Privacy Policy
PRIVACY POLICY
Last updated: 12-09-2026
1. WHO WE ARE
Linda Riemsdijk, Body-Oriented Psychotherapy | Training | Supervision (“we”, “us” or “our”) is committed to protecting your personal data.
This Privacy Policy explains how we collect, use, disclose and protect personal data when you visit our website at:
and when you contact us, enquire about our services, register for training or supervision, or otherwise interact with us.
This Privacy Policy is based primarily on the European General Data Protection Regulation (GDPR), the German Federal Data Protection Act (Bundesdatenschutzgesetz — BDSG), the German Act on Data Protection and Privacy in Telecommunications and Digital Services (TDDDG), and other applicable German and European data-protection laws.
Controller / responsible person:
Linda Riemsdijk
Linda Riemsdijk, Body Oriented Psychotherapy | Training | SUupervision
Amselstrasse 12
26835 Hesel
Germany
Email: mail@lindariemsdijk.nl
Website: www.lindariemsdijk.com
If you have questions about the processing of your personal data, please contact us using the details above.
2. SCOPE OF THIS PRIVACY POLICY
This Privacy Policy applies to personal data processed through this website and in connection with enquiries, psychotherapy, body-oriented trauma work, training, seminars, supervision and related professional services.
If you become a psychotherapy client or receive another service involving confidential therapeutic or health information, you will receive additional information about the processing and retention of clinical or professional records separately, before or at the beginning of the relevant professional relationship.
3. WHAT IS PERSONAL DATA?
“Personal data” means any information relating to an identified or identifiable natural person. This may include your name, contact details, online identifiers, correspondence, registration information and information relating to your use of this website.
We process only the personal data that is necessary for the relevant purpose.
4. PERSONAL DATA WE COLLECT
Depending on how you interact with us, we may process the following categories of personal data.
4.1 Data you provide directly
This may include:
- name and surname;
- postal or billing address;
- email address;
- telephone number;
- information contained in your correspondence;
- registration and participation details for training, seminars or supervision;
- preferences and communication choices;
- invoice and payment-related information;
- other information you voluntarily provide.
Please do not provide confidential therapeutic content, health information or other sensitive personal data through an ordinary website contact form or unencrypted email.
4.2 Data collected when you contact us
If you contact us by email, contact form, telephone or another communication channel, we process the information necessary to respond to your request and manage any resulting communication.
This may include your name, contact details, the date and time of your enquiry and the contents of your message.
4.3 Data collected automatically
When you visit the website, technical data may be processed automatically, including:
- IP address;
- date and time of access;
- pages and files requested;
- browser type and version;
- operating system;
- device information;
- referring website or URL;
- technical log and error information;
- cookie identifiers and similar online identifiers, where applicable;
- information about interactions with the website, such as clicks, pages viewed, scrolling, searches and timestamps, where analytics is enabled.
The exact information collected depends on the Squarespace settings and any other services or code installed on this website.
5. SPECIAL CATEGORIES OF PERSONAL DATA
Information concerning a person’s physical or mental health is special category personal data under Article 9 GDPR.
In the context of psychotherapy, body-oriented trauma work or related professional services, it may be necessary to process health-related or therapeutic information. Such information is processed only where necessary for the relevant professional service and where an applicable legal basis under Article 9 GDPR and German law exists.
Where applicable, processing is carried out subject to professional confidentiality and secrecy obligations.
The website contact form and ordinary email are not intended for sending detailed therapeutic or medical information. Please contact us first if you need to discuss a confidential matter or arrange a secure communication method.
