This privacy policy is required under German law. In case of doubt, the German version (Datenschutzerklärung) prevails.
Legal Notice (Impressum)
Psychoanalytisch-Psychotherapeutische Praxis Lampersberger
Belgradstraße 9, 80796 München
Psychological psychotherapist in private practice, in a shared practice (Praxisgemeinschaft)
Privacy
1. General information
The protection of your personal data is very important to me, Florian Lampersberger. This privacy policy informs you about how your personal data is collected, processed and used when you visit my website. Personal data is any information that can be used to identify you personally.
2. Data collection on this website
Controller
Data processing on this website is carried out by me, Florian Lampersberger, operator of the Psychoanalytisch-Psychotherapeutische Praxis Lampersberger. You will find my contact details in the legal notice (Impressum) of this website.
How do I collect your data?
Your data is collected in two ways:
1. Direct entry: You enter your data yourself, for example by filling in a contact form.
2. Automatic collection: Technical data such as the browser used, the operating system and the time of the page visit are collected automatically as soon as you visit the website.
What do I use your data for?
I use your data to ensure that the website is provided without errors and to carry out general analyses of how my website is used.
3. Hosting
Hosting by do.de (Domainfactory)
My website is hosted by do.de (Domainfactory). This provider stores technical data such as IP addresses in so-called log files. This data is processed on the basis of my legitimate interest in the secure and efficient provision of my website (Art. 6 (1) (f) DSGVO (GDPR)).
For further information, please see the privacy policy of do.de.
4. Online appointment booking with Epikur
For online appointment booking, I use the services of Epikur Software & IT-Service GmbH & Co. KG. If you use this function, you must register with Epikur, in the course of which personal data such as your name, email address and IP address are collected. This data is transmitted to me in encrypted form and used to manage your appointments and patient data.
Legal basis of the processing: The data processing is based on your consent (Art. 6 (1) (a) DSGVO (GDPR)) and, where applicable, on the performance of a contract (Art. 6 (1) (b) DSGVO (GDPR)). Further information on data processing by Epikur can be found in the privacy policy of Epikur.
5. Participation in the QSP project
My psychoanalytic-psychotherapeutic practice takes part in the project for quality assurance in psychotherapy (QSP), which is conducted by the QSP Institute in cooperation with the Chair of Clinical Psychology at the University of Kassel.
Data processing within the QSP project
When appointments are arranged via Epikur, your name, date of birth and email address are collected and passed on in encrypted form to the QSP Institute to enable routine diagnostics and quality assurance. No further personal data is passed on.
Data protection and data security in the QSP project
All data collected within the QSP project is stored in pseudonymised form. Access to this data is restricted exclusively to me and the responsible staff of the QSP project, who are bound by professional confidentiality. Under no circumstances is personal data passed on to third parties.
Further information can be found in the privacy policy of the QSP Institute.
6. Your rights
Access, rectification and erasure
You have the right to obtain information at any time about your stored personal data, its origin and recipients, and the purpose of the data processing. You also have the right to request the rectification or erasure of this data.
Withdrawal of your consent
If you have given me consent to process your data, you can withdraw it at any time with effect for the future.
Right to object
You have the right to object to the processing of your personal data where it is based on Art. 6 (1) (e) or (f) DSGVO (GDPR). If you object, I will no longer process your personal data unless I can demonstrate compelling legitimate grounds for the processing.
Right to data portability
You have the right to have data that I process on the basis of your consent or in performance of a contract handed over to you or to a third party in a common, machine-readable format.
Right to lodge a complaint with a supervisory authority
In the event of violations of the DSGVO (GDPR), you have the right to lodge a complaint with a supervisory authority.
7. Data security
This website uses SSL or TLS encryption to ensure the security of your data during transmission. You can recognise an encrypted connection by the fact that the address line of your browser changes from “http://” to “https://” and a padlock symbol is displayed in your browser bar.
Audience measurement (self-hosted system, no cookies)
This website uses a self-operated, data-minimising system for audience measurement. The only data collected is: the page visited, the referring domain (only for external referrals), the device category (mobile/tablet/desktop), the language version, the time spent on the page and the scroll depth. To distinguish related page views, a randomly generated identifier is placed in your browser’s sessionStorage; it contains no personal data, is not stored as a cookie and expires automatically when the browser tab is closed. No IP addresses are stored, no profiles are created and no data is transmitted to third parties; all data remains on this website’s server. The legal basis is Art. 6 (1) (f) DSGVO (GDPR) (legitimate interest in the statistical analysis of the use of this website).
Coaching clients
For the non-clinical coaching and consulting services, I process the data required to initiate and perform the contract (contact details, appointments, billing data, and notes on the course of the coaching) on the basis of Art. 6(1)(b) GDPR. Content-related notes are additionally protected by criminal-law confidentiality under Section 203 of the German Criminal Code and are never shared with the commissioning organisation — including when a company pays for the coaching. Billing data is retained in accordance with statutory tax obligations (Section 147 AO); all other records are deleted after the coaching ends, as soon as no statutory retention grounds remain.