Privacy Policy

The protection of your personal data is very important to me. Personal data are treated confidentially and in accordance with applicable data protection law and this privacy policy.

Use of this website is generally possible without providing personal data. Where personal data are collected on these pages (e.g. name, address or email), this is always voluntary and only to the extent necessary to provide the requested service.

These data are not passed on to third parties without your express consent.

Please note that data transmission over the internet (e.g. by email) may have security gaps. Complete protection of data against access by third parties is not possible.

The data controller for processing on this website is:

Margarita Albarracín
Lohmühlenstraße 65
12435 Berlin
Germany

Phone: (+49) 030 25 32 91 20
Email: kontakt@holo-praxis.com

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

When you access this website, your browser automatically sends information to the server and it is temporarily stored in a log file.

The following are collected and stored until automatic deletion, without any action by you:

- IP address of the requesting device
- Date and time of access
- Name and URL of the file requested
- Website from which access is made (referrer URL)
- Browser and, where applicable, operating system of your device and the name of your access provider
- Volume of data transmitted
- HTTP status code

These data are processed to ensure a smooth connection, comfortable use, evaluation of system security and stability, and technical administration. They are automatically deleted after 30 days at the latest.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the security and proper operation of the website). These data are not combined with other sources.

This site uses SSL/TLS encryption for security and to protect the transmission of confidential content (e.g. enquiries or appointment requests) that you send to me as the site operator.

You can recognise an encrypted connection by the change from "http://" to "https://" in the address bar and by the padlock icon.

When encryption is active, data you transmit cannot be read by third parties. Despite encryption, complete security of data in transit cannot be guaranteed. Please do not send particularly sensitive health-related information by email or over unencrypted channels.

When you contact me by email or via the contact form, the data you provide (name, email address, phone number, message) are stored to process your request and any follow-up questions.

These data are not passed on without your consent.

Data processed: name, email, phone (if given), message content, date and time of the request. Purpose: processing your request, communication and documentation. Legal basis: Art. 6(1)(b) and (f) GDPR.

Storage period: data are deleted when no longer needed for the purpose, typically 6 months after the end of the correspondence, unless follow-up (e.g. appointment, treatment) has been agreed.

IMPORTANT: Please do not send detailed health data or therapeutically relevant information by email or the contact form. For confidential matters, please arrange an in-person or phone appointment first.

In the context of psychotherapeutic treatment, health data within the meaning of Art. 9 GDPR are processed. They are special categories of personal data and subject to enhanced protection.

Types of data: anamnesis and initial consultation documentation, diagnoses and findings, treatment progress and records, treatment goals and planning, correspondence related to treatment, and data relevant for billing.

Purpose: provision of psychotherapeutic treatment, documentation, billing and compliance with legal retention duties.

Legal basis: Art. 9(2)(h) GDPR in conjunction with § 22(1) no. 1(b) BDSG, and Art. 6(1)(b) GDPR.

Storage: patient records are retained for at least 10 years after the end of treatment (§ 630f BGB), in paper form in the practice and in digital form on encrypted, password-protected media without internet access. Thereafter they are destroyed or permanently deleted.

Confidentiality and professional secrecy: as a Heilpraktikerin für Psychotherapie I am subject to professional secrecy. Your data are treated in strict confidence and not disclosed to third parties except with your consent, where required by law, or in cases of justified necessity.

There is no automatic transfer to statutory health insurers. If you seek reimbursement from private insurers or similar, invoices and any required treatment reports are issued at your request and limited to what is necessary for billing.

This website is hosted by:

Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. Website: https://vercel.com

Personal data collected on this site are stored on the host’s servers (e.g. IP addresses, contact requests, metadata, contract and contact data, names, page access and technical data).

The host is used to perform the contract with potential or existing patients and to provide the site in a reliable and efficient manner. A data processing agreement pursuant to Art. 28 GDPR is in place. The processor processes your data only on my instructions and is contractually bound to comply with the GDPR.

Legal basis: Art. 6(1)(f) GDPR.

For online payments, payment service providers are used, including:

Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin D02 H210, Ireland. Privacy policy: https://stripe.com/de/privacy

Data required for payment (name, address, amount, bank or card details, date and time) are transmitted by you directly to the provider. Full payment data are not stored on this site. Processing is carried out by the provider on its servers under its own privacy policy and PCI-DSS requirements.

Legal basis: Art. 6(1)(b) GDPR. For further details see the provider’s privacy policy.

