Privacy Policy

This privacy policy explains how Cabinet Individual Psihologie Carmen Foia ("the Practice", "we") collects, uses, and protects the personal data of people who visit this website or use our services, in accordance with Regulation (EU) 2016/679 (GDPR) and applicable Romanian law.

1. Data controller

• Name: Cabinet Individual Psihologie Carmen Foia
• Tax ID (CUI): 54513889
• Address: Str. Vasile Alecsandri nr. 7, Oradea, Romania
• Email: contact@psihologcarmenfoia.ro
• Phone / WhatsApp: +40 7949 514 255

2. What data we collect

• Identification and contact data: name, email address, phone number.
• Booking data: chosen session reason, date and time, and any notes you add.
• Payment data: processed solely by our payment provider (Stripe). We do not store or have access to your full card details.
• Health data: information disclosed during psychotherapy sessions is a special category of data, processed on the basis of consent and protected by professional confidentiality.
• Technical data: IP address, browser type, and usage data collected by our service providers to operate and secure the website.

3. Purposes and legal bases

• Booking and delivering sessions — performance of a contract (Art. 6(1)(b) GDPR).
• Processing payments and issuing fiscal documents — legal obligation and contract (Art. 6(1)(b) and (c)).
• Processing health data within therapy — explicit consent and provision of health care (Art. 9(2)(a) and (h)).
• Responding to your contact messages — legitimate interest in communicating with interested individuals (Art. 6(1)(f)).
• Sending confirmations, reminders, and receipts — performance of a contract.

4. Service providers (processors)

To provide our services, we use third-party providers that process data on our behalf:

• Cal.com — booking system and availability management.
• Stripe — card payment processing and receipts.
• Google Calendar — synchronising availability and bookings.
• Supabase — hosting the blog database and admin section.
• DeepL — automatic translation of blog articles (processes only article text, not visitor data).
• Google Analytics — website usage statistics (see the Cookies section).
• Web hosting provider — delivering the website.

Some providers may process data outside the European Economic Area. In such cases, transfers are protected by Standard Contractual Clauses approved by the European Commission or other appropriate safeguards.

5. How long we keep data

We keep data only as long as necessary for the purposes above: booking and session data for the duration of the therapeutic relationship and thereafter as required by legal and professional obligations; financial documents for the period required by tax law (generally 10 years); contact messages for a reasonable period to respond to your request.

6. Your rights

Under the GDPR, you have the right to:

• access your data;
• rectify inaccurate data;
• erasure ("right to be forgotten"), within the limits of legal obligations;
• restrict processing;
• data portability;
• object to processing;
• withdraw consent at any time, without affecting the lawfulness of prior processing.

To exercise these rights, contact us at contact@psihologcarmenfoia.ro. You also have the right to lodge a complaint with the Romanian Data Protection Authority (ANSPDCP), www.dataprotection.ro.

How to request deletion of your data

You can request deletion of your personal data at any time by emailing contact@psihologcarmenfoia.ro with the subject "Data deletion". We will act on your request without undue delay and in any case within 30 days (one month) of receipt. We may ask you to confirm your identity to prevent unauthorised requests. Note that some data may be retained where the law requires it (e.g. financial/tax records) or for the establishment or defence of legal claims; in such cases we will explain the basis for retention.

7. Data security

We apply appropriate technical and organisational measures to protect data against unauthorised access, loss, or disclosure. Payments are processed over secure connections and access to data is restricted.

8. Cookies and analytics (Google Analytics)

We use the following categories of cookies:

• Essential — strictly necessary for the site and bookings to work. Always on and cannot be disabled.
• Analytics — help us understand how the site is used (e.g. Google Analytics). Active only with your consent.
• Marketing — used to personalise content and ads. Active only with your consent.

Optional cookies (analytics, marketing) are not loaded before you consent. On your first visit we show a banner where you can accept all cookies, keep only the essential ones, or customise your choice by category. You can change or withdraw your consent at any time using the "Cookie settings" option in the site footer, without affecting the lawfulness of prior processing.

We also use Google Analytics, a web analytics service provided by Google, to understand how the website is used (e.g. pages visited, visit duration, device type). Google Analytics uses cookies and may collect your IP address (in anonymised/truncated form) and usage identifiers. This data helps us improve the website. Processing is based on your consent, given via the cookie banner or your browser settings. You can withdraw consent at any time, block cookies in your browser settings, or install the Google Analytics opt-out add-on (tools.google.com/dlpage/gaoptout). Google may transfer data outside the EEA, with appropriate safeguards.

9. Session confidentiality

Information shared during psychology sessions is confidential and protected by professional secrecy, in line with the code of ethics of the psychology profession. Exceptions are those provided by law (e.g. an imminent danger).

10. Changes to this policy

We may update this policy from time to time. The current version is published on this page with the date of the last update.