Privacy Policy

This Privacy Policy explains how Cabinet Individual de Psihologie Constantin Ildikó processes personal data through the ildiconstantin.ro website, as well as in connection with enquiries and appointments for psychological services.

1. Data controller

The data controller is:

Cabinet Individual de Psihologie Constantin Ildikó

Clinical Psychologist (personal code 34437)

CIF: 52426174

Email: contact@ildiconstantin.ro

Phone: 0737730676

As the data controller, the practice determines the purposes and means of processing personal data in accordance with applicable legislation.

2. What personal data may be collected

Depending on how you choose to contact me, the following categories of personal data may be processed:

Contact form

The contact form requests:

  • first and last name;
  • email address;
  • phone number;
  • subject of the message;
  • message content.

This information is sent to contact@ildiconstantin.ro.

To protect your privacy, please do not include information about your health or about other people beyond what is necessary to formulate your enquiry.

Phone and WhatsApp

If you choose to contact me by phone or WhatsApp, the information you choose to provide may be processed, including your name, phone number and information shared during the conversation.

If your enquiry concerns psychological services, the information you voluntarily provide may include information relating to your physical or mental health. Such information receives additional protection under applicable data protection legislation.

3. Providing personal data

Providing the information requested through the contact form is voluntary. However, certain information, such as your name and contact details, is necessary in order to respond to your enquiry or arrange an appointment.

If you choose not to provide the information necessary for these purposes, it may not be possible to respond to your enquiry or arrange an appointment.

4. Purposes of processing

Personal data may be processed for the following purposes:

  • responding to enquiries submitted through the contact form;
  • communicating with people interested in the services provided;
  • arranging and managing appointments;
  • providing requested psychological services;
  • conducting psychological assessments;
  • preparing psychological documents, where applicable;
  • complying with applicable legal obligations.

Personal data is not used for marketing purposes without an appropriate legal basis.

5. Legal basis for processing

Personal data is processed, depending on the purpose of the processing, on the basis of one or more of the legal grounds provided by applicable data protection legislation, including:

  • taking steps at the request of the individual prior to entering into a contract;
  • performing a contract and providing psychological services;
  • complying with legal obligations applicable to the practice;
  • the individual’s consent, where consent is the applicable legal basis.

In the course of providing psychological services, information concerning health may also be processed, including information relating to physical or mental health, relevant history and psychological assessment results. Such information constitutes a special category of personal data and receives additional protection.

Health data is processed only where both an applicable legal basis under Article 6 of the GDPR and one of the conditions set out in Article 9 of the GDPR are satisfied, depending on the specific purpose of the processing and applicable legislation. In the context of providing psychological services, processing is carried out in accordance with professional confidentiality obligations and other safeguards required by applicable law.

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

6. Recipients of personal data

Personal data is primarily accessed by the practice holder, to the extent necessary for providing services and administering the practice.

Depending on the technical services used to operate the website and facilitate communication, personal data may be processed by technical service providers acting in accordance with applicable data protection legislation.

Personal data is not sold or disclosed to third parties for marketing purposes.

7. Contact form and email

Data submitted through the contact form is received at contact@ildiconstantin.ro and is used to manage the enquiry submitted.

A response may be provided by email or, where the person has provided a phone number and requests it, by phone or WhatsApp.

8. WhatsApp

WhatsApp may be used as a means of communication for enquiries and appointments when a person voluntarily chooses to use this channel.

WhatsApp is a third-party service and has its own privacy policy and security measures. For information about how WhatsApp processes personal data, please refer to the information provided by the service provider.

To protect your privacy, we recommend avoiding sending sensitive information by message when it is not necessary for arranging an appointment or for administrative communication.

9. Cookies and CAPTCHA

The website uses cookies and similar technologies as described in the Cookie Policy.

The contact form uses a CAPTCHA mechanism to reduce automated and abusive submissions. This may involve the processing of technical information necessary to verify that a request comes from a person rather than an automated system.

Further information about cookies and similar technologies is available in the Cookie Policy.

10. Data retention

Personal data is retained for as long as necessary to fulfil the purposes for which it was collected and for as long as necessary to comply with applicable legal obligations.

The retention period may vary depending on the nature of the data and the purpose for which it is processed. For data submitted through the contact form, the retention period is determined by the need to handle the enquiry and, where applicable, any subsequent steps.

Data and documents resulting from the provision of psychological services may be retained for the periods required by applicable legislation and relevant professional rules, including after the professional relationship has ended.

Once the applicable retention period has expired, personal data is deleted or, where possible and appropriate, anonymized.

11. Rights of data subjects

Subject to the conditions provided by applicable legislation, individuals whose personal data is processed may have the following rights:

  • the right to access their personal data;
  • the right to have inaccurate or incomplete data rectified;
  • the right to erasure of personal data, where legally applicable;
  • the right to restriction of processing;
  • the right to data portability, where applicable;
  • the right to object to certain processing activities;
  • the right to withdraw consent where processing is based on consent.

To exercise these rights or ask any questions regarding the processing of your personal data, you can contact me at contact@ildiconstantin.ro.

You also have the right to submit a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP) if you believe that your personal data is not being processed in accordance with applicable legislation.

12. Data security

Appropriate technical and organisational measures are taken to protect personal data against unauthorised access, loss, alteration, disclosure or accidental or unlawful destruction.

However, no method of electronic transmission or storage can guarantee absolute security.

13. Changes to this Privacy Policy

This Privacy Policy may be updated when necessary, including as a result of changes in legislation, technology or the way in which services are provided.

The updated version will be published on this page together with the date of the latest update.

Last updated: September 1st, 2026