for reasons of important public interest of the European Union or a member state.

Objection to promotional emails

We object to the use of contact details published as part of the statutory legal notice for sending advertising or information that has not been expressly requested. The website operators expressly reserve the right to take legal action against unsolicited advertising, including spam emails.

4. Data collection on this website

Cookies

Our website uses cookies. Cookies are small text files and do not damage your device. They are stored either temporarily for a session (session cookies) or persistently (persistent cookies). Session cookies are deleted automatically after your visit. Persistent cookies remain on your device until you delete them or your web browser deletes them automatically.

Third-party companies may also store cookies on your device when you enter our website. These enable us or you to use certain services provided by those companies, such as payment processing.

Cookies have different functions. Many are technically necessary because certain website functions would not work without them, such as a shopping basket or video display. Others are used to analyse user behaviour or display advertising.

Cookies required for electronic communication, to provide specific functions you request, such as a shopping basket, or to optimise the website, such as audience measurement cookies, are stored on the basis of Article 6(1)(f) GDPR unless another legal basis is stated. The operator has a legitimate interest in storing necessary cookies to provide technically error-free and optimised services. Where consent for cookies or similar recognition technologies has been requested, processing takes place exclusively on that basis (Article 6(1)(a) GDPR and section 25(1) TTDSG); consent may be withdrawn at any time.

You can configure your browser to notify you when cookies are set, allow them only in individual cases, reject them in specific cases or generally, and automatically delete them when you close the browser. Disabling cookies may restrict the functionality of this website.

Where third-party cookies or analytics cookies are used, we inform you separately in this privacy policy and request consent where applicable.

Consent with Borlabs Cookie

Our website uses Borlabs Cookie consent technology to obtain your consent to storing certain cookies in your browser or using certain technologies, and to document that consent in accordance with data protection law. The provider is Borlabs – Benjamin A. Bornschein, Rübenkamp 32, 22305 Hamburg (“Borlabs”).

When you enter our website, a Borlabs cookie is stored in your browser recording the consents you have given or withdrawn. This data is not shared with the provider of Borlabs Cookie.

The collected data is stored until you ask us to delete it, delete the Borlabs cookie yourself, or the purpose for storing the data ceases to apply. Mandatory statutory retention periods remain unaffected. Details of Borlabs Cookie data processing are available at https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/.

Borlabs Cookie consent technology is used to obtain legally required consent for cookies. The legal basis is Article 6(1)(c) GDPR.

Server log files

The website provider automatically collects and stores information in server log files that your browser transmits automatically. This includes:

Browser type and version
Operating system used
Referrer URL
Host name of the accessing computer
Time of the server request
IP address

This data is not combined with other data sources.

Data is collected under Article 6(1)(f) GDPR. The operator has a legitimate interest in the technically error-free presentation and optimisation of the website, which requires server log files to be collected.

Contact form

If you submit an enquiry through a contact form, the information from the form, including your contact details, is stored to process the enquiry and any follow-up questions. We do not share this data without your consent.

Processing is based on Article 6(1)(b) GDPR if your enquiry relates to performing a contract or is necessary for pre-contractual steps. In all other cases, it is based on our legitimate interest in effectively handling enquiries (Article 6(1)(f) GDPR), or on your consent (Article 6(1)(a) GDPR) where requested. Consent may be withdrawn at any time.

Data you enter in the contact form remains with us until you request deletion, withdraw consent to storage or the purpose for storage ceases to apply, for example when your enquiry has been fully processed. Mandatory legal provisions, particularly retention periods, remain unaffected.

Enquiries by email, telephone or fax

If you contact us by email, telephone or fax, we store and process your enquiry, including any resulting personal data such as your name and enquiry, to deal with your request. We do not share this data without your consent.

Data sent to us in contact enquiries remains with us until you request deletion, withdraw consent to storage or the purpose for storage ceases to apply, for example when your request has been fully processed. Mandatory statutory provisions, particularly retention periods, remain unaffected.

jameda

We have integrated jameda into this website. The provider is jameda GmbH, Balanstr. 71a, 81541 Munich (“jameda”).

jameda provides an online appointment-booking tool. We may also display a jameda quality seal. If you book an appointment online, the data you enter is stored on jameda’s servers. jameda also briefly records your IP address, referrer URL and access time and can identify that you submitted an enquiry to us. This data is used exclusively to provide the service technically and is then automatically deleted.

jameda is used on the basis of Article 6(1)(f) GDPR. The operator has a legitimate interest in making appointments as straightforward as possible. Where relevant consent is requested, processing is based exclusively on Article 6(1)(a) GDPR / Article 9(2)(a) GDPR and section 25(1) TTDSG, insofar as consent covers storing cookies or accessing information on the user’s device, such as device fingerprinting, within the meaning of the TTDSG. Consent may be withdrawn at any time.

Data processing agreement

Comments on this website

For the commenting function, we store your comment, the time it was created, your email address and, if you do not post anonymously, your chosen username.

Retention of comments

Comments and related data remain on this website until the commented content is deleted entirely or the comments must be removed for legal reasons, such as offensive content.

Legal basis

Comments are stored on the basis of your consent (Article 6(1)(a) GDPR). You may withdraw consent at any time by sending us an informal email. Withdrawal does not affect the lawfulness of processing already carried out.

5. Analytics tools and advertising

Google Tag Manager

We use Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager allows us to integrate tracking or statistics tools and other technologies into our website. It does not itself create user profiles, store cookies or conduct independent analyses. It only manages and delivers the tools integrated through it. However, it records your IP address, which may be transferred to Google’s parent company in the United States.

