Privacy notice
Draft
This privacy notice covers the public website. The German version is authoritative. The personal area for current clients will receive a separate, professionally drafted privacy notice before it is introduced.
1. Controller
Felix Michael Schönberger
[street, postcode, Berlin]
Email: kontakt@beratungschoenberger.de
Data protection officer: Marc Schönberger, contact: datenschutzfrankfurt.de/kontakt.
2. Hosting
This website is hosted by [host, company, registered office in the EU] which processes server log data on my behalf under an Art. 28 GDPR data processing agreement. Legal basis: Art. 6(1)(f) GDPR.
3. Server log files
On access, your browser transmits information that is logged: IP address (possibly shortened), date and time, page requested, data volume, referrer, browser type and operating system. Purpose: fault-free operation and security. Legal basis: Art. 6(1)(f) GDPR. Retention: [e.g. 7–14 days].
4. Fonts
The site uses the fonts “Fraunces” and “Inter”. They are hosted locally on this website’s own server. Loading them establishes no connection to third-party servers (such as Google Fonts) and transmits no IP address to third parties.
5. Contact by email
This website runs no contact form of its own. If you email me, I process the information it contains (including your email address and the content of your message) solely to handle your enquiry and explore a possible collaboration. Legal basis: Art. 6(1)(b) GDPR (pre-contractual steps) or (f). Please do not send me special categories of personal data (e.g. health data) by email. Data is deleted once no longer required, unless statutory retention obligations apply.
6. It’s Complicated
For scheduling, video sessions and confidential communication within an ongoing collaboration, the external platform It’s Complicated is used. This website embeds no content from It’s Complicated; only if you follow a corresponding link is data processed there by the provider, under its own privacy notice.
7. Personal area (in preparation)
The personal area will be accessible by invitation only. Principles: data minimisation, privacy by design and by default, a roles-and-permissions concept, server-side authorization and secure authentication. No clinical or therapeutic documentation is kept in it.
8. Recipients and third-country transfers
Transfers to third countries [do not take place / only on the basis of appropriate safeguards under Art. 44 et seq. GDPR].
9. Your rights
You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR). You may withdraw consent at any time with future effect.
You have the right to lodge a complaint with a supervisory authority: Berlin Commissioner for Data Protection and Freedom of Information, Alt-Moabit 59–61, 10555 Berlin.
10. Cookies and analytics
This website sets no cookies and uses no analytics or tracking.
11. Version
Dated [month/year].