Who is responsible for your data

I am Ekaterina Sudakova, an authorised psychologist in private practice in Denmark and the controller of your personal data. CVR 44077396. Business address: Thit Jensens Gade 14, Aarhus, Denmark. For privacy enquiries, email ekaterina.bochkareva@gmail.com.

Website enquiries

The form asks for your name, email address and preferred consultation language. Enquiries are sent to Tilda CRM. I use this information to respond, tell you whether I have availability and, where appropriate, arrange an online appointment (GDPR Article 6(1)(b)). Using the form is voluntary. I need your contact details to respond through this channel. Please do not include health information in your enquiry.

Client data

To arrange and provide consultations, I process contact details, appointment information and information needed to provide psychological care, including health information and clinical records. When working with minors, I may also process necessary information about parents or legal guardians. The legal bases are performance of a contract and compliance with legal obligations (GDPR Article 6(1)(b) and (c)). For health data, Article 9(2)(h) applies subject to professional confidentiality requirements. If consent is required for a particular purpose, I request it separately.

Service providers and recipients

I use Tilda for the website and enquiries, Gmail for correspondence, Zanda for practice management and clinical records, Zoom for online consultations and Dinero for bookkeeping. Technical data such as IP addresses may be processed to operate and secure the website (GDPR Article 6(1)(f)). If a municipality or another organisation pays for a consultation, I may share the information needed to arrange and account for payment where there is a lawful basis. Paying for a consultation does not in itself grant access to session content or clinical records. Other disclosures require a lawful basis and are subject to professional confidentiality.

Transfers outside the EEA

If a provider processes or accesses data outside the EEA, the transfer requires a basis under Chapter V of the GDPR, such as an adequacy decision or the EU standard contractual clauses. You can email me for information on specific transfers and a copy of the applicable safeguards.

Retention

Every six months I delete enquiries that did not lead to consultations and are no longer needed, unless the law requires me to retain them. Clinical records and accounting documents are kept for the periods required by Danish law.

Your rights

You may request access, rectification, erasure, restriction or portability where applicable, and object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it at any time. This does not affect the lawfulness of earlier processing. Email me to exercise your rights. You may also complain to Datatilsynet.