Privacy Policy for ABA Therapy and Other Services

---

Developing Behavior is the brand name associated with Andrea Baumes's activities, Independent Board Certified Behavior Analyst (BCBA), hereinafter," Consultant "as an "." This privacy policy will explain how our organization uses the personal data we collect from you when you use our website and during our contractual activities. These services may include autism therapy and behavior analytic consultation in Virginia, US, via Telehealth.

Website copyright: Andrea Baumes

Responsible for the content of the site:

Andrea Baumes

Licensed Behavior Analyst

E-Mail:  andrea (d o t) baumes (a t) developingbehavior (d o t) com

Privacy Policy:  

The entry of personal data on the 'Contact Form' or 'Subscription Form' of this website (e.g., name, telephone number, or e-mail address) is done voluntarily. This information will not be disclosed without the expressed consent of users to third parties. Although all reasonable efforts will be made to maintain your privacy, data transmission over the Internet is not always secure, and complete protection against third parties' access is impossible.

General information on data protection

The following information provides a simple overview of what happens to your personal data when you visit our website. Personal data is any data that can personally identify you. Below is an overview of essential data protection information.

1. Data collection on our website

Who is responsible for the data collection on this website?

The website operator processes data on this website. You can find their contact details in the imprint of this website.

How do we collect your data?

Your data is collected when you provide it to us. This can be data you enter in a contact form, for example, or data you use to book an appointment. Other data are automatically recorded by our IT systems when you visit the website. This is mainly technical data (e.g., internet browser, operating system, or time of the page view). This data is collected automatically as soon as you enter our website. Sensitive data for ABA therapy or other psychology-related services is not stored on our servers and is not accessible through the network's connection.

What do we use your data for?

Some data is collected to ensure the website is error-free. Other data can be used to analyze your user behavior.

What rights do you have concerning your data?

You have the right to receive information about the origin, recipient, and purpose of your stored personal data free of charge at any time. You also have the right to request the correction, blocking, or deletion of this data. You can contact us at any time at the address given in the legal notice if you have further questions about data protection. You also have the right to complain about the competent supervisory authority.

Analysis tools and third-party tools

When you visit our website, your surfing behavior can be statistically evaluated. This is mainly done with cookies and so-called analysis programs. Your surfing behavior is usually analyzed anonymously; surfing behavior cannot be traced back to you. You can object to this analysis or prevent it by not using specific tools. You can find detailed information on this in the following privacy policy. You can object to this analysis. We will inform you about the possibilities of objection in this data protection declaration.

How do we communicate with you? 

We may contact you directly or through a third-party service provider regarding the services you have signed up for or booked with us, such as necessary to deliver transactional or service-related communications. We may also contact you with offers for additional services we think you'll find valuable if you give us consent or allow us to do so based on legitimate interests. You don't need to provide consent as a condition to purchase our goods or services. These contacts may include e-mail, text (SMS) messages, 

telephone calls, messenger applications (e.g., WhatsApp, etc.), automatic phone calls, or text messages.

Transfer of personal information abroad. 

Suppose you use our services from a country other than where our business is located. In that case, your personal information may be transferred across international borders, only when necessary for the performance of our contract with you, with your consent, or when the business owner relocates to another country.

Compliance with legal, regulatory, and law enforcement requests. 

Due to the nature of the services we provide, we may have to cooperate with government and law enforcement officials and private parties to enforce and comply with the law. We will disclose any information about you to lawfully mandated official requests, local government or law enforcement officials, or private parties as we, in our sole discretion, believe necessary or appropriate to respond to claims and legal process (such as subpoena requests, child abuse, neglect), to protect our the lives of our clients, the rights to dignity, or the property and rights of a third party, to protect the safety of the public or any person, or to prevent or stop activity we consider to be illegal or unethical. To the extent permitted by law, we will take reasonable steps to notify you if we are required to provide your personal information to third parties as part of the legal process. 

2. General information and mandatory information

Data Protection

The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection declaration. When you use this website, various personal data is collected. Personal data is information that can be used to identify you. A personal protection declaration explains which data we collect and what we use it for. It also explains how and for what purpose this is done.

We want to point out that data transmission over the Internet (e.g., via e-mail) can involve security gaps; however, our mail communication complies with HIPAA and cybersecurity requirements. Unforeseen issues may arise. Complete protection of data from third-party access is not possible.

Note on the responsible body.

The responsible body for data processing on this website is:

Andrea Baumes

Licensed Behavior Analyst

E-Mail:  andrea (d o t) baumes (a t) developingbehavior (d o t) com

The responsible body is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data (e.g., names, e-mail addresses, etc.).

Revocation of your consent to data processing

Many data processing operations are only possible with your express consent. You can revoke your already given consent at any time. An informal e-mail to us is sufficient. The legality of the data processing carried out before the revocation remains unaffected by the revocation.

Information, blocking, deletion

Within the framework of the applicable statutory provisions, you have the right to free information about your stored personal data, its origin, and recipient, and the purpose of the data processing, and, if necessary, a right to correct, block, or delete this data. You can contact us at any time at the address given in the legal notice if you have any further questions regarding personal data.

Objection to advertising mail

We hereby object to using the contact data published in the context of the imprint obligation for sending unsolicited advertising and information materials. The operators of the pages expressly reserve the right to take legal action in the event of unsolicited sending of advertising information, such as spam e-mails.

3. Data collection on our website

Cookies

Some of the websites use so-called cookies. Cookies do not harm your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, more effective, and safer. Cookies are small text files stored on your computer by your browser. Most of the cookies we use are so-called "session cookies." They are automatically deleted after your visit. Other cookies remain stored on your device until you delete them. These cookies enable us to recognize your browser the next time you visit.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases, or generally, and activate the automatic deletion of cookies when you close the browser. If cookies are deactivated, the functionality of this website may be restricted. Cookies that are required to carry out the electronic communication process or provide certain functions you want (e.g., shopping cart function) are stored based on Art. If GDPR saved. The website operator has a legitimate interest in storing cookies for the technically error-free and optimized provision of its services. Insofar as other cookies (e.g., cookies for analyzing your surfing behavior) are stored, these will be treated separately in this data protection declaration. For further information, visit www.allaboutcookies.org.

Server log files

The website provider automatically collects and saves information in so-called server log files, which your browser automatically transmits to us. These are:

• Browser type and browser version
• Operating system used
• Referrer URL
• The hostname of the accessing computer
• Time of the server request
• IP address

This data is not combined with other data sources.

The basis for data processing is Art. 6 Para. 1 lit. Under GDPR, data processing is permitted for the performance of a contract or for pre-contractual measures.

Contact Form & Subscription

If you send us inquiries via the contact form, we will store your inquiry form details, including the contact details you provided, to process your request and for follow-up questions. We do not pass on this data without your consent.

The processing of the data entered in the contact form takes place exclusively based on your consent (Art. 6 Para. 1 lit. a GDPR). You can revoke this consent at any time. An informal e-mail to us is sufficient. The legality of the data processing operations carried out before the revocation remains unaffected by the revocation. The data you enter in the contact form will remain with us until you ask us to delete it, revoke your consent to the storage, or the purpose for data storage no longer applies (e.g., after your request has been processed within 48 hours). Mandatory statutory provisions, in particular retention periods, remain unaffected.

4. Plugins and Tools

YouTube

Our website uses YouTube plugins, operated by Google. The pages' operator is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.

If you visit one of our pages equipped with a YouTube plugin, a connection to the YouTube servers is established. The YouTube server is informed which of our pages you have visited.

If you are logged into your YouTube account, you can enable YouTube to assign your browsing behavior to your personal profile directly. You can prevent this by logging out of your YouTube account. YouTube is used to present our online offers appealingly. This represents a legitimate interest within the meaning of Art. 6 Para. 1 lit. f GDPR.

The handling of user data. For more information, see YouTube's privacy policy at https://policies.google.com/privacy/embedded?hl=en-US.

Google Web Fonts

This page uses so-called web fonts provided by Google for consistent font display. When you load a page, your browser loads the required web fonts into its cache to correctly display text and fonts. For this purpose, the browser you are using must connect to the Google servers. This gives Google knowledge that our website has been accessed via your IP address. Google Web Fonts are used to ensure a uniform and appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 Para. 1 lit. f GDPR. If your browser does not support web fonts, your computer will use a standard font.

Google Maps

This site uses the Google Maps map service via an API. The provider is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.

To use the functions of Google Maps, it is necessary to save your IP address. This information is usually transferred to a Google server in the USA and stored there. The provider of this site does not influence this data transfer. The use of Google Maps is in the interest of an appealing presentation of our online offers and making it easy to find the places we have indicated on the website. This represents a legitimate interest within the meaning of Art. 6 Para. 1 lit. f GDPR.

You can find more information on handling user data in Google's privacy policy: https://policies.google.com/privacy/embedded?hl=en-US

Google Analytics

This website uses Google Analytics, a web analysis service from Google Inc. ("Google"). Google Analytics uses so-called "cookies," text files stored on your computer, to analyze your use of the website. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. Suppose IP anonymization is activated on this website. In that case, Google will shorten your IP address before it is transmitted within member states of the European Union or other contracting states of the Agreement on the European Economic Area. The full IP address is only transmitted to a Google server in the USA and shortened in exceptional cases. On behalf of this website's operator, Google will use this information to evaluate your website's use, compile reports on website activity, and provide the website operator with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case, you may not be able to use all functions of this website to their full extent. You can also prevent the data generated by the cookie and related to your use of the website (incl. https://policies.google.com/privacy/embedded?hl=en-US) from being downloaded and installed the available browser plugin.

You can prevent Google Analytics from collecting data by clicking on the following link. 

Deactivate Google Analytics

An opt-out cookie will be set, which prevents the future collection of your data when you visit this website.

You can find more information on the terms of use and data protection at  http://www.google.com/analytics/terms/de.html  or https://www.google.de/intl/de/policies/. We want to point out that Google Analytics has been expanded on this website to include the code "gat._anonymizeIp ();" to ensure that IP addresses are anonymized (so-called IP masking).

GoDaddy Service Provider

This website was built on GoDaddy's platform. The webpage host operates the booking, blog, and payment APIs used on this webpage. Data registered on this webpage may be recorded and stored on GoDaddy's platform. For detailed data management information, please refer to the GoDaddy Operating Company, LLC. privacy policy available on this link: https://www.godaddy.com/hi-in/legal/agreements/us-supplemental-privacy-notice.

VSee Online Clinic Provider

VSee Videoconferencing may involve the electronic exchange of health information, which is protected under GDPR and HIPAA. Security considerations for video conferencing may include ensuring unauthorized third parties cannot record or "listen in" on a video conferencing session, ensuring recorded video conferencing sessions are stored and identified securely and correctly, or establishing procedures for initiating and receiving video calls. Other video collaboration features that may affect security include text chat, screen sharing, and file transfer. Videoconferencing would only be one small piece to consider when establishing and maintaining HIPAA-compliant IT security standards as described by the VSee's Privacy Rule and the Security Rule. VSee Lab, Inc. is also responsible for the processing of personal data it receives in accordance with the European Union General Data Protection Regulation (GDPR).

5. Payment providers - Square, SumUp

On our website, we may offer payment via Square, among other things. The provider of this payment service is Square, Inc., Square Capital, LLC, and/or Cash App Investing LLC, 1455 Market Street, Suite 600

San Francisco, CA 94103, USA (hereinafter "Square"). If you choose to pay via Square, the payment details you have entered will be transmitted to Square. The transmission of your data to Square takes place based on Art. 6 Para. 1 lit. a GDPR (consent) and Art. 6 Para. 1 lit. b GDPR (processing to fulfill a contract). You have the option of withdrawing your consent to data processing at any time. A revocation does not affect the effectiveness of past data processing operations.

The provider of this payment service is SumUp Limited. , Block 8, Harcourt Centre, Charlotte Way,

Dublin 2, Irland D02 K580, (hereinafter "SumUp"). If you choose to pay via SumUp, the payment details you have entered will be transmitted to SumUp. The transmission of your data to SumUp takes place based on Art. 6 Para. 1 lit. a GDPR (consent) and Art. 6 Para. 1 lit. b GDPR (processing to fulfill a contract). You have the option of withdrawing your consent to data processing at any time. A revocation does not affect the effectiveness of past data processing operations.

6. How to contact the appropriate authority

Should you wish to report a complaint or feel that the Consultant has not addressed your concern satisfactorily, you may contact the Virginia Attorney General, who is responsible for enforcing the Virginia Consumer Data Protection Act (VCDPA) in Virginia, US, and is responsible for data protection rights in the state. They can be reached at the following address:

Phone: (804) 786-2071

Address: 202 North 9th Street, Richmond, Virginia 23219