1. Responsible Entity

Psychotherapy Practice Spes
Christina Spes
Goethestraße 68, 80336 Munich
Phone: 0176 56127035
Email: info@vtmuenchen.de

2. Basic Information on Data Protection

Your personal data, especially your health data, is treated with the utmost confidentiality and processed exclusively in compliance with applicable data protection regulations – in particular according to GDPR and BDSG.

3. Purpose of Data Processing

Processing is carried out to fulfill the treatment contract and associated obligations:

• Appointment scheduling
• Diagnostics and treatment
• Documentation according to § 630f BGB
• Billing and, if applicable, fee management

4. Types of Data Processed

In my practice, I process the following personal data in particular:

• Master data (e.g., name, date of birth, address)
• Contact data (e.g., phone number, email address)
• Health data (e.g., diagnoses, anamneses, treatment documentation)
• Billing data (e.g., invoice information)

This data is considered special categories of personal data according to Art. 9(1) GDPR and is subject to special protection.

5. Legal Basis for Processing

• Art. 6(1)(b) GDPR (Contract fulfillment)
• Art. 6(1)(c) GDPR (Legal obligations)
• Art. 9(2)(h) GDPR (Health data processed by health professionals)

6. Data Disclosure

Data is only disclosed with your consent or if legally required (e.g., health authorities). Medically necessary consultations also require your consent.

7. Storage Period and Deletion

Health data is stored in accordance with § 630f BGB for at least 10 years. Afterwards, data is deleted in a privacy-compliant manner.

8. Your Rights

You have the right at any time to:

• Access (Art. 15 GDPR)
• Correction (Art. 16 GDPR)
• Deletion (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Objection (Art. 21 GDPR)
• Data portability (Art. 20 GDPR)
• Complaint to the supervisory authority

Please note: Health data is subject to statutory retention periods and cannot be deleted immediately.

9. Technical and Organizational Measures

• Encrypted email communication (where possible)
• Practice management software with access protection
• Lockable filing cabinets
• No cloud services for sensitive data

10. Third-Party Content and Cookies

When visiting this website, technical data (e.g., IP address, time) is automatically stored. No analytics or tracking tools are used. Only technically necessary cookies are active.

Third parties (e.g., fonts, maps) may receive your IP address to provide their content.

You can disable cookies in your browser. This may affect website functionality.

More information: Cookie Policy

11. Contact

Data transmission over the Internet may have security vulnerabilities. Please do not send sensitive health data via email or form.

By using the contact form or email, you consent under Art. 6(1)(a) GDPR to data processing. Your data will only be stored for handling your request and not shared with third parties.

You may revoke your consent at any time.