Privacy and cookie policy

Who is responsible for your data

The data controller is Daniela Popa, integrative psychotherapist, working online.

For any question about your data, or to exercise the rights listed below, write to me at popadaniela355@gmail.com.

What the site collects

The site has no contact form and asks you for nothing in order to read it.

Like any website, the server hosting it keeps short-lived technical logs: your IP address, the time of the visit, the browser type and the page requested. These are needed to run and secure the site, on the basis of legitimate interest, Article 6(1)(f) GDPR.

Fonts and images are hosted on our own server, so simply visiting the site sends no data to other companies.

When you write or book

If you email me, I process the details you send: your name, your email address and the content of your message.

If you book online, the booking calendar collects your name, your email address and the time you choose, in order to confirm and remind you of the appointment.

I use them only to reply and to arrange the session. The basis is taking steps towards a possible contract, Article 6(1)(b) GDPR.

Please don't send sensitive details about your health by email or through the booking form. Neither is the right channel for that. It's enough to choose your time; the rest we discuss in session.

Cookies and browser storage

The site uses a minimum of local storage, only for things you choose yourself. They are all listed in the table below.

I use no advertising, cross-site tracking or profiling cookies, and at the moment I have no analytics tool at all.

The booking calendar only loads when you press the button to open it. From that moment, the service providing it may use its own cookies, according to its own policy.

You can change your choice at any time through the Cookie settings link in the page footer.

What is stored, precisely

Cookie settings

Who else sees the data

The site is hosted by a hosting provider, acting as a processor, which can see the server's technical logs.

Online bookings are handled by the external calendar service, which also acts as a processor.

My email address is hosted by Google. Messages you send me are stored on Google's servers, including outside the European Union, on the basis of the standard contractual clauses approved by the European Commission.

I do not sell, rent or pass your data to anyone for marketing purposes.

How long I keep it

I keep messages and bookings for as long as I need in order to reply and, if we start therapy, for as long as professional obligations require.

If we don't end up working together, I delete the correspondence within a reasonable period.

Server logs are kept for a short time, according to the hosting provider's policy.

Your rights

You have the right to request access to your data, its correction, erasure, restriction of processing and portability, and you may object to processing based on legitimate interest.

You can withdraw your consent at any time, without affecting processing carried out beforehand.

If something cannot be resolved, you may contact the Romanian data protection authority, ANSPDCP, or lodge a complaint at dataprotection.ro.

Information shared in therapy

What is discussed in sessions is health data and carries special protection under Article 9 GDPR and professional confidentiality.

It has nothing to do with this website and is covered by a separate agreement, which you receive at the start of therapy.

Automated decisions and changes

I make no automated decisions about you and carry out no profiling.

If this policy changes, I update the date at the top of the page.