Imprint

This is an English translation. Only the German original is legally binding.

Name and Address

Karl-Heinz Meisters
Diplom-Psychologe
Jahnstraße 20
53225 Bonn
Phone: +49-228-38757676

Please use this phone number for organisational matters – for example, to initiate contact or for general questions.

For confidential content I am available via secure communication channels.

Email

kontakt@k-meisters.de

Responsible for content according to § 18 Abs. 2 MStV

Karl-Heinz Meisters (contact details as above)

---

Disclaimer

This is an English translation. Only the German original is legally binding.

General Information

The content provided on this website is for general informational purposes only. It does not constitute medical, therapeutic, psychological, or legal advice and is not intended to replace professional diagnosis or treatment by qualified practitioners.

Scope of Activity

I, Karl‑Heinz Meisters, am a Diplom‑Psychologe. I do not practice medicine or any form of healing as defined in § 1(2) of the German Heilpraktikergesetz. No diagnoses are made, no illnesses are treated or alleviated, and no medical or therapeutic services are provided. No legal services are offered within the meaning of the German Legal Services Act (RDG).

No Substitute for Professional Services

The information on this website is not a substitute for medical, therapeutic, or other professional treatment. For health‑related concerns, a qualified medical professional must be consulted.

Clarification of the Term “Mandate”

Within the context of my work, the term “mandate” refers to a formal commissioning for a confidential, non‑medical conversational format. It does not involve therapeutic, medical, or legal services.

Liability Disclaimer

Despite careful review, no guarantee can be given for the completeness, accuracy, or timeliness of the information provided. Use of the content is at your own discretion and responsibility. No liability is assumed for any damages arising from reliance on or disregard of the information presented.

External Links

Links to external websites are provided solely for user convenience. I have no influence over the content of external sites and assume no responsibility for them. Responsibility for the content of linked pages lies exclusively with their respective operators.

Zero Data Retention

A structure in which the content of conversations never becomes data.

Once data has been stored, it can no longer be fully protected. Privacy policies govern the conditions of use, not whether it occurs at all. Storage itself is already a form of use. Where the need for discretion is exceptionally high, that is not enough. Zero Data Retention therefore begins earlier: what does not exist can neither be stored nor disclosed.

The term is familiar from technology, where it denotes the principle of not storing content. In the Psychological Private Office, it refers to the content of conversations: no recordings, no notes and no file are made of it, whether a conversation takes place in person or via Signal. Only what appointments and invoices require is stored, as sparingly as possible, with fixed deletion periods and quantum-resilient encryption; the privacy policy sets this out in detail.

Signal is suited to this principle: the messenger encrypts content end to end between the devices of those involved, its encryption protocol has been independently examined by researchers, and no content is kept on the operator’s servers once it has been delivered. Together with a fixed setting for the automatic deletion of messages, Zero Data Retention can thus be put into practice digitally as well. Email, by contrast, cannot achieve this, since every message remains stored on servers, and is therefore reserved for organisational matters.

This removes the risk that stored content entails: what was never recorded can neither be misread nor misused, nor can its surrender be demanded.

Putting Zero Data Retention into practice in psychological work is not a matter of technology alone. It requires a conversational architecture that works without recording and still allows depth, and a very small number of concurrent mandates. The consequence-free space rests on this principle.

Privacy Policy

Last updated: 20 October 2026
This English version is provided for information. Only the German version is legally binding.

Preliminary note

This privacy policy describes exclusively the processing of personal data in connection with the use of this website and during the organisational phase of an initial contact. These operations are technically and legally necessary in order to receive enquiries and to provide channels of communication.

The processing of personal data within a mandate is subject to separate organisational principles, in particular my Zero Data Retention model (ZDR). This model relates exclusively to the conversational content of a mandate and is explained separately at the beginning of a mandate. This privacy policy does not affect it.

1. Controller

Karl-Heinz Meisters

Jahnstraße 20
53225 Bonn
Germany

E-mail: kontakt@k-meisters.de

2. General information on data processing

This website provides information about the Psychological Private Office and my work. It is designed according to the principle of data minimisation. No cookies, no tracking tools and no external content (e.g. Google Fonts, Google Maps, social media plug-ins) are used.

