Privacy policy

1. Summary

• No account, no sign-up, no server for your genograms.
• This website sets no cookies, uses no analytics or advertising services and loads no content from third-party servers.
• When you open the website, technically unavoidable connection data is processed by the hosting provider.

2. Controller

Frank Bersch, Am Rübenacker 8, 41516 Grevenbroich, Germany
Email: mygenogramm@mymailadresse.de

No data protection officer has been appointed because there is no legal obligation to do so.

3. Opening the website and the editor: hosting and server logs

The website (www.mygenogramm.app) and the editor (mygenogramm.app) are hosted by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. When you open them, your browser automatically transmits data to the provider’s server, where it is briefly stored in log files:

• IP address of the requesting device
• date and time of the request
• address requested and amount of data transferred
• server status code
• browser type, operating system and, if transmitted, the page visited before

Purpose: delivering the website, stability and security of operation, defence against attacks.
Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in secure operation).
Retention: only as long as required for operation and security; the data is then deleted or anonymised.
Recipient: the hosting provider as processor on the basis of a contract under Art. 28 GDPR.

This data is not combined with other data and not evaluated for advertising purposes.

The provider may process data in the USA. The transfer is based on the European Commission’s adequacy decision for the EU-US Data Privacy Framework, under which the provider is certified, and additionally on standard contractual clauses.

4. The editor in the browser

The editor runs entirely in your browser.

• Genograms: content is stored only in your browser’s storage on your device (automatic backup) and in files you save yourself. It is not transmitted to me or to third parties. I have no access to it.
• Settings: language, appearance and similar settings are likewise stored only in your browser’s storage.
• Offline use: so that the editor works without a connection, your browser stores the program files locally.

This storage on your device is strictly necessary to provide the service you have expressly requested (§ 25 (2) no. 2 TDDDG). No consent is required for it, which is why there is no consent banner.

You can switch off the automatic backup in the “File” menu and delete the device storage completely there. This is recommended on shared devices.

5. The apps for Mac, iPad and iPhone

The apps store genograms exclusively as files on your device or in the location you choose yourself. The apps do not transmit any content to me and contain no analytics or advertising services.

Apple handles distribution of the apps through the App Store under its own responsibility and processes data in accordance with its own privacy policy; I receive no information about individual persons.

If you choose a cloud service as the storage location, its terms apply; I have no influence over this.

6. Content of your genograms

Genograms often contain particularly sensitive information about third parties, for example about health, family and support measures. You process this data yourself on your devices. I do not receive or process it, neither as controller nor as processor; a data processing agreement is therefore neither required nor possible.

You or your organisation are responsible for the lawfulness of the processing, the safe keeping of the files and compliance with the rules that apply to you (for example social data protection). The software supports you with encrypted saving and a pseudonymised copy.

7. Contacting me

If you write me an email, I process your address and the content of the message in order to answer your enquiry.

Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in answering enquiries).
Retention: until the matter is settled, at most two years; statutory retention obligations remain unaffected.

Please do not send me genograms containing real case data. For bug reports the pseudonymised copy is sufficient.

8. Recipients and transfers to third countries

Apart from the hosting provider named in section 3 and, for email, the mailbox provider (Host Europe GmbH, Cologne), no data is passed on. Data is transferred to countries outside the EU only to the extent described in section 3.

9. Your rights

Under the GDPR you have the right to

• access (Art. 15),
• rectification (Art. 16),
• erasure (Art. 17),
• restriction of processing (Art. 18),
• data portability (Art. 20),
• object to processing based on Art. 6 (1) (f) GDPR on grounds relating to your particular situation (Art. 21).

A message to the address given above is sufficient.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia in Düsseldorf.

10. Further information

• Providing the data named in section 3 is technically necessary to open the website; without it the website cannot be used.
• There is no automated decision-making, including profiling.
• The website is delivered exclusively in encrypted form (HTTPS).

11. Version and changes

Last updated: November 2026. This policy will be adapted if the website, the apps or the legal situation change. The version published here applies.