Privacy Policy

Status: February 17, 2026 Information pursuant to Art. 13 GDPR

1. General information and controller

Protecting your personal data is taken seriously. Personal data is processed confidentially and in line with legal data protection requirements.

Controller: Miryam Yousef, Private Practice for CBT, Herrengasse 1, 83512 Wasserburg am Inn, Germany, Phone +49 160 92987808, Email [email protected]

2. Hosting and server log files

This website is hosted via Cloudflare Pages. On access, technically required connection data may be processed (e.g. IP address, timestamp, requested resource, HTTP status, referrer, browser information).

  • Purpose: secure and stable website operation, troubleshooting, abuse prevention
  • Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest)
  • Recipient: Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA (Cloudflare privacy policy)

3. Contact by phone or email

If you contact the practice, your provided data (e.g. name, contact data, message) is processed in order to respond and, where applicable, arrange appointments.

  • Legal basis: Art. 6 para. 1 lit. b GDPR and Art. 6 para. 1 lit. f GDPR
  • If special categories of personal data are involved (especially health data): Art. 9 para. 2 lit. h GDPR in conjunction with § 22 para. 1 no. 1 lit. b BDSG

4. Consent-based map integration (OpenStreetMap)

The map preview on the homepage is blocked by default. OpenStreetMap content is loaded only after active opt-in ("Load map").

  • Legal basis for data transfer: Art. 6 para. 1 lit. a GDPR (consent)
  • Legal basis for storing your choice: § 25 para. 1 TDDDG (consent)
  • Consent can be revoked at any time with future effect via the "Revoke consent" button in the "Directions" section.

5. Cookies, tracking and third-party content

Apart from optional consent-based map loading, no analytics or marketing tools are used. No external web fonts or social media plugins are loaded automatically.

6. External map and third-party links

Links to Google Maps, Apple Maps and OpenStreetMap are provided. Data is transferred only after actively clicking one of these links.

7. Your GDPR rights

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)
  • Withdrawal of consent with future effect (Art. 7 para. 3 GDPR)

8. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority, especially with the authority responsible in Bavaria:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
www.lda.bayern.de

9. Automated decision-making

There is no automated decision-making, including profiling.