The General Data Protection Regulation (GDPR) requires Yasemi to specifically ensure it complies in terms of protection of privacy, that only necessary personal data is recorded and kept, and that processing, access control, and securitization protocols are in place to protect use (processing) of and access to personal data.
This Privacy regulation statement provides clarity regarding the processing and use of personal data and associated material within the operational sphere of Yasemi, based on compliance with the EU General Data Protection Regulation (GDPR).
This privacy statement applies to the following categories of individuals:
Personal data are all data that can be traced to a specific person (not to an organization, association or company). We distinguish them in ordinary and special personal data. Ordinary personal data provide factual information about a person (e.g. name, date of birth, gender, nationality, identity card number, current address, contact details etc.). Special personal data concerns data of a sensitive nature (e.g. information related to your mental and physical health, family history, sexual orientation, etc.).
I process personal data under the following legal grounds:
The basis for this personal data is the agreed request for help. The files containing your personal information are always locked away in restricted areas or password protected on computers in order to store your information safely.
For example, I may use a third party for:
I never pass on personal data to other parties I have not entered into a processor agreement. The processing agreement contains the necessary agreements to ensure the security of your personal data. Furthermore, I will not pass on the information provided by you to other parties unless this is legally required and permitted. I will always share special personal data in accordance with the rules of ΣΕΨ.
In my practice, I do not store personal data longer than necessary for the purpose for which it was provided or required by law. In other words, my records are held securely for as long as they are required for the purpose of our psychological work but also for my own accountability to external regulatory bodies.
I have taken appropriate technical and organizational measures to protect your personal data against unlawful processing.
You have the right to inspect, rectify or delete the personal data I have received from you (the deletion can be requested after the expiration of the “storage period” mentioned above). In any case, the right to request any correction or removal does not apply to the findings/conclusions, which are the psychologist’s professional responsibility.
If you have a complaint about processing your personal data, I kindly ask you to contact me about this, primarily in the hope that we can come to a solution together. You always have the right to file a complaint with the Association of Greek Psychologists.
I can always change this privacy statement. A current version of the privacy statement is published on my website. I and my network of colleagues are also accountable for keeping each other updated on any critical changes.
Important Note: If you are working with any of Yasemi’s external collaborating psychologists, please consult them directly regarding their own Privacy Policy.
Please contact me if you have any questions or comments about this Privacy Statement.