Privacy policy

Data controller

Elena Stavraki, mental health counsellor. For any question about your data: info@elenastavraki.com

What is collected, and why

Booking a session: your name and email, optionally your phone number, any notes you write, and your answers to the three introductory questions. These are used solely to arrange and prepare your appointment. Legal basis: performance of our agreement. What you write in those fields — your notes and your answers to the three questions — is stored inside the appointment entry in Google Calendar, so that I have it in front of me during the session.

Contact form: your name, email and message, so that I can reply. Legal basis: the legitimate interest of replying to people who write to me.

Book list: your name and email, so the file can be sent to you. Legal basis: your consent, given explicitly by ticking the box. That consent covers sending you the list, and nothing else.

Occasional emails: only if you separately tick the second, optional box on the form. It is a separate consent for a separate purpose — leave it empty and your email is not used for anything beyond the book list. You can withdraw at any time by replying to any email or writing to info@elenastavraki.com.

Sensitive data

[[TO BE COMPLETED BY ELENA, WITH LEGAL ADVICE: what someone writes in the notes and in the three introductory questions concerns their mental health. The legal basis for processing it needs to be stated explicitly (GDPR Article 9). Do not publish this page with this text as it stands.]]

Who it is shared with

It is never sold or traded. The following providers are used, solely to make the site work: Google (appointment calendar and meeting invitation), the practice's email provider for sending messages, and Netlify for hosting the site, which keeps technical server logs.

Tracking

This site uses no Google Analytics and no other tracking tool, and sets no advertising cookies. The only thing stored is your light or dark theme preference, held locally in your browser. It identifies nobody, and you can remove it by clearing your browser data. If a blog post contains an embedded video (YouTube, Instagram, TikTok), it does not load on its own — it loads only if you click it. From that moment the platform in question receives your IP address and may store data of its own in your browser.

How long it is kept

[[TO BE COMPLETED BY ELENA: how long you keep booking and contact emails, and whether any professional record-keeping obligation applies. Do not publish this page with this text as it stands.]]

Your rights

You have the right to request a copy of your data, to ask for it to be corrected or deleted, to restrict or object to its processing, and to withdraw any consent you have given — withdrawal does not affect what happened before it. Write to info@elenastavraki.com. If you believe your data has not been handled properly, you may complain to the Hellenic Data Protection Authority (www.dpa.gr).

Changes

If this policy changes, the date at the top of the page will be updated.