Privacy Policy
1) Introduction and contact details of the responsible party
1.1 We are pleased that you are visiting our website and thank you for your
Interest. Below we inform you about how we handle your
Personal data when using our website. Personal data
This includes all data that can be used to personally identify you.
1.2 The controller responsible for data processing on this website within the meaning of the
General Data Protection Regulation (GDPR) applies to Helena Abay, healing with a tree - private
Practice for resource-oriented trauma therapy and psychotherapy, Marienburger
Street 5a, 10405 Berlin, Germany, Tel.: 0163 7041163, E-Mail:
mail@healingwithatree.com. The controller responsible for processing personal data.
The responsible party is that natural or legal person who alone or
together with others about the purposes and means of processing
personal data decides.
2) Data collection when visiting our website
2.1 When using our website for purely informational purposes, i.e., when you do not register
When you register or otherwise provide us with information, we only collect such information as...
Data that your browser transmits to the website server (so-called "server log files").
When you visit our website, we collect the following data, which is technically necessary for us.
required to display the website to you:
- Our visited website
- Date and time of access
- Amount of data sent in bytes
- Source/referrer from which you accessed this page
- Browser used
- Operating system used
- IP address used (possibly in anonymized form)
The processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest.
Interest in improving the stability and functionality of our website.
The data will not be shared or used for any other purpose. We retain
However, we reserve the right to subsequently review the server log files should there be specific indications of suspicious activity.
Indications of unlawful use.
2.2 This website uses cookies for security reasons and to protect the transmission of personal data.
personal data and other confidential content (e.g. orders or
Inquiries to the responsible party) use SSL or TLS encryption. You can
Encrypted connection indicated by the string "https://" and the padlock symbol in
recognize your browser's address bar.
Copyright © 2026, IT-Recht-Kanzlei GmbH & Co. KG · Alter Messeplatz 2 · 80339 Munich
www.it-recht-kanzlei.de
3) Hosting & Content-Delivery-Network
3.1 Brizy.io
We use the following for hosting our website and displaying the page content:
System provided by: ProWebCraft Ltd., 71-75 Shelton Street, Covent
Garden, London, United Kingdom, WC2H 9JQ
All data collected on our website is stored on the provider's servers.
processed.
We have concluded a data processing agreement with the provider, which...
Ensures the protection of our website visitors' data and prevents unauthorized access.
Distribution to third parties is prohibited.
When data is transmitted to the provider's location, appropriate measures must be taken.
Level of data protection through an adequacy decision of the European
Commission guaranteed.
3.2 Bunny
We use a Content Delivery Network from the following provider: BUNNYWAY doo,
Cesta Komandanta Staneta 4A, 1215 Medvode, Slovenia
This service allows us to handle large media files such as graphics, page content, or
To deliver scripts faster across a network of regionally distributed servers. The processing
This is done to protect our legitimate interest in improving stability.
and functionality of our website in accordance with Art. 6 para. 1 lit. f GDPR.
We have concluded a data processing agreement with the provider, which...
Ensures the protection of our website visitors' data and prevents unauthorized access.
Distribution to third parties is prohibited.
4) Cookies
To make visiting our website attractive and to facilitate the use of certain
To enable certain functions, we use cookies, which are small text files that are stored on your computer.
These cookies are stored on your device. Some of these cookies are deleted after you close the browser.
Browsers automatically delete cookies (so-called "session cookies"), some remain.
These cookies remain on your device for a longer period and allow the storage of
Page settings (so-called "persistent cookies"). In the latter case, you can...
Storage duration of the overview of cookie settings of your web browser
remove.
If personal data is also processed by individual cookies we use
If data is processed, the processing is carried out in accordance with Art. 6 para. 1 lit. b GDPR either
for the performance of the contract, in accordance with Art. 6 para. 1 lit. a GDPR in the event of a
consent given or pursuant to Art. 6 para. 1 lit. f GDPR to safeguard our
legitimate interests in the best possible functionality of the website as well as a
customer-friendly and effective design of the website visit.