6. PURPOSES OF PROCESSING
Depending on how you interact with us, we may process personal data for the following purposes:
- to operate, maintain and secure the website;
- to respond to enquiries and requests;
- to arrange initial conversations or appointments;
- to provide psychotherapy, body-oriented trauma work, supervision, training and seminars;
- to manage registrations, participation and communication relating to training or supervision;
- to communicate service-related information;
- to issue invoices and manage payments;
- to fulfil accounting, tax and other legal obligations;
- to prevent misuse, fraud, unauthorised access and security incidents;
- to analyse website use and improve the website, where analytics is enabled and consent has been obtained where required;
- to send newsletters or professional updates, where you have subscribed;
- to manage relationships with service providers;
- to establish, exercise or defend legal claims;
- to comply with legal requirements or lawful requests from public authorities.
We do not use your personal data for purposes incompatible with those described in this Privacy Policy.
7. LEGAL BASES FOR PROCESSING
We process personal data only where a legal basis applies.
7.1 Consent — Article 6(1)(a) GDPR
We may process personal data on the basis of your consent, for example:
- for newsletters or marketing communications;
- for non-essential analytics cookies;
- for certain embedded content or other optional technologies;
- for another specific purpose for which consent has been requested.
You may withdraw your consent at any time with effect for the future. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
7.2 Contract or pre-contractual measures — Article 6(1)(b) GDPR
We may process personal data where this is necessary to provide agreed services, organise training or supervision, respond to a request to enter into a service relationship, arrange appointments or fulfil contractual obligations.
7.3 Legal obligations — Article 6(1)(c) GDPR
We may process personal data where this is necessary to comply with legal obligations, including accounting, tax, record-keeping and cooperation with public authorities.
7.4 Legitimate interests — Article 6(1)(f) GDPR
We may process personal data where this is necessary for our legitimate interests, provided that your interests, fundamental rights and freedoms do not override those interests.
Our legitimate interests may include:
- operating and securing the website;
- preventing misuse, fraud and cyberattacks;
- responding to communications;
- managing our professional and administrative activities;
- improving the functionality and user experience of the website;
- establishing, exercising or defending legal claims.
7.5 Special category data — Article 9 GDPR
Where health-related or other special category personal data is processed in the context of psychotherapy or related professional services, an additional legal basis under Article 9 GDPR is required.
Depending on the circumstances, this may include processing necessary for the provision of health or social care or treatment, subject to applicable legal requirements and professional secrecy obligations, or explicit consent where appropriate.
8. CONTACT FORMS AND EMAIL
If you submit information through a contact form, we process the information entered in the form in order to respond to your enquiry and manage any subsequent communication.
The information is transmitted to and stored by Squarespace as our website platform provider.
The legal basis is Article 6(1)(b) GDPR where the enquiry relates to potential services or a contract, and otherwise Article 6(1)(f) GDPR based on our legitimate interest in responding to enquiries.
Please do not use the contact form or ordinary email to send detailed therapy content, health information or other highly confidential information.
9. NEWSLETTERS AND PROFESSIONAL UPDATES
If you subscribe to our newsletter or professional updates, we process your name and email address to send the requested communications.
The legal basis is your consent under Article 6(1)(a) GDPR.
We may use a confirmation or double opt-in process to verify your subscription. We may retain information about your consent, including the date, time and source of the subscription, in order to demonstrate that the subscription was lawful.
You can unsubscribe at any time by using the unsubscribe link included in each newsletter or by contacting us at mail@lindariemsdijk.nl.
10. COOKIES AND SIMILAR TECHNOLOGIES
This website uses cookies and similar technologies.
10.1 Necessary technologies
Some cookies and technologies are technically necessary to operate, secure and provide basic functions of the website. These may be used without consent where permitted by applicable law.
Squarespace may use necessary cookies to securely deliver and operate this website.
10.2 Analytics and performance technologies
If enabled, analytics and performance technologies may collect information such as:
- browser, network and device information;
- IP address;
- pages visited;
- clicks and internal links;
- scrolling and searches;
- timestamps;
- referring websites.
These technologies are used to understand website traffic and improve the website only where the required consent has been obtained.
Current analytics provider:
Squarespace Analytics
10.3 Consent management
Where consent is required, non-essential cookies, analytics, marketing technologies and optional embedded content are activated only after you have made a corresponding choice in the cookie banner.
