Privacy Policy
How your personal data is collected, used and protected, in accordance with the GDPR.
Data controller
Georgia Kourmpeti, Psychologist, 25 Mitropoleos Street, 5th floor, 546 24 Thessaloniki, Greece. Telephone 693 731 3818, email kourmpeti@yahoo.gr.
What data is collected
- Contact details: name, telephone and email, when you get in touch by phone, by email or through the website form to arrange an appointment.
- Mental health data: history, session content, clinical assessment and treatment plan, kept in private notes to the extent necessary to provide the service.
- Third-party data: in couples therapy and family counselling the data by definition concerns more than one person. Each participant is informed and consents separately.
- Data concerning minors: where the service concerns a minor, data is collected with the consent of those holding parental responsibility.
No data is collected from third-party sources. This website uses no tracking cookies, advertising networks or third-party analytics.
The contact form
The website form collects only what you enter: name, email, optionally a telephone number and your message. It is used solely to answer that message and deleted once no longer needed. Sending requires explicit, non-pre-ticked consent. Please do not send sensitive health data through the form or by email: neither is an end-to-end encrypted channel.
Embedded map
The contact page embeds a Google map. When it loads, Google may receive your IP address and device details, in accordance with its own privacy policy. I have no access to that data and make no use of it.
Purpose and legal basis
- Provision of psychological services: Article 9(2)(h) GDPR (provision of health care) and performance of a contract.
- Answering contact requests: explicit consent.
- Keeping tax records: compliance with a legal obligation.
Confidentiality and its limits
The psychologist is bound by professional confidentiality. It is set aside only in the narrowly defined cases: where there is serious and immediate risk to the life or physical safety of the person or of a third party, where there is an indication of abuse or neglect of a minor, and where the law or a court decision expressly requires it. Wherever feasible, you are informed before any disclosure.
Who has access
Clinical data is accessible only to the data controller. It is not transferred to third parties, not sold and not used for commercial purposes. Where clinical supervision takes place, cases are discussed anonymised, without details that would allow identification.
Retention
Clinical notes are kept for as long as required by professional rules and applicable law, and are then securely destroyed. Contact messages are deleted once their purpose is fulfilled. Tax records are kept for the period prescribed by tax legislation.
Your rights
You have the right of access, rectification, erasure, restriction of processing, portability and objection, as well as the right to withdraw consent at any time. To exercise them, write to kourmpeti@yahoo.gr. You also have the right to lodge a complaint with the Hellenic Data Protection Authority (1-3 Kifissias Ave, 115 23 Athens).
Security
Appropriate technical and organisational measures are in place: physical security of paper records, restricted access, and a secure connection (HTTPS) on the website.
Last updated: September 2026.