Privacy Policy

This website runs on an IONOS virtual server in a data centre within the European Union. The provider is IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. IONOS also hosts our business email mailbox.

When you access the website, your IP address, requested web address and connection and browser information needed for communication are processed. The basis is Article 6(1)(f) GDPR. Our legitimate interest is the reliable and secure provision of our website.

Under the configured operating settings, routine web-server access logging and output of booking and questionnaire contents to application logs are disabled. Technical error, security and authentication logs and request limiting are separate from this.

To protect booking and questionnaire transmission, the server processes your IP address, request count and checking period in memory. The basis is Article 6(1)(f) GDPR; our legitimate interests are preventing automated abuse and protecting availability. Checking periods last one or ten minutes depending on the function. Expiry does not immediately delete an entry: entries are overwritten by subsequent requests, removed when the bounded store is cleaned up, or discarded when the relevant server process ends.

Technical identifiers and verification data ensure correct association of questionnaire transmissions and prevent repeated transmissions. Coordination files contain no answers or contact details, but contain identifiers derived from appointment IDs. These are not automatically anonymous. Processing of this security data relies on Article 6(1)(f) GDPR. The bases in section 13 apply to the health information itself.

IONOS WebAnalytics is not used on the current VPS website. The website does not embed its own analytics or advertising scripts to collect questionnaire answers or booking information.

The website uses the amg-neuro-locale cookie to remember German, English or Arabic as the language preference. It may be set as soon as a language-specific page is opened. For addresses without a language, the website considers an existing preference or the language preference sent by your browser. Manual language selections are also saved.

The language cookie contains the language code, applies across the website and has a configured lifetime of 365 days. It uses SameSite=Lax. Subsequent processing of the language preference relies on Article 6(1)(f) GDPR; our legitimate interest is displaying the website in the appropriate language.

No session cookie is used to transmit the optional questionnaire. After a confirmed booking with sharing selected, the browser receives signed authorisation and a random technical proof bound to the appointment, the selected information and consent version. They expire within 30 minutes and stay only in the booking flow’s memory, never in cookies, URLs, Local Storage or Session Storage. They are discarded after successful transmission, expiry or leaving the booking flow. Reloading ends the local transmission option; an existing booking remains valid. Processing of the technical security information relies on Article 6(1)(f) GDPR; our legitimate interest is correct association and prevention of abuse. Sharing health information relies on separate explicit consent. An old asrs-session cookie is no longer used for transmission and is deleted when the booking functions load again; otherwise its existing lifetime ends within 30 minutes.

Storing information on your device and accessing it are separately governed by section 25 TDDDG. Consent is unnecessary only where a statutory exception applies, particularly storage that is strictly necessary for a digital service you expressly request. Article 6(1)(f) GDPR does not replace consent required under section 25 TDDDG.

You can delete or restrict cookies through your browser settings. This may affect the saved language preference and questionnaire transmission. The website does not save self-check answers in Local Storage or Session Storage.

Contact us at info@psychiatriekamal.de. We process your email address, sender and time information, technical transmission data and message contents as needed to handle your enquiry. IONOS hosts the mailbox.

Enquiries about establishing or carrying out a treatment relationship are handled under Article 6(1)(b) GDPR. General enquiries are handled under Article 6(1)(f) GDPR; our legitimate interest is responding to your enquiry.

Where health information is necessary for medical advice, diagnosis, treatment or related administration, Article 9(2)(h), together with Article 9(3) GDPR and section 22(1)(1)(b) BDSG, additionally applies. This does not provide blanket permission to use any health information for other purposes.

Please agree an appropriate transmission method with us before sending diagnoses, findings or medical reports. Ordinary email does not automatically provide end-to-end encryption.

Locally hosted fonts and media

The fonts, images, and other media used on the website are served locally through our website. Loading the website therefore does not establish a connection to an external media or font provider for these resources.

External links

The website contains ordinary links to external services, including Instagram and professional or public-authority information pages. Merely visiting our website does not establish a connection to an external provider unless you click the relevant link. After clicking, you leave our website; the respective provider is responsible for subsequent data processing. Our website is configured not to transmit a referrer when following a link.

Under the intended access policy, clinical handling of your patient information is reserved for Dr Kamal and practice staff authorised for their particular tasks.

Technical processing and existing account access must be distinguished from this. IONOS provides hosting and email. We use Meetergo for appointment management. Authorised technical developers or partners with existing account permissions may also access questionnaires associated with appointments. The intended restriction of clinical handling does not mean that these technical permissions have already been revoked.

External service providers and technical access must be restricted to what is necessary and meet the requirements for processing under Article 28 GDPR, security under Article 32 GDPR and medical confidentiality under section 203 StGB.

Retention depends on the purpose and applicable legal obligations. Administrative appointment data, transmitted questionnaires, medical records, consent evidence and technical data must be considered separately.

Local questionnaire data: The handoff of your answers for booking initially stays in browser memory. Reloading, leaving the test and booking flow or resetting discards this local handoff. After confirmed successful transmission the local handoff is deleted. This does not delete data already transmitted to Meetergo.

Administrative appointment data: Calendar and booking entries, including cancelled or missed appointments, are not subject to a blanket ten-year retention duty. Continued storage after the administrative purpose ends requires a separate legal ground, for example where particular information is necessary for specific legal claims. The duty to retain patient records does not automatically apply to all Meetergo bookings.

