Application

1. This privacy statement applies to the following categories of individuals:
   – (potential) clients,
   – visitors of the practice Psych.Zoya,
   – visitors of the website: www.psychzoya.nl,
   – associates (i.e., supervisors). 

The Processing of Personal Data

1. Personal data are data that can be traced to a specific individual. There are ordinary and special personal data. Ordinary personal data contain factual information about an individual (e.g., name, gender, date of birth, contact details, etc.). Special personal data present data of a sensitive nature (e.g., mental health-related information etc.).
2. Personal data collected by Psych. Zoya concern:
   – data that the client has shared, this can be either in person (orally or via written forms), by telephone, or digitally (via email),
   – data that other care providers have submitted, upon a written permission of the person concerned,
   – data processed during a subject’s visit to the website.

User Rights and Data Usage

1. Your personal data will not be passed on to other parties with whom Psych. Zoya has not entered into a processor agreement. The information you provide will not be passed on to other parties unless it is legally required and permitted. Special personal data are shared in agreement with the rules of NIP.

2. Personal data is stored no longer than necessary for the purpose for which it was provided or required by law, which means:

   – medical data: at least 20 years after the end of the treatment,
   – (financial) administrative data: 7 years after recording the data.

3. Users have the right to:
   – access their personal data: providing the User with all their personal data in a clear format,
   – rectify their data: make changes to stored data (e.g., new email),
   – delete their data: delete stored User data (e.g., email, phone number),
   – restrict processing: impose restrictions on the processing of User data (e.g., remove part of the data such as email),
   – transfer their data: transfer stored User data to the User or a designated entity.
4. Providing personal data is voluntary.

Data Protection

1. Personal data is protected by an SSL certificate.
2. The Administrator periodically changes administrative passwords and uses complex passwords to enhance security and protect personal data from unauthorized access.

Cookies

1. The website uses cookies.
2. Cookies are IT data stored on the User’s device, used for using the website.
3. Internet browsers usually accept cookies by default, but the User can delete or block them.
4. Types of cookies we use:
   – session cookies: these files are deleted when the browser is closed.
   – persistent cookies: these files remain on the User’s device for a year or until they are deleted.

Managing Cookies

1. Disabling cookies necessary for authentication, security, and user preference maintenance may hinder or prevent the use of the website.