Personal data are processed only where this is technically indispensable. No storage beyond this takes place. No automated decision-making, including profiling, takes place.

3. Hosting and server log files

This website is hosted by SpaceNet GmbH, Joseph-Dollinger-Bogen 14, 80807 Munich, Germany. SpaceNet is a recipient of the data listed below. The servers are located in Germany.

When this website is visited, the web server automatically collects information and stores it in so-called server log files. This includes:

• browser type and version
• operating system
• referrer URL
• host name of the accessing device
• date and time of the server request
• IP address

These log data are processed on the basis of my legitimate interest pursuant to Art. 6(1)(f) GDPR. This interest consists in ensuring the proper and uninterrupted operation of the website, detecting security incidents and resolving technical problems. The data are not combined with other data sources.

I review the log files regularly and delete them manually. Records no longer required to ensure technical operation are removed after two months at the latest, unless statutory retention obligations or security-related reasons prevent deletion.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest).

4. E-mail communication

When you contact me by e-mail, the data you transmit (e.g. e-mail address, content of the message, metadata) are processed in order to handle and answer your enquiry. They are not passed on to third parties.

For e-mail communication I use two providers with separate functions. The address @k-meisters.de is operated via mailbox (formerly mailbox.org) and is intended for organisational matters. For confidential communication with offices I provide an address with Tuta. Both providers process personal data exclusively on my behalf pursuant to Art. 28 GDPR; data processing agreements are in place with both.

Please note that e-mails to the address @k-meisters.de are generally encrypted in transit only, not end-to-end. It therefore cannot be ruled out that unauthorised third parties gain access to transmitted content. For confidential content, the secure channels of contact are available.

Storage period:

I keep e-mails only for as long as necessary for the communication or as required by statutory retention obligations. Content not subject to retention obligations is deleted once the communication has been concluded.

Legal basis:

Art. 6(1)(b) GDPR (performance of a contract or pre-contractual steps) Art. 6(1)(f) GDPR (legitimate interest in answering enquiries)

5. External links

This website contains links to external third-party websites. The respective operator is solely responsible for their content and data protection measures. When you click on an external link, you leave this website; from that moment on, the privacy provisions of the respective external site apply.

Permanent monitoring of the content of linked sites is not possible. However, links will be removed without delay upon specific indications of legal violations.

6. Contact by telephone

When you contact me by telephone, personal data such as your telephone number, the time and duration of the call and, where applicable, the content of the conversation are processed insofar as this is necessary to handle your enquiry.

Processing takes place exclusively for communication in connection with the initiation or performance of a mandate. Telecommunications providers process connection data under their own data protection responsibility in accordance with the statutory requirements applicable to them.

Legal basis: Art. 6(1)(b) GDPR (initiation or performance of a contract) and Art. 6(1)(f) GDPR (legitimate interest in communication).

The data are not passed on to third parties. They are deleted as soon as the purpose of processing no longer applies, unless statutory retention obligations exist.

7. Contact via the Signal messenger

The Signal messenger is a privacy-friendly means of contact and is used exclusively at your request. Signal uses end-to-end encryption, so that messages can only be read on the devices involved. Message content is stored on Signal's servers only in encrypted form and only until delivery.

Signal is operated by Signal Messenger, LLC, 650 Castro Street, Suite 120-223, Mountain View, CA 94041, USA. When Signal is used, data, in particular your telephone number, are transferred to Signal servers in the United States. Signal is independently responsible for this processing; the Signal privacy policy applies.

Note on IP data in Signal voice and video calls: depending on the type of connection, the IP addresses of the participants may be transmitted during voice and video calls. They are used temporarily and solely to establish the connection. I receive no knowledge of them, and I do not store these data.

Please note that the use of the Signal channel is voluntary and that there is no contractual entitlement to the permanent availability of this channel. Both participants can delete messages manually or activate automatic deletion. Deleted content cannot be restored and is no longer available for later conversations.