Transmitted questionnaires: Retention of an appointment note must be assessed against appointment preparation and any necessary transfer of clinically relevant information to the patient record. Transmission alone does not make the questionnaire medical documentation subject to a retention duty.

Medical records: Information forming part of the necessary patient record is generally retained for ten years after treatment ends under section 630f(3) BGB, unless other rules prescribe different periods. Compliance with this duty relies on Article 6(1)(c) GDPR together with section 630f BGB; Article 9(2)(h), together with Article 9(3) GDPR and section 22(1)(1)(b) BDSG, additionally applies to health information.

Consent evidence and correspondence: The relevant evidence or handling purpose and actually applicable retention duties determine retention. Necessary proof of consent is governed by Article 7(1) and Article 6(1)(c) GDPR. Withdrawal does not permit further use for the withdrawn purpose. Necessary medical documentation is a separate matter.

Technical data: Request counters follow the removal mechanisms described in section 2. The in-memory questionnaire authorisation lasts at most 30 minutes; the language cookie is configured for 365 days. Coordination files are scheduled for cleanup after two days. This does not delete all backup copies; existing copies may remain longer. Immediate complete deletion from all systems is not guaranteed here.

For information about data stored about you, or to request deletion or restriction, contact info@psychiatriekamal.de.

Subject to the statutory conditions, you have rights of access, rectification, erasure, restriction of processing and data portability under Articles 15 to 20 GDPR.

Where we process data under Article 6(1)(f) GDPR, you may object under Article 21 GDPR on grounds relating to your particular situation.

You may withdraw consent at any time for future processing under Article 7(3) GDPR. Withdrawal does not affect earlier lawful processing. Legal retention duties may prevent immediate deletion; in that case we assess restriction of processing.

To exercise your rights, contact info@psychiatriekamal.de. We normally respond within one month. Where a legally permitted extension is needed, we inform you within that period and explain the reasons.

The automatic ASRS interpretation provides orientation. It makes no binding decision on diagnosis or treatment and is not a solely automated decision producing legal or similarly significant effects under Article 22 GDPR.

Under Article 77 GDPR you may complain to a data protection supervisory authority, particularly in the place of your habitual residence, workplace or the alleged infringement. The State Commissioner for Data Protection of Lower Saxony is particularly relevant to the practice's location. Information and complaint options are available at www.lfd.niedersachsen.de.

The website and transmission of booking and questionnaire data use HTTPS. Questionnaire transmission is technically bound to the associated booking and protected against assignment to an arbitrarily selected appointment. The website limits requests to protect against automated abuse.

These measures do not replace necessary access restrictions and confidentiality safeguards at the practice and its service providers. Absolute security of transmission and processing cannot be guaranteed.

Updated: 19 October 2026

We use Meetergo, provided by meetergo GmbH, Hauptstraße 44, 40789 Monheim am Rhein, Germany, for appointment management. When booking, we process your first and last name, email address, appointment type, selected time, language preference and choices about optional reminders and acknowledgement of the privacy notice.

The website sends the necessary booking information through our server to Meetergo for appointment management for the practice. You do not need to create your own Meetergo account on our website. The basis for arranging and organising your requested appointment is Article 6(1)(b) GDPR.

Information about an appointment at a psychiatric practice can itself be health information. Where necessary to establish or provide medical care, processing relies on Article 9(2)(h), together with Article 9(3) GDPR and section 22(1)(1)(b) BDSG.

First name, last name, email address and appointment selection are required for online booking. Without them, it cannot be completed. You are not legally obliged to use online booking. Acknowledging the privacy notice does not replace any separately required consent. Questionnaire sharing and appointment reminders are optional.

The six-question ASRS v1.1 self-check provides initial orientation and is not a medical diagnosis. When you merely complete it and view the result, answers and interpretation remain in browser memory; the website does not send them to the practice or Meetergo at that stage.

Transmission is initiated only if you select the separate, initially unchecked consent and then book successfully. You can preview the information beforehand. The six answers, screening interpretation, language, questionnaire, wording and scoring versions, recall period, completion time and consent evidence are transmitted. Our server checks the answers and recalculates the interpretation. The information is associated with the booked appointment as a note in Meetergo.

The purpose is preparation of your appointment by the practice. The bases are Article 6(1)(a) and your explicit consent under Article 9(2)(a) GDPR. You may book without a questionnaire and deselect sharing or remove the questionnaire before submission.

After transmission you may withdraw consent at any time for future processing by contacting the practice, particularly at info@psychiatriekamal.de. Earlier lawful processing remains unaffected. Withdrawal ends further processing based on this consent. Independent legal duties for necessary medical documentation remain; storage as a Meetergo appointment note alone does not create a ten-year retention duty.

The website does not place your answers in booking titles, booking descriptions, URLs or calendar fields. This does not guarantee how connected calendar, notification or video services subsequently process information.

During booking you may choose whether to receive appointment reminders. The choice is initially unchecked and is sent to Meetergo when booking. Booking remains possible without selecting it.

Additional processing of contact and appointment data for voluntary reminders relies on your consent under Article 6(1)(a) GDPR and, where health information is involved, your explicit consent under Article 9(2)(a) GDPR.

You may withdraw consent for future reminders at any time by contacting the practice, particularly at info@psychiatriekamal.de. Earlier lawful processing remains unaffected. Organisational messages necessary to carry out or change a booked appointment are a separate matter.