Last updated: 24.1.2026
Responsible for data processing:
Inessa Burdich
Moldaustr. 38,
10319, Berlin, Germany
Contact: Inessa.Burdich.Consulting@gmail.com
This Privacy Policy explains how personal data is processed when you visit this website, contact us, book appointments, receive psychological services, or receive practice-related email communications, whether online or in person.
- Who we are
We are an independent psychological practice based in Germany, providing psychological services to clients worldwide, both online and in person.
This practice is operated by a single practitioner. No designated Data Protection Officer (DPO) is required under applicable data protection law. For any data protection questions, please contact us using the details above.
- What personal data we collect
We collect and process only personal data that is necessary for professional communication and the provision of psychological services.
Contact data
Name, email address, postal address, and phone number (if provided).
Appointment and administrative data
Scheduling information, appointment history, and related communication.
Psychological and health-related data (special category data)
Information relevant to psychological support and wellbeing, including session notes created by the practitioner, as well as materials voluntarily provided by clients, such as medical reports, assessments, or diagnostic images, where clients choose to share them.
Practice-related email communications
Professional correspondence and practice-related informational communications sent using the contact details provided, where individuals have been informed and given the opportunity to opt out.
Billing data
Invoice details and payment confirmations. Full payment card details are not stored.
Technical data
Basic technical data may be processed automatically by the website hosting infrastructure (such as IP address and access time) for the purpose of ensuring website operation and security.
- Purposes of processing and legal bases
Personal data is processed for the following purposes:
Communication and appointment management
To respond to inquiries and manage appointments.
Legal basis: steps taken at the individual’s request prior to providing services and the provision of psychological services.
Provision of psychological services
To provide online or in-person psychological sessions and maintain necessary professional records.
Legal basis: provision of psychological services.
Processing of health-related data
Health and psychological data are processed solely for the purpose of providing psychological services.
Such data is handled in accordance with professional confidentiality obligations applicable to psychological practice.
Legal basis: Article 6(1)(b) GDPR and Article 9(2)(h) GDPR (health or social care), and explicit consent where required.
Practice-related informational and professional email communications
To send occasional emails related to the practitioner’s professional activities, session reminders, updates, or other relevant information about the practice, where individuals have been informed and can opt out at any time.
Legal basis: consent and legitimate interests.
Billing and legal compliance
To issue invoices and comply with legal and tax obligations.
Legal basis: legal obligation.
Website operation and security
To ensure technical functionality and protect against misuse.
Legal basis: legitimate interests.
- Who we share data with
Personal data is shared only where necessary and only with service providers acting on our instructions, including:
- scheduling and appointment management services
- video conferencing services (Zoom)
- email and document storage providers
- invoicing or accounting tools
- professional IT or technical support providers
All service providers are required to process personal data in accordance with applicable data protection laws and confidentiality obligations.
Personal data may also be disclosed where required by law, or where necessary to protect vital interests, for example in situations involving serious and immediate risk of harm.
- International data transfers
As we work with clients worldwide and use service providers that may be located outside the European Union or European Economic Area, personal data may be transferred internationally.
Where this occurs, appropriate safeguards are applied in accordance with GDPR, such as adequacy decisions or standard contractual clauses.
- Data retention
Personal data is retained only for as long as necessary for the purposes described in this Privacy Policy.
- inquiry messages that do not result in a client relationship are retained for a limited period
- client records and administrative data are retained in accordance with legal, professional, and ethical requirements
- billing and accounting records are retained as required by law
Retention periods may vary depending on applicable legal obligations and professional standards.
- Your rights
You have the right to:
- request access to your personal data
- request correction of inaccurate data
- request deletion of data where legally applicable
- request restriction of processing
- object to processing based on legitimate interests
- request data portability
- withdraw consent at any time where processing is based on consent
You may opt out of receiving practice-related informational or professional emails at any time by contacting us or using the unsubscribe option provided in the email.
To exercise your rights, please contact us using the details above.
- Complaints
If you have concerns about how your data is handled, please contact us first.
You also have the right to lodge a complaint with a supervisory authority. In Germany, this is the Data Protection Authority of your federal state.
- Data security
Appropriate technical and organisational measures are in place to protect personal data, including secure communication tools and access controls. While no system can guarantee absolute security, reasonable safeguards are used to protect personal information.
- Cookies and analytics
This website does not use analytics, tracking tools, or marketing cookies.
Only technically necessary server-side processing is used to ensure website functionality and security.
- Changes to this policy
This Privacy Policy may be updated from time to time. The current version will always be available on this website.