Privacy Policy
Last updated: July 2026
1. Data Protection at a Glance
General Information
The following information provides an overview of what happens to your personal data when you visit this website.
Personal data means any data that can be used to identify you personally. Detailed information on data protection can be found in the following sections of this Privacy Policy.
Data Collection on This Website
Who is responsible for collecting data on this website?
Data processing on this website is carried out by the website operator. The relevant contact details can be found in the section “Controller”.
How do we collect your data?
Some data is collected when you provide it to us. This may occur, for example, when you contact us by email or telephone or when you book an appointment using the embedded booking calendar.
Other data is collected automatically or with your consent by the IT systems used when you visit the website. This mainly includes technical data such as your IP address, internet browser, operating system, screen resolution, the time at which the page was accessed and the website you visited previously.
Some technical data is collected automatically as soon as you access this website. Services that require consent are only activated after you have given your consent through the consent-management system used on this website.
What do we use your data for?
Some data is processed to ensure the secure and technically error-free provision of the website.
Other data is used to process your enquiries, organise and manage appointment bookings and display map content.
According to the current configuration, this website does not use Google Analytics or comparable services to analyse user behaviour.
What rights do you have?
You have the right at any time to obtain information free of charge about the origin, recipients and purposes of your stored personal data.
You also have the right to request that your data be corrected or deleted. Under certain conditions, you may request that processing be restricted or object to the processing of your data.
If processing is based on your consent, you may withdraw that consent at any time with effect for the future.
You also have the right to lodge a complaint with a data protection supervisory authority.
2. Controller
The controller responsible for data processing on this website is:
Yo-Self Yoga, Therapy and more
Antje Schmauz
Heilpraktikerin, restricted to the field of psychotherapy
Riefstahlstr. 8
76133 Karlsruhe
Germany
Telephone: 0151 50443635
Email: mail@yo-self.de
The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.
3. Hosting
Hosting by Strato
This website is hosted by:
STRATO GmbH
Otto-Ostrowski-Straße 7
10249 Berlin
Germany
When you access this website, Strato collects various server log data or log files. This data may include:
-
the IP address of the device accessing the website,
-
the browser and browser version used,
-
the operating system used,
-
the website or file accessed,
-
the date and time of access,
-
the volume of data transferred,
-
the referrer URL,
-
reports concerning successful or unsuccessful page requests.
The processing of this data is necessary to make the website technically available, ensure its stability and security and identify technical errors or abusive access.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in the secure, stable and reliable provision of this website.
Where data is processed in connection with the initiation or performance of a contract, Article 6(1)(b) GDPR also serves as a legal basis.
We have concluded a data processing agreement with Strato in accordance with Article 28 GDPR.
Further information about data protection at Strato can be found in the provider’s Privacy Policy.
4. General Information on Data Processing
Data Protection
We treat your personal data confidentially and in accordance with the applicable statutory data protection regulations and this Privacy Policy.
When you use this website, various types of personal data may be collected. This Privacy Policy explains what data is processed, for what purposes and on which legal basis.
Storage Period
Unless a more specific storage period is stated in this Privacy Policy, we will store your personal data only for as long as it is required for the relevant processing purpose.
If you submit a legitimate request for deletion or withdraw consent that you have previously given, the relevant data will be deleted unless statutory or other legally permissible grounds require or allow it to be stored for a longer period.
Statutory retention obligations, particularly those arising from tax, commercial or treatment-related laws, remain unaffected. In these cases, the data will be deleted after the applicable retention period has expired.
Legal Bases
Depending on the respective purpose, we process personal data on the basis of the following legal provisions in particular:
-
Article 6(1)(a) GDPR, where you have consented to the processing,
-
Article 6(1)(b) GDPR, where processing is necessary for the performance of a contract or in order to take steps prior to entering into a contract,
-
Article 6(1)(c) GDPR, where processing is necessary to comply with a legal obligation,
-
Article 6(1)(f) GDPR, where processing is necessary to protect a legitimate interest and the interests, rights and freedoms of the data subject do not override that interest.
Where special categories of personal data, particularly health data, are processed, the processing is additionally based on Article 9(2) GDPR.
Where required, the storage of information on your terminal device or access to information already stored on it is additionally based on Section 25 of the German Telecommunications Digital Services Data Protection Act, or TDDDG.
Recipients of Personal Data
As part of our activities, we work with external service providers. Personal data is only transferred to these service providers where this is necessary for the performance of a contract, to take steps prior to entering into a contract, to comply with a legal obligation or on the basis of consent or a legitimate interest.
Where service providers act as processors, processing is carried out on the basis of a data processing agreement pursuant to Article 28 GDPR.
Transfers to Third Countries
Some providers used directly or indirectly through services connected to this website are based in the United States or may process data outside the European Union or the European Economic Area.