Copyright © 2026, IT-Recht-Kanzlei GmbH & Co. KG · Alter Messeplatz 2 · 80339 Munich
www.it-recht-kanzlei.de
You can configure your browser to notify you when cookies are being set.
will be and decide individually on their acceptance or the acceptance of cookies
can exclude certain cases or exclude them generally.
Please note that if you do not accept cookies, the functionality of our website will be impaired.
Website may be restricted.
5) Making contact
When you contact us (e.g. via contact form or email), we will
Personal data is collected. What data is collected when using a
Information collected via the contact form is evident from the respective contact form.
This data will be used exclusively for the purpose of responding to your request or...
for contacting the customer and the associated technical administration
stored and used.
The legal basis for processing this data is our legitimate interest in
The processing of your request is based on Article 6(1)(f) of the GDPR. Is your request aimed at...
If contact is aimed at concluding a contract, then an additional legal basis is required.
The legal basis for processing is Article 6(1)(b) GDPR. Your data will be deleted after final processing.
Your request has been processed and deleted. This is the case if the circumstances indicate otherwise.
This indicates that the matter in question has been conclusively resolved and provided that
no legal retention obligations exist.
6) Page functionalities
Google Translate
This website uses the translation service "Google" via an API integration.
Translate" der Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5,
Ireland (“Google”). So that the translation is available in your chosen language
The browser you are using will automatically connect to the following information: (The information is automatically displayed when...)
on Google's servers. Certain browser information is transmitted in this process.
including your IP address, transmitted to Google.
Google may use so-called "cookies" to store language preferences, i.e., small cookies.
Use text files that are stored on your device. The data generated by the
Cookie-generated information about your use of this website (including the
(abbreviated IP address) are usually transmitted to a Google server and
stored there.
The processing described above may also involve data transfer to the
Servers of Google LLC in the USA.
If cookies are also set when using Google Translate, the
The processing described above will only be carried out if you have given us your consent in accordance with Article 6.
You have given your explicit consent pursuant to Article 6(1)(a) GDPR. You can withdraw your consent at any time.
You may revoke your consent at any time with effect for the future by clicking this link.
Copyright © 2026, IT-Recht-Kanzlei GmbH & Co. KG · Alter Messeplatz 2 · 80339 Munich
www.it-recht-kanzlei.de
Deactivate the service using the "cookie consent tool" provided on the website.
If no cookies are set, processing will take place in accordance with Article 6(1)(f).
GDPR based on our legitimate interest in optimal marketing
our product range and the high-reach design of our website.
For data transfers to the USA, the provider has committed to the EU-US Privacy Shield.
joined the EU-US Data Privacy Framework, which is based on
of an adequacy decision by the European Commission, compliance with the
ensures European data protection standards.
Further information on Google's privacy policy can be found here:
https://business.safety.google/intl/de/privacy/
7) Tools and other items
Cookie-Consent-Tool
This website uses cookies to obtain effective user consent for
Cookies requiring consent and cookie-based applications, a so-called "cookie-
"Consent tool". The "cookie consent tool" is presented to users when they visit a page in the form of a
an interactive user interface is displayed, on which one can select items by ticking a box.
Grant consent for specific cookies and/or cookie-based applications
This tool handles all tasks requiring consent.
Cookies/services are only loaded if the respective user has given the appropriate consent.
Consent is given by ticking a box. This ensures that consent is only given in the case of a
With the consent given, such cookies are placed on the user's respective device.
become.
This tool uses technically necessary cookies to store your cookie preferences.
Personal user data is generally not processed in this process.
In individual cases, for the purpose of storage, assignment or logging,
from cookie settings to the processing of personal data (such as
(the IP address), this is done in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our
legitimate interest in a legally compliant, user-specific and
user-friendly consent management for cookies and thus a
legally compliant design of our website.
A further legal basis for processing is Article 6(1)(c) GDPR. We
As those responsible, they are subject to the legal obligation to ensure the technical aspects of the deployment.
to make the use of non-essential cookies dependent on the respective user's consent.
Where necessary, we have entered into a data processing agreement with the provider.
closed, which ensures the protection of the data of our website visitors and a
Unauthorized disclosure to third parties is prohibited.
