Privacy Policy

The following information provides a simple overview of what happens to your personal data when you visit our website, request an appointment or use our services.

Derya Kılıç
Hypnotherapy & Deep EFT
Biberweg 53
70806 Kornwestheim
Germany
Email: goldensunderya@hotmail.com

Some of your data is collected when you provide it to us (e.g. when writing a review, filling in the booking form or contacting us via WhatsApp/email). Other data is collected automatically for technical reasons when you visit the website (e.g. browser, operating system, IP address, time of access). The website is hosted on GitHub Pages (GitHub Inc., USA).

To plan sessions (online or in person) we process the following data:

• Full name, email address, phone number (for WhatsApp communication)
• Requested date, time, service and session type
• Pre-session information (concern, previous treatment, expectations) – this may constitute health data and is only processed with your explicit consent (Art. 9(2)(a) GDPR).

This data is used for appointment planning, conducting sessions, communication and payment processing. You can withdraw your consent at any time with effect for the future.

• Art. 6(1)(b) GDPR: Performance of a contract or your booking request.
• Art. 6(1)(a) and Art. 9(2)(a) GDPR: Your explicit consent (e.g. pre-session form, reviews, statistics cookies).
• Art. 6(1)(f) GDPR: Legitimate interest in the secure and smooth operation of the website.

• Google Firebase / Cloud Firestore (Google Ireland Ltd.): Booking requests, the client portal, payments and reviews are stored in this database. To recognise existing clients on the booking page and redirect them to the portal, phone numbers and email addresses are stored there only as irreversible hash values. Transfer to Google LLC (USA) is possible; Google is certified under the EU-US Data Privacy Framework.
• Google Analytics for Firebase: only loaded if you select “Accept all” in the cookie notice (Art. 6(1)(a) GDPR).
• PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A.): If you pay via the portal or the PayPal link, your payment data is processed by PayPal.
• FormSubmit (formsubmit.co) and optionally ntfy (ntfy.sh): New booking requests and cancellations are sent to Derya Kılıç by email or push notification (name, phone, email, date, time, service – without pre-session details).
• WhatsApp, Instagram: When you click links to these services you are redirected to the provider’s website, where their privacy policy applies.

Our website uses your browser’s local storage (localStorage) to remember your language and cookie preference and (after a booking request) to show your request in the calendar. Statistics cookies are only activated with your consent. You can change your choice at any time via the “Cookie settings” link at the bottom of the page.

If you contact us via WhatsApp or Instagram direct message, the data you send (name, phone number, message content) is stored in order to process your request.

• Right of access to your stored personal data
• Right to rectification of inaccurate data
• Right to erasure of your data
• Right to restriction of processing
• Right to data portability
• Right to withdraw consent at any time with effect for the future
• Right to lodge a complaint with the competent supervisory authority (Baden-Württemberg: State Commissioner for Data Protection and Freedom of Information)

We only store your personal data for as long as necessary for the respective purpose or as required by statutory retention periods (e.g. tax law).

For security reasons this site uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” in your browser’s address bar.

For questions about data protection: Derya Kılıç, Biberweg 53, 70806 Kornwestheim · goldensunderya@hotmail.com