Source: https://locationindependenttherapists.com/privacy-policy/
Timestamp: 2020-08-06 12:45:18
Document Index: 145399924

Matched Legal Cases: ['Art. 4', 'Art. 13', 'Art. 6', 'Art. 7', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 32', 'Art. 25', 'Art. 6', 'Art. 28', 'Art. 44', 'Art. 15', 'Art. 16', 'Art. 17', 'Art. 18', 'Art. 20', 'Art. 77', 'Art. 21', 'Art. 6', 'Art. 28', 'Art. 6', 'Art. 6', 'Art. 9', 'Art. 6', 'Art. 7', 'Art. 9', 'Art. 9', 'Art. 22', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 7', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 7', '§ 7', '§ 7', 'Art. 6', 'art. 6', 'art. 28', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6']

Privacy Policy - Location Independent Therapists
This data protection declaration clarifies the type, scope and purpose of the processing of personal data (hereinafter referred to as “data”) within our online offer and the websites, functions and contents connected with it as well as external online presences, such as our Social Media Profile (hereinafter jointly referred to as “online offer”). With regard to the terms used, e.g. “processing” or “responsible person”, we refer to the definitions in Art. 4 of the Basic Data Protection Regulation (GDPR).
“Processing” means any operation or set of operations which are performed upon personal data, whether or not by automatic means. The term is broad and covers virtually all processing of data.
“Profiling” shall mean any automated processing of personal data consisting in using such personal data to evaluate certain personal aspects relating to a natural person, in particular with a view to analysing or predicting aspects relating to the performance of work, the economic situation, health, personal preferences, interests, reliability, conduct, whereabouts or movements of that natural person.
“Controller” shall mean the natural or legal person, public authority, agency or any other body which alone or jointly with others determines the purposes and means of the processing of personal data.
In accordance with Art. 13 GDPR, we inform you of the legal basis of our data processing. If the legal basis is not stated in the data protection declaration, the following applies: The legal basis for obtaining consent is Art. 6 Para. 1 lit. a and Art. 7 GDPR, the legal basis for processing for the purpose of fulfilling our services and implementing contractual measures and answering enquiries is Art. 6 Para. 1 lit. b GDPR, the legal basis for processing for the purpose of fulfilling our legal obligations is Art. 6 Para. 1 lit. c GDPR, and the legal basis for processing for the purpose of safeguarding our legitimate interests is Art. 6 Para. 1 lit. f GDPR. In the event that vital interests of the data subject or another natural person require the processing of personal data, Article 6 paragraph 1 letter d GDPR serves as the legal basis.
In accordance with Art. 32 GDPR and taking into account the state of the art, the implementation costs and the nature, scope, circumstances and purposes of the processing as well as the varying probability of occurrence and severity of the risk to the rights and freedoms of natural persons, we take appropriate technical and organisational measures to ensure a level of protection commensurate with the risk; these measures include, in particular, safeguarding the confidentiality, integrity and availability of data by controlling the physical access to the data as well as the access, input, transmission, safeguarding of availability and its separation. Furthermore, we have established procedures to ensure that data subjects’ rights are exercised, data is deleted, and we respond to any threats to the data. Furthermore, we take the protection of personal data into account as early as the development or selection of hardware, software and procedures, in accordance with the principle of data protection by designing technology and by using data protection-friendly default settings (Art. 25 GDPR).
If, in the course of our processing, we disclose data to other persons and companies (processors or third parties), transfer it to them or otherwise grant them access to the data, this is only done on the basis of a legal authorisation (e.g. if the data must be transferred to third parties, such as payment service providers, in accordance with Art. 6 Para. 1 letter b GDPR for the fulfilment of the contract), if you have given your consent, if a legal obligation provides for this or on the basis of our legitimate interests (e.g. when using agents, web hosts, etc.).
If we commission third parties to process data on the basis of a so-called “contract processing agreement”, this is done on the basis of Art. 28 GDPR.
If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) or if this is done in the context of using the services of third parties or disclosure or transfer of data to third parties, this will only take place if it is done to fulfil our (pre-)contractual obligations, on the basis of your consent, on the basis of a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we will only process or transfer the data in a third country if the special requirements of Art. 44 ff. GDPR. This means that the processing is carried out, for example, on the basis of special guarantees, such as the officially recognised determination of a level of data protection corresponding to that of the EU (e.g. for the USA through the “Privacy Shield”) or compliance with officially recognised special contractual obligations (so-called “standard contractual clauses”).
You have the right to obtain confirmation as to whether or not data in question is being processed and to obtain information about this data and to receive further information and a copy of the data in accordance with Art. 15 GDPR.
In accordance with Art. 16 DPA, you have the right to request the completion of data concerning you or the correction of incorrect data concerning you.
In accordance with Art. 17 GDPR, you have the right to demand that data concerning you be deleted immediately, or alternatively, in accordance with Art. 18 GDPR, to demand that the processing of the data be restricted.
You have the right to demand that the data concerning you which you have made available to us be received in accordance with Art. 20 GDPR and to demand that it be passed on to other responsible parties.
You also have the right to lodge a complaint with the competent supervisory authority in accordance with Art. 77 GDPR.
You can object to the future processing of data concerning you at any time in accordance with Art. 21 GDPR. The objection may, in particular, be made against processing for the purposes of direct advertising.
“Cookies” are small files that are stored on the user’s computer. Different information can be stored within the cookies. A cookie is primarily used to store information about a user (or the device on which the cookie is stored) during or after his visit to an online offer. Temporary cookies, or “session cookies” or “transient cookies”, are cookies that are deleted after a user leaves an online offer and closes his browser. In such a cookie, for example, the contents of a shopping cart in an online shop or a login status can be stored. Cookies are described as “permanent” or “persistent” if they remain stored even after the browser is closed. For example, the login status can be saved if users visit the site after several days. Likewise, the interests of the users can be stored in such a cookie, which are used for range measurement or marketing purposes. “Third-party cookies” are cookies that are offered by providers other than the person responsible for the online offer (otherwise, if it is only their cookies, they are called “first-party cookies”).
The data processed by us will be deleted or restricted in their processing in accordance with articles 17 and 18 GDPR. Unless expressly stated in this data protection declaration, the data stored by us will be deleted as soon as they are no longer required for their intended purpose and the deletion does not conflict with any statutory storage obligations. If the data are not deleted because they are required for other and legally permissible purposes, their processing will be restricted. This means that the data is blocked and not processed for other purposes. This applies, for example, to data that must be retained for commercial or tax law reasons.
– Contract data (e.g., subject matter of the contract, duration, customer category)
In doing so, we or our hosting provider process inventory data, contact data, content data, contract data, usage data, meta and communication data of customers, interested parties and visitors of this online offer on the basis of our legitimate interests in an efficient and secure provision of this online offer in accordance with Art. 6 para. 1 lit. f GDPR in conjunction with Art. 28 GDPR (conclusion of contract processing agreement).
We, or our hosting provider, on the basis of our legitimate interests as defined in Art. 6 Par. 1 lit. f. GDPR process data about every access to the server on which this service is located (so-called server log files). The access data includes the name of the accessed website, file, date and time of access, transferred data volume, notification of successful access, browser type and version, the user’s operating system, referrer URL (the previously visited site), IP address and the requesting provider.
For security reasons (e.g. to clarify misuse or fraud), log file information is stored for a maximum of 7 days and then deleted. Data whose further storage is required for evidence purposes are excluded from deletion until the respective incident has been finally clarified.
We process the data of our clients and interested parties and other clients or contractual partners (uniformly referred to as “clients”) in accordance with Art. 6 Para. 1 letter b) GDPR in order to provide them with our contractual or pre-contractual services. The data processed in this context, the nature, scope and purpose of such processing and the necessity of processing it, shall be determined by the underlying contractual relationship. The processed data basically includes the stock and master data of the clients (e.g. name, address, etc.), as well as contact data (e.g. e-mail address, telephone number, etc.), contract data (e.g. services used, fees, names of contact persons, etc.) and payment data (e.g. bank details, payment history, etc.).
Within the scope of our services, we may also process special categories of data in accordance with Art. 9 Para. 1 GDPR, in particular information on the health of clients, if necessary with reference to their sexual life or sexual orientation, ethnic origin or religious or ideological convictions. For this purpose, we obtain, if necessary, in accordance with Art. 6 para. 1 lit. a., Art. 7, Art. 9 para. 2 lit. a. GDPR, and otherwise process the special categories of data for the purposes of health care on the basis of Art. 9 para. 2 lit. h. GDPR, Art. 22 Para. 1 No. 1 b. BDSG.
As far as it is necessary for the fulfilment of the contract or legally required, we disclose or transfer the clients’ data within the scope of communication with other professionals, third parties involved in the fulfilment of the contract as necessary or typically, such as billing offices or comparable service providers, if this is necessary for the provision of our services according to Art. 6 para. 1 lit b. GDPR, legally according to Art. 6 Para. 1 lit. c. GDPR, our interests or those of our clients in efficient and cost-effective health care as a legitimate interest in accordance with Art. 6 para. 1 lit. f. GDPR or is necessary according to Art. 6 para. 1 lit. d. GDPR to protect the vital interests of clients or another natural person or within the framework of consent according to Art. 6 para. 1 lit. a., Art. 7 GDPR.
We process data within the framework of administrative tasks as well as the organisation of our operations, financial accounting and compliance with legal obligations, such as archiving. In doing so, we process the same data that we process within the scope of providing our contractual services. The basis for processing is Art. 6 Par. 1 lit. c. GDPR, Art. 6 para. 1 lit. f. GDPR. Customers, interested parties, business partners and website visitors are affected by the processing.
The purpose of and our interest in processing lies in the administration, financial accounting, office organisation, archiving of data, i.e. tasks that serve to maintain our business activities, perform our duties and provide our services. The deletion of the data with regard to contractual services and contractual communication corresponds to the data mentioned in these processing activities.
We disclose or transfer data to the tax authorities, consultants such as tax advisors or auditors, as well as other fee agencies and payment service providers.
In order to run our business economically, to identify market trends, customer and user wishes, we analyse the data available to us on business transactions, contracts, inquiries, etc. In doing so, we process inventory data, communication data, contract data, payment data, usage data, metadata on the basis of Art. 6 para. 1 lit. f. GDPR, whereby the persons concerned include customers, interested parties, business partners, visitors and users of the online offer.
The analyses are carried out for the purpose of business management evaluations, marketing and market research. In doing so, we can take into account the profiles of the registered users with details, e.g. on their purchase transactions. The analyses serve us to increase user-friendliness, to optimise our offer and for business management purposes. The analyses serve only us and are not disclosed externally, unless they are anonymous analyses with summarised values.
When contacting us (e.g. by contact form, e-mail, telephone or via social media), the user’s details are processed for the purpose of handling the contact request and its processing in accordance with Art. 6 Para. 1 lit. b) GDPR. The user’s details may be stored in a customer relationship management system (“CRM system”) or comparable enquiry organisation.
If users leave comments or other contributions, their IP addresses may be stored on the basis of our legitimate interests within the meaning of Art. 6 para. 1 lit. f. GDPR for 7 days. This is done for our security in case someone leaves illegal content in comments and contributions (insults, prohibited political propaganda, etc.). In this case we can be prosecuted ourselves for the comment or contribution and are therefore interested in the identity of the author.
Furthermore, we reserve the right, on the basis of our legitimate interests in accordance with Art. 6 para. 1 lit. f. GDPR, to process the information provided by users for the purpose of spam detection.
The data provided in the context of the comments and contributions will be permanently stored by us until the users object.
