Datenschutzerklärung
Last updated: August 2026
Controller: Julia-Elisabeth Galow (see Legal notice)
Summary
This website presents the psychotherapy practice and offers a contact form. There are no patient user accounts and no third-party analytics or advertising trackers.
What we process
- Contact form — email (required), message (required), privacy acknowledgement (required); optional name, phone, best time to reach you, insurance type, insurance name, subject; language de / en. Stored in MongoDB on the self-hosted Hetzner VPS and sent by email via Resend (notification to the practice + confirmation to you). Please do not send detailed health records via the form; for emergencies call your local emergency number.
- Spam protection — Cloudflare Turnstile (token / technical data, possibly IP); not stored with the submission.
- Hosting logs — typical server access logs on the Hetzner VPS (security/operation).
- Optional booking embed — if a Doctolib/Tymia (or similar) iframe is used, that provider’s privacy policy applies to data entered there.
- Admin only — CMS login for practice staff; public users cannot upload files.
- Cookies — only technically necessary cookies for admin/preview or a temporary under-construction bypass; no analytics cookies. Locale is chosen via the URL, not a cookie.
Contact form fields
Required
- Email address
- Message
- Acknowledgement of this privacy policy
- Request language (de / en) — technically required
Optional
- First name, last name
- Phone number
- Best time to reach you
- Insurance type
- Health insurance / provider name
- Subject
Recipients / processors
- Hetzner Online GmbH — hosting (server, infrastructure)
- Resend, Inc. — transactional emails for the contact form
- Cloudflare, Inc. — Turnstile spam protection
- Booking provider (if used) — online appointment booking via embed only
Further info: Cloudflare Privacy Policy, Resend Privacy Policy
Legal bases (overview)
Pre-contractual steps and communication (Art. 6(1)(b) GDPR); consent where you voluntarily provide health-related information and tick the acknowledgement (Art. 6(1)(a) / Art. 9(2)(a) GDPR); legitimate interests for hosting, security and spam protection (Art. 6(1)(f) GDPR).
Your rights
Access, rectification, erasure, restriction, portability, objection, withdrawal of consent, and complaint to a supervisory authority (for Saxony: Sächsische Datenschutz- und Transparenzbeauftragte).
Contact: mail@psychotherapie-galow.de