Privacy Policy

Who the controller is

Personal data is processed by:

• Ruxandra Șterbeț, independent practitioner
• Clinical Psychologist and Integrative Psychotherapist
• Strada Petru Rareș 36, Chișinău, Republic of Moldova
• Email: ruxandrasterbet@gmail.com
• Website: https://ruxandrasterbet.com/

For any question about the processing of your data, you can write to the email address above.

What personal data may be processed

Depending on how you use the website, the following categories of data may be processed:

• name;
• email address;
• telephone number, if you provide one;
• appointment date and time;
• language preference;
• information voluntarily entered into the Calendly booking fields;
• technical information such as IP address, browser and device data and cookie identifiers, where applicable;
• analytics data about website usage, where you have given consent for analytics cookies;
• payment and transaction metadata processed through Calendly and Stripe;
• the content of your communications when you write by email, WhatsApp or the contact form.

The website does not ask for a detailed medical or psychological history. Please avoid entering unnecessary sensitive health information into general booking or contact fields; clinical detail belongs in the confidential setting of a session.

If you nevertheless choose to share information about your psychological or medical situation, it may constitute special-category personal data and will only be processed where an appropriate legal basis and an applicable additional condition for such data exist.

Purposes of processing

• responding to enquiries and requests;
• arranging and managing appointments;
• providing the services you request;
• processing payments connected with bookings;
• maintaining the security and operation of the website;
• complying with applicable legal, accounting and tax obligations;
• measuring website usage and performance, where consent for analytics cookies has been given;
• showing location information through the maps service, where applicable.

Legal bases

• steps taken prior to entering into a contract and performance of a contract, for bookings and requested services;
• compliance with legal obligations, where applicable (for example accounting or tax obligations);
• legitimate interests, for website security and ordinary administrative communication;
• consent, for non-essential analytics cookies and optional third-party functionality;
• special-category data only where an applicable legal basis and an additional lawful condition exist.

Consent is not the legal basis for everything: bookings and the related communication rely on the contractual relationship or on the steps taken before it.

Bookings through Calendly

Appointment scheduling is handled through Calendly. When you use the booking link you are taken to the Calendly platform, and the information you enter there is processed through Calendly’s systems, subject to that provider’s own privacy practices.

ruxandrasterbet.com does not host the booking database; I receive the confirmations and the information needed to administer the session.

Payments through Stripe

Payments connected with Calendly bookings are processed using Stripe. The website does not store full payment card details.

Calendly and Stripe may process transaction data in line with their own privacy terms and contractual roles.

Google Analytics and Google Tag Manager

Google Analytics and, where applicable, Google Tag Manager may be used to understand how the website is used. These tools are activated only in line with your consent settings, where consent is required.

The data concerns website usage: pages visited, device and browser information, interaction data and analytics identifiers. No advertising profiling functionality is used.

Google Maps

The practice address is shown as text and the map link opens Google Maps in a new tab. No interactive map is embedded in the website, so no Google Maps resources are loaded before you act. If you follow the link, Google may receive data in connection with your visit to their platform.

Online sessions via Google Meet

Online sessions may be conducted using Google Meet. To provide the video communication, Google processes the technical data needed for that service.

Hosting and infrastructure

The website is hosted on infrastructure provided by the hosting provider Emergent. Technical data (for example IP addresses or server logs) may be processed by hosting and infrastructure providers as necessary for the operation, security and maintenance of the website.

International data transfers

Some service providers may process data outside the Republic of Moldova or the European Economic Area. Where applicable law requires it, appropriate safeguards are used for such transfers.

How long data is kept

• General website enquiries or booking-related information where no client relationship is established: kept for up to 12 months after the last meaningful interaction, then deleted or anonymised unless a longer period is legally required.
• Booking and administrative data for actual clients: kept only as long as necessary for service administration and for applicable professional and legal obligations.
• Payment and accounting records: kept for the period required by applicable accounting, tax or legal obligations.
• Clinical and treatment records: governed by separate professional, clinical and legal retention requirements, which are not defined by this website policy.
• Cookie consent preferences: approximately 6 months, after which consent is requested again, unless applicable law or technical requirements call for a different period.

Your rights

In relation to your personal data, and subject to applicable law, you may exercise:

• the right of access;
• the right to rectification;
• the right to erasure, where applicable;
• the right to restriction of processing;
• the right to object;
• the right to data portability, where applicable;
• the right to withdraw consent at any time, without affecting the lawfulness of earlier processing;
• the right to lodge a complaint with the competent supervisory authority.

To exercise these rights, write to ruxandrasterbet@gmail.com.

In the Republic of Moldova, complaints may be addressed to the competent authority for personal data protection. If you are in the European Economic Area, you may also have the right to complain to the competent supervisory authority in your country.

Children and adolescents

Psychological services may be provided to children and adolescents. A booking made through the website for a minor should ordinarily be completed by a parent or legal guardian.

The website does not intentionally collect unnecessary personal data directly from children. The involvement of a parent or legal guardian is handled according to applicable professional and legal requirements.

Security

Reasonable technical and organisational measures are used to protect personal data against unauthorised access, loss or disclosure. No transmission of data over the internet can, however, be guaranteed to be absolutely secure.

Updates to this notice

This notice may be updated when the website changes or when applicable legal requirements change. The current version is always published on this page.