​​

1. Introduction

This Privacy Policy explains how personal data is processed when you visit this website, contact me, book an appointment, or make use of my psychological counselling services.

Personal data means any information that can identify you directly or indirectly.

Last updated: June 10, 2026

​

2. Data Controller

The data controller responsible for processing personal data on this website is:

Nassim Farahzad
Oldenburgerstraße 22
10551 Berlin
Germany

Email: info@nassimfarahzad.com

​

3. General Information on Data Processing

I process personal data only to the extent necessary to provide this website, respond to enquiries, arrange appointments, provide psychological counselling services, or comply with legal obligations.

Personal data is processed in accordance with the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and other applicable data protection laws.

​

4. Categories of Personal Data Processed

Depending on how you use this website and my services, I may process the following categories of personal data:

• Contact details (e.g. name, email address, telephone number)

• Content data (e.g. messages, information submitted through the contact form, or information provided as part of an enquiry)

• Appointment and contractual data (e.g. booked appointments, counselling services, and billing information)

• Usage data (e.g. pages visited, access times, and technical information)

• Technical and communication data (e.g. IP address, browser type, operating system, and connection data)

• Health-related or other special category data, where you voluntarily provide such information during an enquiry or counselling session

​

5. Purposes of Data Processing

Personal data may be processed for the following purposes:

• Providing and maintaining this website

• Responding to enquiries

• Scheduling and organising counselling appointments

• Providing psychological counselling services

• Billing and payment processing

• Complying with legal record-keeping and documentation obligations

• Communicating with clients

• Maintaining my online presence and providing information about my services

​

6. Legal Bases for Processing

Depending on the purpose, personal data is processed on one or more of the following legal bases under the GDPR:

• Article 6(1)(a) GDPR – where you have given your consent

• Article 6(1)(b) GDPR – where processing is necessary to take steps prior to entering into a contract or to perform a contract

• Article 6(1)(c) GDPR – where processing is necessary to comply with a legal obligation

• Article 6(1)(f) GDPR – where processing is necessary for my legitimate interests

• Article 9(2)(h) GDPR – where special categories of personal data are processed in connection with psychological counselling services

​

7. Security Measures

I implement appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration, or disclosure.

This website uses SSL/TLS encryption. You can recognise an encrypted connection by the "https://" in your browser's address bar.

​

8. Website Hosting via Wix

This website is hosted by Wix. The provider is:

Wix.com Ltd.
40 Namal Street
6350671 Tel Aviv
Israel

For users within the European Union, services may also be provided by affiliated companies within the Wix Group, depending on the contractual relationship.

When you visit this website, Wix processes technical data necessary for the secure operation and delivery of the website. This may include, in particular, your IP address, the date and time of access, browser type, operating system, pages visited, and technical log data.

The use of Wix is based on my legitimate interest in providing a secure, stable, and user-friendly website in accordance with Article 6(1)(f) GDPR. Where your consent is required, processing is based on Article 6(1)(a) GDPR.

A Data Processing Agreement (DPA) has been concluded with Wix.

Further information can be found in Wix's Privacy Policy.

​

9. Cookies and Consent Management

This website may use cookies and similar technologies. Cookies are small text files that are stored on your device.

Some cookies are technically necessary for the website to function properly. Others may be used to analyse website usage, improve functionality, or integrate third-party services.

Where non-essential cookies or similar technologies are used, they will only be processed with your consent in accordance with Article 6(1)(a) GDPR. You may withdraw or modify your consent at any time with effect for the future.

Technically necessary cookies are processed on the basis of my legitimate interest in accordance with Article 6(1)(f) GDPR.

​

10. Contact by Email or Contact Form

If you contact me by email, via the contact form, or by any other means, I process the information you provide in order to respond to your enquiry.

This may include:

• Name

• Email address

• Telephone number

• The content of your message

• The date and time of your enquiry

• Technical transmission data

Where your enquiry relates to psychological counselling or a potential collaboration, processing is based on Article 6(1)(b) GDPR. In all other cases, processing is based on my legitimate interest in responding to enquiries in accordance with Article 6(1)(f) GDPR.

Please avoid sending particularly sensitive personal information via contact forms or unencrypted email unless it is necessary.

​

11. Appointment Booking

When you book an appointment, the information required for scheduling and organising your session will be processed. This may include your name, contact details, appointment information, the reason for your enquiry, and other organisational details.

The processing of this data is necessary for arranging and providing your initial consultation or psychological counselling services and is based on Article 6(1)(b) GDPR.

If appointments are booked through Wix Bookings or a comparable booking service, your data will also be processed by the respective technical service provider.

