Last updated 5 October 2026
Privacy policy
This policy explains what personal data I collect when you visit this website, contact me or book and attend a session, why I collect it and what rights you have. It follows the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).
1. Who is responsible
Polina Anderson
Studio für KörperAufmerksamkeit, Kinkel & Block
Körtestraße 8, 10967 Berlin, Germany
Email: polina.anderson.bodywork@gmail.com
2. Visiting this website
When you open this website, the hosting provider automatically stores technical data in server log files: IP address, date and time, the page requested, browser and operating system, and the referring page. This is needed to deliver the site securely. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a stable and secure website). Logs are deleted after [7–14] days. Hosting provider: [name and address of your host].
This website does not use analytics, tracking or advertising cookies.
3. Fonts and icons
This website uses typefaces and icons that are [stored on this website’s own server / loaded from Google Fonts (Google Ireland Ltd.) and unpkg]. If they are loaded from an external server, your IP address is transmitted to that provider when the page loads. Legal basis: Art. 6(1)(f) GDPR.
4. Contacting me
If you write to me by email, Telegram or Instagram, I process the information you send (name, contact details, your message) to answer you and, if you wish, to arrange a session. Legal basis: Art. 6(1)(b) GDPR (steps prior to an agreement) and Art. 6(1)(f) GDPR. Telegram and Instagram are run by third parties with their own privacy policies; please do not send sensitive health information through them.
5. Booking a session
Appointments are booked through TidyCal (TidyCal, operated by AppSumo Originals LLC, USA). When you book, TidyCal processes your name, email address, the time slot and any notes you add, and sends me a confirmation. Data may be transferred to the USA; TidyCal’s safeguards are described in its own privacy policy. Legal basis: Art. 6(1)(b) GDPR.
6. Sessions and health information
Before and during our work you may tell me about your physical and emotional wellbeing, your history and your intention for the sessions. This is health data and a special category of personal data under Art. 9 GDPR. I process it only with your explicit consent (Art. 9(2)(a) GDPR) and only to plan and carry out our work together.
- Before the first session I ask you to fill in an intake form, where you also give this consent. The form is provided through Google Forms (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland), and your answers are stored in my Google Drive. Google may process data on servers outside the EU; its safeguards are described in Google’s privacy policy. If you’re not comfortable with this, we can use a paper form instead on request.
- I keep notes to document and follow up on our process. Together with your form answers, they are stored in a protected digital client file and are not shared with anyone.
- Everything you share in a session is confidential. I break confidentiality only where the law requires it or where there is a serious and immediate risk to you or others.
- You can withdraw your consent at any time. Processing up to that point remains lawful.
7. Payment
If you pay by bank transfer or card, I process the payment details needed for that and keep invoices for the period required by German tax law (up to 10 years). Legal basis: Art. 6(1)(b) and (c) GDPR.
8. Links to other websites
This site links to Google Maps, Google reviews, Instagram, Telegram and TidyCal. Nothing is loaded from these services until you click a link. Once you do, their own privacy policies apply.
9. How long I keep data
I keep contact messages for as long as needed to answer them. Your client file (intake form and session notes) is kept for 10 years after our last session and then deleted. You can ask me to delete it earlier at any time. Invoices are kept as required by tax law.
10. Your rights
- Access to the data I hold about you (Art. 15 GDPR)
- Correction (Art. 16) and deletion (Art. 17)
- Restriction of processing (Art. 18) and data portability (Art. 20)
- Objection to processing based on legitimate interest (Art. 21)
- Withdrawal of consent at any time (Art. 7(3))
To use any of these rights, write to me at the email address above. You can also complain to a data protection authority. For Berlin this is the Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59–61, 10555 Berlin.
11. Changes
I update this policy when the website or my practice changes. The current version is always on this page.