Xenia Hupp
Data protection
This privacy policy explains how personal data is handled on this website, what information is collected and analyzed, what this information is used for, and with whom it is shared. Your trust is important to me, which is why I take data protection seriously and ensure appropriate security. Naturally, I comply with the applicable legal requirements of the Swiss Federal Data Protection Act (DSG), the Ordinance to the Federal Data Protection Act (VDSG), the Telecommunications Act (FMG), and other provisions of Swiss data protection law.
I've made it my goal to provide you with this information as clearly and understandably as possible. Should you have any questions about any of the points, I'm happy to help.
Personal data
Personal data is all information that relates to an identified or identifiable person. This includes information such as first name and last name, title, postal address, email address, telephone number, and similar information. Information that cannot be directly linked to your true identity is not included.
Practice management with Healthapp Consulting GmbH
My data processing with Healthapp Consulting GmbH is carried out in compliance with data protection regulations.
Healthapp Consulting GmbH encrypts data traffic and stores your data in encrypted form on its servers at Nine Internet Solutions AG. Only I, Xenia Hupp, as the consultant, can view confidential client data and process all data in accordance with applicable data protection regulations. Data is only transferred to third parties in compliance with data protection regulations on behalf of the client, i.e., the treating service provider.
Any other transfer of customer data is not possible under any circumstances due to the applicable contractual and regulatory provisions such as general terms and conditions, data processing regulations, etc.
I refer to the privacy policy of Healthapp Consulting GmbH
Video consultation with doxy.me
For online consultations, I use the privacy-compliant platform doxy.me. The connection is encrypted, no registration is required, and no conversations are recorded or stored.
Doxy.me Inc. provides the technical infrastructure for video consultations. Data is transmitted via secure servers that meet current security standards. Doxy.me is fully GDPR-compliant and meets the data protection and data security requirements according to doxy.me/de/security .
Important information for clients:
No content from video or audio sessions is saved. Chat messages are also not permanently stored.
Files or photos transferred during a session are temporarily transferred to doxy.me's servers and are then automatically deleted.
Doxy.me does not sell data, does not conduct analytics, and does not use your information for marketing purposes.
You don't need to create a user account. Access is via a secure link that you'll receive before the session.
Doxy.me acts as a technical service provider. I, Xenia Hupp, am responsible for the processing of your personal data, including its deletion in accordance with applicable law.
responsibility
Responsible for the processing of the data is:
Psychological counseling Xenia Hupp in the canton of Zurich, Switzerland, huppxenia@gmail.com
Collection and use of personal data in general
Personal data is generally collected where it is required for offers, newsletters, etc., or to fulfill a contractual or legal obligation of Xenia Hupp. When you visit my website, the servers of my hosting provider (Wix.com) temporarily store each access in a log file. Without your intervention, the following data is stored by me:
the IP address of the requesting computer
the name of the owner of the IP address range (usually your Internet access provider)
the date and time of access
the website from which the access was made (referrer URL) with the search term used if applicable
the name and URL of the retrieved file
the status code (e.g. error message)
the operating system of your computer
the browser you use (type, version and language)
the transmission protocol used (e.g. HTTP/1.1)
Your username from registration/authentication
The data collected is used solely for statistical evaluations and to improve the website and is not linked to or stored with personal data. I reserve the right to subsequently review the log files if there is concrete evidence of illegal use.
For security reasons, my DNS server provider stores the data of website visitors who use my forms.
When contacting us by phone / email:
You have the opportunity to contact me by phone or email and ask me questions about website functionality and services.
I only collect the personal data you provide to me. Consequently, you are responsible for the content of your message and have control over what information you send me. I recommend that you do not send any sensitive information. In order to answer your questions, I may ask you to provide me with additional information (e.g., your address, email address, etc.). I will only collect the personal data necessary to answer your questions or provide the services you request.
Cookies
Cookies help in many ways to make your visit to my website easier, more pleasant, and more meaningful. Cookies are information files that your web browser automatically saves to your device's memory when you visit my website. Cookies do not damage your device's memory, nor do they transmit any personal user data to me.
For example, I use cookies to temporarily save your selected services and entries when filling out a form on the website so that you do not have to repeat the entry when you visit another subpage.
Most browsers are set to automatically accept cookies. However, you are free to set your browser to generally reject cookies. However, when you access my website, I ask for your consent to the cookies I use that are not technically necessary, especially when using third-party cookies for marketing purposes. On the following pages, you will find explanations of how you can configure the processing of cookies in the most common browsers:
Deactivating cookies may mean that you may not be able to use all of the website's functions to their full extent.
Web analysis
For my web statistics and to continuously improve my online offering, I use analysis tools from various tool providers.
These tools use so-called "cookies," text files stored on your computer that enable an analysis of your website usage. The information generated by the cookie about your use of the website (including your IP address) is transmitted to and stored by the respective tool provider on servers in the United States. This server may be located outside of Switzerland.
