1. Controller
- Controller
- Manuel Benjamin Mateu Garcia · DivergentBrain
- Address
- Bredowstraße 45 10551 Berlin Germany
- Contact
- info@divergentbrain.org +49 163 5195807
2. Website access and hosting
The website and related services are hosted on Contabo GmbH servers located in Germany. When you access them, technically necessary connection data may be processed, including IP address, date and time, requested resource, amount of data transferred, referrer, and browser and device information.
Processing is necessary to provide the service securely and reliably, analyse errors and prevent misuse. The legal basis is Article 6(1)(f) GDPR. Logs are retained only for as long as necessary for operation, security and investigation of specific incidents; longer retention occurs only where legally required or needed to establish, exercise or defend legal claims.
3. Contacting us
If you contact us by email or telephone, we process your contact details and the content of your enquiry to respond and, where applicable, take pre-contractual or contractual steps. The legal bases are Articles 6(1)(b) and 6(1)(f) GDPR.
Please send only the information necessary for your enquiry by ordinary email. If you voluntarily disclose health data, they are processed in the context of healthcare under Article 9(2)(h) GDPR, applicable national law and professional confidentiality.
4. Online appointment booking
Appointments are booked through our self-hosted Easy!Appointments service at appointments.divergentbrain.org. We process the information required to select, provide and manage an appointment, particularly contact, appointment, language and billing details, together with any information you voluntarily provide.
The legal bases are Article 6(1)(b) GDPR and, where health data are involved, Article 9(2)(h) GDPR. Technically necessary session and security cookies protect the booking process and are not used for advertising or audience measurement. Data are deleted or restricted in accordance with legal, tax and professional retention duties and the needs of care and legal defence.
5. Payments through Stripe
Where an appointment requires online payment, you are redirected to Stripe Checkout. Stripe processes contact, transaction, device and payment information. Full card or bank account details are not stored on this website.
The legal basis for initiating and allocating the payment is Article 6(1)(b) GDPR. Stripe may process data outside the European Economic Area and describes the safeguards it uses in its own privacy policy.
6. Video appointments through Jitsi
Video appointments are provided through our self-hosted Jitsi Meet service at meet.divergentbrain.org. Connection and device data, display name and real-time audio and video are processed during a session. We do not record sessions unless this has been expressly agreed in advance and is legally permitted.
The legal bases are Article 6(1)(b) GDPR and, where health data are processed during the appointment, Article 9(2)(h) GDPR.
7. Cookies, local fonts and audience measurement
The active information pages do not use analytics, advertising or social-media pixels and do not set cookies during an ordinary visit. The active information pages and the resources linked from them serve the Onest typeface locally. Some unlinked historical design-comparison pages may still load Google Fonts; when such an archive view is opened, the visitor's IP address and related connection data may be transmitted to Google. The legal basis for keeping these historically unchanged views available is Article 6(1)(f) GDPR.
The appointment system uses only technically necessary cookies for session, language and security. These essential technologies do not require consent under section 25(2) of the German TDDDG.
The protected /keystatic editing area is exclusively for authorised editors. It uses GitHub OAuth, technically necessary authentication cookies and local browser caches to edit Git-backed content. GitHub's privacy policy also applies; this processing does not occur during an ordinary public visit.
8. Recipients and processors
Data are received only by parties that need them for hosting, communication, appointment management, payment or legal obligations. These may include Contabo, Stripe and professionals bound by confidentiality. Internal email, scheduling, automation and video systems are self-hosted.
Processors are engaged under Article 28 GDPR. Data are not disclosed for advertising purposes.
9. Retention
Personal data are deleted or restricted when the purpose no longer applies and no statutory, contractual or professional retention duty or legitimate need to establish, exercise or defend legal claims requires continued storage. Different categories of data may therefore be subject to different periods.
10. Your rights
Subject to the statutory conditions, you have rights of access, rectification, erasure, restriction, data portability and objection. You may withdraw consent for the future. You may also lodge a complaint with a supervisory authority. To exercise your rights, contact us using the details above.
11. Supervisory authority
- Authority
- Berliner Beauftragte für Datenschutz und Informationsfreiheit Alt-Moabit 59–61 10555 Berlin Telephone: +49 30 13889-0
12. Security and updates
We use encrypted HTTPS connections and appropriate technical and organisational measures. This policy will be updated when services, legal bases or processing operations change. The version published at the relevant time applies.