thrpy. einfach. anders. Software für Psychotherapeuten

Privacy Policy

Responsible party within the meaning of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is:
oob6 international UG (haftungsbeschränkt)
Wackenroderstraße 3
91056 Erlangen
Germany

Phone: 0151/40007619
Email: info[at]thrpy-app.com

Managing Director: Jochen Böhner

Principles of data processing by the responsible party and third parties

Unless otherwise stated in this declaration, we process only the data that you have provided to us with your consent (Article 6(1)(a) GDPR) for communication purposes (e.g., for support requests via your email address using your name or username), exclusively for the corresponding purposes. Your personal data will not be transmitted to third parties for purposes other than those mentioned above.

We will only disclose your personal data to third parties if:
You have given us explicit consent to do so,
The processing is necessary for the performance of a contract with you,
The processing is necessary for compliance with a legal obligation,
The processing is necessary for the protection of our legitimate interests, and there is no reason to believe that you have an overriding legitimate interest in not disclosing your data.

Data storage duration

We process and store your personal data as long as maintaining communication is expected. The data will be regularly deleted as soon as the communication is no longer expected, at the latest 6 months after the last request has been processed—unless the temporary further processing is necessary for the following purposes:

Fulfillment of legal obligations, e.g., commercial and tax retention obligations under the Commercial Code (HGB), the Fiscal Code (AO), and the Money Laundering Act (GwG). The retention and documentation periods there can be from two to ten years.
Preservation of evidence within the scope of the statutory limitation regulations. Pursuant to §§ 195 ff. of the German Civil Code (BGB), these limitation periods can be up to 30 years. The regular limitation period is 3 years.

Analysis of app usage using the analytics tool Matomo

When using the app, information is automatically sent to our server. This information is stored in a database after anonymization using a pseudonymized user ID. The following information is collected without your intervention:

MAC address of your device,
Size and version of your device,
Operating system of your device,
Date and time of login.

We process the above data for the following purposes:

Evaluating the security and stability of the app,
Developing the app,
Tracing errors.

The legal basis for data processing is Art. 6 (1) 1 (b) GDPR, as the analysis is subject to the scope described in our terms of use. Under no circumstances do we use the collected data to draw conclusions about you as a person. For the analysis and statistical evaluation of the aforementioned collected data, we use the open-source software Matomo. The provider of the Matomo software is InnoCraft Ltd., 150 Willis St, 6011 Wellington, New Zealand. The collected information about app usage is transferred to our servers and summarized in pseudonymous usage profiles. The pseudonymized information is used to evaluate app usage and enable needs-based design and further development. The information is not shared with third parties. The user ID is never associated with other user-specific data. The user ID is pseudonymized, so that allocation is not possible (masking).

Use of app feedback features

If you use the "Feedback on the app" section in "Settings" under "Support," a window will open with the option to compose an email to us. The text field will prefill with information about your app version, current operating system, and device used. If you do not want to transmit this data, simply delete it. However, providing this information may save additional support inquiries. In case of an error, we may ask you to use the "Send Log Data" option for error identification. Here, too, a window will open with the option to send us an email. An automatically stored log file from your device will be attached to this email and sent to us. The log file contains data about the program and usage history that can help us identify the error. It does not contain patient data. Additionally, the text field of the email will prefill with information about your app version, current operating system, and device used. If you do not want to transmit this data, simply delete it. However, providing this information may save additional support inquiries.

Your rights as a data subject

As far as the GDPR applies, you can exercise the following rights at any time under the given contact details:

Information about your stored data and its processing (Article 15 GDPR),
Correction of incorrect personal data (Article 16 GDPR),
Deletion of your stored data (Article 17 GDPR),
Restriction of data processing if we are not yet allowed to delete your data due to legal obligations (Article 18 GDPR),
Objection to the processing of your data by us (Article 21 GDPR), and
Data portability if you have consented to data processing or have concluded a contract with us (Article 20 GDPR).

If you have given us consent, you can revoke it at any time with future effect. However, revoking consent may mean that the respective services can no longer be provided. You can also file a complaint with a supervisory authority at any time, e.g., the competent supervisory authority in the federal state of your residence or the authority responsible for us as the responsible party. A list of supervisory authorities (for the non-public sector) with their addresses can be found at: https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html.

Information about your right to object under Article 21 GDPR

Right to object on a case-by-case basis

As far as the GDPR applies, you have the right to object, on grounds relating to your particular situation, at any time to the processing of your personal data based on Article 6(1)(f) GDPR (data processing based on a balance of interests); this also applies to profiling based on this provision within the meaning of Article 4(4) GDPR. If you object, we will no longer process your personal data, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the assertion, exercise, or defense of legal claims.

Recipient of an objection

oob6 international UG (haftungsbeschränkt)
Wackenroderstraße 3
91056 Erlangen Germany
Email: info[at]thrpy-app.com

Changes to our privacy policy

We reserve the right to adapt this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy, e.g., when introducing new services. The new privacy policy will then apply to your future use.

Questions to the data protection officer

If you have any questions about data protection, please write us an email or contact the person responsible for data protection in our organization directly: info[at]thrpy-app.com This privacy policy was created with the help of the privacy policy generator from activeMind AG.