Privacy for payments and withdrawal declarations

Version: 17 October 2026. These supplementary details concern payment and withdrawal processing; the counselling privacy notice continues to cover counselling records.

Controller and contact

Stefan Kohlweg, Stenografengasse 4, 1230 Vienna, Austria; [email protected].

Payment processing

Payment takes place on Stripe’s hosted page. Stripe processes the billing/contact details and payment-method information you provide, transaction amount/currency, and technical or fraud-prevention information needed for payment. We receive payment status and transaction references for reconciliation, bookkeeping, receipts, refunds and dispute handling. Card details are entered with Stripe, not on this website. We do not transmit counselling notes or health details to Stripe. Please do not enter such information into payment fields.

Stripe’s own privacy information describes its roles, recipients and possible international processing, including applicable transfer safeguards: Stripe Privacy Policy.

Withdrawal declarations and acknowledgment

The withdrawal form records your name, acknowledgment email, contract reference, optional scope of withdrawal and receipt date/time under an opaque receipt reference. No account login, reason or health information is required. The declaration is stored in our website database; a copy and receipt information are sent to your chosen email address through our email provider. An internal notice contains only the receipt reference/time so authorized staff can retrieve the declaration securely. Delivery status and retry records support acknowledgment if email delivery temporarily fails.

Purpose, access and retention

Processing is necessary to perform and administer the agreed contract (GDPR Article 6(1)(b)), meet withdrawal, accounting and other legal obligations (Article 6(1)(c)), and protect legitimate interests in secure operation and legal claims (Article 6(1)(f)). Access is limited to authorized persons and the hosting, payment and email providers needed for these purposes. Records and protected backups are retained only as required by those purposes and applicable statutory retention or claims periods, then deleted or anonymized. We do not use declarations for marketing.

You may request access, rectification, erasure or restriction, portability where applicable, and object where processing relies on legitimate interests. Statutory retention and other legal limitations may apply. Contact the controller above; you may also complain to the competent supervisory authority, including the Austrian Datenschutzbehörde.