In individual cases, further channels of communication may be agreed on request. Information on the associated data processing is provided separately before first use.

Legal basis: Art. 6(1)(a) GDPR (consent) and Art. 6(1)(b) GDPR (communication in the context of pre-contractual steps and the performance of the contract).

8. Note on special categories of personal data (Art. 9 GDPR)

Special categories of personal data pursuant to Art. 9 GDPR, such as information concerning health, are not requested via this website or the channels of contact described here. Please do not transmit such information when making contact. Should it nevertheless be received, I process it only insofar as this is unavoidable for answering the enquiry, and delete it thereafter.

9. Organisational data within a mandate

For the organisation of appointments, secure communication and access control, I process certain personal data that do not form part of the conversational content. These include in particular appointment details, pseudonyms used, technical identifiers, one-time password lists and security-related event logs.

These data are used exclusively to manage the communication and security infrastructure and are necessary to enable confidential, secure and structured collaboration. Conversational content is not processed in this context.

Processing takes place exclusively within the infrastructure of Tuta, with server locations in Germany. Content is stored there with end-to-end encryption; the provider has no technical access to this content. Connection data and metadata technically required for delivery and operation are processed by Tuta as a processor. No transfer to third countries takes place.

The data are deleted as soon as they are no longer required for organisational purposes or once statutory retention obligations have been fulfilled.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual steps and organisational preparation of the mandate) and Art. 6(1)(f) GDPR (legitimate interest in secure and structured communication).

10. Processing of data of private offices and referring parties

In the course of communication with referring parties, cooperation partners or enquiring institutions, I process personal data such as names, contact details and organisational information. These data are used exclusively to handle the respective enquiry and to coordinate the collaboration.

Conversational content from mandates is not processed in this context. The data are stored only for as long as necessary for the communication or as required by law.

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in efficient and secure communication).

11. Technical and organisational measures

To protect personal data, I apply appropriate technical and organisational measures pursuant to Art. 32 GDPR. These measures are based on the state of the art and are reviewed regularly.

For confidential communication I use Tuta, with data centres in Germany. Tuta stores content in encrypted form; the provider has no technical access to message content or keys. Messages between Tuta accounts are end-to-end encrypted throughout.

Further principles of my security architecture are:

• access protection through strong authentication
• processing only of data required for organisational purposes
• deletion of organisational data as soon as they are no longer needed or statutory requirements have been fulfilled
• no disclosure of personal data to third parties

12. Storage period and deletion

Personal data are stored only for as long as necessary for the respective organisational purposes. Longer storage takes place only where statutory retention obligations exist or legitimate interests make it strictly necessary. As soon as the purpose no longer applies and no statutory requirements prevent it, the data are deleted.

Server log data are reviewed monthly. In the course of this review, all records older than one month are deleted. Log data therefore remain in the system for a maximum of two months, unless longer storage is required in an individual case to investigate security-related events or by law.

Data from enquiries (e.g. by e-mail, telephone or Signal) are deleted as soon as the organisational communication has been concluded and no further storage is required. Conversational content from mandates is not covered by this privacy policy (see preliminary note).

Longer storage may exceptionally be necessary where:

• statutory retention obligations exist (e.g. tax requirements for invoices),
• the data are needed to establish or defend legal claims, or
• statutory obligations of proof or documentation exist.

13. Your rights

Within the limits of the law, you have the following rights at any time:

• access to information about the processing of your personal data (Art. 15 GDPR)
• rectification of inaccurate or incomplete data (Art. 16 GDPR)
• erasure of personal data (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• withdrawal of consent given, with effect for the future (Art. 7(3) GDPR)

To exercise your rights, you may contact the controller named above at any time.

Right to object pursuant to Art. 21 GDPR

Where I process personal data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you have the right to object to this processing at any time on grounds relating to your particular situation. I will then no longer process the data unless I can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

14. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data. The authority competent for me is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen).

15. Changes to this privacy policy

This privacy policy may be amended at any time due to legal requirements or internal adjustments. The current version is available on this page.

The Science of Normality
The Architecture if Discretion
The Space
Ethical Framework
Home

---

07