Privacy notice

Data controller

The data controller is Nagy Laura, psychologist.

• Address: Bulevardul 1 Decembrie 1918 nr. 86 E, ap. 1, Târgu Mureș
• Phone: 0741 479 460
• Email: nagylaura.psi@yahoo.com

You can contact me at any time using the details above with any questions about data protection.

Visiting the website

The website has no accounts or contact form. When you open the site, the hosting provider's server logs technical data: your IP address, the page requested, the time, and your browser and device type. I use this to keep the site secure and stable and to prevent abuse.

Legal basis: legitimate interest (Article 6(1)(f) GDPR). Retention: logs are kept only for a short period, according to the hosting provider's settings.

Contacting me by phone, WhatsApp or email

If you call or write to me, I use the details you provide (your name, phone number or email address, and the content of your message) to reply and to arrange an appointment.

Legal basis: steps taken at your request before using the service (Article 6(1)(b) GDPR) and my legitimate interest in answering your enquiry (point (f)). Retention: if no working relationship begins, I delete your enquiry after no more than 12 months. If a working relationship begins, the related data is covered by the rules in the section “Data related to psychological work”.

If you send a WhatsApp message, you are using Meta's (WhatsApp) service, which is covered by WhatsApp's own privacy policy. Please avoid sending sensitive information through this channel.

Online sessions

If you choose an online session, the video call takes place through a third-party service, which processes the technical data needed to set up the connection (for example your IP address and device data). I will tell you which service is used when we arrange the appointment.

Data related to psychological work

Data handled during therapy or counselling (including health data, which is special-category data) does not reach me through this website. I give separate, detailed information about it before or at the first session, and it is also covered by a psychologist's professional confidentiality.

Please do not describe your health or your problem in detail in your first message (by phone or email). We can talk about these in person or in an online session.

Cookies, map and fonts

The website itself does not use cookies, does not use analytics or tracking tools, and does not show advertising. Fonts are loaded from the site's own server, not from an external provider.

There is one exception: the map in the contact section. It does not load by default, and until it does, no data goes to Google. If you click “Show map”, Google Maps is loaded: Google may then receive data (for example your IP address and browser data), may place cookies, and may transfer the data outside the European Economic Area, for example to the United States. Google's own privacy policy applies (policies.google.com/privacy). Legal basis: your consent, given by clicking the button (Article 6(1)(a) GDPR). To withdraw it, reload the page; cookies placed by Google can be deleted in your browser settings.

The “Get directions in Google Maps” link takes you to an external site, where Google's rules already apply.

If I use cookies or analytics tools on the site in the future, I will first state this in this notice.

Who I share your data with

I do not sell your data and do not share it for marketing. The following providers take part in running the services:

• Hosting provider: Vercel Inc. – serving the website and technical logs.
• Email provider: Yahoo – handling emails sent to and from me.
• Video call provider: the service used for online sessions (see “Online sessions”).
• Google: only if you click to show the map (see “Cookies, map and fonts”).

If a provider may transfer data outside the European Economic Area (for example to the United States), this may only happen with appropriate safeguards, such as the EU–US Data Privacy Framework or the European Commission's standard contractual clauses (SCCs). I may also disclose data at the request of an authority or where required by law.

Data security

The website is served over an encrypted (HTTPS) connection. I limit access to enquiries I receive to what is necessary.

Your rights

Under the GDPR you have the right to:

• ask whether I process your data and access it (Article 15);
• ask for inaccurate data to be corrected (Article 16);
• ask for your data to be erased (Article 17);
• ask for processing to be restricted (Article 18);
• ask for data portability, where applicable (Article 20);
• object to processing based on legitimate interest (Article 21);
• withdraw your consent at any time, where processing is based on consent.

You can send your request using the contact details above. I will reply within one month at the latest. If needed, I may ask you to confirm your identity.

Complaints and remedies

If you believe I am handling your data unlawfully, please contact me first so we can resolve it together. You also have the right to contact the supervisory authority:

• Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP)
• Address: B-dul G-ral. Gheorghe Magheru 28–30, Sector 1, 010336 Bucharest
• Phone: +40 318 059 211
• Email: anspdcp@dataprotection.ro
• Web: www.dataprotection.ro

You may also lodge a complaint with the supervisory authority of the EU member state where you live, and you may go to court.

Children's data

This website is intended for adults. I do not process the data of anyone under 16 without the consent of their legal representative.

Changes to this notice

I update this notice when needed. The current version is always available on this page, and the date of the last update is shown at the top.