3. Why do I collect this data?

​

Purpose                                                              Legal basis

Responding to your enquiries                  Legitimate interest

Scheduling and conducting therapy       Performance of a contract

Processing payments                                 Performance of a contract

Keeping therapeutic notes                        Legal obligation / Explicit consent

Improving my services                               Legitimate interest

​

Regarding health data:

Information shared during sessions constitutes health data under the GDPR (special category data, Article 9). Processing is based on your explicit consent, freely given at the start of our therapeutic relationship.

​

4. How long do I keep your data?

• Therapeutic notes and files: 5 years after the last session (in line with professional standards)

• Contact details and email correspondence: 3 years after the last contact

• Payment data: 5 years (legal accounting obligation)
   

After these periods, your data is deleted or anonymised.
 

5. Who do I share your data with?

Your data is never sold or passed on to third parties for commercial purposes. It may be shared with the following technical service providers, strictly for the purpose of their services:
 

• Wix.com – website hosting and contact forms (Wix Privacy Policy)

• PayPal – payment processing (PayPal Privacy Policy)

• MobilePay – payment processing (MobilePay Privacy Policy)
   

These providers act as data processors and are bound by strict confidentiality obligations.

​

6. International data transfers

Some of my service providers (including Wix and PayPal) may store or process data outside the European Union. In such cases, appropriate safeguards are in place (EU Standard Contractual Clauses or adequacy decisions).

​

7. Your rights

Under the GDPR, you have the following rights:

• Right of access: obtain a copy of the data I hold about you

• Right to rectification: correct inaccurate or incomplete data

• Right to erasure: request deletion of your data (subject to legal obligations)

• Right to restriction: temporarily limit the processing of your data

• Right to data portability: receive your data in a structured, machine-readable format

• Right to object: object to processing based on legitimate interest

• Right to withdraw consent: withdraw consent at any time, without affecting the lawfulness of prior processing
   

To exercise any of these rights, contact me at: kislor.therapy@gmail.com

I will respond within one month.

​

8. Right to lodge a complaint

If you believe your rights have not been respected, you may lodge a complaint with the relevant supervisory authority:

Datatilsynet (Danish Data Protection Authority) Website: www.datatilsynet.dk Email: dt@datatilsynet.dk

If you are based in the UK, you may also contact the ICO: www.ico.org.uk
 

9. Cookies

This website is hosted on Wix.com, which uses technical and analytical cookies. These may collect data about your browsing behaviour (pages visited, time spent, device used).

You can manage your cookie preferences via the banner shown on your first visit, or through your browser settings.
 

10. Changes to this policy

This policy may be updated occasionally to reflect changes in my practices or applicable regulations. The date at the top of this page will be updated accordingly.

​

​

This policy applies to all individuals who contact me or use my services, regardless of their country of residence.