PRIVACY POLICY
DIMA MIHAELA - CABINET INDIVIDUAL DE PSIHOLOGIE (Individual Psychology Practice)
1. General information
DIMA MIHAELA - CABINET INDIVIDUAL DE PSIHOLOGIE (Individual Psychology Practice) respects the right to privacy and the protection of the personal data of website users, in accordance with Regulation (EU) 2016/679 (GDPR), Romanian Law no. 190/2018 and Law no. 506/2004, and other applicable legal provisions.
This policy explains how we collect, use, store and protect the personal data of website visitors and of persons who contact us through the website.
2. Identity of the controller
The controller of personal data is:
DIMA MIHAELA - CABINET INDIVIDUAL DE PSIHOLOGIE (Individual Psychology Practice)
• Owner: Mihaela Dima, licensed psychologist, CPR code 37283
• Professional address: str. Nerva Traian, nr. 27-33, sc. B, Et.1, ap. Birou 6, București, Sectorul 3, Romania
• E-mail: contact@mihaela-dima.com
• Website: www.mihaela-dima.com
The practice is not required to appoint a data protection officer. For any questions regarding the processing of personal data, you can contact us at the e-mail address above.
3. What personal data do we collect?
Through the contact form available on the website, we collect the following data:
• First name and surname;
• E-mail address;
• Phone number (optional);
• The content of the message sent (if the form includes a message field).
This information is provided voluntarily by users and is needed to handle requests, contact interested persons and manage appointments. Without a name and e-mail address we cannot respond to your request.
The website form does not ask for information about diagnoses, health status or other sensitive data. Please do not enter such information in the form fields. Discussions about your situation will take place within the professional relationship, under conditions of confidentiality.
If you contact us directly by e-mail, phone or messaging apps, we process the contact details and the content of the communication you send us, for the same purposes and under the same conditions described in this policy.
When you use the website, certain technical information may also be collected automatically, such as IP address, device type, browser used and page visit information, under the conditions described in the Cookie Policy.
4. Purposes and legal bases of processing
Personal data is used for the following purposes:
• Handling requests for information and appointments;
• Contacting persons interested in the practice's services;
• Providing requested information about psychological services;
• Managing communication with persons requesting an appointment;
• Ensuring the operation and security of the website;
• Analysing website traffic and improving the user experience through Google Analytics, based on the consent given for optional cookies.
Processing is based, as applicable, on the following legal grounds:
• Art. 6(1)(b) GDPR - taking steps at the request of the data subject prior to entering into a contractual or professional relationship;
• Art. 6(1)(c) GDPR - compliance with the practice's legal obligations;
• Art. 6(1)(f) GDPR - the practice's legitimate interest in the security and proper functioning of the website and in defending its legal rights;
• Art. 6(1)(a) GDPR - the user's consent for optional cookies and analytics services that require such consent.
The mere fact that a person contacts a psychology practice may indicate that they are considering psychological services. To the extent that the data sent through the form reveals such health-related information, processing takes place on the basis of Art. 9(2)(h) and Art. 9(3) GDPR, for the purpose of providing health care by a professional subject to the obligation of professional secrecy under Romanian Law no. 213/2004 and the Code of Ethics of the profession of psychologist.
5. Data retention period
Personal data is kept only for as long as necessary to fulfil the purposes for which it was collected.
The data of persons who send requests through the form or other channels but do not go on to use the practice's services will be kept for a maximum of 6 months from the last communication, after which it will be deleted, unless there is a legal reason to keep it further.
For persons who become clients of the practice, the documents and records relating to the professional relationship will be kept separately, in accordance with the applicable legal and professional obligations, and will be the subject of a separate notice at the start of the professional relationship.
Data collected through Google Analytics is retained for [2 / 14] months, according to the retention settings configured in the service.
6. Who may receive personal data?
DIMA MIHAELA - CABINET INDIVIDUAL DE PSIHOLOGIE (Individual Psychology Practice) does not sell, trade or transfer users' personal data to third parties for advertising purposes.
For the operation of the website and the handling of requests, certain data may be processed, as processors, by the following technical service providers, to the extent necessary:
• Wix.com Ltd., 40 Namal Tel Aviv St., Tel Aviv, Israel - the platform used for hosting and managing the website and the contact form; data submitted through the form is stored in the practice's Wix account;
• Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland - the Google Analytics service for website traffic analysis.