This site integrates an appointment booking widget from Cal.com, Inc. (San Francisco, CA, USA), which appears as a popup overlay when clicking a booking button.

When you use the widget, data such as IP address, browser type and version, operating system, referrer URL, and date and time are sent to Cal.com. When booking, the data you enter (name, email address, preferred date, and any additional details) are also transmitted and processed by Cal.com.

Cal.com uses these data exclusively for the booking function. After a successful booking, I receive the information needed to assign the appointment.

Legal basis: Art. 6(1)(b) and (a) GDPR. Cal.com acts as a data processor in accordance with its own privacy policy. For requests regarding data held by Cal.com, please contact us or Cal.com directly. Further information: https://cal.com/privacy

A Google Business Profile is used to improve the visibility and presentation of the practice.

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Users can view public information (address, opening hours, contact, photos) and leave reviews. When interacting (e.g. reviewing, directions, clicking phone or website), Google processes personal data (name, profile picture, IP, location, device, usage). I have no control over this processing.

Legal basis: Art. 6(1)(f) GDPR. Google is certified under the EU-US Data Privacy Framework. Further information: https://policies.google.com/privacy and https://www.dataprivacyframework.gov

This site uses Google Analytics (Google Ireland Limited, Dublin, Ireland). It uses cookies that allow analysis of how you use the site. The information generated (including your truncated IP address) is usually transferred to and stored on Google servers.

Data collected: device and browser, operating system, referrer URL, hostname, time of request, pages visited, dwell time, anonymised IP.

IP anonymisation is enabled on this site. Your IP is shortened within the EU/EEA before transfer. In exceptional cases the full IP may be sent and shortened on Google’s servers.

Legal basis: Art. 6(1)(a) GDPR. Google Analytics is only activated after you give consent via the cookie banner.

You can withdraw consent at any time via the cookie banner or prevent collection by installing the opt-out add-on: https://tools.google.com/dlpage/gaoptout

User- and event-level data are automatically deleted by Google after 14 months. Further information: https://policies.google.com/privacy and Google Analytics terms.

This site uses cookies (small text files on your device that store information exchanged with our system).

Technically necessary cookies: used without consent under § 25(2) no. 2 TDDDG for essential functions (storing your cookie choice, appointment booking, technical operation, recognising repeat visits). The site cannot function properly without them.

Analytics cookies (Google Analytics): only after your consent. Legal basis: Art. 6(1)(a) GDPR.

Cookie banner: on first visit you can choose which categories of cookies to allow. Your choice is stored in a technical cookie (12 months) and can be changed at any time via the “Cookie-Einstellungen” link in the footer or by deleting the cookie in your browser.

You can manage cookies in your browser settings. Instructions for common browsers (Chrome, Firefox, Safari, Edge) are linked in the German version of this policy. Disabling cookies may limit the functionality of the site.

Personal data are retained only as long as necessary for the purpose or as required by law.

Indicative periods: contact requests, 6 months after the end of the exchange; patient records, at least 10 years after the end of treatment (§ 630f BGB); billing data, 10 years (§ 147(2) AO); server logs, 30 days; session cookies until the end of the browser session; persistent cookies 1–24 months depending on type; cookie preference 12 months; Google Analytics data 14 months or until you withdraw consent.

Under the GDPR you have the rights of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20), objection (Art. 21) and withdrawal of consent (Art. 7(3)). There is no automated decision-making based on your data.

To exercise your rights, contact me in writing or by email:

Margarita Albarracín, Lohmühlenstraße 65, 12435 Berlin. Email: kontakt@holo-praxis.com

I will respond as a rule within one month; in justified cases this may be extended by two further months, of which you will be informed.

You have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data.

Supervisory authority for Berlin:

Berliner Beauftragte für Datenschutz und Informationsfreiheit
Friedrichstraße 219, 10969 Berlin
Phone: 030 / 13889-0, Fax: 030 / 2155050
Email: mailbox@datenschutz-berlin.de
Website: https://www.datenschutz-berlin.de | Contact form: https://www.datenschutz-berlin.de/kontakt.html

You may also contact the supervisory authority of your place of residence or work. List of German supervisory authorities: https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html

I reserve the right to change this privacy policy to reflect legal or factual changes to the website or the processing.

The current version is always available on this page. If changes materially affect your rights, you will be informed by a clear notice on the site.

Last updated: January 2026.

For questions about data protection:

Margarita Albarracín
Email: kontakt@holo-praxis.com
Phone: (+49) 030 25 32 91 20