Privacy policy

Draft – this text is a template and must be reviewed and completed by a lawyer before the website goes live.

1. Controller

Aramind, [RESPONSIBLEPERSON], [ADDRESS]. Email: aramind.tech@gmail.com

2. Hosting

This website is hosted by [HOSTING PROVIDER, ADDRESS]. When you visit the website, the server automatically processes technical data (IP address, date and time, page requested, browser) to deliver the website securely (Art. 6(1)(f) GDPR). These logs are deleted after [X] days. Fonts are hosted on our own server; no data is sent to Google Fonts.

3. Appointment requests

When you request an appointment, we process the data you enter (name, email, optional phone number, session type, language, preferred times and your optional message). Your request may contain information about your health. We process this data only with your explicit consent (Art. 9(2)(a) and Art. 6(1)(a) GDPR) and to prepare your session (Art. 6(1)(b) GDPR). You can withdraw your consent at any time with effect for the future.

4. Requests from organizations

When you request a proposal, we process your contact and company details to respond to your request (Art. 6(1)(b) and (f) GDPR).

5. Google Sheets (Google Workspace)

Form submissions are stored in a Google Sheets spreadsheet. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We have concluded a data processing agreement with Google. Data may be transferred to the USA; Google is certified under the EU-U.S. Data Privacy Framework. Access to appointment requests is limited to our psychologist.

6. Email and WhatsApp

We contact you by email. We only contact you via WhatsApp if you have explicitly agreed to this. WhatsApp is provided by WhatsApp Ireland Limited (Meta). Please note that WhatsApp processes metadata.

7. Video sessions

Sessions take place on [VIDEO PROVIDER], an end-to-end encrypted platform. [Details of provider and data processing agreement.]

8. Payment by bank transfer

For paid sessions you pay by bank transfer. We process the payment information and the receipt you send us to manage payments and to meet our legal retention obligations (Art. 6(1)(b) and (c) GDPR).

9. Newsletter

If you subscribe to our newsletter, we use your email address to send it (Art. 6(1)(a) GDPR). You can unsubscribe at any time. [NEWSLETTER PROVIDER]

10. Cookies

This website does not use tracking or marketing cookies. [Update this section if analytics are added.]

11. Retention

We delete your data as soon as it is no longer needed for the purpose, unless legal retention periods apply. Requests that do not lead to a session are deleted after [X] months.

12. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection, as well as the right to withdraw consent. You also have the right to lodge a complaint with a data protection supervisory authority.