Privacy Policy

1. General Information

The protection of your personal data is very important to me. I treat your personal data confidentially and in accordance with the statutory data protection regulations (GDPR) and this Privacy Policy.

This Privacy Policy explains what personal data I collect, how I use it and what rights you have.

2. Controller

The controller responsible for data processing on this website is:

Lisa-Marie Dutta
Online Speech & Language Therapy
Theodor-Neubauer-Straße 2, 16515 Oranienburg
Germany

Email: lm.dutta@outlook.com
Phone: +49 174 6639527

3. Accessing the Website

When you visit this website, the hosting provider (Squarespace) automatically collects the following data:

  • IP address

  • Date and time of access

  • Browser type and version

  • Operating system

  • Referrer URL

This data is processed to ensure website security and functionality and is not used to identify you personally.

Legal basis:
Art. 6(1)(f) GDPR (legitimate interest)

4. Cookies

This website uses cookies. Cookies are small text files stored on your device.

a) Essential cookies

Essential cookies are required for the operation and security of the website and cannot be disabled.

b) Non-essential cookies

With your consent, non-essential cookies may be used to:

  • analyze website usage

  • improve content, structure and usability

  • support third-party services such as appointment scheduling and payment processing

You can manage or withdraw your consent at any time via the cookie settings on this website.

Legal basis:
Art. 6(1)(a) GDPR (consent)

5. Contact via Email or Contact Form

If you contact me via email or a contact form, the information you provide (e.g. name, email address, message) will be stored to process your request.

Legal basis:
Art. 6(1)(b) GDPR (performance of a contract or pre-contractual measures)

6. Appointment Scheduling (Simplybook.me)

Appointments are booked via Simplybook.me.

When booking an appointment, the following data may be collected:

  • name

  • email address

  • appointment details

  • additional information you choose to provide

Simplybook.me processes this data on my behalf as a data processor.

Legal basis:
Art. 6(1)(b) GDPR
Art. 9(2)(h) GDPR (health care purposes)

7. Payment Processing (Stripe)

Payments are processed via third-party payment provider: Stripe.

Depending on the payment method, the following data may be processed:

  • name

  • email address

  • payment information

  • billing data

Payment data is processed directly by the payment provider. I do not store payment details.

Legal basis:
Art. 6(1)(b) GDPR (contract performance)

8. Health Data (Special Category Data)

As part of speech and language therapy services, health-related data may be processed.

Health data is considered a special category of personal data under GDPR.

This data is processed exclusively for therapeutic purposes and only to the extent necessary to provide professional services.

Legal basis:
Art. 9(2)(h) GDPR
(health or social care purposes, based on professional confidentiality obligations)

9. Analytics and Website Optimization

With your consent, analytics tools may be used to understand how visitors use the website. This helps improve content, structure and usability.

Data collected may include:

  • pages visited

  • time spent on pages

  • interaction behavior

No profiling or automated decision-making takes place.

Legal basis:
Art. 6(1)(a) GDPR (consent)

10. Data Retention

Personal data is stored only for as long as necessary to fulfill the respective purpose or as required by statutory retention obligations.

11. Your Rights

You have the right to:

  • access your personal data (Art. 15 GDPR)

  • rectification of inaccurate data (Art. 16 GDPR)

  • erasure of your data (Art. 17 GDPR)

  • restriction of processing (Art. 18 GDPR)

  • data portability (Art. 20 GDPR)

  • withdraw consent at any time (Art. 7(3) GDPR)

  • lodge a complaint with a supervisory authority (Art. 77 GDPR)

12. Data Security

Appropriate technical and organizational measures are taken to protect your data against loss, misuse or unauthorized access.

13. Changes to This Privacy Policy

This Privacy Policy may be updated to reflect legal or technical changes. The current version is always available on this website.