Google Tag Manager is used under Article 6(1)(f) GDPR. The operator has a legitimate interest in quickly and easily integrating and managing different tools. Where relevant consent has been requested, processing is based exclusively on Article 6(1)(a) GDPR and section 25(1) TTDSG, insofar as consent covers cookies or access to information on the user’s device, such as device fingerprinting, within the meaning of the TTDSG. Consent may be withdrawn at any time.

Google Analytics

This website uses functions of the Google Analytics web analytics service. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics allows the operator to analyse visitor behaviour. The operator receives usage data such as page views, visit duration, operating systems and users‘ origins. This data is combined in a user ID and assigned to the visitor’s device.

Google Analytics uses technologies that recognise users to analyse their behaviour, such as cookies or device fingerprinting. Information Google collects about use of this website is generally transferred to and stored on a server in the USA.

This service is used on the basis of your consent under Article 6(1)(a) GDPR and section 25(1) TTDSG. Consent may be withdrawn at any time.

Data transfers to the USA are based on the European Commission’s standard contractual clauses. Details: https://privacy.google.com/businesses/controllerterms/mccs/.

IP anonymisation

We have enabled IP anonymisation on this website. Google therefore shortens your IP address within EU member states or other states party to the European Economic Area Agreement before transferring it to the USA. Only in exceptional cases is the full address sent to a US server and shortened there. On behalf of the operator, Google uses this information to evaluate your use of the website, compile activity reports and provide other services relating to website and internet usage. The IP address transmitted by your browser within Google Analytics is not combined with other Google data.

Browser plugin

You can prevent Google from collecting and processing your data by downloading and installing the browser plugin available here: https://tools.google.com/dlpage/gaoptout?hl=de.

More information about Google Analytics user data is available in Google’s privacy information: https://support.google.com/analytics/answer/6004245?hl=de.

Demographics in Google Analytics

This website uses Google Analytics demographics to show visitors suitable advertisements within Google’s advertising network. Reports can be generated about visitors‘ age, gender and interests. This data comes from Google’s interest-based advertising and third-party visitor data and cannot be assigned to a specific person. You may disable this feature in your Google account’s advertising settings or generally prohibit Google Analytics data collection as described under “Objection to data collection”.

Data processing agreement

We have entered into a data processing agreement with Google and fully implement the strict requirements of German data protection authorities when using Google Analytics.

Google Ads

The operator uses Google Ads, an online advertising programme from Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Ads allows us to display advertisements in Google’s search engine or on third-party websites when users enter specific search terms (keyword targeting). Targeted advertisements may also be shown using data Google holds about users, such as location and interests (audience targeting). As operator, we can evaluate this data quantitatively, for example by analysing which search terms triggered our advertisements and how many advertisements led to clicks.

This service is used on the basis of your consent under Article 6(1)(a) GDPR and section 25(1) TTDSG. Consent may be withdrawn at any time.

Data transfers to the USA are based on the European Commission’s standard contractual clauses. Details: https://policies.google.com/privacy/frameworks and https://privacy.google.com/businesses/controllerterms/mccs/.

Google Remarketing

This website uses Google Analytics Remarketing functions. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Remarketing analyses your behaviour on our website, such as clicks on particular products, to assign you to advertising audiences and subsequently show suitable advertisements when you visit other online services (remarketing or retargeting).

Audiences created with Google Remarketing may also be linked to Google’s cross-device functions. This allows personalised, interest-based advertising adapted to your previous browsing behaviour on one device, such as a phone, to be displayed on another, such as a tablet or computer.

If you have a Google account, you can object to personalised advertising here: https://www.google.com/settings/ads/onweb/.

This service is used on the basis of your consent under Article 6(1)(a) GDPR and section 25(1) TTDSG. Consent may be withdrawn at any time.

Further information and privacy provisions are available from Google: https://policies.google.com/technologies/ads?hl=de.

Google Conversion Tracking

This website uses Google Conversion Tracking. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Conversion Tracking allows Google and us to identify whether a user has carried out certain actions. For example, we can evaluate how often particular buttons were clicked and which products were viewed or purchased most often. This information is used to create conversion statistics. We learn the total number of users who clicked our advertisements and what actions they performed. We do not receive information that personally identifies users. Google itself uses cookies or similar recognition technologies for identification.

This service is used on the basis of your consent under Article 6(1)(a) GDPR and section 25(1) TTDSG. Consent may be withdrawn at any time.

More information about Google Conversion Tracking is available in Google’s privacy policy: https://policies.google.com/privacy?hl=de.

6. Plugins and tools

Google Web Fonts

This website uses web fonts provided by Google to display typefaces consistently. When you open a page, your browser loads the required fonts into its cache to display text and fonts correctly.

To do this, your browser must connect to Google’s servers. Google then learns that this website was accessed via your IP address. Google Web Fonts are used under Article 6(1)(f) GDPR. The operator has a legitimate interest in displaying typefaces consistently. Where relevant consent has been requested, processing is based exclusively on Article 6(1)(a) GDPR and section 25(1) TTDSG, insofar as consent covers storing cookies or accessing information on the user’s device, such as device fingerprinting, within the meaning of the TTDSG. Consent may be withdrawn at any time.

If your browser does not support web fonts, a standard font from your computer is used.

Further information about Google Web Fonts is available at https://developers.google.com/fonts/faq and in Google’s privacy policy: https://policies.google.com/privacy?hl=de.

7. eCommerce and payment providers

Processing customer and contract data

We collect, process and use personal customer and contract data to establish, define and modify our contractual relationships. We collect, process and use personal data relating to use of this website (usage data) only insofar as necessary to enable users to use the service or to bill for it. The legal basis is Article 6(1)(b) GDPR.

Customer data is deleted after the order is completed or the business relationship ends and any applicable statutory retention periods expire. Statutory retention obligations remain unaffected.