Privacy policy

Who processes your data

Data controller: Gabriela Pollock Simionescu, tax ID 14005132H, professional address at Carr. Merika, 20, 48312 Merika, Vizcaya (España).

Contact email for data protection matters: psicologia@gabrielapollock.com.

This policy explains what data is collected through this website, what it is used for and what rights you have over it. It does not cover the processing of data belonging to people who are already patients, which is governed by the information provided at the start of the therapeutic process.

Contact form

Data collected: name, email address, telephone and the content of the message you write.

Purpose: to answer your enquiry and, where appropriate, to arrange a first introductory session.

Legal basis: your consent, given when you submit the form (article 6.1.a GDPR), and the taking of steps at your request prior to entering into a contract (article 6.1.b).

Retention: messages are kept for as long as needed to deal with the enquiry and then for a maximum of one year, unless the relationship continues or the law requires longer retention.

Please do NOT include detailed information about your health, diagnoses or clinical history in the message. For a first contact it is enough to say briefly what brings you here. Everything else is discussed in the introductory session, in an appropriate and confidential setting.

Health-related data

The controller's activity is healthcare, so the information you share may reveal health data, which article 9 GDPR treats as a special category subject to reinforced protection.

Where such information arrives through the form, it will be processed solely on the basis of your explicit consent and, once the therapeutic relationship has begun, under article 9.2.h GDPR, for the provision of health care, subject to professional secrecy.

Clinical records of people in treatment are kept in accordance with Spanish Law 41/2002 on patient autonomy and the applicable regional legislation.

Web analytics

If you accept this in the cookie notice, data about your browsing is collected (pages visited, time spent, device type and approximate origin) using Google Analytics, with the IP address anonymised.

Purpose: to understand which content is useful and improve the site. The data is processed in aggregate and is not used to identify you.

Legal basis: your consent. You can withdraw it at any time from the "Cookie settings" link in the footer.

Further detail in the Cookie Policy.

Who else accesses your data

Data is neither sold nor transferred to third parties. It is accessed only by the providers needed for the service to work, who act as data processors and are contractually bound to use it solely on our instructions:

Web hosting provider: RK Informatika, S.L., on infrastructure provided by Arsys Internet, S.L.U. The servers are located in Spain (European Union), so there is no international transfer on this account..

Email provider: the same hosting provider, on whose servers the mailbox resides..

Analytics provider, if you accept analytics cookies: Google Ireland Limited.

Form anti-spam protection: Google Ireland Limited (reCAPTCHA). When you submit the form, Google receives your IP address and data about how you interacted with the page in order to determine whether you are a person or an automated program. The legal basis is the legitimate interest in protecting the site against bulk submissions and abuse (article 6.1.f GDPR). This service is only activated once you start filling in the form.

International transfers of data may occur as a result of using Google Analytics. Google adheres to the EU-US Data Privacy Framework, which the European Commission recognises as providing an adequate level of protection.

Your rights

You may at any time exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw any consent you have given, without this affecting the lawfulness of processing carried out beforehand.

To exercise them, write to psicologia@gabrielapollock.com stating which right you wish to exercise. You may be asked to prove your identity.

If you believe your data has not been handled properly, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

Security and minors

Reasonable technical and organisational measures are applied to protect data against loss, unauthorised access or misuse, including an encrypted HTTPS connection.

The contact form is not intended for children under 14. If you are under that age, please ask a parent or guardian to get in touch on your behalf.

Changes to this policy

This policy may be updated to reflect legal or service changes. The date of the latest update appears at the top.