Personal data is only transferred to a third country where the applicable statutory requirements are met.
Such transfers may be based in particular on an adequacy decision, certification under the EU-US Data Privacy Framework, appropriate safeguards such as the European Commission’s Standard Contractual Clauses, or your express consent.
Despite these safeguards, processing in third countries may not always offer a level of data protection that is fully comparable to that of the European Union.
SSL or TLS Encryption
For security reasons and to protect the transmission of confidential content, this website uses SSL or TLS encryption.
You can recognise an encrypted connection by the fact that your browser’s address bar begins with “https://” and displays a padlock symbol.
When encryption is active, the data you transmit to us generally cannot be read by unauthorised third parties during transmission.
5. Your Rights
Access, Rectification and Erasure
Within the framework of the applicable statutory provisions, you have the right at any time to obtain information free of charge about your stored personal data, its origin and recipients, the purposes of processing and the intended storage period.
You also have the right to request the correction of inaccurate data and, subject to the applicable legal requirements, the deletion of your personal data.
Restriction of Processing
You have the right to request that the processing of your personal data be restricted, particularly where:
-
you dispute the accuracy of the data,
-
the processing is unlawful and you request restriction instead of deletion,
-
we no longer require the data, but you require it for the establishment, exercise or defence of legal claims,
-
you have objected to the processing and the balancing of interests has not yet been completed.
Data Portability
Where processing is carried out automatically on the basis of your consent or a contract, you have the right to receive the data you have provided in a structured, commonly used and machine-readable format.
Where technically feasible, you may also request that this data be transmitted directly to another controller.
Withdrawal of Consent
You may withdraw consent that you have already given at any time with effect for the future.
The lawfulness of the processing carried out before the withdrawal remains unaffected.
You can change your cookie settings at any time through the cookie settings provided on the website.
Right to Object Pursuant to Article 21 GDPR
IF YOUR PERSONAL DATA IS PROCESSED ON THE BASIS OF ARTICLE 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO OBJECT TO THE PROCESSING.
IF YOU OBJECT, WE WILL NO LONGER PROCESS THE PERSONAL DATA CONCERNED UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.
Right to Lodge a Complaint
If you believe that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a data protection supervisory authority.
For businesses and practices based in Baden-Württemberg, the competent authority is generally the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg.
The right to lodge a complaint is without prejudice to any other administrative or judicial remedies.
6. Cookies and Consent Management
Cookies and Similar Technologies
This website uses cookies and comparable technologies.
Cookies are small data records stored on your terminal device. Some cookies are stored only for the duration of your visit and are deleted when you close your browser. Other cookies remain stored until you delete them or your browser automatically removes them.
Technically necessary cookies are used to ensure the basic functions, security and user-friendly provision of the website.
Where cookies or comparable technologies are not strictly necessary, they are only used after you have given your prior consent.
The legal basis for technically necessary storage or access is Section 25(2) TDDDG. The subsequent processing of personal data is based on Article 6(1)(f) GDPR.
The legal bases for cookies and services requiring consent are Article 6(1)(a) GDPR and Section 25(1) TDDDG.
Consent Management with Complianz
This website uses Complianz to manage and document your consent.
The software is provided by:
Complianz B.V.
Kalmarweg 14-5
9723 JG Groningen
The Netherlands
Complianz is operated as a WordPress plugin on our server. A technically necessary cookie or comparable entry is stored in your browser to save the choices you have made.
The following data in particular may be processed as part of consent management:
-
your consent decision,
-
the time at which the decision was made,
-
the browser and device type used,
-
a shortened or anonymised IP address,
-
the consent identifier or the version of the cookie banner used.
The data is processed in order to document your consent and apply your choices when you visit the website again.
The legal basis is Article 6(1)(c) GDPR in conjunction with the applicable statutory documentation obligations and Article 6(1)(f) GDPR. Our legitimate interest lies in the legally compliant and user-friendly management of consent.
The technically necessary consent cookie is used on the basis of Section 25(2) TDDDG.
7. Appointment Booking via Zeeg
I use the Zeeg service to arrange appointments. The service is provided by Zeeg GmbH, Berlin, Germany.
If you book an appointment using the Zeeg calendar embedded on my website or via a corresponding link, the personal data you enter, such as your name, email address and, where applicable, telephone number, will be transmitted directly to Zeeg GmbH and processed on servers located in Germany.
Your data is processed on the basis of Article 6(1)(b) GDPR for the performance of a contract or in order to take steps prior to entering into a contract, and Article 6(1)(f) GDPR on the basis of my legitimate interest in efficient appointment management.
Further information about data processing by Zeeg GmbH can be found in its Privacy Policy:
https://zeeg.me/de/legal/privacy
If you do not want your data to be processed by Zeeg GmbH, you may alternatively arrange an appointment with me by email or telephone.
