Legal

Privacy policy

Protecting your personal data is a matter of great importance to me. Below, I inform you about the nature, scope, and purpose of the processing of personal data when visiting this website in accordance with the General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG), and the professional regulations applicable to psychotherapists.

1. Data Controller

Darja Kraft
Praxis Darja Kraft
Holbeinstraße 7
81679 München
Germany

Telephone: +49 170 2269252
Email: praxis@darjakraft.de

2. General Information on Data Processing

Personal data is processed only to the extent necessary to provide this website, handle your enquiries, or fulfil legal and contractual obligations.

The legal bases for processing are in particular:
• Art. 6(1)(a) GDPR (Consent)
• Art. 6(1)(b) GDPR (Contract or pre-contractual measures)
• Art. 6(1)(c) GDPR (Legal obligation)
• Art. 6(1)(f) GDPR (Legitimate interest)

Insofar as health data is processed, this takes place exclusively on the basis of Art. 9(2) GDPR and the relevant statutory provisions.

3. Hosting

This website is provided via the Lovable development platform. Technical hosting is provided by a hosting service provider appointed by Lovable.

When visiting the website, technical data necessary for the provision and secure operation of the website is processed.

Where legally required, data processing agreements pursuant to Art. 28 GDPR have been concluded with the service providers engaged.

4. Server Log Files

When accessing this website, the following information is automatically processed:
• IP address
• Date and time of access
• Pages accessed
• Referrer URL
• Browser type and browser version
• Operating system
• Access status

Processing is based on Art. 6(1)(f) GDPR.

My legitimate interest consists in the secure provision of the website, error analysis, and protection against abuse.

5. SSL/TLS Encryption

This website uses SSL/TLS encryption to ensure the secure transmission of confidential content.

6. Cookies

This website uses technically necessary cookies.

Statistics and marketing cookies are placed exclusively following your explicit consent.

The legal basis for this is Art. 6(1)(a) GDPR.

You may withdraw your consent at any time with effect for the future via the cookie settings.

Status: no choice made yet.

7. Cookiebot (Consent Management)

To manage your cookie consents, Cookiebot from Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark is used.

Cookiebot stores your consent decision so that it can be respected during subsequent visits.

8. Google Consent Mode v2

This website uses Google Consent Mode v2.

This transmits your consent decisions to Google services so that analytics and marketing services are activated strictly in accordance with your preferences.

9. Google Tag Manager

This website uses Google Tag Manager.

The provider is:

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

Google Tag Manager is used exclusively to manage and deploy other services. It does not create user profiles itself.

10. Google Analytics 4

Subject to your consent, this website uses Google Analytics 4.

The provider is:

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

Google Analytics is used for the statistical analysis of the use of this website.

The following data in particular may be processed:
• Truncated IP address
• Browser information
• Device information
• Page views
• Duration of visit
• Interactions
• Approximate location
• Technical usage data

IP anonymisation is activated.

The legal basis is Art. 6(1)(a) GDPR.

Data transfer to third countries, in particular the USA, cannot be ruled out. Google is certified under the EU-US Data Privacy Framework. Where necessary, data transfers are additionally based on the standard contractual clauses of the European Commission.

11. Google Ads Conversion Tracking

Subject to your consent, this website uses Google Ads Conversion Tracking.

This makes it possible to determine whether visitors reached this website via a Google ad and completed certain actions.

The legal basis is Art. 6(1)(a) GDPR.

Remarketing is not currently used.

12. Contact form

If you use the contact form, the following data in particular will be processed:
• Name
• Email address
• Telephone number
• Health insurance status
• Message

Processing takes place exclusively to handle your enquiry and to initiate a potential treatment relationship.

The legal basis is Art. 6(1)(b) GDPR.

Please do not submit sensitive health data or medical records via the contact form if possible.

13. Contact by email or telephone

If you contact me by email or telephone, your details will be processed exclusively for the purpose of handling your enquiry.

The legal basis is Art. 6(1)(b) GDPR.

14. Health Data and Confidentiality

As part of psychotherapeutic treatment, health data is subject to special legal protection.

I am bound by statutory confidentiality pursuant to Section 203 of the German Criminal Code (StGB).

Personal data will only be passed on:
• with your explicit consent,
• on the basis of legal obligations, or
• insofar as this is necessary to perform the treatment contract.

15. Recipients of Personal Data

To provide this website, personal data may be transferred to the following service providers:
• Lovable (website platform)
• IONOS SE (domain management and email services)
• Google Ireland Limited (Google Analytics, Google Tag Manager, Google Ads)
• Usercentrics A/S (Cookiebot)

Where necessary, data processing agreements pursuant to Art. 28 GDPR are in place.

16. Data Transfer to Third Countries

Insofar as Google services are used and you have given your consent, personal data may be transferred to companies in the United States.

Data transfers take place on the basis of the EU-US Data Privacy Framework and, where necessary, the Standard Contractual Clauses of the European Commission.

17. Duration of Storage

Personal data is stored only for as long as necessary to fulfil the respective purposes or for as long as statutory retention obligations exist.

18. Data Subject Rights

You have the right at any time to:
• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Object (Art. 21 GDPR)
• Withdraw consent previously granted with effect for the future (Art. 7(3) GDPR)

19. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data.

The competent supervisory authority is in particular:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach

20. Currency and updates to this privacy policy

This privacy policy will be updated as necessary to reflect legal or technical changes.

As of July 2026