Users can subscribe to the follow-up comments with their consent in accordance with Art. 6 para. 1 lit. a GDPR. Users will receive a confirmation e-mail to check whether they are the owner of the e-mail address entered. Users can unsubscribe from ongoing commentary subscriptions at any time. The confirmation e-mail will contain information on the cancellation options. For the purpose of proving users’ consent, we store the registration point along with the users’ IP address and delete this information when users unsubscribe from the subscription.
Our online offer uses the service “Akismet”, which is offered by Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA. The use is made on the basis of our legitimate interests in the sense of Art. 6 para. 1 lit. f) GDPR. With the help of this service, comments from real people are distinguished from spam comments. For this purpose, all comment data is sent to a server in the USA, where it is analysed and stored for four days for comparison purposes. If a comment has been classified as spam, the data is stored beyond this period. This information includes the name entered, the email address, the IP address, the comment content, the referrer, information on the browser used and the computer system and the time of entry.
We use, within our online offer, and especially in our blog, the service Gravatar of Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA.
Gravatar is used on the basis of our legitimate interests in the sense of Art. 6 Para. 1 lit. f) GDPR, because with the help of Gravatar we offer the authors of contributions and comments the possibility to personalise their contributions with a profile picture.
If users do not want a user image associated with their email address to appear in Gravatar’s comments, they should use an email address that is not on file with Gravatar. We would also like to point out that it is also possible to use an anonymous e-mail address, or no e-mail address at all, if users do not want their own e-mail address to be sent to Gravatar. Users can completely prevent the transmission of data by not using our comment system.
Germany: The dispatch of the newsletter and the associated measurement of success is based on the consent of the recipients according to Art. 6 para. 1 lit. a, Art. 7 GDPR in connection with § 7 para. 2 No. 3 UWG or on the basis of the legal permission according to § 7 para.
The registration procedure is recorded on the basis of our legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR. We are interested in the use of a user-friendly and secure newsletter system that serves our business interests as well as meeting the expectations of the users and also allows us to provide proof of consent.
The newsletters are sent via the mailing service “MailChimp”, a newsletter mailing platform of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. The data protection regulations of the mail service provider can be viewed here: https://mailchimp.com/legal/privacy/. The Rocket Science Group LLC d/b/a MailChimp is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with the European level of data protection (https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active). The mailing service provider is used on the basis of our legitimate interests according to art. 6 para. 1 lit. f GDPR and an order processing contract according to art. 28 para. 3 sentence 1 GDPR.
The mailing service provider may use the recipient’s data in pseudonymous form, i.e. without allocation to a user, to optimise or improve its own services, e.g. for technical optimisation of the dispatch and presentation of newsletters or for statistical purposes. However, the mailing service provider does not use the data of our newsletter recipients to write to them itself or to pass the data on to third parties.
This information is used for the technical improvement of the services based on the technical data or the target groups and their reading behaviour based on their retrieval locations (which can be determined by means of the IP address) or the access times. Statistical surveys also include determining whether newsletters are opened, when they are opened and which links are clicked. For technical reasons, this information can be assigned to individual newsletter recipients. However, it is neither our intention nor, if used, that of the mailing service provider to observe individual users. The evaluations serve us much more to recognise the reading habits of our users and to adapt our content to them or to send different content according to the interests of our users.
On the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f. GDPR) the plugin Jetpack (here the sub-function “WordPress Stats”), which integrates a tool for the statistical evaluation of visitor accesses, and by Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA. Jetpack uses so-called “cookies”, text files which are stored on your computer and which enable an analysis of your use of the website.
On the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f. GDPR) we use Google Analytics, a web analysis service of Google LLC (“Google”). Google uses cookies.
The information generated by the cookie about the use of the online offer by the user is usually transferred to a Google server in the USA and stored there.
Within our online offer, the so-called “Facebook pixel” of the social network Facebook, which is operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or if you are resident in the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”), is used due to our legitimate interests in analysis, optimisation and economic operation of our online offer and for these purposes.
