Privacy Policy and Data Protection (GDPR)
Last updated: April 2026
1. Data Controller
a tua terapeuta clinic is the entity responsible for collecting and processing your personal data. Our commitment is to guarantee the complete privacy, security and confidentiality of information shared with us, in strict compliance with the General Data Protection Regulation (GDPR).
2. What Data We Collect and Why
We collect only the data strictly necessary for our clinical activity and to ensure the best possible support:
Identification and Contact Data: Name, email address and phone number (WhatsApp), collected through the booking form for appointment scheduling and logistical communications.
Tax Data: Tax Identification Number (NIF) and address, requested exclusively for the issuance of health invoices/receipts.
Clinical Data (Sensitive): Information shared during the Anamnesis consultation and subsequent sessions. This data is vital for creating a personalised therapeutic plan.
3. Confidentiality and Data Sharing
Your privacy is inviolable. All clinical data is protected by strict professional secrecy. a tua terapeuta clinic does not sell, rent or share your personal data with third parties for marketing purposes. The only exception for sharing tax data (NIF/Name) occurs strictly with the Tax Authority for compliance with legal invoicing obligations.
4. Security and Storage
Our online consultations take place on secure platforms with end-to-end encryption. Clinical records and personal data are stored securely, with restricted and exclusive access to your therapist, and are protected against unauthorised access, loss or destruction.
5. Data Retention Period
Your personal and clinical data will be kept only for the period strictly necessary for the provision of therapeutic services, or for the legally required periods (such as billing data, which the law requires to be kept for 10 years).
6. Your Rights
Under the GDPR, you have absolute control over your data. You have the right to request at any time:
Access and rectification of incorrect or incomplete data.
Erasure of your personal data (Right to be Forgotten), provided it does not conflict with legal retention obligations.
Restriction or objection to the processing of your data.
To exercise any of these rights, or if you have any questions about our policy, simply contact us through the clinic's official email.
To exercise your rights or clarify any doubts, please contact us. Go to Contacts