Privacy Policy

1. Introduction

This Privacy Policy explains how Kalina Hristova collects, uses, and protects your personal data when you engage with psychological services or visit this website.
Your privacy and the confidentiality of your personal information are of utmost importance.

2. Data Controller

The data controller responsible for the processing of your personal data is:
Kalina Hristova
[email protected]

3. Data Collected

Depending on your interaction with the practice, the following personal data may be collected:

Name, date of birth, email address, phone number, address and the contact details of an emergency contact
Session notes and other information shared during therapy
Invoicing and payment information
Communication records (e.g., emails or messages related to scheduling)

4. Purpose and Legal Basis for Processing

Your personal data is collected and processed for the following purposes:

To provide psychological assessment, therapy, and related services
To communicate about appointments and therapy logistics
To maintain accurate administrative and billing records
To comply with legal and professional obligations

The processing of personal data is based on explicit consent (Article 6(1)(a) GDPR) and legitimate interest for providing healthcare services (Article 9(2)(h) GDPR).

5. Data Storage and Retention

Your personal and session data will be stored securely in compliance with the AVG/GDPR.
Client files are kept for a maximum of 20 years after the end of therapy, as required by Dutch healthcare law, unless otherwise requested and legally permitted.
Digital files are protected with password security and encrypted storage; physical notes (if any) are kept in a locked cabinet.

6. Sharing of Data

Your data will not be shared with third parties unless:

You provide explicit written consent;
There is a legal obligation to disclose information (e.g., court order, risk of harm to self or others); or
Information is shared anonymously for professional supervision or consultation, ensuring your identity remains confidential.

7. Your Rights

You have the following rights under the General Data Protection Regulation (GDPR):

To access, correct, or delete your personal data;
To restrict or object to the processing of your data;
To withdraw consent at any time (without affecting prior lawful processing);
To request a copy of your data in a portable format.

Requests can be submitted in writing via [email protected], and will be handled within 30 days.

8. Cookies and Website Data

This website uses only essential cookies for basic functionality. No tracking or analytical cookies are used.
If third-party applications (e.g., embedded forms or scheduling tools) are used, they may have their own privacy policies.

9. Complaints

If you believe your data has been mishandled, you may contact Kalina Hristova directly.
If the issue cannot be resolved, you may file a complaint with the Autoriteit Persoonsgegevens (Dutch Data Protection Authority) via www.autoriteitpersoonsgegevens.nl