Last updated: July 05, 2026

With this Privacy Policy, the controller named below ("we", "us", or "our") informs users of this website ("you" or "user") in accordance with Article 13 of the General Data Protection Regulation (GDPR) about the collection and processing of personal data.

Please note that the privacy policies of third-party websites accessed through links on our website apply to those websites.

The controller responsible for this website is:

Caroline Heinrichs
Am Steimel 5
37218 Witzenhausen
Germany

Email: coco@psychotherapie-coco-heinrichs.de

You can contact our Data Protection Officer by email at:

coco@nadelfilzkunst.de

Our website is hosted by ALL-INKL.COM, meaning it is technically provided on the web servers of this hosting provider. The hosting provider acts as our data processor in accordance with Article 28 GDPR.

If we collect and process your personal data, you have the following rights:

You have the right to request information about your personal data processed by us in accordance with Article 15 GDPR.

You have the right to object to the processing of your personal data under the conditions set out in Article 21(1) GDPR. Further information can be found in Section B of this Privacy Policy.

If your personal data is inaccurate or incomplete, you have the right to request correction or completion in accordance with Article 16 GDPR.

Under the conditions of Article 17 GDPR, you have the right to request the deletion of your personal data.

Under Article 18 GDPR, you have the right to request restriction of the processing of your personal data.

If you believe that the processing of your personal data violates data protection law, you have the right under Article 77 GDPR to lodge a complaint with a supervisory authority of your choice.

Where processing is based on your consent or on a contract and carried out by automated means, you have the right under Article 20 GDPR to receive the personal data you have provided in a structured, commonly used, and machine-readable format or to have it transferred to another controller.

This right does not apply to data processing required for the operation of the website, including server log files, which is based on our legitimate interest under Article 6(1)(f) GDPR.

Each time you visit our website, our hosting provider temporarily collects and stores the following information:

• IP address
• Date and time of access
• Protocol used (e.g., HTTP)
• Request method (GET or POST)
• Requested file or content
• Access status (successful request, error, etc.)
• Amount of data transferred
• Incoming and outgoing traffic
• Process identification number (Process ID)
• Server response time
• Referring website
• Browser type and version
• Operating system
• User interface
• Browser language

The temporary storage of your IP address is necessary to deliver the website during your session.

Server log files are also stored to ensure the functionality and security of the website and its IT systems.

Processing is carried out pursuant to Article 6(1)(f) GDPR based on our legitimate interest and the legitimate interest of our hosting provider in operating a secure and functional website.

Our hosting provider has technical access to this data as our processor.

• Session data is deleted when you leave the website.
• Server log files are retained for a maximum of seven days unless required for security investigations.

Yes. Without this data, the website cannot be provided securely or function correctly.

If you contact us via email or our contact form, the personal data you provide will be processed solely to respond to your inquiry.

Processing is based on Article 6(1)(f) GDPR (legitimate interest).

If your inquiry relates to entering into a contract, Article 6(1)(b) GDPR also applies.

Our hosting provider may technically access this data as our processor.

Your personal data will be deleted once your inquiry has been fully resolved unless legal retention obligations apply.

No. You are not required to provide personal data or contact us.

Cookies are small text files stored by your browser.

We use only technically necessary cookies under Article 6(1)(f) GDPR.

These cookies are required, for example, for:

• Contact forms
• Secure areas of the website
• Session management

We do not use:

• Preference cookies
• Analytics cookies
• Marketing cookies

that require consent under Article 6(1)(a) GDPR.

If our website includes a login or contact form, the session cookie wbk_sid is stored.

Its purpose is to distinguish genuine users from automated spam bots.

The cookie is automatically deleted when the browser is closed.

You can disable or delete cookies through your browser settings.

Please note that disabling necessary cookies may affect the functionality of the website.

We do not use analytics tools or any technologies to track user behavior.

Our website uses SSL/TLS encryption to protect the transmission of confidential information.

A secure connection is indicated by:

• "https://" in the browser address bar
• A padlock icon

Emails sent to us are generally encrypted during transmission but are not end-to-end encrypted.

Consequently, email providers may have technical access to email content while it is stored on their servers.

Communication through our website's contact form provides secure transmission.

Videos displayed on our website are not embedded directly.

Instead, we provide links to third-party video platforms.

No connection to the third-party platform is established until you actively click on the video preview.

As a result:

• No personal data is transmitted merely by visiting our website.
• No cookies from the video platform or its advertising partners are set before you click.

Once you choose to watch a video, any subsequent data processing is carried out solely by the third-party provider under its own privacy policy.

If you do not agree with the third party's data processing practices, please do not click on the video preview.

You have the right, on grounds relating to your particular situation, to object at any time to the processing of your personal data carried out on the basis of Article 6(1)(f) GDPR.

Upon receiving your objection, we will cease processing your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or unless the processing serves the establishment, exercise, or defence of legal claims.

The processing of personal data required for the operation of the website and the storage of server log files is essential for providing the website.

Consequently, overriding interests of data subjects generally do not exist in this context.

If you object to the processing of data submitted through a contact request, you must explain your particular circumstances so that we can reassess the balance of interests.

If our legitimate interests no longer outweigh yours, your personal data collected during the communication will be deleted.