You can change or withdraw your cookie consent at any time through:
Squarespace cookie-settings at the bottom of the website footer.
For current information about the cookies used on this website, please consult the Cookie Settings or Cookie Policy:
The legal basis for non-essential cookies and comparable technologies is consent under Article 6(1)(a) GDPR and, where applicable, Section 25(1) TDDDG.
11. SQUARESPACE
This website is hosted and provided through Squarespace, Inc., a third-party website platform provider.
Squarespace processes personal data on our behalf where necessary to provide website hosting, website functionality, security, form handling and related services.
Depending on the relevant processing activity, Squarespace may also process certain information as an independent controller under its own privacy policy.
Squarespace may receive information such as IP addresses, device and browser information, website usage information, contact-form submissions and other data necessary to provide its services.
For further information, please consult Squarespace’s current privacy policy:
https://www.squarespace.com/privacy/
12. FONTS
This website may use locally hosted or externally hosted fonts.
If fonts are loaded from Google Fonts, Adobe Fonts or another external provider, the provider may receive technical information such as your IP address, browser, device and information about the website page being viewed.
Where possible, fonts should be hosted locally in order to minimise unnecessary transfer of visitor data.
13. EXTERNAL LINKS AND EMBEDDED CONTENT
This website may contain links to external websites or services, including social-media platforms, video platforms, booking services, maps, payment providers or professional organisations.
When you follow an external link or interact with embedded content, your data may be processed by the relevant third party under its own privacy policy.
We are not responsible for the privacy practices of third-party websites. Please review their privacy policies before submitting personal data.
Current external services used on this website:
- Instagram
- LinkedIn
- YouTube
- www.Narmtraining.com
14. SOCIAL-MEDIA SHARE BUTTONs
This website contains share buttons for the following services:
- Instagram
- LinkedIn
- Facebook
When you click a share button or actively interact with a social-media feature, the relevant provider may receive information such as your IP address, browser, device and the page or content you share.
Please consult the privacy policy of the relevant provider for further information.
15. BLOG COMMENTS AND LIKES
This website does not currently provide blog comments or blog-like functionality.
16. PAYMENT AND INVOICING
If you purchase a service, register for a paid training or otherwise make a payment, we process the information necessary to administer the transaction.
Depending on the payment method, this may include name, billing address, invoice details, payment status and transaction reference. Payment-card details are processed by the relevant payment provider and are not stored by us unless expressly stated otherwise.
Current payment provider:
www.mijnDiad.nl
We retain invoicing and accounting data for the legally required period under German law.
17. RECIPIENTS AND SERVICE PROVIDERS
We may share personal data with service providers where necessary for the purposes described in this Privacy Policy.
Depending on the services actually used, recipients may include:
- Squarespace as website platform and hosting provider;
- email and communication providers;
- newsletter providers;
- appointment, booking or registration providers;
- payment, invoicing and accounting providers;
- IT, security and website-maintenance providers;
- professional advisers, including tax advisers, accountants and legal advisers;
- public authorities where disclosure is legally required.
We do not sell personal data.
Where required by law, service providers process personal data under a data-processing agreement or another legally recognised arrangement.
18. INTERNATIONAL DATA TRANSFERS
Some service providers, including Squarespace, may process personal data outside the European Economic Area (EEA).
Where personal data is transferred outside the EEA, we rely on an applicable legal safeguard, such as:
- an adequacy decision of the European Commission;
- the EU-U.S. Data Privacy Framework where the relevant U.S. recipient is certified;
- the EU Standard Contractual Clauses;
- another legally recognised transfer mechanism.
Squarespace states that it may rely on adequacy decisions, the applicable Data Privacy Frameworks and Standard Contractual Clauses, depending on the relevant transfer. You should verify the current Squarespace documentation and the certification status of the providers you actually use before publishing this paragraph. [88][96]
19. DATA RETENTION
We retain personal data only for as long as necessary for the purpose for which it was collected, unless a longer period is required by law or is necessary to establish, exercise or defend legal claims.
