Privacy policy

I. Purpose and scope of processing

This policy informs you about the processing of personal data of individuals (clients) who contact or use the services of Prague Psychotherapy.

The controller of personal data is Mgr. Martin Langpaul, psychotherapist in training, as the sole member of Prague Psychotherapy, with registered address Bořivojova 17, 130 00 Prague 3, email: langpaul.martin@gmail.com (the “Controller”).

II. Categories of processed data

• identification data (name, surname);
• contact data (email, phone);
• special categories of data under Art. 9 GDPR (e.g., information about health or mental state, only to the extent necessary for providing services);
• information provided during booking, communication, and therapeutic work.

III. Legal bases for processing

• Performance of a contract – providing psychotherapy services.
• Legal obligations – especially duties arising from accounting and tax regulations.
• Consent – e.g., for sending information not necessary for providing the service; consent can be withdrawn at any time.
• Legitimate interest – protection of legal claims and ensuring security.

IV. Retention periods

• Personal data are stored for as long as necessary to fulfill the purpose of processing, no longer than 5 years after the end of the last cooperation, unless legal regulations require longer.
• Data in accounting documents are stored for 10 years under the Accounting Act.

After the retention period expires, data are securely deleted or anonymized.

V. Recipients and data security

• Personal data are not transferred to third parties or to countries outside the EU/EEA.
• The Controller applies appropriate technical and organizational measures to protect data against loss, misuse, or unauthorized access.

VI. Data subject rights

To the extent defined by GDPR, you have the right to:

• access personal data and information about processing,
• rectify or complete inaccurate data,
• restrict processing or erase data where legal conditions are met,
• withdraw consent if processing is based on consent,
• lodge a complaint with the Office for Personal Data Protection.

Please send requests to exercise your rights to the Controller using the contact details below. The Controller will respond without undue delay, at the latest within one month.

VII. Data processor

The Controller has entrusted personal data processing to:

The processor ensures technical and administrative activities related to the website and related services, only to the extent and for the purposes determined by the Controller.

VIII. Final provisions

• This policy is effective as of July 1, 2025.
• Any changes will be published at www.praguepsychotherapy.com.