8. Video Consultations via Whereby
For online sessions, I use the Whereby video-conferencing service provided by Video Communication Services AS, Gate 1 No. 101, 6700 Måløy, Norway.
Access to Whereby is provided through the Zeeg calendar. For online appointments, you will automatically receive the Whereby link with your booking confirmation.
When Whereby is used, personal data required to conduct the video session is processed. This may include your IP address, device type, browser type, the date, time and duration of the session and, where applicable, the transmission of video and audio during the session.
I do not record or store the content of the conversation itself.
As a member of the European Economic Area, Norway is directly subject to the GDPR. Data processing by Whereby is therefore subject to a level of data protection comparable to that within the European Union.
According to Whereby, data may be transferred to servers outside the European Economic Area, for example to the United States. In such cases, the transfer is based on the European Commission’s Standard Contractual Clauses.
Further details can be found in Whereby’s Privacy Policy:
https://whereby.com/information/tos/privacy-policy/
The processing is carried out on the basis of Article 6(1)(b) GDPR for the performance of the agreed session and Article 6(1)(f) GDPR on the basis of my legitimate interest in providing online appointments in a straightforward and location-independent manner.
9. Contact by Telephone or Email
If you contact me by telephone, email or via a contact form, the data you provide, such as your name, email address, telephone number and the content of your enquiry, will be stored by me for the purpose of processing your enquiry and dealing with any follow-up questions.
I will not disclose this data without your consent.
The processing is carried out on the basis of Article 6(1)(b) GDPR where your enquiry relates to the performance of a contract or is necessary in order to take steps prior to entering into a contract.
In all other cases, the processing is based on my legitimate interest in effectively handling enquiries addressed to me pursuant to Article 6(1)(f) GDPR.
The data you provide will remain stored by me until you ask me to delete it, withdraw your consent to its storage or the purpose for storing the data no longer applies.
Statutory retention periods remain unaffected.
10. Information Regarding Health Data
Special Categories of Personal Data
In connection with appointment bookings and, in particular, during the sessions themselves, including psychotherapy, coaching and yoga therapy, health data within the meaning of Article 9(1) GDPR may be processed. This may include information about mental or physical symptoms or conditions.
I process these special categories of personal data exclusively on the basis of your explicit consent pursuant to Article 9(2)(a) GDPR, which you provide when booking the appointment or at the beginning of our work together.
Where applicable, the processing is also based on Article 9(2)(h) GDPR in conjunction with Section 22(1), no. 1(b) of the German Federal Data Protection Act, or BDSG, for the purposes of healthcare or medical treatment.
This data is subject to my particular professional duty of confidentiality as a Heilpraktikerin restricted to the field of psychotherapy.
11. Google Maps
This website uses Google Maps to display geographical information and the location of the practice.
The provider responsible for users within the European Economic Area is generally:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland
Google Maps is only loaded after you have consented to the use of the service through the consent manager.
When Google Maps is loaded, the following data in particular may be transferred to Google:
-
IP address,
-
date and time of access,
-
browser and device information,
-
operating system,
-
location data, where you have enabled location access on your device,
-
information about the page accessed,
-
usage and interaction data,
-
cookies or comparable identifiers.
If you are logged into your Google account, Google may be able to associate your use of Google Maps with your user account.
The processing is based on your consent pursuant to Article 6(1)(a) GDPR and Section 25(1) TDDDG.
You may withdraw your consent at any time with effect for the future through the cookie settings.
Google may also process personal data in the United States and other third countries. Google LLC is certified under the EU-US Data Privacy Framework. Where required, data transfers may additionally be based on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.
Further information can be found in Google’s Privacy Policy and the Google Maps Terms of Service.
12. Locally Hosted Google Fonts
This website uses fonts originally provided by Google.
The font files used are stored locally on this website’s server. Therefore, no connection to Google Fonts servers is established when you access the website.
The fonts are hosted locally in the interest of presenting the website in a consistent, visually appealing and data-protection-friendly manner.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in the technically reliable and visually consistent presentation of our online services.
13. Rank Math SEO
This website uses the WordPress plugin Rank Math SEO for technical and content-related search engine optimisation.
Rank Math is used within the WordPress installation. The basic version used on this website serves in particular to create and manage page titles, meta descriptions, structured data and other technical SEO settings.
The Rank Math analytics function is not used, and Rank Math is not connected to Google Analytics or Google Search Console.
The optional transmission of anonymous usage statistics to Rank Math is disabled.
With this configuration, Rank Math does not transfer personal data belonging to website visitors to the Rank Math provider.
If analytics functions, the Rank Math cloud, Content AI, Google services or optional usage tracking are activated at a later date, this Privacy Policy must be amended accordingly.
14. Amendments to This Privacy Policy
We reserve the right to amend this Privacy Policy if the website, the services used or the applicable statutory requirements change.
The version currently published on this website applies.
