Privacy Policy | Dr. Julia Giesemann

Status: July 2026

1. Controlling entity

The controller responsible for data processing on this website is:

Dr. Julia Giesemann

Psychological Psychotherapist

Schäufeleinstr. 5

80687 Munich

Email: info@praxisdrgieseman.de

Website: https://www.praxisdrgiesemann.de

2. General Information on Data Processing

I take the protection of your personal data very seriously. Your personal data will be treated confidentially and in accordance with the statutory data protection regulations (in particular the GDPR and the BDSG) as well as this privacy policy.

This privacy policy informs you about which personal data I collect, for what purposes I process them, on what legal basis this takes place, and what rights you have.

3. Hosting

This website is hosted by Wix.com Ltd. (Nemal St. 40, 6350671 Tel Aviv, Israel).

When you visit my website, Wix collects various log files including your IP address. For details, please refer to Wix’s privacy policy: https://de.wix.com/about/privacy.

A data processing agreement (Data Processing Agreement) pursuant to Art. 28 GDPR has been concluded with Wix. The current agreement can be found at: https://www.wix.com/about/privacy-dpa-users.

4. Server Log Files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits. These include in particular:

Browser type and browser version
Operating system used
Referrer URL
Host name of the accessing computer
Time of the server request
IP address

The collection of this data is based on Art. 6(1)(f) GDPR. I have a legitimate interest in the technically error-free presentation and security of the website.

5. Contact Form

If you send me enquiries via the contact form, the data you provide (name, email address, telephone number, message and any other information) will be stored in order to process your enquiry and to follow up if necessary.

Processing is based on:

Art. 6(1)(b) GDPR (pre-contractual measures / performance of a contract) or
Art. 6(1)(a) GDPR (consent) and
Art. 6(1)(f) GDPR (legitimate interest in processing enquiries).

The data will be deleted as soon as they are no longer required for processing your enquiry, unless statutory retention obligations prevent this.

6. Email Communication

If you write to me by email, I will store your details in order to process the enquiry. Please note that communication via unencrypted email may be insecure. For particularly sensitive content, I recommend encrypted communication or personal contact.

7. Appointment Booking via Doctolib

For online appointment scheduling and appointment management, I use the service Doctolib (Doctolib GmbH, Mehringdamm 51, 10961 Berlin).

Doctolib processes personal data on my behalf, in particular name, contact details, desired appointment and, where applicable, information about the reason for the appointment. Doctolib acts as a processor within the meaning of Art. 28 GDPR. A corresponding data processing agreement has been concluded with Doctolib.

The data is stored on servers in Germany and France. Doctolib holds certifications for the hosting of health data and applies high technical and organisational security measures.

The legal basis for processing is Art. 6(1)(b) GDPR as well as Art. 9(2)(h) GDPR in conjunction with Section 22 BDSG (health care and medical diagnosis).

Further information: https://www.doctolib.de/gesundheit/datenschutz/

8. Google Analytics 4

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

Google Analytics uses cookies and similar technologies to analyse the use of the website. The following information may be collected, among other things:

Truncated / anonymised IP address
Device type, browser and operating system
Pages visited and time spent
Origin of visitors (referrer)
Approximate location data (at city level)

The information generated by Google Analytics is usually transferred to and stored on Google servers in the USA. Google LLC is certified under the EU-US Data Privacy Framework. In addition, the Standard Contractual Clauses approved by the EU Commission apply.

The use of Google Analytics takes place exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR. Consent is obtained via a cookie consent banner. Without your consent, Google Analytics will not be loaded.

I have limited the data retention period in Google Analytics to what is necessary (generally 14 months). A data processing agreement has been concluded with Google. Google Signals is disabled.

You can withdraw your consent at any time via the cookie banner. Further information can be found at: https://policies.google.com/privacy https://support.google.com/analytics/answer/12017362

9. Google Maps

Google Maps is integrated on this website to display the location of my practice. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

By using Google Maps, information about the use of this website (including your IP address) may be transferred to and stored on Google servers in the USA. Google LLC is certified under the EU-US Data Privacy Framework. In addition, the Standard Contractual Clauses of the EU Commission apply.

The integration of Google Maps is based on your consent pursuant to Art. 6(1)(a) GDPR. Consent is obtained via the cookie consent banner. Without your consent, the map will not be loaded (or only a placeholder will be displayed).

Further information on the handling of user data can be found in Google’s privacy policy: https://policies.google.com/privacy

10. Cookies and Consent Management (Usercentrics)

This website uses cookies. Technically necessary cookies are set on the basis of Art. 6(1)(f) GDPR.

For all non-essential cookies (in particular Google Analytics and Google Maps), I obtain your prior express consent via a cookie consent banner (Art. 6(1)(a) GDPR). Consent can be withdrawn at any time.

To manage consents, I use the consent management service Usercentrics of Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich.

Usercentrics processes the following data on my behalf: date and time of the visit or of the consent/refusal, device information, browser information and cookie preferences. Processing takes place in order to fulfil the statutory documentation obligation under Art. 7(1) GDPR and is based on Art. 6(1)(c) GDPR.

Usercentrics acts as a processor. The data is stored in the European Union and is generally retained for 12 months. Further information can be found in the privacy policy of Usercentrics: https://usercentrics.com/de/datenschutzerklaerung/

11. Processing of Special Categories of Personal Data (Health Data)

In the context of psychotherapeutic treatment, I process special categories of personal data within the meaning of Art. 9(1) GDPR, in particular health data.

Processing is based on:

Art. 9(2)(h) GDPR in conjunction with Section 22(1) No. 1(b) BDSG (health care, medical diagnosis, treatment) as well as
for the performance of the treatment contract (Art. 6(1)(b) GDPR).

The data is processed exclusively for the purposes of diagnosis, treatment, documentation and billing. The retention period is determined by the statutory retention periods and is generally 10 years after the end of treatment.

12. Professional Secrecy

As a psychological psychotherapist, I am subject to the statutory duty of confidentiality pursuant to Section 203 of the German Criminal Code (StGB). All information entrusted to me in the context of psychotherapeutic treatment is treated strictly confidentially.

Disclosure to third parties only takes place with your express written consent or if a statutory exception applies (e.g. in the event of an acute risk to yourself or others in accordance with professional and criminal law provisions).

13. Your Rights as a Data Subject

You have the right at any time to:

obtain information about the personal data stored about you (Art. 15 GDPR),
have incorrect data rectified (Art. 16 GDPR),
request the erasure of your data (Art. 17 GDPR),
request restriction of processing (Art. 18 GDPR),
object to processing (Art. 21 GDPR),
request data portability (Art. 20 GDPR),
withdraw consent given at any time (Art. 7(3) GDPR).

You also have the right to lodge a complaint with the competent supervisory authority (Bavarian State Office for Data Protection Supervision).

14. Objection to Advertising Emails

The use of contact data published within the scope of the imprint obligation for the transmission of advertising and information material that has not been expressly requested is hereby objected to. I reserve the right to take legal action in the event of the unsolicited sending of advertising information.

15. Data Security

I implement technical and organisational security measures to protect your data against accidental or intentional manipulation, loss, destruction or access by unauthorised persons. The measures are continuously improved in line with the state of the art.

16. Currency and Amendment of this Privacy Policy

This privacy policy is currently valid and has the status of July 2026. Due to the further development of the website or changes in legal or official requirements, it may become necessary to amend this privacy policy. The current version can always be found on this page.