These providers process data under data processing agreements compliant with Art. 28 GDPR and only on the practice's instructions.
International transfers: Wix.com Ltd. is based in Israel, a country covered by a European Commission adequacy decision. Wix and Google may transfer data to their affiliates in the United States of America; these transfers take place under the EU-US Data Privacy Framework (European Commission adequacy decision of 10 July 2023) and, where applicable, the standard contractual clauses approved by the European Commission.
Data may be disclosed to competent public authorities where there is a legal obligation to do so.
7. Google Analytics and traffic analysis
The website uses Google Analytics 4, provided by Google Ireland Limited, to analyse how visitors access and use the pages of the website. This service may collect information such as the number of visitors, pages visited, duration of visits, device and browser type, and technical information about interaction with the website. Google Analytics 4 does not store visitors' full IP addresses.
The information is used for statistical purposes and to improve the content and functioning of the website.
Analytics cookies are activated only after the user's consent has been obtained through the cookie banner. Users can refuse analytics cookies without this affecting their ability to use the website. Further details, including cookie durations and how to withdraw consent, are available in the Cookie Policy.
8. Cookies
The website uses cookies that are strictly necessary for its operation and, only with your consent, analytics cookies (Google Analytics). We do not use marketing cookies.
When accessing the website, users can express their preferences regarding the use of cookies through the consent banner. Preferences can be changed later through the cookie settings.
For full information on the types of cookies used, their purpose and duration, please consult the Cookie Policy.
9. E-mail communications and newsletter
The practice does not currently use data collected through the website to send newsletters, advertising messages or periodic commercial communications.
The e-mail address and phone number provided through the form are used solely to handle the request and communicate with the person interested in the practice's services.
If a newsletter or periodic information service is introduced in the future, subscription will take place only on the basis of the explicit and separate consent of the person concerned. Consent to receive marketing communications will not be a condition for accessing psychological services and may be withdrawn at any time.
10. Minors
The contact form is not intended for persons under the age of 16. Requests regarding psychological services for minors must be submitted by a parent or legal guardian. If we learn that we have collected data from a minor without the consent of the legal guardian, we will delete it.
11. Data protection and security
DIMA MIHAELA - CABINET INDIVIDUAL DE PSIHOLOGIE (Individual Psychology Practice) attaches particular importance to the confidentiality of personal data. Appropriate technical and organisational measures are taken to protect information against unauthorised access, loss, disclosure, alteration or accidental or unlawful destruction, including encryption of communications with the website (HTTPS), secure authentication of the accounts used and restriction of access to data to the owner of the practice.
Information received through the form is used only to handle requests and is not used for purposes other than those for which it was collected without an appropriate legal basis.
12. Rights of data subjects
Under the GDPR, you have the following rights:
• Right of access - the right to request information about the personal data processed and a copy of it;
• Right to rectification - the right to request the correction of inaccurate data;
• Right to erasure - the right to request the deletion of data, under the conditions provided by law;
• Right to restriction of processing - the right to request the limitation of the use of data in certain situations;
• Right to data portability - the right to receive data in a structured, commonly used and machine-readable format, under the conditions provided by law;
• Right to object - the right to object to processing based on legitimate interest;
• Right to withdraw consent - where processing is based on consent, it may be withdrawn at any time, without affecting the lawfulness of prior processing;
• Right not to be subject to automated individual decision-making, including profiling; the practice does not use such decision-making processes.
To exercise these rights, you can contact us at: [PRACTICE E-MAIL ADDRESS]. We will respond to your request within one month of receipt at the latest; this period may be extended by two months in complex cases, in which case you will be informed.
You also have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, postal code 010336, Bucharest, phone +40 318 059 211, e-mail anspdcp@dataprotection.ro, website www.dataprotection.ro, and the right to bring proceedings before the competent courts.
13. Changes to this privacy policy
DIMA MIHAELA - CABINET INDIVIDUAL DE PSIHOLOGIE (Individual Psychology Practice) reserves the right to update this policy when there are changes to the practice's activity, the website's functionality or the applicable legislation. The updated version will be published on this page.
In case of any discrepancy between the Romanian and English versions of this policy, the Romanian version prevails.
Last updated: 31.10.2026