Legal
Privacy Policy
Protecting your personal data matters to me. Below you will find out which data is processed when you visit this website and what rights you have. This website is deliberately data-minimal: it uses no cookies, no tracking and no analytics tools.
1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Vanessa Werner Kiautschoustraße 16 13353 Berlin Germany
Email: vawerner@outlook.de Phone: (+49) 176 61514201
As a psychotherapist I am bound by the statutory duty of confidentiality (Section 203 of the German Criminal Code). All information entrusted to me in the course of treatment is treated in strict confidence.
2. General information on data processing
I only process personal data where this is necessary to provide a functioning website and to handle your enquiry. Your data is passed on to third parties only where there is a legal basis for doing so or where you have expressly consented.
Personal data is any information relating to an identified or identifiable natural person – such as your name, email address or telephone number.
3. Hosting and server log files
This website is hosted by Vercel Inc. (440 N Barranca Ave #4133, Covina, CA 91723, USA). Vercel provides the technical infrastructure on which the website is delivered.
Each time the website is accessed, access data (server log files) is automatically processed as a technical necessity. This may include: the IP address of the requesting device, the date and time of access, the page requested, and the browser and operating system used. This data serves solely the secure and stable operation of the website and is not merged with other data sources.
The legal basis is Art. 6(1)(f) GDPR. My legitimate interest lies in providing the website in a technically reliable and secure manner.
The website is served from the Frankfurt am Main region (Germany); processing takes place on servers within the European Union. A data processing agreement pursuant to Art. 28 GDPR is in place with Vercel. As Vercel Inc. is domiciled in the USA, the EU standard contractual clauses have additionally been agreed for any transfer to a third country.
4. No cookies, no tracking
This website uses no cookies, no tracking and no analytics or statistics tools. Your usage behaviour is not analysed, and no profiles are created about you.
The fonts used are served locally from this server (self-hosted). No connection is made to Google Fonts or other external providers, and no data is transferred to third parties for this purpose.
5. Getting in touch
You can contact me by email, by phone or via the contact form on this website.
The contact form stores no data on the server. It merely opens a prepared message in your own email program (mailto), which you then send yourself. The message is therefore transmitted directly via your own email provider.
If you write to me by email or contact me by phone, I process the information you provide solely in order to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR (steps taken to establish a treatment relationship) and Art. 6(1)(f) GDPR (responding to your enquiry).
Please note: information about your health or your child's health belongs to the special categories of personal data (Art. 9 GDPR). An unencrypted email does not offer complete protection. Please therefore only share sensitive health data to the extent you consider necessary. All information is of course subject to my duty of confidentiality and treated in confidence. I delete your enquiry data as soon as it is no longer required for the respective purpose and no statutory retention obligations prevent deletion.
6. Google Maps
On individual pages (in particular those about the practice and contact), this website embeds a map from the Google Maps service. The provider is Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland).
The map is not loaded automatically. At first you only see a placeholder. The connection to Google is established only once you actively click "Load map".
When the map is loaded, your IP address may be transmitted to Google; this transmission may also be to Google servers in the USA. I have no influence over Google's further processing.
The legal basis is your consent pursuant to Art. 6(1)(a) GDPR, which you give by clicking "Load map". Your consent applies only to the particular page view; it is not stored. You can withdraw it at any time by reloading the page and not activating the map again.
For more information on how Google handles your data, please see Google's privacy policy: https://policies.google.com/privacy
7. Online therapy (video sessions)
For online sessions I use the certified, GDPR-compliant video service webPRAX. Sessions are transmitted in encrypted form; the content of video sessions is not recorded.
The provider of the webPRAX service is Healthy Projects GmbH, Parkstraße 10, 50968 Köln, Germany. A data processing agreement pursuant to Art. 28 GDPR is in place with the provider.
You can find the provider's privacy policy at: https://webprax.de/datenschutzerklaerung/
8. SSL/TLS encryption
For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by the padlock symbol in your browser's address bar and by the address beginning with “https://”. When encryption is active, the data you transmit to this website cannot be read by third parties.
9. Your rights
You have the following rights vis-à-vis the controller with regard to the personal data concerning you:
the right of access (Art. 15 GDPR), the right to rectification (Art. 16 GDPR), the right to erasure (Art. 17 GDPR), the right to restriction of processing (Art. 18 GDPR), the right to object to processing (Art. 21 GDPR) and the right to data portability (Art. 20 GDPR).
Where processing is based on your consent, you may withdraw that consent at any time with effect for the future. The lawfulness of processing carried out up to the point of withdrawal remains unaffected.
To exercise your rights, an informal message to the contact details given above is sufficient.
10. Right to lodge a complaint with a supervisory authority
If you believe that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for me is:
Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit) Alt-Moabit 59–61 10555 Berlin, Germany https://www.datenschutz-berlin.de
11. Currency of this policy
This privacy policy is dated July 2026. As this website develops or as legal requirements change, it may become necessary to update it. You will always find the current version on this page.