The relevant retention period depends on the type of data and the reason for processing.
19.1 Website technical logs
Technical log data is processed by Squarespace for the period necessary to operate, secure and troubleshoot the website, in accordance with Squarespace’s applicable retention practices.
Where continued retention is necessary to investigate or document a security incident, relevant data may be retained for as long as necessary for that purpose.
19.2 Contact enquiries
Contact-form submissions and ordinary correspondence are retained for as long as necessary to respond to the enquiry and manage any resulting relationship. They are normally deleted after [insert actual period, e.g. 6 or 12 months] unless a longer period is necessary because of a contractual, legal or claims-related matter.
19.3 Newsletter data
Newsletter data is retained until you unsubscribe or withdraw consent, unless another lawful reason requires further retention.
Records demonstrating consent may be retained for as long as necessary to demonstrate compliance with legal obligations.
19.4 Training, supervision and service administration
Registration, participation and administrative data is retained for the duration of the relevant service and thereafter only as long as necessary for contractual, accounting, legal or claims-related purposes.
19.5 Accounting and tax records
Invoices and accounting records are retained for the legally required retention period under German law.
19.6 Therapeutic and clinical records
Therapeutic and clinical records are retained in accordance with the applicable German professional, legal and documentation-retention requirements.
Clients receive separate information about the applicable retention period and their rights in relation to clinical records.
20. DATA SECURITY
We implement appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or unauthorised access.
These measures may include:
- HTTPS/SSL encryption for data transmitted between your browser and the website;
- access controls for administrative accounts;
- strong passwords and, where available, multi-factor authentication;
- regular software and platform updates;
- data minimisation;
- limiting access to personal data to persons and providers who need it for their work;
- secure handling of client and professional information.
No internet transmission or electronic storage system can be guaranteed to be completely secure.
21. YOUR RIGHTS
Subject to the legal requirements and limitations that apply in each case, you have the right to:
- receive information about the processing of your personal data;
- request access to personal data concerning you;
- request correction of inaccurate or incomplete personal data;
- request erasure of personal data;
- request restriction of processing;
- object to processing based on legitimate interests;
- object at any time to processing for direct marketing;
- receive personal data you have provided in a structured, commonly used and machine-readable format where the right to data portability applies;
- withdraw consent at any time where processing is based on consent;
- lodge a complaint with a supervisory authority.
To exercise your rights, contact:
We may request information necessary to verify your identity before responding to a request.
22. RIGHT TO LODGE A COMPLAINT
You may lodge a complaint with a data-protection supervisory authority, in particular in the EU Member State of your habitual residence, place of work or the place of the alleged infringement.
For this practice, the relevant supervisory authority is generally:
Die Landesbeauftragte für den Datenschutz Niedersachsen
Prinzenstraße 5
30159 Hannover
Germany
Telephone: +49 (0) 511 120 4500
Email: poststelle@lfd.niedersachsen.de
Website: https://www.lfd.niedersachsen.de
23. CHILDREN
Our website and professional services are not directed at children under the age of 16.
We do not knowingly collect personal data from children through the website. If you believe that a child has provided personal data to us, please contact us so that we can investigate and take appropriate steps.
If services are provided to or involve a person under 16, separate arrangements and information will apply in accordance with the relevant legal and professional requirements.
24. AUTOMATED DECISION-MAKING AND PROFILING
We do not use automated decision-making or profiling that produces legal effects or similarly significant effects within the meaning of Article 22 GDPR.
25. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy when our website, services, providers or legal obligations change.
The current version will be published on this page. The “Last updated” date at the beginning of this Privacy Policy indicates when it was most recently revised.
26. CONTACT
For questions about this Privacy Policy or the processing of your personal data, please contact:
Linda Riemsdijk
Amselstraße 12
26835 Hesel
Germany
Email: mail@lindariemsdijk.nl
Website: www.lindariemsdijk.com