Privacy Policy

Please note: This is an English translation provided for your convenience. The German-language Datenschutzerklärung (privacy policy) is the legally binding version.

With this Privacy Policy, I inform you about the nature, scope and purpose of the processing of personal data on this website. The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Katarina Živković – Mika Autism
Im Paradies 23, 63853 Mömlingen, Germany
Email: info@mika-autism.com · Phone: +49 151 51836922

1. General information

I take the protection of your personal data seriously and treat it confidentially and in accordance with the applicable data protection laws. As a rule, you can use this website without providing any personal data. This website uses SSL/TLS encryption (recognizable by “https://” in the address bar).

2. Hosting and server log files

This website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. A data processing agreement (Art. 28 GDPR) has been concluded with the host. When you access the website, the server automatically records information in so-called log files: browser type and version, operating system, referrer URL, the pages visited, the date and time of access, and the IP address. This data serves to ensure trouble-free operation and security (legal basis: Art. 6(1)(f) GDPR) and is not merged with other data sources.

3. Cookies, local storage & fonts

• This website uses no tracking, analytics or marketing cookies (no Google Analytics or the like). Visitor statistics are collected solely via the cookie-less service Plausible Analytics (see section 10).
• To remember that you have closed the privacy notice or the chat notice, localStorage in your browser is used (technically necessary, containing no personal data).
• The fonts are loaded locally from this server – there is no request to Google Fonts or other external services, and your IP address is not transmitted to third parties in the process.

4. Contacting me (contact form, email, phone)

If you send me inquiries via the contact form, by email or by phone, your details (name, email address, phone number where applicable, and the content of your message) are stored in order to process your request and for any follow-up questions. The legal basis is the performance of pre-contractual measures or the fulfillment of a contract (Art. 6(1)(b) GDPR) as well as my legitimate interest in processing the request (Art. 6(1)(f) GDPR). I do not pass on this data without your consent.

Please note: if your inquiry contains health data (for example, information about your child’s diagnosis), I process this solely to handle your request and on the basis of your consent (Art. 9(2)(a) GDPR); you may withdraw this consent at any time with effect for the future.

5. Chat assistant “Mika Assistant” (artificial intelligence)

An optional chat assistant is available on this website. It is an AI assistant (not Katarina personally) that provides general information and guides you toward the free initial consultation. It does not make diagnoses and does not give medical advice.

• Processing: The text you enter is transmitted to the processor Anthropic PBC (the “Claude” service, USA) in order to generate the response. In this process, data may also be processed outside the EU (in the USA). The basis for a transfer to the USA is your explicit consent (Art. 49(1)(a) GDPR) or the EU Standard Contractual Clauses used by the providers (Art. 46 GDPR).
• Legal basis: Your consent, which you give when you start the conversation (after being informed beforehand in the chat window) – Art. 6(1)(a) GDPR.
• Storage: Conversations are not stored and are not used for advertising purposes. The conversation history exists only temporarily in your browser while the window is open, and is deleted when the page is reloaded.
• Voice output / read-aloud feature (optional): The chat assistant offers the option of having responses read aloud (text-to-speech). Only if you actively click the speaker icon is the respective response text transmitted to a processor for speech synthesis – the service ElevenLabs Inc. (USA) – in order to generate an audible voice output from it. In this process, processing may take place outside the EU (in the USA) (basis as above: Art. 49(1)(a) or Art. 46 GDPR). The audio is generated only at your request and is subsequently not stored either by me or – according to the provider’s statements – for the provider’s own purposes. Only the response text to be read aloud is transmitted; no other personal data.
• Please: Do not enter any sensitive data (for example, detailed health information about your child). For personal matters, please arrange a free initial consultation.

6. Retention period

Personal data is stored only for as long as it is necessary for the stated purposes or for as long as statutory retention periods apply. After that, the data is deleted.

7. Your rights

With regard to the personal data concerning you, you have the following rights: access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR) as well as the right to object to processing (Art. 21 GDPR). You may withdraw any consent you have given at any time with effect for the future (Art. 7(3) GDPR). To do so, simply contact me informally at info@mika-autism.com.

8. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The competent authority is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.

9. No automated decision-making

No automated decision-making, including profiling, takes place.

10. Web analytics (Plausible Analytics)

To measure how this website is used, I use the privacy-friendly analytics service Plausible Analytics (Plausible Insights OÜ, Västriku tn 2, 50403 Tartu, Estonia – EU). Plausible works without cookies and stores no personal data: only aggregated statistics are collected (e.g. pages visited, approximate country of origin, device type, referral source). IP addresses are not stored, no user profiles are created, and individual visitors cannot be recognised across days. All data is processed exclusively on servers within the EU. The legal basis is my legitimate interest in analysing the reach of this website (Art. 6(1)(f) GDPR). As no cookies are set and no personal data is stored, no consent is required.