Before you continue please review
In no event shall WHO be responsible for the accuracy of information posted by any user on the Website.
The website is intended for use by persons going through difficult emotions. The site provides courses to help people manage stress.
For questions or comments on any of the following, please contact: [email protected]
or: +961 81 820 474
1. Step-by-Step and your data
The protection and confidentiality when using Step-by-Step are very important to us. We are aware that we ask you for sensitive information that requires maximum protection. For this reason, we collect as little personal data as possible and secure it according to the highest technical standards.
If you have any questions about the following data protection information, please do not hesitate to contact us.
If you live in Lebanon, please contact the Step-by-Step team by phone at +961-81820474 or by e-mail at
2. What is data protection about?
Data protection is about the protection of personal data of individuals. This concerns data that relates to an identified or identifiable living individual. This includes information such as name, IP address, email address or telephone number. Information that cannot be associated with your identity does not fall under this category.
When we collect and use personal data, we strictly limit ourselves to what is technically necessary and comply with legal regulations. Whenever possible, we refrain from collecting personal data. We only collect and use personal data if you have given us consent to this or if we are legally permitted to do so. It is important to us that you understand what data we collect, why we collect the data and what we use it for.
3. What data is collected?
We collect and process the following personal data from you to help you access and better use Step-by-Step as explained below:
Your login data is necessary to protect your account from unauthorized access. For this purpose, we collect: A user name you have chosen yourself and a password you have chosen yourself.
If you use Step-by-Step on recommendation of an organization, you can enter an optional organization ID. This ID is used to customize specific contents of the app for you (e.g. contact information of the organization).
We collect your contact data (phone number or email address) to be able to restore access to Step-by-Step if you lose your login data. We will also use your contact data to remind you of assessments that are part of the study. If we learn that you are experiencing an acute life-threatening crisis, we also reserve the right to call in a rescue service.
We collect relevant health data to ensure the quality and to improve Step-by-Step. For these purposes, we collect questionnaires on a range of issues.
In addition, your entries in the Step-by-Step exercises (text, audio and pictures) are saved so that you can access them from other devices. Your entries will be visible to your personal e-helper in order to better assist you in the program. This only applies to text and audio input. Pictures will always stay private and cannot be shared. Your entries will also not be downloaded.
If you use Step-by-Step's integrated messaging system, your messages will be sent to the server and stored so that you can communicate with your e-helper via the integrated messaging system. The messages will be visible to our e-helpers and the supervisors, in order to ensure that we provide the best possible support.
For scientific purposes, additional personal information is collected. These are used to investigate whether the effect of Step-by-Step differs depending on factors such as: Gender, age, nationality, education background, marital status and occupational status.
For displaced people, we also collect the country of origin, the current country of residence and the time of flight in order to investigate whether the effect of Step-by-Step differs depending on these factors.
The processing of your data is based on your voluntary consent to participate in Sep-by-Step in accordance with Article 6, paragraph 1 of the General Data Protection Regulation (GDPR). You can revoke this consent at any time. In doing so, you withdraw from the program.
Your data will be stored together with your login name as long as the program is running. As soon as you complete step-by-step, all data collected will be anonymized. This means that the data can no longer be assigned to your person.
When using Step-by-Step, usage data is stored. This data is used to identify and track unauthorized access attempts. It is also used to create anonymous access statistics and thus to improve Step-by-Step.
If you use the Step-by-Step app on your smartphone, the following data is automatically saved in log files: The platform you are using (Android or iOS), the version of the app, the device model and the system version.
In addition, the following data is stored: The size of the transferred data volume, a so-called HTTP status code (e.g. to identify a successfully transferred website), the IP address of the accessing computer, whereby this IP address is anonymized by deleting the last octet of this address.
The collection and use of the information stored in the log files is used in anonymous evaluations for statistical purposes (for example, to analyze usage patterns) and thus to improve our services. Since the IP addresses are anonymized as described above, it is not possible to assign the evaluation results to a specific IP address.
For evaluation purposes, the log files for the current and previous calendar years are saved. After this time, the log files will be deleted.
This data tells us in which way and how often Step-by-Step and certain features of the app are used. For this purpose, we collect time stamps for actions in the app (e.g. the start of a session or the completion of a planned activity) and counters for actions in the app (e.g. the number of planned activities or the number of messages sent to e-helpers).
The data processed in the above manner is collected, used, and stored electronically by Exquitech. They will not be passed on to third parties or used outside Exquitech unless you have given your consent or unless we are legally obliged to pass on data.
Your data will be hosted in West Europe on servers in the data center of Microsoft. This operator guarantees the physical security of the data and protection against unauthorized access via the network Microsoft Azure complies with ISO 27001, a code of conduct that focuses on the security of information and information technology.
6. How is your data protected?
The app communicates with the server via encrypted connections using SSL (Secure Socket Layer), which prevents unauthorized third parties from reading your data. Both servers and databases are located behind firewalls to restrict access.
Cookies are not used.
8. Active components
9. Your rights
You have the right to obtain information about your personal data and to request access to your personal data and/or copies thereof.
Correction, deletion or limitation of processing
You have the right to request the correction, deletion or limitation of the processing of your personal data.
Revocation of consent and objection to the processing
You can revoke your consent to the processing of your personal data at any time and object to the processing of your data
You have the right to communicate with and complain to the appropriate data protection supervisory authority at [email protected]
10. Changes in data protection practices
Due to the constant changes in the Internet, above all the technology and also the relevant legal situation, we reserve the right to adapt our data protection practice from time to time, if this becomes necessary. Such adjustments to our data protection practices will then be announced here on this page with a notice period of two calendar weeks, provided that this remains possible due to the circumstances causing the adjustment.