The tool providers will use this information to evaluate your use of this website, to compile reports on website activity for Xenia Hupp, and to provide other services related to website activity and internet usage. They may also transfer this information to third parties if required by law, or if third parties process this data on behalf of the tool providers.
I use the following analysis tools on my website:
Google Analytics 4 (GA4)
This website uses Google Analytics 4 (GA4), a web analytics service provided by Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA. Within the European Economic Area (EEA) and Switzerland, Google Ireland Limited is responsible for the analytics service. Google Analytics 4 (GA4) uses tools such as cookies (see Cookies for more information).
Google Analytics 4 (GA4) does not log or store individual IP addresses. Google Analytics 4 (GA4) does not provide precise location data. Instead, the following metadata is derived from IP addresses: "City" (and the derived latitude and longitude of the city), "Continent," "Country," "Region," "Subcontinent" (and the ID-based equivalents). For access originating from the EU, IP address data is used only to derive location data and is immediately deleted thereafter. It is not logged, is not accessible, and is not used for any other use cases. When collecting measurement data in Google Analytics 4 (GA4) Analytics, all IP lookups are performed on EU-based servers before the traffic is forwarded to Analytics servers for processing.
Google Analytics 4 (GA4) uses regional data centers. When Google Analytics 4 (GA4) connects to the nearest available Google data center, the measurement data is sent to Analytics via an encrypted HTTPS connection. At these centers, the data is further encrypted before being forwarded to Analytics' processing servers and made available on the platform. The most suitable local data center is determined based on IP addresses.
I also use the technical extension "Google Signals," which enables cross-device tracking. This allows a single website visitor to be associated with different devices. However, this only happens if the visitor is logged into a Google service when visiting the website and has simultaneously activated the "personalized advertising" option in their Google account settings. Even then, no personal data or user profiles are accessible to us; they remain anonymous to me.
If you do not wish to use “Google Signals,” you can deactivate the “personalized advertising” option in your Google Account settings.
Users can prevent Google from collecting the data generated by the cookie and relating to their use of the website (including their IP address) and from processing this data by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de .
As an alternative to the browser plug-in, users can click this link to prevent Google Analytics from collecting data on the website in the future. An opt-out cookie will be stored on the user's device. If the user deletes cookies, the link must be clicked again.
You can revoke your consent at any time with future effect.
Links to other websites
This website contains links to third-party websites. Once you click on these links, you leave my sphere of influence. Xenia Hupp assumes no responsibility for the content or legality of third-party websites to which this website links.
Data security
I operate secure data networks that comply with the applicable technical standards. All necessary and appropriate technical and organizational precautions have been taken to conscientiously protect your data from loss, destruction, falsification, manipulation, or unauthorized access.
My security measures are continually adapted in line with technological developments. However, the transmission of information via the Internet and electronic means of communication always involves certain security risks, and I cannot provide absolute guarantees for the security of information transmitted in this way.
You should always treat your access data confidentially and close the browser window when you have finished communicating with me, especially if you use the device together with others.
I take internal data protection very seriously. The service providers I engage have been obligated to maintain confidentiality and comply with data protection regulations.
Retention period
I only store personal data for as long as necessary to perform the tracking services mentioned above and other processing within the scope of my legitimate interest. I retain contract data for longer because this is required by statutory retention periods. Retention obligations that oblige me to retain data arise, among other things, from accounting and tax regulations. According to these regulations, business communications, concluded contracts and accounting documents must be retained for up to 10 years. If I no longer need this data to provide services to you, the data will be blocked. This means that the data may then only be used for very specific purposes, such as accounting and tax purposes. The data will be deleted as soon as there is no longer any retention obligation and no legitimate interest in retaining it.
Your rights
You can object to data processing at any time. You also have the following rights:
Right to information: You have the right to request access to the personal data I store about you at any time and free of charge. This gives you the opportunity to check which personal data I process about you and to ensure that I use it in accordance with applicable data protection regulations.
Right to rectification: You have the right to have inaccurate or incomplete personal data rectified and to be informed of the rectification. In this case, I will inform the recipients of the data concerned of the adjustments made, unless doing so is impossible or involves disproportionate effort.
Right to erasure: You have the right to have your personal data erased under certain circumstances. In individual cases, the right to erasure may be excluded.
Right to restriction of processing: Under certain circumstances, you have the right to request that the processing of your personal data be restricted.
Right to data portability: Under certain circumstances, you have the right to receive from me the personal data you have provided to me free of charge in a readable format.
Right of objection: You can object to data processing at any time.
Right to lodge a complaint: You have the right to lodge a complaint with a competent supervisory authority regarding the way in which your personal data is processed.
Right of withdrawal: You generally have the right to withdraw your consent at any time with future effect. Processing activities based on your consent in the past will not become unlawful as a result of your withdrawal.
contact
If you have any questions about data protection on my website, would like information or would like to have your data deleted, please contact me by sending an email to huppxenia@gmail.com.
Changes to this privacy policy
Xenia Hupp adapts this privacy policy to new or changing needs from time to time. The latest version will be made available here.
Zurich, February 2025