​

12. Online Counselling via Zoom

Online counselling sessions may be conducted using Zoom. The provider is:

Zoom Video Communications, Inc.
55 Almaden Boulevard, 6th Floor
San Jose, CA 95113
United States

When using Zoom, the following categories of personal data may be processed:

• Name

• Email address

• Technical connection data

• IP address

• Device information

• Meeting metadata

• Communication content generated during the session

Online counselling sessions are not recorded, unless this has been expressly agreed upon in advance and you have provided your explicit consent.

The use of Zoom for online counselling is based on Article 6(1)(b) GDPR. Where health-related or other special category personal data is processed during counselling sessions, processing is based on Article 9(2)(h) GDPR.

A Data Processing Agreement (DPA) or equivalent contractual safeguards are in place with Zoom. As Zoom is a U.S.-based provider, personal data may be transferred outside the European Union or the European Economic Area. According to Zoom, appropriate safeguards are implemented, including the EU Standard Contractual Clauses (SCCs) and/or other recognised international data protection mechanisms.

To help protect your privacy, I recommend participating in online counselling sessions from a private and secure location.

​

13. Counselling Data and Professional Confidentiality

As part of psychological counselling, special category personal data may be processed. This may include information about your personal circumstances, psychological well-being, life situation, relationships, health, or previous experiences.

All information shared during counselling is treated confidentially. As a Licensed Practitioner for Psychotherapy (Germany), I am subject to statutory professional confidentiality obligations.

Personal data is processed for the purpose of providing psychological counselling in accordance with Article 6(1)(b) GDPR and, where special category personal data is concerned, Article 9(2)(h) GDPR.

​

14. Billing and Payment Processing

For the purpose of billing my services, I process the personal data required to prepare and issue invoices. This may include:

• Name

• Address

• Billing information

• Information about the services provided

• Payment information

Processing is carried out for the performance of a contract in accordance with Article 6(1)(b) GDPR and to comply with legal record-keeping obligations pursuant to Article 6(1)(c) GDPR.

If payments are processed through external payment service providers, their respective privacy policies also apply.

​

15. Blog and Website Content

This website may contain blog articles and other informational content. When you access this content, only the personal data that is generally processed when visiting the website is collected.

If commenting or other interactive features are enabled in the future, additional personal data may be processed. If no such features are available, no additional processing takes place.

​

16. Social Media

I maintain online profiles on social media platforms, including Instagram and LinkedIn. If you visit my profiles or interact with me through these platforms, personal data may be processed by the respective platform providers.

The processing of personal data on these platforms is primarily governed by the privacy policies of the respective providers, including:

• Instagram (Meta Platforms Ireland Limited)

• LinkedIn Ireland Unlimited Company

I process personal data through my social media presence to communicate with users, provide information about my services, and share relevant content. The legal basis for this processing is my legitimate interest in public communication and outreach in accordance with Article 6(1)(f) GDPR.

​

17. Data Retention

Personal data is stored only for as long as necessary to fulfil the purposes for which it was collected or as required by applicable legal retention obligations.

Data relating to enquiries will be deleted once the enquiry has been fully processed, provided there are no legal retention obligations or legitimate interests requiring further storage.

Billing and tax-related records are retained for the period required by applicable law.

Counselling-related data is stored only for as long as necessary for the provision of counselling services, documentation purposes, or to comply with legal obligations.

​

18. Disclosure of Personal Data

Personal data will not be disclosed to third parties without your consent unless this is necessary for providing counselling services, operating this website, processing payments, complying with legal obligations, or protecting legitimate interests.

Any service providers who process personal data on my behalf are carefully selected and contractually obliged to comply with applicable data protection laws.

​​

​

19. International Data Transfers

Where external service providers are used, personal data may be transferred to countries outside the European Union (EU) or the European Economic Area (EEA).

Where such transfers take place, they are carried out only in accordance with applicable data protection laws and on the basis of appropriate safeguards, such as an adequacy decision, the EU–U.S. Data Privacy Framework, the Standard Contractual Clauses (SCCs), or other legally recognised transfer mechanisms.

​

20. Your Rights

Under the GDPR, you have the following rights, subject to the applicable legal requirements:

• The right to access your personal data

• The right to rectification of inaccurate personal data

• The right to erasure ("right to be forgotten")

• The right to restriction of processing

• The right to data portability

• The right to object to certain processing activities

• The right to withdraw your consent at any time with effect for the future

If you wish to exercise any of these rights, you may contact me at any time using the contact details provided above.

​

21. Right to Lodge a Complaint

You have the right to lodge a complaint with a competent data protection supervisory authority if you believe that the processing of your personal data violates applicable data protection law.

You may contact the supervisory authority responsible for your place of residence, your place of work, or the location of my practice.

​

22. Changes to This Privacy Policy

I reserve the right to update or amend this Privacy Policy whenever necessary, for example if my website, services, technologies, or legal obligations change.

The most recent version of this Privacy Policy will always be published on this website.