Further information about the operator and the cookie settings
You can find consent tools directly in the corresponding user interface on our
Copyright © 2026, IT-Recht-Kanzlei GmbH & Co. KG · Alter Messeplatz 2 · 80339 Munich
www.it-recht-kanzlei.de
Website.
8) Rights of the data subject
8.1 The applicable data protection law grants you rights vis-à-vis the controller
Regarding the processing of your personal data, the following applies:
Data subject rights (rights to information and intervention), whereby for the respective
The conditions for exercising the rights of exercise are based on the aforementioned legal basis:
- Right of access pursuant to Art. 15 GDPR;
- Right to rectification pursuant to Art. 16 GDPR;
- Right to erasure pursuant to Art. 17 GDPR;
- Right to restriction of processing pursuant to Art. 18 GDPR;
- Right to information pursuant to Art. 19 GDPR;
- Right to data portability pursuant to Art. 20 GDPR;
- Right to withdraw consent pursuant to Art. 7 para. 3 GDPR;
- Right to lodge a complaint pursuant to Art. 77 GDPR.
8.2 Right of objection
IF WE, WITHIN THE FRAMEWORK OF A BALANCING OF INTERESTS, PROCESS YOUR PERSONAL DATA
DATA PROCESSED BASED ON OUR OVERRIDING LEGITIMATE INTEREST
PROCESSING, YOU HAVE THE RIGHT AT ANY TIME TO END FOR REASONS ARISING FROM
Due to your particular situation, you have the right to object to this processing.
TO BE IMPLEMENTED WITH EFFECTIVENESS FOR THE FUTURE.
If you exercise your right to object, we will terminate the
PROCESSING OF THE DATA IN QUESTION. FURTHER PROCESSING, HOWEVER, REMAINS
RESERVED IF WE HAVE COMPELLING LEGITIMATE REASONS FOR THE
PROOF PROCESSING THAT INJURES YOUR INTERESTS, FUNDAMENTAL RIGHTS AND
FUNDAMENTAL FREEDOMS OUTWARD, OR IF THE PROCESSING OF
Assertion, exercise or defense of legal claims
SERVES.
WILL WE PROCESS YOUR PERSONAL DATA IN ORDER TO
You have the right to object to direct marketing at any time.
AGAINST THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE
TO USE SUCH ADVERTISING FOR PURPOSES. YOU CAN OBJECT AS...
PRACTICE AS DESCRIBED ABOVE.
If you exercise your right to object, we will terminate the
PROCESSING OF THE DATA IN QUESTION FOR DIRECT MARKETING PURPOSES.
9) Duration of storage of personal data
The duration of the storage of personal data is determined based on the
the respective legal basis, the purpose of the processing and – where applicable –
Copyright © 2026, IT-Recht-Kanzlei GmbH & Co. KG · Alter Messeplatz 2 · 80339 Munich
www.it-recht-kanzlei.de
additionally based on the respective statutory retention period (e.g. commercial and
tax-related retention periods).
When processing personal data based on an explicit
With your consent pursuant to Art. 6 para. 1 lit. a GDPR, the data concerned will be processed for as long as
stored until you withdraw your consent.
Are there statutory retention periods for data collected within the framework of
legal or quasi-legal obligations based on
If data is processed in accordance with Article 6(1)(b) GDPR, this data will be deleted after the expiry of the
Retention periods are routinely deleted unless they are still relevant.
Contract fulfillment or contract initiation are required and/or no obligation on our part
A legitimate interest in further storage continues to exist.
When processing personal data on the basis of Article 6(1)(a)
According to the GDPR, this data will be stored until you exercise your right to object.
We may exercise our right to object pursuant to Article 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms.
demonstrate reasons for the processing which protect your interests, rights and freedoms
predominate, or the processing serves the purpose of asserting, exercising or
Defense of legal claims.
When processing personal data for direct marketing purposes on
Based on Article 6 paragraph 1 letter f GDPR, this data will be stored until
You may exercise your right to object pursuant to Article 21(2) GDPR.
Unless specific information can be derived from the other information in this declaration
Unless processing situations dictate otherwise, stored personal data will be processed.
Data will otherwise be deleted when it is no longer needed for the purposes for which it was collected or stored.
They were processed in other ways and are no longer necessary.