Privacy statement
Last updated: date of publication
In short
- Who
- I am responsible for the personal data described here. You can reach me at inquiries@lianadrakopoulou.com.
- What
- Only what you send me through the forms or by email, plus basic technical data needed to run the website.
- Your rights
- You can ask to see, correct or delete your data at any time.
Who is responsible
Liana Drakopoulou, psychologist, practising at Stories, Maliestraat 3, 3581 SH Utrecht. Email: inquiries@lianadrakopoulou.com. Phone: +31 6 18316633. Chamber of Commerce (KvK) number: KvK number.
This statement is about this website and about contact before therapy starts. What I record once you are a client is described in the privacy statement for clients.
What I collect, why, and on what basis
When you book an intro call or a session
- Data: first and last name, email address, phone number (optional), your message, the day and time you choose, and whether you ticked the consent box.
- Why: to arrange the appointment, send you a confirmation, and prepare for our conversation.
- Basis: taking steps at your request before an agreement is made (Article 6(1)(b) of the GDPR).
Your message may contain information about your health, which is a special category of personal data. Please share only what you are comfortable sharing at this stage. By sending the form, you agree that I use what you write to respond to your request. This is your explicit consent (Article 9(2)(a)), and you can withdraw it at any time by emailing me.
When you sign up for workshop updates
- Data: your email address.
- Why: to send you a note when new workshop dates are announced.
- Basis: your consent (Article 6(1)(a)).
Every email contains an unsubscribe link. After you unsubscribe, I keep the address marked as unsubscribed so that I do not email you again by mistake. If you want it deleted completely, email me and I will remove it.
When you email or call me
I use your email address, name and what you tell me to reply to you. The basis is my legitimate interest in answering questions and, if you want to start therapy, taking steps towards an agreement.
When you visit the website
Cloudflare hosts this website and protects it against abuse. It processes technical data such as your IP address, browser type, the pages requested and the time of the request. The basis is my legitimate interest in a secure, working website. I do not use this data to identify you.
The forms use Cloudflare Turnstile to tell people from automated programs. It looks at technical signals from your browser, such as the IP address, to do this.
Visit statistics are collected only if you accept them in the cookie banner. See the cookie statement.
Who processes data for me
| Service | What it does for me | Data it handles |
|---|---|---|
| Cloudflare | Hosts this website, protects it, runs the spam check on the forms, and forwards email sent to my @lianadrakopoulou.com addresses | Technical data, and the content of forwarded emails while they pass through |
| Supabase | Database for form submissions, stored in the EU (Frankfurt) | What you enter in the forms |
| Resend | Sends confirmation emails and notifications | Your name, email address and appointment details |
| Calendly | Appointment scheduling, connected to my calendar | Your name, email address, phone number, message and the chosen time |
| My calendar and my email (Gmail) | Appointments and emails |
the person or company that builds and maintains the website and has access to the database, with a processing agreement, for example Neurova AI.
I have, or will conclude, a data processing agreement with each of these providers check each provider's current agreement. Some of them are based in the United States or may process data outside the European Economic Area. In that case the transfer relies on the EU-US Data Privacy Framework or on standard contractual clauses check the transfer basis of each provider.
I do not sell personal data, and I do not use it for advertising.
How long I keep your data
- Intro call requests that do not lead to therapy: retention period, for example 12 months, then they are deleted.
- Booking records for sessions: for as long as you are a client. After that, see the privacy statement for clients.
- The workshop list: until you unsubscribe, and then only as an unsubscribed address, as described above.
- Emails: how long emails are kept.
- Technical logs at Cloudflare: as set out in Cloudflare's own policies.
How I protect your data
The website uses an encrypted connection (HTTPS). Form submissions are stored in an access-protected database in the EU. Only I and the person who maintains the website can reach it. The keys that give access are kept as protected settings and are never part of the website's public code.
Your rights
You have the right to access your data, to have it corrected, to have it deleted, to restrict or object to its use, to receive it in a portable format, and to withdraw consent. Email inquiries@lianadrakopoulou.com. I will reply within one month. I may ask you to confirm your identity first.
If you are not satisfied with how I handle your data, you can complain to the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl). I would appreciate the chance to put things right first, but you do not have to contact me before you complain.
Who this website is for
This website and my practice are for adults.
Changes
I may update this statement. The date at the top shows when it last changed.