Within our online offer on the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offer in the sense of Art. 6 Par. 1 lit. f. GDPR), we use content or service offers from third parties in order to integrate their content and services, such as videos or fonts (hereinafter uniformly referred to as “content”).
This always presupposes that the third-party providers of these contents are aware of the IP address of the users, as without the IP address they would not be able to send the contents to their browsers. The IP address is therefore necessary for the display of this content. We make every effort to use only such content whose respective providers use the IP address only to deliver the content. Third party providers may also use so-called pixel tags (invisible graphics, also known as “web beacons”) for statistical or marketing purposes. “Pixel tags” can be used to evaluate information such as visitor traffic on the pages of this website. The pseudonymous information may also be stored in cookies on the user’s device and may contain technical information about the browser and operating system, referring websites, visiting time and other details about the use of our online offer, as well as being linked to such information from other sources.
On the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f. GDPR) Social Plugins (“Plugins”) of the social network facebook.com, which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”). The Plugins can display interaction elements or content (e.g. videos, graphics or text contributions) and can be recognised by one of the Facebook logos (white “f” on blue tile, the words “Like”, “Like” or a “thumbs up” sign) or are marked with the addition “Facebook Social Plugin”. The list and appearance of the Facebook Social Plugins can be viewed here: https://developers.facebook.com/docs/plugins/.
When a user calls up a function of this online offer that contains such a plugin, his or her device establishes a direct connection with the Facebook servers. The content of the plugin is transmitted by Facebook directly to the user’s device and integrated into the online offer by the user. User profiles can be created from the processed data. We therefore have no influence on the extent of the data that Facebook collects with the help of this plugin and therefore inform the users according to our state of knowledge.
By integrating the plugins, Facebook receives the information that a user has called up the corresponding page of the online offer.
If the user is logged in to Facebook, Facebook can assign the visit to his or her Facebook account. When users interact with the plugins, for example, by pressing the Like button or posting a comment, the corresponding information is transmitted directly from your device to Facebook and stored there. If a user is not a member of Facebook, it is still possible for Facebook to find out his or her IP address and store it. According to Facebook, only an anonymised IP address is stored in Germany.
Within our online offering, functions and content of the Xing service offered by XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany, can be integrated. This can include, for example, content such as images, videos or texts and buttons with which users can express their favourites regarding the content, the authors of the content or subscribe to our contributions. If the users are members of the Xing platform, Xing can assign the call of the above-mentioned contents and functions to the user profiles there. Privacy policy of Xing: https://www.xing.com/app/share?op=data_protection.
Within our online offer, functions and contents of the service LinkedIn, offered by the LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, can be integrated. This may include, for example, content such as images, videos or text, and buttons that allow users to express their favourites regarding the content, the authors of the content or to subscribe to our contributions. If the users are members of the LinkedIn platform, LinkedIn can assign the access to the above-mentioned contents and functions to the users’ profiles there. LinkedIn’s privacy policy: https://www.linkedin.com/legal/privacy-policy. LinkedIn is certified under the Privacy Shield Agreement and thus offers a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active). Privacy policy: https://www.linkedin.com/legal/privacy-policy, Opt-Out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
On this website, we use social plugins from the Pinterest social network, which is operated by Pinterest Inc, 808 Brannan Street, San Francisco, CA 94103-490, USA (“Pinterest”). When you visit a page containing such a plugin, your browser establishes a direct connection to the Pinterest servers. The plugin transfers protocol data to the Pinterest server in the USA. This log data may include your IP address, the address of websites visited that also contain Pinterest functions, the type and settings of your browser, the date and time of your request, your use of Pinterest and cookies. The storage and analysis of the data is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the widest possible visibility in the social media. Further information on the purpose, scope and further processing and use of the data by Pinterest, as well as your rights and options for the protection of your privacy, can be found in the Pinterest data protection information at https://policy.pinterest.com/de/privacy-policy