Privacy Policy

The following information provides details about the collection and processing of personal data when you use our website and engage our practice services. Personal data means any information relating to you personally, e.g., name, address, email address, user behavior, or health-related details.

1. Name and Contact Details of the Data Controller

The controller for Christie Glaser Psychotherapy is:

Name: Christie Glaser (Heilpraktikerin für Psychotherapie)
Address: Gritznerstraße 3, 76227 Karlsruhe – Durlach, Germany
Tel.: +49 151 20074352
Email: christie@christieglaserpsychotherapy.com

Competent Data Protection Supervisory Authority:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg (LfDI BW)

Address: Lautenschlagerstraße 20, 70173 Stuttgart, Germany
Phone: +49 711 615541-0
Email: poststelle@lfdi.bwl.de
Website: https://www.baden-wuerttemberg.datenschutz.de/

2. Collection and Storage of Personal Data: Website Visit & Communication

a) Web Hosting & Email Provision (IONOS)

Our website and email infrastructure are hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany.

When you access our website https://www.christieglaserpsychotherapy.com, information is automatically sent by the browser used on your device to the server of our website hosted by IONOS. This information is temporarily stored in log files:
– IP address of the requesting computer
– Date and time of access
– Name and URL of the retrieved file
– Website from which access occurs (referrer URL)
– Browser, operating system, and the name of your access provider

This data is processed to ensure a smooth connection, comfortable site usage, and system security/stability. The legal basis is Art. 6 (1) lit. f GDPR (legitimate interest).

When you contact us via email, your message and contact details are transmitted through and stored on IONOS email servers to process your inquiry. The legal basis is Art. 6 (1) lit. b GDPR (pre-contractual measures/contract performance) and, where health-related inquiries are concerned, Art. 9 (2) lit. h GDPR in conjunction with Section 22 (1) No. 1 lit. b BDSG. We have concluded a Data Processing Agreement (Auftragsverarbeitungsvertrag – AVV) with IONOS.

b) Direct Contacting

When you contact us by email or telephone, the data you provide (email address, name, telephone number, nature of request) will be stored to process your inquiry. We delete or restrict processing of this data once storage is no longer necessary or when legal retention obligations expire.

3. Practice Management, Appointments, and Clinical Notes

To manage client appointments, administration, and session documentation efficiently and securely, we utilize specialized external software providers acting as data processors under Art. 28 GDPR.

a) Practice & Patient Management System (Patientify)

We use Patientify (provided by patientify.io) for managing client master data, scheduling appointments, and practice administration.
– Data processed: Contact details, appointment history, administrative notes, and client communication.
– Legal basis: Art. 6 (1) lit. b GDPR (contract performance), Art. 9 (2) lit. h GDPR (provision of healthcare), and Art. 6 (1) lit. f GDPR (legitimate interest in efficient administrative practice workflows).
– Security: Data processing is governed by a Data Processing Agreement (AVV) ensuring GDPR-compliant handling of sensitive information.

b) Digital Session Notes (reMarkable)

For recording handwritten clinical session notes and treatment documentation, we use a digital tablet provided by reMarkable AS, Fridtjof Nansens vei 12, 0369 Oslo, Norway.
– Data processed: Client session notes, treatment details, and handwritten therapeutic documentation.
– Cloud synchronization: Where cloud backup/synchronization is enabled to ensure data safety against device loss, encrypted documentation is stored via reMarkable Cloud infrastructure.
– Legal basis: Art. 9 (2) lit. h GDPR in conjunction with Section 22 (1) No. 1 lit. b BDSG (health data processing for therapeutic purposes) and Art. 6 (1) lit. c GDPR (legal obligation to document therapeutic treatment pursuant to Section 630f BGB).
– Security: A Data Processing Agreement (AVV) and appropriate technical and organizational measures (including encryption) safeguard processed client notes.

4. Disclosure of Data to Third Parties

Your personal data will not be transferred to third parties for purposes other than those specified in this policy. We only share data if:
– You have given explicit consent pursuant to Art. 6 (1) lit. a GDPR / Art. 9 (2) lit. a GDPR.
– Disclosure is necessary pursuant to Art. 6 (1) lit. f GDPR for legal claims without overriding conflicting interests.
– There is a statutory legal obligation pursuant to Art. 6 (1) lit. c GDPR.
– It is required for fulfilling contractual obligations pursuant to Art. 6 (1) lit. b GDPR or therapeutic documentation/care.

5. Cookies

We use cookies on our website. Cookies are small files automatically created by your browser and stored on your end device. They do not cause harm or carry viruses.

We use session cookies to recognize prior page visits (deleted automatically upon exit) and temporary cookies to optimize user experience over a defined period. Cookies used for technical operation are based on Art. 6 (1) lit. f GDPR. You can configure your browser to reject cookies, though some website functionalities may be restricted as a result.

6. Google Maps

This website incorporates interactive maps provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
When accessing pages with embedded maps, Google receives your IP address and access information (Section 2.a). This occurs regardless of whether you hold a Google account. Data transfer to parent company Google LLC in the USA is safeguarded under the EU-U.S. Data Privacy Framework (DPF).
Further info: https://policies.google.com/privacy.

7. Google Analytics

This website uses Google Analytics, a web analysis service of Google Ireland Limited. Google Analytics uses cookies to evaluate website usage and assemble performance reports.

IP anonymization (`anonymizeIp`) is active on this site, ensuring your IP address is truncated within EU/EEA member states prior to storage. Legal basis is your consent pursuant to Art. 6 (1) lit. a GDPR / Section 25 (1) TDDDG. Data transfers to the US are covered by Google’s certification under the EU-U.S. Data Privacy Framework. You may prevent tracking via browser plugins: http://tools.google.com/dlpage/gaoptout.

8. Rights of Data Subjects

Under the GDPR, you have the right to:
– Access (Art. 15 GDPR): Request information about your personal data stored by us.
– Rectification (Art. 16 GDPR): Request correction of inaccurate data.
– Erasure (Art. 17 GDPR): Request deletion of your data, provided statutory retention periods (e.g., medical record retention under Section 630f BGB) do not prevent it.
– Restriction (Art. 18 GDPR): Request processing restrictions under specified conditions.
– Data Portability (Art. 20 GDPR): Receive your data in a structured, machine-readable format.
– Withdraw Consent (Art. 7 (3) GDPR): Revoke previously given consent at any time.
– Lodge a Complaint (Art. 77 GDPR): Contact a supervisory authority (such as LfDI Baden-Württemberg).

9. Right to Object

If your personal data is processed based on legitimate interests pursuant to Art. 6 (1) lit. f GDPR, you have the right to object under Art. 21 GDPR based on grounds relating to your particular situation. To exercise this right, please contact christie@christieglaserpsychotherapy.com.

10. Data Security

We utilize modern SSL/TLS encryption for website transmission alongside rigorous technical and organizational security measures (TOMs) to safeguard your data against manipulation, loss, or unauthorized third-party access.

11. Updates and Amendments

This Privacy Policy is currently valid and was last updated in October 2026. Legal or operational developments may require future revisions.