Privacy Policy
1. Who is responsible for your data
Panagiotis Georgakis
Company Name: Panos Georgakis – Sichemstraat 9C, 3061 KS Rotterdam
KvK number: 97799394
Email: info@panosgeorgakis.com
Phone: +30 693 226 0322
I am the data controller for the personal data described below.
2. What data I collect
If you contact me without becoming a client: Name, email address, phone number, and whatever you choose to write in your message.
If you become a client:
- Identifying and contact details: name, date of birth, address, email, phone
- Invoicing details
- Appointment records
- Session notes and information about your health and personal circumstances. Under the GDPR this is a special category of personal data and receives additional protection.
- Correspondence between us
3. Why I process it, and on what legal basis
| Purpose | Legal basis |
|---|---|
| Providing counselling and keeping a client file | Performance of a contract with you; and, for health data, provision of health or social care under Article 9(2)(h) GDPR |
| Invoicing and bookkeeping | Legal obligation (tax law) |
| Keeping records for the legally required period | Legal obligation |
| Answering enquiries from people who are not clients | Legitimate interest in responding to you |
4. Who has access
Only I have access to your session notes.
Limited data is shared in the following situations:
- Supervision. I discuss my clinical work with a supervisor, who is bound by confidentiality. Material is presented anonymously and does not include identifying details.
- Accounting. My accountant sees invoicing data (name, address, amount, date). They do not see session notes.
- Service providers. I use the following tools, which process data on my behalf under a data processing agreement:
- Email: Zoho mail
- Video sessions: Google
- Practice administration: Google
- Invoicing: Moneybird
- Website: DN Host
- Legal obligations. Where I am required by law or court order to disclose information, or where there is a serious and immediate risk to your safety or someone else’s. Wherever possible I will discuss this with you first.
5. How long I keep it
| Data | Period |
|---|---|
| Client file and session notes | 20 years, in accordance with legislative requirements |
| Invoices and financial records | 7 years (Dutch tax law) |
| Enquiries that did not lead to a client relationship | 1 week, then deleted |
6. How your data is protected
- Files are stored password-protected on a secured system.
- Devices are protected by two-factor authentication
- Video sessions take place on a platform with encryption.
- Only I have access to the client file
7. Your rights
You have the right to:
- Access your data and receive a copy
- Rectify inaccurate data
- Erase data, subject to limits (see below)
- Restrict processing in certain circumstances
- Data portability for data you provided
- Object to processing based on legitimate interest
- Withdraw consent, where consent is the basis
A note on erasure. Because I am legally required to keep the client file for a set period, I cannot always delete it on request. Where the law allows destruction earlier, I will consider a written request. Financial records cannot be deleted before the tax retention period ends.
To exercise any of these rights, email me at info@panosgeorgakis.com. I will respond within one month. I may need to verify your identity first.
8. Complaints
If you are unhappy with how I handle your data, please tell me first.
You also have the right to lodge a complaint with the Dutch data protection authority:
Autoriteit Persoonsgegevens https://autoriteitpersoonsgegevens.nl Phone: 088 – 1805 250
9. Changes
I may update this policy. The current version is always on this page.