Privacy policy
Courtesy translation. The German version is legally binding: German version.
This notice applies to the website psyclinicai.com and the Application Copilot waitlist. We will publish a separate notice for the application itself before product launch. No health data is processed on this website.
1. Controller
Atilla İlhan (natural person), Kestane Sokak No. 4/6A, İdealtepe, 34841 Maltepe/İstanbul, Türkiye, email: atillailhann@gmail.com. Full details are in the imprint. For privacy questions you can reach us at this address or at kontakt@psyclinicai.com. No data protection officer has been appointed at present.
The controller is established in Türkiye, outside the European Union; there is no European Commission adequacy decision for Türkiye. Our servers are located in Germany. A representative in the Union under Art. 27 GDPR has not been appointed at present.
2. Hosting and access data
The website and the waitlist are operated by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, on servers in Germany (processing on our behalf under Art. 28 GDPR, “DSGVO” in German). When you open a page, the web server processes technically necessary data such as IP address, time, page requested and browser identifier in order to deliver the page and protect it against abuse. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure operation). We do not store access logs containing IP addresses. To defend against automated mass sign-ups, the server keeps the IP address in memory for 15 minutes at most.
3. No cookies, no audience measurement, no third-party content
We set no cookies and do not access information stored on your device (§ 25 TDDDG, the German telecommunications and digital services privacy act). There is currently no audience measurement. If we introduce cookie-free, self-hosted audience measurement in future, we will update this notice beforehand. We load fonts and scripts exclusively from our own server; no third-party content is embedded.
4. Waitlist with double opt-in
Which data: your email address; optionally practice type, therapy approach and whether you are willing to take part in a 15-minute conversation. As proof of your consent we store the wording and version of the consent text, the times of sign-up and confirmation, and the IP addresses at sign-up and confirmation.
Process: after you submit the form you receive an email with a confirmation link. The sign-up only becomes effective once you confirm. If you do not confirm, we delete the data after 30 days at the latest.
Purpose: information about the product launch, invitation to the trial period, occasional product updates; if you indicated this, contacting you for a conversation.
Legal basis: your consent, Art. 6(1)(a) GDPR; § 7(2) no. 2 UWG (German Unfair Competition Act). Proof of consent is based on Art. 6(1)(c) in conjunction with Art. 7(1) GDPR.
Email delivery: we send emails through Resend, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA (processing on our behalf). The transfer to the USA is based on the EU-US Data Privacy Framework, to which Resend belongs, and on standard contractual clauses (Art. 46(2)(c) GDPR). Resend receives your email address and the content of the email, not your other details.
Withdrawal and deletion: you can withdraw your consent at any time, using the link in every email or by email to kontakt@psyclinicai.com. The lawfulness of processing carried out until then is not affected. On withdrawal we immediately delete your optional details and the IP addresses; we keep the email address, consent text and timestamps as proof for three years and then delete them. On the unsubscribe page you can instead choose immediate, complete deletion of all your data.
Storage period: until withdrawal, and at most until the waitlist purpose ends after product launch.
5. Internal notification
When a sign-up is confirmed, we receive a push notification through the service ntfy (and possibly Telegram). This message contains only the total number of sign-ups plus practice type, therapy approach and willingness to talk if provided, with no email address and no other detail that identifies you.
6. Contact by email
If you write to us, we process your details to handle your enquiry (Art. 6(1)(b) or (f) GDPR) and delete them two years after the matter is closed, unless retention obligations apply.
7. Letters to practices
We occasionally inform psychotherapy practices about the Application Copilot by letter. For this we use name and practice address from publicly available directories; we name the source in each letter. The legal basis is our legitimate interest in informing about our offer (Art. 6(1)(f) GDPR). We store these details for six months at most. You can object to the use of your address for advertising at any time (Art. 21(2) GDPR), for example by email to kontakt@psyclinicai.com; we then put your address on a block list so that you receive no further letters.
8. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on Art. 6(1)(f) (Art. 21). You can withdraw consent at any time with effect for the future. You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your residence, your place of work or the place of the alleged infringement.
9. No automated decision-making
We make no automated decisions within the meaning of Art. 22 GDPR. Providing your email address is required for the waitlist; all other details are optional.
10. Changes
We update this notice when the processing or the legal situation changes. The current version is always on this page.