Privacy policy
As of October 2026. This is a translation; only the German version is legally binding.
1. At a glance
This website is deliberately minimal: it sets no cookies, uses no statistics or analytics tools and loads no content from other providers. Even the font is stored directly on this website’s server. There is no contact form. For online booking, you are only redirected to my booking partner zeeg when you click the booking button.
Personal data is only processed when you visit the site (technically necessary server logs) and when you send me an email or call me.
2. Controller
Petra Kohler
Praxis Seelenheilkunde Chiemsee
Marktstraße 7, 83355 Grabenstätt, Germany
Phone: +49 157 5638 0791
Email: praxis@petra-kohler.de
I have not appointed a data protection officer, as there is no legal obligation to do so. If you have questions about data protection, please contact me directly.
3. Hosting and server logs
This website is hosted by: ALL-INKL.COM – Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. A data processing agreement pursuant to Art. 28 GDPR is in place with the provider.
When you visit the site, the server automatically stores information transmitted by your browser: IP address, date and time, page requested, referring page, browser and operating system. I need this data to operate the website securely and reliably and to detect errors or attacks. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure operation). The IP address is only stored in shortened form so that it can no longer be linked to a person. The logs are deleted automatically after seven days.
4. Contact by email or phone
If you write to me or call me, I process your details (e.g. name, contact details, your concern) in order to answer your enquiry and arrange an appointment. The legal basis is Art. 6(1)(b) GDPR (steps prior to entering into a contract). If you tell me about your health, I process this information under Art. 9(2)(h) GDPR in conjunction with Section 22(1)(1)(b) of the German Federal Data Protection Act (BDSG).
My email account is also hosted by ALL-INKL.COM.
Please note: regular emails are not encrypted end to end. In your first email, it is best to say only briefly what it is about. We can discuss anything personal by phone or in person.
If no sessions follow, I delete your enquiry once it has been dealt with and no retention obligation applies. If we do work together, you will receive separate information at the practice on how your data is handled under the treatment contract.
5. Online booking via zeeg
To book a first session I use the zeeg service provided by Zeeg GmbH, Friedrichstraße 155, 10117 Berlin, Germany. You are only redirected to zeeg’s booking page when you click “Book your first session online”; no data is sent to zeeg before that.
When you book, the following data is processed: name, email address, mobile number, your answer to the question of how you would like to attend, and the time you choose. zeeg also processes technically necessary data such as your IP address.
The purpose is to arrange and organise your first session, including confirmation, reminder and cancellation emails. The legal basis is Art. 6(1)(b) GDPR (steps prior to entering into a contract at your request). If you share information about your health, I process it under Art. 9(2)(h) GDPR in conjunction with Section 22(1)(1)(b) BDSG. Please only provide what is needed for the appointment – we can discuss anything personal in the session.
A data processing agreement pursuant to Art. 28 GDPR is in place with Zeeg GmbH. zeeg stores the data in data centres in the European Union (Germany and the Netherlands).
I delete booking data once it is no longer needed to organise the appointment. If we do work together, you will receive separate information at the practice on how your data is handled under the treatment contract.
For more information, see zeeg’s privacy policy.
6. Links to Instagram
This website links to my Instagram profile. It is a simple link; no Instagram content is embedded. Data is only sent to Instagram (Meta Platforms Ireland Ltd.) once you click the link. From then on, Instagram’s privacy policy applies.
7. Photos from events
At events such as the open day I take photos; signs at the venue point this out. I show selected photos under “News” to report on the event, choosing pictures in which guests are not the focus. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in reporting on the practice).
If you recognise yourself in a photo and don’t want it shown, a short message is enough and I will remove it.
8. Your rights
You have the right at any time to
- access the data stored about you (Art. 15 GDPR),
- have incorrect data corrected (Art. 16 GDPR),
- erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR),
- data portability (Art. 20 GDPR),
- object to processing based on legitimate interest (Art. 21 GDPR),
- withdraw any consent given, with effect for the future (Art. 7(3) GDPR).
Simply contact me. You can also lodge a complaint with a data protection supervisory authority, for example the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany.