Page 1 of 1

Privacy Policy

One Question

Last updated: 14 August 2026

Protecting your personal data is important to me. This Privacy Policy explains which personal data is processed as part of One Question, the purposes for which it is processed, which service providers are involved, and what rights you have in relation to your data.

1. Controller

The controller responsible for the processing of personal data in connection with One Question is:

Yvonne Yasnikovska Chausseestraße 60 10115 Berlin Germany

Email for privacy-related enquiries: privacy@onequestion.global

General contact: contact@onequestion.global

No Data Protection Officer has been appointed.

2. What is One Question?

One Question is a free service for women aged 18 and over who would like to ask a personal question and receive individual psychological guidance.

As part of the service, you can submit a personal question and provide additional information that helps me better understand your question and your individual circumstances.

Your information will be personally read by me and used to prepare an individual response.

One Question is not an emergency or crisis service and does not replace medical, psychiatric or psychotherapeutic diagnosis or treatment.

3. What personal data is processed?

As part of the questionnaire, the following personal data in particular may be processed:

Contact information

- your email address.

Information relating to your question

- your personal question, - voluntary background information, - information about your current situation, - the purpose or type of guidance you are seeking.

Information about your psychological well-being

- your subjectively perceived level of impairment, - how frequently the issue occupies your thoughts, - your level of emotional distress, - other information about your psychological experience that you voluntarily provide.

Information about physical health and lifestyle

- sleep duration and sleep quality, - exercise and physical activity, - dietary pattern, - number of meals or snacks, - caffeine consumption and, where applicable, the amount consumed.

Information about your menstrual cycle and reproductive health

- menstrual cycle, - cycle regularity and, where applicable, cycle length, - contraception, - pregnancy, - postpartum period, - breastfeeding, - desire to have children, - menopause.

Medical information

- use of medication, - where applicable, the medications you specify, - other health information that you voluntarily provide as part of your question or in free-text fields.

Other information

- age group, - daily use of digital media or social media, - confirmation that you are at least 18 years old, - information about whether you are experiencing an acute crisis or immediate danger.

Depending on the content of your question or the information you voluntarily provide, additional personal information may also be processed.

4. Health data and other specially protected data

Some of the information collected or voluntarily provided as part of One Question may constitute health data within the meaning of Article 9(1) GDPR.

This applies in particular to information about your physical or mental health, medication, menstrual cycle, pregnancy, breastfeeding and other health-related circumstances.

Health data is a special category of personal data and is subject to a higher level of legal protection. The GDPR permits the processing of such data, among other circumstances, where the data subject has given explicit consent to the processing for one or more specified purposes. EUR-Lex

Before submitting your question, you will therefore be asked to provide your explicit consent to the processing of this data.

5. Purposes of processing

Your personal data will only be processed insofar as this is necessary to provide One Question.

In particular, your data is processed in order to:

- receive your question, - take your additional information and personal circumstances into account, - personally read and process your question, - prepare an individual response to your question, - confirm receipt of your question by email, - notify you when your personal response is ready, - provide you with an individual private link to your personal response page, - make your personal response accessible through this individual private response page, - process privacy-related requests or requests concerning your data protection rights, where applicable.

Your information will not be used for advertising or direct marketing.

Your individual information will not be used by me for other purposes, in particular for research, profiling or the training of AI systems, as part of this service.

6. Legal basis

Where personal data is processed as part of One Question, the processing is based on your consent pursuant to Article 6(1)(a) GDPR.

Where your information contains health data or other special categories of personal data within the meaning of Article 9(1) GDPR, such data is processed on the basis of your explicit consent pursuant to Article 9(2)(a) GDPR. EUR-Lex

Your consent is actively obtained before the form is submitted.

You may withdraw your consent at any time with effect for the future. Further information can be found under “Withdrawal of your consent”.

7. Voluntary provision of your information

Using One Question is voluntary.

Certain information is required so that I can process your question and provide your response. This includes, in particular, your personal question, the confirmations required to use the service, and an email address through which you can be notified.

Other information helps me better understand your situation and individual circumstances. Where information is marked as voluntary in the questionnaire or an option such as “I prefer not to say” is provided, you are not required to provide that information.

Please only provide information in free-text fields that is relevant to your question and necessary to understand it.

8. Use of your email address

Your email address is used to:

- confirm receipt of your question, and - notify you when your personal response is ready.

Your personal substantive response will generally not be sent as part of the notification email itself.

Once your response is ready, you will receive an individual private link through which you can access your personal response page.

Your email address will not be used for newsletters, advertising or other marketing communications as part of One Question.

9. Processing via Tally

I use the form service Tally to provide the questionnaire and the individually created personal response pages.

Provider:

Tally BV Sint-Pietersnieuwstraat 11 9000 Ghent Belgium

Tally processes the data submitted through the form on my behalf.

Under the Data Processing Agreement applicable between Tally and its professional users, the form creator is the controller of the data collected through the forms and Tally acts as the processor. The Data Processing Agreement describes Tally as the “PROCESSOR” and the customer as the “CONTROLLER”.

The processing activities described in Tally's Data Processing Agreement include the creation, distribution and completion of forms as well as data storage. The categories of personal data listed include electronic identification data and form data. Tally Forms

According to Tally, form data is encrypted both in transit and at rest and is stored in Europe.

Further information can be found in Tally’s privacy information. Tally.

10. Automatic confirmation email

After submitting your question, you will receive an automated email confirming that your question has been received.

For this purpose, I use Tally's email notification functionality.

For enabled form email notifications, Tally uses SendGrid as a subprocessor. Tally lists SendGrid as being located in the United States and states that SendGrid may process form data when form email notifications are enabled. Tally Forms

Your personal psychological response will not be sent through this automatic confirmation email.

11. International data transfers

According to Tally, the form data collected through Tally is stored in Europe.Tally Forms

However, subprocessors located outside the European Economic Area may be used in connection with individual technical functions. In the case of One Question, this applies in particular to SendGrid in the United States for the enabled automatic email notification.Tally Forms

Tally regulates the use of subprocessors in its Data Processing Agreement. Under the Agreement, subprocessors must be bound by corresponding data protection obligations.

Where personal data is transferred to a third country, such transfer takes place in accordance with the legal requirements of Articles 44 et seq. GDPR and the transfer mechanisms provided for by Tally.

12. Notification when your response is ready

Once your personal response has been prepared, you will receive a separate email from me.

This later notification is sent manually through my email provider mailbox.org and not through Tally's form email notification functionality.

The mailbox.org email service is provided by Heinlein Hosting GmbH.

According to mailbox.org, its servers are located at two sites in Berlin, Germany.Mailbox Knowledge Base

The purpose of this email is generally only to inform you that your response is ready and to provide you with the individual private link to your personal response page.

Your personal response itself will not be included in the content of this notification email.

13. Personal response and private link

Your personal response will be made available through an individually created private response page on Tally. This page is created personally by me and contains your individual response only.

Once your response is ready, you will receive an individual private link by email through which you can access your personal response page.

This link is intended for you. Please keep it confidential and do not share it with other people.

A private link does not provide the same level of technical access protection as, for example, end-to-end encryption combined with a separate password. Anyone who obtains the link may potentially be able to access the content made available through it. Please therefore keep the email and the link secure.

14. Recipients and processors

Personal data is generally only processed insofar as this is necessary to provide One Question.

In particular, the following service providers may be involved:

Tally BV, Belgium – provision of the form, storage of form data and technical provision of individually created personal response pages, SendGrid – sending the automatic confirmation email through Tally's email functionality, Heinlein Hosting GmbH / mailbox.org, Germany – sending the later personal notification email.

Your personal data will generally not be disclosed to any other third parties unless such disclosure is required by law or necessary for the establishment, exercise or defence of legal claims.

15. Storage period and deletion

The personal data collected in connection with your request, in particular your question, questionnaire responses, email address, personal response and the associated personal response page, will generally be deleted 30 days after your personal response has been made available, unless a statutory obligation or another compelling legal reason requires longer storage.

The deletion will be carried out manually by me.

Within Tally, the relevant submission and associated personal data will be deleted and subsequently permanently removed from the trash using the functionality provided by Tally.

Tally states that deleted content initially remains in the trash for 90 days unless the trash is manually emptied earlier. According to Tally, manually emptying the trash permanently deletes the content and it cannot be recovered.Tally Forms

My intended deletion process is therefore to delete the relevant data after the 30-day period has expired and to initiate permanent deletion using the corresponding Tally functionality.

16. Withdrawal of your consent

You may withdraw your consent to the processing of your personal data, including your health data, at any time with effect for the future.

To do so, simply send an email to:

privacy@onequestion.global

The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of your consent before its withdrawal.EUR-Lex

Where there is no other legal basis requiring or permitting the continued processing of your data following withdrawal, your data will be deleted.

If you withdraw your consent before your personal response has been completed, it may no longer be possible to continue processing your question or provide you with a personal response.

17. Your data protection rights

Subject to the applicable legal requirements, you have, in particular, the following rights:

- right of access to your personal data, - right to rectification of inaccurate or incomplete data, - right to erasure of your personal data, - right to restriction of processing, - where applicable, right to data portability, - where applicable, right to object to processing, - right to withdraw consent you have previously given.
Article 13 GDPR requires data subjects to be informed about these rights. EUR-Lex

To exercise your rights, you can contact me at any time at:

privacy@onequestion.global

18. Right to lodge a complaint

You also have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data.

In particular, you may contact the supervisory authority responsible for me:

Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit)

You may also contact another supervisory authority competent under the GDPR.

19. No automated decision-making

No solely automated decision-making within the meaning of Article 22 GDPR takes place as part of One Question.

Your question and the information you provide are personally read by me, and your personal response is prepared by me.

20. Data security

I take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access and unauthorised disclosure.

Tally also undertakes in its Data Processing Agreement to implement appropriate technical and organisational security measures in accordance with Article 32 GDPR. Tally AV Data Processing Agreement.pdfPDF

Tally further states that form data is encrypted during transmission and at rest.Tally Forms

Despite appropriate security measures, no transmission of data over the internet can be guaranteed to be completely secure against all risks.

21. Changes to this Privacy Policy

This Privacy Policy may be updated if the functionality of One Question, the technical service providers used, or the applicable legal requirements change.

The version made available at the time you use the service applies.

Last updated: 14 August 2026