Privacy Policy

Last updated: 8 October 2026

Protecting your personal data matters to me, especially in a setting such as psychotherapy, where trust and confidentiality are at the heart of our work together. This policy explains what data is collected through this website, for what purpose, how it is protected and what rights you have, in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and Law 125(I)/2018 of the Republic of Cyprus.

Data controller

Erietta Constantinidou, Counselling Psychologist
16 Iakovou Kampanelli, 4105 Agios Athanasios, Limassol, Cyprus
Email: info@eriettapsychologist.com · Phone: +357 99 045446

What data is collected

The website only collects personal data when you choose to get in touch through the contact form:

• your name, email address and, optionally, your phone number;
• the topic you are interested in and how you prefer to be contacted;
• the content of your message.

You do not need to include details about your health or what is troubling you in the form. A few words are enough for me to get back to you; anything you would like to share can be discussed in our first conversation. If you choose to include such information, it is a special category of data and is treated with additional protection and confidentiality.

When you visit the website, the server automatically records technical information (such as IP address, browser type and time of access) for security and to keep the site working properly. This information is not used to identify you or for advertising.

Only if you allow it, the website uses Google Analytics 4 for visitor statistics, such as which pages you visit, your type of device and your approximate region. Google Analytics 4 does not store IP addresses.

Purpose and legal basis

• Replying to your enquiry and arranging a first conversation or session: steps taken at your request before entering into an agreement (Article 6(1)(b) GDPR) and your consent (Article 6(1)(a)).
• Health information you choose to share: your explicit consent (Article 9(2)(a) GDPR).
• Security and operation of the website: legitimate interest (Article 6(1)(f) GDPR).
• Visitor statistics (Google Analytics): your consent (Article 6(1)(a) GDPR), which you can withdraw at any time through “Cookie settings”.

Your data is not used for marketing, is not sold and is not passed to third parties for their own use.

How long data is kept

Messages received through the form are kept for as long as needed to reply and arrange contact and, if we do not go on to work together, are deleted within 12 months at the latest [To be confirmed: retention period]. If we do start working together, your details are handled in line with the Code of Ethics and Conduct and the obligations that apply to keeping therapy records. The server’s technical logs are kept for a limited period for security purposes. Google Analytics data is kept for the period set in its settings, up to 14 months.

Who has access

Only Erietta Constantinidou has access to your messages. To run the website, I use providers that process data solely on my behalf and under contract:

• Website hosting: Hetzner Online GmbH, with servers in Germany (European Union).
• Sending email from the form: email provider [To be confirmed: email provider name].
• Technical support for the website: Uveler, only to the extent needed for maintenance.
• Visitor statistics, only with your consent: Google Ireland Limited (Google Analytics).

Your data is not transferred outside the European Economic Area, unless this is done by the email provider or, if you have allowed it, by Google for Google Analytics, with the appropriate GDPR safeguards (for Google, the EU–U.S. Data Privacy Framework).

Links to third parties

The website contains plain links to Instagram, Facebook and Google Maps. It does not embed content from these services, so no data is sent to them simply because you visit the website. If you click one of these links, that service’s own privacy policy applies. The website’s fonts are hosted locally, without connecting to external servers.

Cookies

The website does not use advertising cookies. Analytics cookies (Google Analytics) are only set with your consent. You can find more information in the Cookie Policy.

Minors

For children and teenagers under 14, contact through the form should be made by a parent or guardian.

Your rights

You have the right to request access to your data, rectification, erasure, restriction of processing and portability, and to object to processing. You can also withdraw your consent at any time, without affecting the lawfulness of processing before the withdrawal. To exercise your rights, please contact info@eriettapsychologist.com. You will receive a reply within one month.

If you believe that the processing of your data breaches the law, you have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection (1 Iasonos Street, 1082 Nicosia, www.dataprotection.gov.cy).

Security

The website uses an encrypted connection (HTTPS), and appropriate technical and organisational measures are taken to protect your data against unauthorised access, loss or alteration.

Changes to this policy

This policy may be updated if the way the website works changes, or if the law changes. The date of the latest update is shown at the top of the page.